Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 28, 2026, 2:01 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
252121 6.4 警告 オラクル - Oracle Fusion Middleware における Search の処理に関する脆弱性 CWE-noinfo
情報不足 		CVE-2012-0083 2012-01-20 15:09 2012-01-17 Show GitHub Exploit DB Packet Storm
252122 5 警告 オラクル - Oracle Fusion Middleware の Oracle WebLogic Server コンポーネントにおける脆弱性 CWE-noinfo
情報不足 		CVE-2011-3566 2012-01-20 12:12 2012-01-17 Show GitHub Exploit DB Packet Storm
252123 2.6 注意 オラクル - Oracle WebLogic Server におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2012-0077 2012-01-20 12:09 2012-01-20 Show GitHub Exploit DB Packet Storm
252124 5 警告 osCommerce - osCommerce におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2005-2330 2012-01-20 12:08 2012-01-20 Show GitHub Exploit DB Packet Storm
252125 4.3 警告 osCommerce - osCommerce 日本語版におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2012-0311 2012-01-20 12:08 2012-01-20 Show GitHub Exploit DB Packet Storm
252126 2.7 注意 オラクル - Oracle PeopleSoft Products の PeopleSoft Enterprise PeopleTools コンポーネントにおける脆弱性 CWE-noinfo
情報不足 		CVE-2012-0091 2012-01-20 11:36 2012-01-17 Show GitHub Exploit DB Packet Storm
252127 4 警告 オラクル - Oracle PeopleSoft Products の PeopleSoft Enterprise HCM コンポーネントにおける脆弱性 CWE-noinfo
情報不足 		CVE-2012-0089 2012-01-20 11:35 2012-01-17 Show GitHub Exploit DB Packet Storm
252128 4 警告 オラクル - Oracle PeopleSoft Products の PeopleSoft Enterprise HCM コンポーネントにおける脆弱性 CWE-noinfo
情報不足 		CVE-2012-0076 2012-01-20 11:35 2012-01-17 Show GitHub Exploit DB Packet Storm
252129 4 警告 オラクル - Oracle PeopleSoft Products の PeopleSoft Enterprise HCM コンポーネントにおける脆弱性 CWE-noinfo
情報不足 		CVE-2012-0088 2012-01-20 11:35 2012-01-17 Show GitHub Exploit DB Packet Storm
252130 4 警告 オラクル - Oracle PeopleSoft Products の PeopleSoft Enterprise CRM コンポーネントにおける脆弱性 CWE-noinfo
情報不足 		CVE-2012-0074 2012-01-20 11:34 2012-01-17 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 28, 2026, 4:16 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
265141 9.8 CRITICAL
Network 		synology ds107_firmware
ds213_firmware
ds116_firmware 		Synology NAS servers DS107, firmware version 3.1-1639 and prior, and DS116, DS213, firmware versions prior to 5.2-5644-1, use non-random default credentials of: guest:(blank) and admin:(blank) . A re… CWE-255
Credentials Management 		CVE-2016-6554 2024-11-21 11:56 2018-07-14 Show GitHub Exploit DB Packet Storm
265142 9.8 CRITICAL
Network 		nuuo nt-4040_titan_firmware Nuuo NT-4040 Titan, firmware NT-4040_01.07.0000.0015_1120, uses non-random default credentials of: admin:admin and localdisplay:111111. A remote network attacker can gain privileged access to a vulne… CWE-255
Credentials Management 		CVE-2016-6553 2024-11-21 11:56 2018-07-14 Show GitHub Exploit DB Packet Storm
265143 9.8 CRITICAL
Network 		greenpacket dx-350_firmware Green Packet DX-350 uses non-random default credentials of: root:wimax. A remote network attacker can gain privileged access to a vulnerable device. CWE-255
Credentials Management 		CVE-2016-6552 2024-11-21 11:56 2018-07-14 Show GitHub Exploit DB Packet Storm
265144 9.8 CRITICAL
Network 		intelliantech v60_firmware
v60ka_firmware
v65_firmware
v80g_firmware
t80w_firmware
t80q_firmware
t100w_firmware
t100q_firmware
t110w_firmware
t110q_firmware
t130w_firmware
t130q_fi… 		Intellian Satellite TV antennas t-Series and v-Series, firmware version 1.07, uses non-random default credentials of: ftp/ftp or intellian:12345678. A remote network attacker can gain elevated access… CWE-255
Credentials Management 		CVE-2016-6551 2024-11-21 11:56 2018-07-14 Show GitHub Exploit DB Packet Storm
265145 4.3 MEDIUM
Adjacent 		nutspace nut_mobile The Zizai Tech Nut device allows unauthenticated Bluetooth pairing, which enables unauthenticated connected applications to write data to the device name attribute. CWE-287
Improper Authentication 		CVE-2016-6549 2024-11-21 11:56 2018-07-14 Show GitHub Exploit DB Packet Storm
265146 9.8 CRITICAL
Network 		nutspace nut_mobile The Zizai Tech Nut mobile app makes requests via HTTP instead of HTTPS. These requests contain the user's authenticated session token with the URL. An attacker can capture these requests and reuse th… CWE-200
Information Exposure 		CVE-2016-6548 2024-11-21 11:56 2018-07-14 Show GitHub Exploit DB Packet Storm
265147 7.8 HIGH
Local 		nutspace nut_mobile The Zizai Tech Nut mobile app stores the account password used to authenticate to the cloud API in cleartext in the cache.db file. CWE-255
CWE-200
Credentials Management
Information Exposure 		CVE-2016-6547 2024-11-21 11:56 2018-07-14 Show GitHub Exploit DB Packet Storm
265148 7.8 HIGH
Local 		kkmcn itrackeasy The iTrack Easy mobile application stores the account password used to authenticate to the cloud API in base64-encoding in the cache.db file. The base64 encoding format is considered equivalent to cl… CWE-255
CWE-200
Credentials Management
Information Exposure 		CVE-2016-6546 2024-11-21 11:56 2018-07-14 Show GitHub Exploit DB Packet Storm
265149 9.8 CRITICAL
Network 		ieasytec itrackeasy Session cookies are not used for maintaining valid sessions in iTrack Easy. The user's password is passed as a POST parameter over HTTPS using a base64 encoded passwd field on every request. In this … CWE-384
 Session Fixation 		CVE-2016-6545 2024-11-21 11:56 2018-07-14 Show GitHub Exploit DB Packet Storm
265150 7.5 HIGH
Network 		ieasytec itrack_easy getgps data in iTrack Easy can be modified without authentication by setting the data using the parametercmd:setothergps. This vulnerability can be exploited to alter the GPS data of a lost device. CWE-287
Improper Authentication 		CVE-2016-6544 2024-11-21 11:56 2018-07-14 Show GitHub Exploit DB Packet Storm