Vulnerability Search Top

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

Vulnerability Information Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 26, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
251891	5	警告	シーメンス	-	複数の Siemens 製品の HMI Web サーバにおける CRLF インジェクションの脆弱性	CWE-94 コード・インジェクション	CVE-2011-4512	2012-02-8 10:54	2012-01-24	Show	GitHub Exploit DB Packet Storm

251892	4.3	警告	シーメンス	-	複数の Siemens 製品の HMI Web サーバにおけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2011-4511	2012-02-8 10:53	2012-01-24	Show	GitHub Exploit DB Packet Storm

251893	4.3	警告	シーメンス	-	複数の Siemens 製品の HMI Web サーバにおけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2011-4510	2012-02-8 10:51	2012-01-24	Show	GitHub Exploit DB Packet Storm

251894	10	危険	シーメンス	-	複数の Siemens 製品の HMI Web サーバにおけるアクセス権を取得される脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2011-4509	2012-02-8 10:50	2012-01-24	Show	GitHub Exploit DB Packet Storm

251895	10	危険	シーメンス	-	複数の Siemens 製品の HMI Web サーバにおける認証を回避される脆弱性	CWE-287 不適切な認証	CVE-2011-4508	2012-02-8 10:49	2012-01-24	Show	GitHub Exploit DB Packet Storm

251896	2.6	注意	HTC Corporation	-	HTC 製 Android 端末に Wi-Fi 認証情報漏えいの脆弱性	CWE-200 情報漏えい	CVE-2011-4872	2012-02-7 16:21	2012-02-2	Show	GitHub Exploit DB Packet Storm

251897	7.5	危険	Scriptsez.net	-	Scriptsez.net の Ez Album における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2012-0983	2012-02-7 16:19	2012-02-2	Show	GitHub Exploit DB Packet Storm

251898	7.5	危険	Vastal I-Tech & Co.	-	Vastal I-Tech Agent Zone の search.php における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2012-0982	2012-02-7 16:18	2012-02-2	Show	GitHub Exploit DB Packet Storm

251899	5	警告	KYBERNETIKA	-	phpShowtime における任意のディレクトリおよびイメージファイルをリストアップされる脆弱性	CWE-22 パス・トラバーサル	CVE-2012-0981	2012-02-7 16:17	2012-02-2	Show	GitHub Exploit DB Packet Storm

251900	7.5	危険	phux Development	-	phux Download Manager の download.php における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2012-0980	2012-02-7 16:16	2012-02-2	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 26, 2026, 4:05 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
265441	5.3	MEDIUM Network	mozilla	firefox	Mozilla Firefox before 48.0 on Android allows remote attackers to spoof the address bar via left-to-right characters in conjunction with a right-to-left character set.	CWE-20 Improper Input Validation	CVE-2016-5267	2024-11-21 11:53	2016-08-5	Show	GitHub Exploit DB Packet Storm

265442	8.1	HIGH Network	mozilla	firefox	Mozilla Firefox before 48.0 does not properly restrict drag-and-drop (aka dataTransfer) actions for file: URIs, which allows user-assisted remote attackers to access local files via a crafted web sit…	CWE-264 Permissions, Privileges, and Access Controls	CVE-2016-5266	2024-11-21 11:53	2016-08-5	Show	GitHub Exploit DB Packet Storm

265443	5.5	MEDIUM Local	oracle mozilla	linux firefox	Mozilla Firefox before 48.0 and Firefox ESR 45.x before 45.3 allow user-assisted remote attackers to bypass the Same Origin Policy, and conduct Universal XSS (UXSS) attacks or read arbitrary files, b…	CWE-79 CWE-200 Cross-site Scripting Information Exposure	CVE-2016-5265	2024-11-21 11:53	2016-08-5	Show	GitHub Exploit DB Packet Storm

265444	8.8	HIGH Network	mozilla oracle	firefox linux	Use-after-free vulnerability in the nsNodeUtils::NativeAnonymousChildListChange function in Mozilla Firefox before 48.0 and Firefox ESR 45.x before 45.3 allows remote attackers to execute arbitrary c…	CWE-416 Use After Free	CVE-2016-5264	2024-11-21 11:53	2016-08-5	Show	GitHub Exploit DB Packet Storm

265445	8.8	HIGH Network	mozilla oracle	firefox linux	The nsDisplayList::HitTest function in Mozilla Firefox before 48.0 and Firefox ESR 45.x before 45.3 mishandles rendering display transformation, which allows remote attackers to execute arbitrary cod…	CWE-704 Incorrect Type Conversion or Cast	CVE-2016-5263	2024-11-21 11:53	2016-08-5	Show	GitHub Exploit DB Packet Storm

265446	6.1	MEDIUM Network	mozilla oracle	firefox linux	Mozilla Firefox before 48.0 and Firefox ESR 45.x before 45.3 process JavaScript event-handler attributes of a MARQUEE element within a sandboxed IFRAME element that lacks the sandbox="allow-scripts" …	CWE-79 Cross-site Scripting	CVE-2016-5262	2024-11-21 11:53	2016-08-5	Show	GitHub Exploit DB Packet Storm

265447	8.8	HIGH Network	mozilla	firefox	Integer overflow in the WebSocketChannel class in the WebSockets subsystem in Mozilla Firefox before 48.0 and Firefox ESR < 45.4 allows remote attackers to execute arbitrary code or cause a denial of…	CWE-190 Integer Overflow or Wraparound	CVE-2016-5261	2024-11-21 11:53	2016-08-5	Show	GitHub Exploit DB Packet Storm

265448	6.5	MEDIUM Network	mozilla	firefox	Mozilla Firefox before 48.0 mishandles changes from 'INPUT type="password"' to 'INPUT type="text"' within a single Session Manager session, which might allow attackers to discover cleartext passwords…	CWE-200 Information Exposure	CVE-2016-5260	2024-11-21 11:53	2016-08-5	Show	GitHub Exploit DB Packet Storm

265449	8.8	HIGH Network	mozilla oracle	firefox linux	Use-after-free vulnerability in the CanonicalizeXPCOMParticipant function in Mozilla Firefox before 48.0 and Firefox ESR 45.x before 45.3 allows remote attackers to execute arbitrary code via a scrip…	CWE-416 Use After Free	CVE-2016-5259	2024-11-21 11:53	2016-08-5	Show	GitHub Exploit DB Packet Storm

265450	8.8	HIGH Network	oracle mozilla	linux firefox	Use-after-free vulnerability in the WebRTC socket thread in Mozilla Firefox before 48.0 and Firefox ESR 45.x before 45.3 allows remote attackers to execute arbitrary code by leveraging incorrect free…	CWE-416 Use After Free	CVE-2016-5258	2024-11-21 11:53	2016-08-5	Show	GitHub Exploit DB Packet Storm