Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 2, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
252011 7.5 危険 freelancerKit - freelancerKit における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2012-1218 2012-02-22 16:15 2012-02-21 Show GitHub Exploit DB Packet Storm
252012 4.3 警告 Zenphoto - Zenphoto におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2012-0995 2012-02-22 16:12 2012-02-21 Show GitHub Exploit DB Packet Storm
252013 6 警告 Zenphoto - Zenphoto の Manage Albums 機能における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2012-0994 2012-02-22 16:09 2012-02-21 Show GitHub Exploit DB Packet Storm
252014 6.8 警告 Zenphoto - Zenphoto の viewer_size_image.php における任意の PHP コードを実行される脆弱性 CWE-94
コード・インジェクション 		CVE-2012-0993 2012-02-22 16:07 2012-02-21 Show GitHub Exploit DB Packet Storm
252015 4 警告 IBM - IBM solidDB のサーバにおけるサービス運用妨害 (デーモンクラッシュ) の脆弱性 CWE-noinfo
情報不足 		CVE-2012-0200 2012-02-22 15:31 2012-02-7 Show GitHub Exploit DB Packet Storm
252016 4 警告 IBM - IBM solidDB のサーバにおけるサービス運用妨害 (デーモンクラッシュ) の脆弱性 CWE-20
不適切な入力確認 		CVE-2011-4890 2012-02-22 15:30 2011-11-17 Show GitHub Exploit DB Packet Storm
252017 4.3 警告 SIMHL - STHS v2 Web Portal におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2012-1217 2012-02-22 15:24 2012-02-21 Show GitHub Exploit DB Packet Storm
252018 6 警告 PBBoard - PBBoard の admin.php におけるクロスサイトリクエストフォージェリの脆弱性 CWE-352
同一生成元ポリシー違反 		CVE-2012-1216 2012-02-22 15:23 2012-02-21 Show GitHub Exploit DB Packet Storm
252019 7.5 危険 Dolibarr ERP & CRM - Dolibarr CMS におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2012-1226 2012-02-22 14:37 2012-02-21 Show GitHub Exploit DB Packet Storm
252020 7.5 危険 Dolibarr ERP & CRM - Dolibarr CMS における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2012-1225 2012-02-22 14:35 2012-02-21 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 2, 2026, 4:18 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
265071 4.8 MEDIUM
Network 		apache ranger Apache Ranger before 0.6.3 is vulnerable to a Stored Cross-Site Scripting in when entering custom policy conditions. Admin users can store some arbitrary javascript code to be executed when normal us… CWE-79
Cross-site Scripting 		CVE-2016-8751 2024-11-21 11:59 2017-06-15 Show GitHub Exploit DB Packet Storm
265072 5.9 MEDIUM
Network 		apache ranger Apache Ranger before 0.6.3 policy engine incorrectly matches paths in certain conditions when policy does not contain wildcards and has recursion flag set to true. CWE-426
 Untrusted Search Path 		CVE-2016-8746 2024-11-21 11:59 2017-06-15 Show GitHub Exploit DB Packet Storm
265073 6.5 MEDIUM
Network 		cloudfoundry capi-release
cf-release 		An issue was discovered in Cloud Foundry Foundation cf-release versions prior to 250 and CAPI-release versions prior to 1.12.0. A user with the SpaceAuditor role is over-privileged with the ability t… CWE-269
 Improper Privilege Management 		CVE-2016-8219 2024-11-21 11:59 2017-06-13 Show GitHub Exploit DB Packet Storm
265074 9.8 CRITICAL
Network 		cloudfoundry cf-release
routing-release 		An issue was discovered in Cloud Foundry Foundation routing-release versions prior to 0.142.0 and cf-release versions 203 to 231. Incomplete validation logic in JSON Web Token (JWT) libraries can all… CWE-20
 Improper Input Validation  		CVE-2016-8218 2024-11-21 11:59 2017-06-13 Show GitHub Exploit DB Packet Storm
265075 7.5 HIGH
Network 		lenovo lenovo_service_bridge In Lenovo Service Bridge before version 4, a bug found in the signature verification logic of the code signing certificate could be exploited by an attacker to insert a forged code signing certificat… CWE-295
Improper Certificate Validation  		CVE-2016-8231 2024-11-21 11:59 2017-06-5 Show GitHub Exploit DB Packet Storm
265076 7.5 HIGH
Network 		lenovo lenovo_service_bridge In Lenovo Service Bridge before version 4, an insecure HTTP connection is used by LSB to send system serial number, machine type and model and product name to Lenovo's servers. CWE-200
Information Exposure 		CVE-2016-8230 2024-11-21 11:59 2017-06-5 Show GitHub Exploit DB Packet Storm
265077 8.8 HIGH
Network 		lenovo lenovo_service_bridge A cross-site request forgery vulnerability in Lenovo Service Bridge before version 4 could be exploited by an attacker with access to the DHCP server used by the system where LSB is installed. CWE-352
 Origin Validation Error 		CVE-2016-8229 2024-11-21 11:59 2017-06-5 Show GitHub Exploit DB Packet Storm
265078 7.8 HIGH
Local 		lenovo lenovo_service_bridge In Lenovo Service Bridge before version 4, a user with local privileges on a system could execute code with administrative privileges. CWE-264
Permissions, Privileges, and Access Controls 		CVE-2016-8228 2024-11-21 11:59 2017-06-5 Show GitHub Exploit DB Packet Storm
265079 7.5 HIGH
Network 		apache qpid_broker-j The Apache Qpid Broker for Java can be configured to use different so called AuthenticationProviders to handle user authentication. Among the choices are the SCRAM-SHA-1 and SCRAM-SHA-256 Authenticat… CWE-200
Information Exposure 		CVE-2016-8741 2024-11-21 11:59 2017-05-15 Show GitHub Exploit DB Packet Storm
265080 9.1 CRITICAL
Network 		linuxcontainers lxc lxc-attach in LXC before 1.0.9 and 2.x before 2.0.6 allows an attacker inside of an unprivileged container to use an inherited file descriptor, of the host's /proc, to access the rest of the host's f… CWE-264
Permissions, Privileges, and Access Controls 		CVE-2016-8649 2024-11-21 11:59 2017-05-1 Show GitHub Exploit DB Packet Storm