Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 28, 2026, 2:01 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
251781 5 警告 The PHP Group - PHP の PDORow 実装におけるサービス運用妨害 (アプリケーションクラッシュ) の脆弱性 CWE-20
不適切な入力確認
CVE-2012-0788 2012-02-15 16:02 2012-01-10 Show GitHub Exploit DB Packet Storm
251782 7.5 危険 Zoho Corporation - ManageEngine Applications Manager における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2012-1063 2012-02-15 15:55 2012-02-14 Show GitHub Exploit DB Packet Storm
251783 4.3 警告 Zoho Corporation - ManageEngine Applications Manager におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2012-1062 2012-02-15 15:55 2012-02-14 Show GitHub Exploit DB Packet Storm
251784 7.5 危険 GForge Group - GForge Advanced Server における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2012-1061 2012-02-15 15:54 2012-02-14 Show GitHub Exploit DB Packet Storm
251785 2.1 注意 Rik de Boer - Drupal 用 Revisioning モジュールの revisioning_theme.inc におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2012-1060 2012-02-15 15:51 2012-02-14 Show GitHub Exploit DB Packet Storm
251786 4.3 警告 osCommerce - OSCommerce Online Merchant の shirt モジュールにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2012-1059 2012-02-15 15:51 2012-02-14 Show GitHub Exploit DB Packet Storm
251787 6 警告 Flyspray - Flyspray におけるクロスサイトリクエストフォージェリの脆弱性 CWE-352
同一生成元ポリシー違反
CVE-2012-1058 2012-02-15 15:50 2012-02-14 Show GitHub Exploit DB Packet Storm
251788 6 警告 Sean Robertson - Drupal 用 Forward モジュールのクリックスルートラッキング機能におけるクロスサイトリクエストフォージェリの脆弱性 CWE-352
同一生成元ポリシー違反
CVE-2012-1057 2012-02-15 15:49 2012-02-14 Show GitHub Exploit DB Packet Storm
251789 5 警告 Sean Robertson - Drupal 用 Forward モジュールにおけるノードタイトルを取得される脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2012-1056 2012-02-15 15:48 2012-02-14 Show GitHub Exploit DB Packet Storm
251790 6.8 警告 Computerinsel GmbH - PhotoLine におけるヒープベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー
CVE-2012-1055 2012-02-15 15:47 2012-02-14 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 28, 2026, 4:16 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
265551 8.6 HIGH
Network
sophos mobile_control_eas_proxy Sophos EAS Proxy before 6.2.0 for Sophos Mobile Control, when Lotus Traveler is enabled, allows remote attackers to access arbitrary web-resources from the backend mail system via a request for the r… CWE-254
 7PK - Security Features
CVE-2016-6597 2024-11-21 11:56 2016-08-10 Show GitHub Exploit DB Packet Storm
265552 7.8 HIGH
Local
siemens sinema_server Siemens SINEMA Server uses weak permissions for the application folder, which allows local users to gain privileges via unspecified vectors. CWE-264
Permissions, Privileges, and Access Controls
CVE-2016-6486 2024-11-21 11:56 2016-08-8 Show GitHub Exploit DB Packet Storm
265553 7.5 HIGH
Network
openbsd
fedoraproject
openssh
fedora
The auth_password function in auth-passwd.c in sshd in OpenSSH before 7.3 does not limit password lengths for password authentication, which allows remote attackers to cause a denial of service (cryp… CWE-20
 Improper Input Validation 
CVE-2016-6515 2024-11-21 11:56 2016-08-8 Show GitHub Exploit DB Packet Storm
265554 8.8 HIGH
Network
wordpress wordpress Cross-site request forgery (CSRF) vulnerability in the wp_ajax_wp_compression_test function in wp-admin/includes/ajax-actions.php in WordPress before 4.5 allows remote attackers to hijack the authent… CWE-352
 Origin Validation Error
CVE-2016-6635 2024-11-21 11:56 2016-08-8 Show GitHub Exploit DB Packet Storm
265555 6.1 MEDIUM
Network
wordpress wordpress Cross-site scripting (XSS) vulnerability in the network settings page in WordPress before 4.5 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. CWE-79
Cross-site Scripting
CVE-2016-6634 2024-11-21 11:56 2016-08-8 Show GitHub Exploit DB Packet Storm
265556 5.9 MEDIUM
Network
wireshark wireshark epan/dissectors/packet-wbxml.c in the WBXML dissector in Wireshark 2.x before 2.0.5 does not restrict the recursion depth, which allows remote attackers to cause a denial of service (application cras… CWE-399
 Resource Management Errors
CVE-2016-6513 2024-11-21 11:56 2016-08-7 Show GitHub Exploit DB Packet Storm
265557 5.9 MEDIUM
Network
wireshark wireshark epan/dissectors/packet-wap.c in Wireshark 2.x before 2.0.5 omits an overflow check in the tvb_get_guintvar function, which allows remote attackers to cause a denial of service (infinite loop) via a c… CWE-20
 Improper Input Validation 
CVE-2016-6512 2024-11-21 11:56 2016-08-7 Show GitHub Exploit DB Packet Storm
265558 5.9 MEDIUM
Network
wireshark wireshark epan/proto.c in Wireshark 1.12.x before 1.12.13 and 2.x before 2.0.5 allows remote attackers to cause a denial of service (OpenFlow dissector large loop) via a crafted packet. CWE-399
 Resource Management Errors
CVE-2016-6511 2024-11-21 11:56 2016-08-7 Show GitHub Exploit DB Packet Storm
265559 5.9 MEDIUM
Network
wireshark wireshark Off-by-one error in epan/dissectors/packet-rlc.c in the RLC dissector in Wireshark 1.12.x before 1.12.13 and 2.x before 2.0.5 allows remote attackers to cause a denial of service (stack-based buffer … CWE-189
Numeric Errors
CVE-2016-6510 2024-11-21 11:56 2016-08-7 Show GitHub Exploit DB Packet Storm
265560 5.9 MEDIUM
Network
wireshark wireshark epan/dissectors/packet-ldss.c in the LDSS dissector in Wireshark 1.12.x before 1.12.13 and 2.x before 2.0.5 mishandles conversations, which allows remote attackers to cause a denial of service (appli… CWE-20
 Improper Input Validation 
CVE-2016-6509 2024-11-21 11:56 2016-08-7 Show GitHub Exploit DB Packet Storm