Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 28, 2026, 4:09 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
251711 2.6 注意 SquirrelMail Project - SquirrelMail 用プラグイン Autocomplete におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2012-0323 2012-03-9 12:01 2012-03-9 Show GitHub Exploit DB Packet Storm
251712 10 危険 Goforandroid - Android 用 GO Message Widget アプリケーションにおける詳細不明な脆弱性 CWE-noinfo
情報不足
CVE-2012-1407 2012-03-9 11:26 2011-03-7 Show GitHub Exploit DB Packet Storm
251713 10 危険 Goforandroid - Android 用 GO Bookmark Widget アプリケーションにおける詳細不明な脆弱性 CWE-noinfo
情報不足
CVE-2012-1406 2012-03-9 11:24 2011-03-7 Show GitHub Exploit DB Packet Storm
251714 10 危険 Goforandroid - Android 用 GO Note Widget アプリケーションにおける詳細不明な脆弱性 CWE-noinfo
情報不足
CVE-2012-1405 2012-03-9 11:23 2011-03-7 Show GitHub Exploit DB Packet Storm
251715 10 危険 Goforandroid - Android 用 GO WeiboWidget アプリケーションにおける詳細不明な脆弱性 CWE-noinfo
情報不足
CVE-2012-1398 2012-03-9 11:22 2012-03-7 Show GitHub Exploit DB Packet Storm
251716 10 危険 Goforandroid - Android 用 GO QQWeiboWidget アプリケーションにおける詳細不明な脆弱性 CWE-noinfo
情報不足
CVE-2012-1397 2012-03-9 11:16 2012-03-7 Show GitHub Exploit DB Packet Storm
251717 10 危険 Goforandroid - Android 用 GO FBWidget アプリケーションにおける詳細不明な脆弱性 CWE-noinfo
情報不足
CVE-2012-1396 2012-03-9 11:15 2012-03-7 Show GitHub Exploit DB Packet Storm
251718 10 危険 Goforandroid - Android 用 GO TwiWidget アプリケーションにおける詳細不明な脆弱性 CWE-noinfo
情報不足
CVE-2012-1395 2012-03-9 11:10 2012-03-7 Show GitHub Exploit DB Packet Storm
251719 10 危険 Goforandroid - Android 用 GO Email Widget アプリケーションにおける詳細不明な脆弱性 CWE-noinfo
情報不足
CVE-2012-1394 2012-03-9 11:08 2012-03-7 Show GitHub Exploit DB Packet Storm
251720 10 危険 Goforandroid - Android 用 GO SMS Pro アプリケーションにおける詳細不明な脆弱性 CWE-noinfo
情報不足
CVE-2012-1393 2012-03-9 11:06 2012-03-7 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 28, 2026, 4:16 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
265791 5.4 MEDIUM
Network
ibm inotes
domino
IBM iNotes is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to cred… CWE-79
Cross-site Scripting
CVE-2016-5880 2024-11-21 11:55 2017-02-2 Show GitHub Exploit DB Packet Storm
265792 5.9 MEDIUM
Network
openvpn openvpn OpenVPN, when using a 64-bit block cipher, makes it easier for remote attackers to obtain cleartext data via a birthday attack against a long-duration encrypted session, as demonstrated by an HTTP-ov… CWE-310
CWE-200
Cryptographic Issues
Information Exposure
CVE-2016-6329 2024-11-21 11:55 2017-02-1 Show GitHub Exploit DB Packet Storm
265793 6.1 MEDIUM
Network
atlassian jira Cross-site scripting (XSS) vulnerability in includes/decorators/global-translations.jsp in Atlassian JIRA before 7.2.2 allows remote attackers to inject arbitrary web script or HTML via the HTTP Host… CWE-79
Cross-site Scripting
CVE-2016-6285 2024-11-21 11:55 2017-02-1 Show GitHub Exploit DB Packet Storm
265794 8.8 HIGH
Network
trendmicro virtual_mobile_infrastructure The handle_certificate function in /vmi/manager/engine/management/commands/apns_worker.py in Trend Micro Virtual Mobile Infrastructure before 5.1 allows remote authenticated users to execute arbitrar… CWE-77
Command Injection
CVE-2016-6270 2024-11-21 11:55 2017-01-31 Show GitHub Exploit DB Packet Storm
265795 9.1 CRITICAL
Network
trendmicro smart_protection_server Multiple directory traversal vulnerabilities in Trend Micro Smart Protection Server 2.5 before build 2200, 2.6 before build 2106, and 3.0 before build 1330 allow remote attackers to read and delete a… CWE-22
Path Traversal
CVE-2016-6269 2024-11-21 11:55 2017-01-31 Show GitHub Exploit DB Packet Storm
265796 7.8 HIGH
Local
trendmicro smart_protection_server Trend Micro Smart Protection Server 2.5 before build 2200, 2.6 before build 2106, and 3.0 before build 1330 allows local webserv users to execute arbitrary code with root privileges via a Trojan hors… CWE-264
Permissions, Privileges, and Access Controls
CVE-2016-6268 2024-11-21 11:55 2017-01-31 Show GitHub Exploit DB Packet Storm
265797 8.8 HIGH
Network
trendmicro smart_protection_server SnmpUtils in Trend Micro Smart Protection Server 2.5 before build 2200, 2.6 before build 2106, and 3.0 before build 1330 allows remote authenticated users to execute arbitrary commands via shell meta… CWE-20
 Improper Input Validation 
CVE-2016-6267 2024-11-21 11:55 2017-01-31 Show GitHub Exploit DB Packet Storm
265798 8.8 HIGH
Network
trendmicro smart_protection_server ccca_ajaxhandler.php in Trend Micro Smart Protection Server 2.5 before build 2200, 2.6 before build 2106, and 3.0 before build 1330 allows remote authenticated users to execute arbitrary commands via… CWE-20
 Improper Input Validation 
CVE-2016-6266 2024-11-21 11:55 2017-01-31 Show GitHub Exploit DB Packet Storm
265799 7.8 HIGH
Local
putty putty Multiple untrusted search path vulnerabilities in Putty beta 0.67 allow local users to execute arbitrary code and conduct DLL hijacking attacks via a Trojan horse (1) UxTheme.dll or (2) ntmarta.dll f… CWE-426
 Untrusted Search Path
CVE-2016-6167 2024-11-21 11:55 2017-01-31 Show GitHub Exploit DB Packet Storm
265800 7.5 HIGH
Network
uclibc
uclibc-ng_project
uclibc
uclibc-ng
Integer signedness error in libc/string/arm/memset.S in uClibc and uClibc-ng before 1.0.16 allows context-dependent attackers to cause a denial of service (crash) via a negative length value to the m… NVD-CWE-Other
CVE-2016-6264 2024-11-21 11:55 2017-01-28 Show GitHub Exploit DB Packet Storm