Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 19, 2026, 6 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
244381 5.1 警告 Rob Loach - Drupal 用 ShareThis モジュールにおけるクロスサイトリクエストフォージェリの脆弱性 CWE-352
同一生成元ポリシー違反
CVE-2012-2077 2012-08-17 15:46 2012-03-28 Show GitHub Exploit DB Packet Storm
244382 2.1 注意 Rob Loach - Drupal 用 ShareThis モジュールにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2012-2076 2012-08-17 15:42 2012-03-28 Show GitHub Exploit DB Packet Storm
244383 2.1 注意 Joel Stein - Drupal 用 Contact Save モジュールにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2012-2075 2012-08-17 15:36 2012-03-28 Show GitHub Exploit DB Packet Storm
244384 5 警告 Mads Peter Henderson - Drupal 用 Ubercart Views モジュールにおける重要な情報を取得される脆弱性 CWE-noinfo
情報不足
CVE-2012-2074 2012-08-17 15:32 2012-03-28 Show GitHub Exploit DB Packet Storm
244385 6 警告 Kristof De Jaeger - Drupal 用の Bundle copy モジュールにおける任意の PHP コードを実行される脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2012-2073 2012-08-17 15:30 2012-03-28 Show GitHub Exploit DB Packet Storm
244386 2.1 注意 Patrick Przybilla - Drupal 用 Share Buttons モジュールにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2012-2072 2012-08-17 15:27 2012-03-28 Show GitHub Exploit DB Packet Storm
244387 2.1 注意 Geoff Davies - Drupal 用 Contact Forms モジュールにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2012-2071 2012-08-17 15:12 2012-03-28 Show GitHub Exploit DB Packet Storm
244388 3.5 注意 Andrew Levine - Drupal 用 MultiBlock モジュールにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2012-2070 2012-08-17 15:10 2012-03-28 Show GitHub Exploit DB Packet Storm
244389 4.3 警告 Emil Stjerneman - Drupal 用 Linkit モジュールにおける重要な情報を取得される脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2012-2304 2012-08-17 15:08 2012-04-25 Show GitHub Exploit DB Packet Storm
244390 2.1 注意 Ubercart - Drupal 用 Ubercart モジュールにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2012-2300 2012-08-17 15:06 2012-04-25 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 19, 2026, 4:01 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
354901 - t._hauck jana_web_server Directory traversal vulnerability in Jana proxy web server 1.45 allows remote attackers to ready arbitrary files via a .. (dot dot) attack. NVD-CWE-Other
CVE-1999-1083 2016-10-18 11:01 1999-10-8 Show GitHub Exploit DB Packet Storm
354902 - ssh secure_shell SSH 1.2.25, 1.2.23, and other versions, when used in in CBC (Cipher Block Chaining) or CFB (Cipher Feedback 64 bits) modes, allows remote attackers to insert arbitrary data into an existing stream be… NVD-CWE-Other
CVE-1999-1085 2016-10-18 11:01 1998-06-12 Show GitHub Exploit DB Packet Storm
354903 - novell netware Novell 5 and earlier, when running over IPX with a packet signature level less than 3, allows remote attackers to gain administrator privileges by spoofing the MAC address in IPC fragmented packets t… NVD-CWE-Other
CVE-1999-1086 2016-10-18 11:01 1999-07-15 Show GitHub Exploit DB Packet Storm
354904 - iain_lea tin tin 1.40 creates the .tin directory with insecure permissions, which allows local users to read passwords from the .inputhistory file. NVD-CWE-Other
CVE-1999-1092 2016-10-18 11:01 1999-11-17 Show GitHub Exploit DB Packet Storm
354905 - redhat
slackware
linux
slackware_linux
sort creates temporary files and follows symbolic links, which allows local users to modify arbitrary files that are writable by the user running sort, as observed in updatedb and other programs that… NVD-CWE-Other
CVE-1999-1095 2016-10-18 11:01 1997-10-6 Show GitHub Exploit DB Packet Storm
354906 - microsoft windows_95 Windows 95 uses weak encryption for the password list (.pwl) file used when password caching is enabled, which allows local users to gain privileges by decrypting the passwords. NVD-CWE-Other
CVE-1999-1104 2016-10-18 11:01 1999-12-31 Show GitHub Exploit DB Packet Storm
354907 - sendmail sendmail Sendmail before 8.10.0 allows remote attackers to cause a denial of service by sending a series of ETRN commands then disconnecting from the server, while Sendmail continues to process the commands a… NVD-CWE-Other
CVE-1999-1109 2016-10-18 11:01 1999-12-22 Show GitHub Exploit DB Packet Storm
354908 - eudora internet_mail_server Buffer overflow in Eudora Internet Mail Server (EIMS) 2.01 and earlier on MacOS systems allows remote attackers to cause a denial of service via a long USER command to port 106. NVD-CWE-Other
CVE-1999-1113 2016-10-18 11:01 1998-04-14 Show GitHub Exploit DB Packet Storm
354909 - oracle http_server Oracle Webserver 2.1 and earlier runs setuid root, but the configuration file is owned by the oracle account, which allows any local or remote attacker who obtains access to the oracle account to gai… NVD-CWE-Other
CVE-1999-1125 2016-10-18 11:01 1997-09-19 Show GitHub Exploit DB Packet Storm
354910 - netscape enterprise_server Default configuration of the search engine in Netscape Enterprise Server 3.5.1, and possibly other versions, allows remote attackers to read the source of JHTML files by specifying a search command u… NVD-CWE-Other
CVE-1999-1130 2016-10-18 11:01 1999-07-30 Show GitHub Exploit DB Packet Storm