Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 20, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
251261	4.3	警告	eFront Learning	-	eFront Community++ におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2012-1048	2012-02-14 14:48	2012-02-12	Show	GitHub Exploit DB Packet Storm

251262	7.5	危険	ソフォス	-	Cyberoam Central Console におけるディレクトリトラバーサルの脆弱性	CWE-22 パス・トラバーサル	CVE-2012-1047	2012-02-14 14:47	2012-02-12	Show	GitHub Exploit DB Packet Storm

251263	4.3	警告	Symphony CMS	-	Symphony CMS における SQL インジェクションの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2011-4341	2012-02-14 14:46	2012-02-12	Show	GitHub Exploit DB Packet Storm

251264	3.5	注意	Symphony CMS	-	Symphony CMS におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2011-4340	2012-02-14 14:45	2012-02-12	Show	GitHub Exploit DB Packet Storm

251265	4.3	警告	Deon George	-	phpLDAPadmin におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2012-0834	2012-02-14 14:45	2012-02-11	Show	GitHub Exploit DB Packet Storm

251266	7.5	危険	Mozilla Foundation	-	複数の Mozilla 製品におけるサービス運用妨害 (DoS) の脆弱性	CWE-399 リソース管理の問題	CVE-2012-0452	2012-02-14 14:42	2012-02-10	Show	GitHub Exploit DB Packet Storm

251267	4.3	警告	IBM	-	IBM Cognos TM1 の TM1 Web におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2012-1046	2012-02-14 14:18	2012-02-10	Show	GitHub Exploit DB Packet Storm

251268	5	警告	Apache Software Foundation	-	Apache Portable Runtime ライブラリの apr_hash.c におけるサービス運用妨害 (DoS) の脆弱性	CWE-20 不適切な入力確認	CVE-2012-0840	2012-02-14 14:17	2012-02-10	Show	GitHub Exploit DB Packet Storm

251269	5	警告	AdaCore	-	AdaCore Ada Web Services におけるサービス運用妨害 (CPU 資源の消費) の脆弱性	CWE-20 不適切な入力確認	CVE-2012-1035	2012-02-13 16:39	2012-01-27	Show	GitHub Exploit DB Packet Storm

251270	6.5	警告	サイベース	-	Sybase M-Business Anywhere の Web 管理インターフェイスにおけるユーザーアカウントをリストアップされる脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2011-5078	2012-02-13 16:15	2012-02-8	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 20, 2026, 4:14 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
269411	7.8	HIGH Local	canonical	ubuntu_linux	The crontab script in the ntp package before 1:4.2.6.p3+dfsg-1ubuntu3.11 on Ubuntu 12.04 LTS, before 1:4.2.6.p5+dfsg-3ubuntu2.14.04.10 on Ubuntu 14.04 LTS, on Ubuntu Wily, and before 1:4.2.8p4+dfsg-3…	CWE-264 Permissions, Privileges, and Access Controls	CVE-2016-0727	2024-11-21 11:42	2017-04-15	Show	GitHub Exploit DB Packet Storm

269412	9.8	CRITICAL Network	apache	tomee	The EjbObjectInputStream class in Apache TomEE before 1.7.4 and 7.x before 7.0.0-M3 allows remote attackers to execute arbitrary code via a crafted serialized object.	CWE-502 Deserialization of Untrusted Data	CVE-2016-0779	2024-11-21 11:42	2017-04-12	Show	GitHub Exploit DB Packet Storm

269413	6.1	MEDIUM Network	zahmit_design	connections_business_directory_plugin	Cross-site scripting (XSS) vulnerability in includes/admin/pages/manage.php in the Connections Business Directory plugin before 8.5.9 for WordPress allows remote attackers to inject arbitrary web scr…	CWE-79 Cross-site Scripting	CVE-2016-0770	2024-11-21 11:42	2017-03-17	Show	GitHub Exploit DB Packet Storm

269414	6.1	MEDIUM Network	rsa	web_threat_detection	EMC RSA Web Threat Detection version 5.0, RSA Web Threat Detection version 5.1, RSA Web Threat Detection version 5.1.2 has a cross site scripting vulnerability that could potentially be exploited by …	CWE-79 Cross-site Scripting	CVE-2016-0919	2024-11-21 11:42	2017-02-3	Show	GitHub Exploit DB Packet Storm

269415	6.4	MEDIUM Network	emc	powerpath_virtual_appliance	EMC PowerPath Virtual (Management) Appliance 2.0, EMC PowerPath Virtual (Management) Appliance 2.0 SP1 is affected by a sensitive information disclosure vulnerability that may potentially be exploite…	CWE-200 Information Exposure	CVE-2016-0890	2024-11-21 11:42	2017-02-3	Show	GitHub Exploit DB Packet Storm

269416	8.8	HIGH Network	elfden	eshop_plugin	Multiple SQL injection vulnerabilities in eshop-orders.php in the eShop plugin 6.3.14 for WordPress allow (1) remote administrators to execute arbitrary SQL commands via the delid parameter or remote…	CWE-89 SQL Injection	CVE-2016-0769	2024-11-21 11:42	2017-01-24	Show	GitHub Exploit DB Packet Storm

269417	6.1	MEDIUM Network	elfden	eshop_plugin	Multiple cross-site scripting (XSS) vulnerabilities in eshop-orders.php in the eShop plugin 6.3.14 for WordPress allow remote attackers to inject arbitrary web script or HTML via the (1) page or (2) …	CWE-79 Cross-site Scripting	CVE-2016-0765	2024-11-21 11:42	2017-01-24	Show	GitHub Exploit DB Packet Storm

269418	9.8	CRITICAL Network	mailcwp_project	mailcwp	Mailcwp remote file upload vulnerability incomplete fix v1.100	CWE-77 CWE-284 Command Injection Improper Access Control	CVE-2016-1000156	2024-11-21 11:42	2016-12-15	Show	GitHub Exploit DB Packet Storm

269419	8.4	HIGH Local	emc	avamar_data_store avamar_server_virtual_edition	EMC Avamar Data Store (ADS) and Avamar Virtual Edition (AVE) versions 7.3 and older contain a vulnerability that may expose the Avamar servers to potentially be compromised by malicious users.	CWE-20 Improper Input Validation	CVE-2016-0909	2024-11-21 11:42	2016-11-16	Show	GitHub Exploit DB Packet Storm

269420	7.2	HIGH Network	huge-it	slider	XSS and SQLi in Huge IT Joomla Slider v1.0.9 extension	CWE-89 SQL Injection	CVE-2016-1000122	2024-11-21 11:42	2016-10-28	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed