Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 4, 2026, 4 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
252601 4 警告 The Support Incident Tracker Project - Support Incident Tracker の ftp_upload_file.php における重要な情報を取得される脆弱性 CWE-200
情報漏えい
CVE-2011-3829 2012-02-1 15:58 2012-01-29 Show GitHub Exploit DB Packet Storm
252602 4 警告 イー・アクセス株式会社 - Pocket WiFi (GP02) におけるクロスサイトリクエストフォージェリの脆弱性 CWE-352
同一生成元ポリシー違反
CVE-2012-0314 2012-02-1 12:01 2012-02-1 Show GitHub Exploit DB Packet Storm
252603 5.8 警告 OpenNMS - OpenNMS におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2012-0936 2012-02-1 11:05 2012-01-29 Show GitHub Exploit DB Packet Storm
252604 7.5 危険 Aryadad - Aryadad CMS の Default.aspx における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2012-0935 2012-02-1 11:03 2012-01-29 Show GitHub Exploit DB Packet Storm
252605 7.5 危険 Zingiri - WordPress 用 Theme Tuner プラグインにおける任意の PHP コードを実行される脆弱性 CWE-94
コード・インジェクション
CVE-2012-0934 2012-02-1 11:03 2012-01-29 Show GitHub Exploit DB Packet Storm
252606 2.6 注意 Acidcat - Acidcat CMS におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2012-0933 2012-02-1 11:01 2012-01-29 Show GitHub Exploit DB Packet Storm
252607 5.8 警告 Lead Capture Page System - Lead Capture Page System におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2012-0932 2012-02-1 11:00 2012-01-29 Show GitHub Exploit DB Packet Storm
252608 7.8 危険 Schneider Electric - Schneider Electric Modicon Quantum PLC におけるサービス運用妨害 (DoS) の脆弱性 CWE-287
不適切な認証
CVE-2012-0931 2012-02-1 10:08 2012-01-20 Show GitHub Exploit DB Packet Storm
252609 4.3 警告 Schneider Electric - Schneider Electric Modicon Quantum PLC におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2012-0930 2012-02-1 10:05 2012-01-20 Show GitHub Exploit DB Packet Storm
252610 7.8 危険 Schneider Electric - Schneider Electric Modicon Quantum PLC におけるバッファオーバーフローの脆弱性 CWE-119
バッファエラー
CVE-2012-0929 2012-02-1 10:04 2012-01-20 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 4, 2026, 4:17 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
5881 7.5 HIGH
Network
- - The affected devices contain a null pointer dereference vulnerability while processing specially crafted IPv4 requests. This could allow an attacker to cause denial of service condition. A manual res… CWE-476
 NULL Pointer Dereference
CVE-2025-40833 2026-05-12 23:19 2026-05-12 Show GitHub Exploit DB Packet Storm
5882 9.1 CRITICAL
Network
- - A vulnerability has been identified in SIMATIC CN 4100 (All versions < V5.0). The affected application does not properly restrict unauthenticated connections and is susceptible to resource exhaustion… CWE-306
Missing Authentication for Critical Function
CVE-2026-22924 2026-05-12 23:19 2026-05-12 Show GitHub Exploit DB Packet Storm
5883 7.5 HIGH
Network
- - A vulnerability has been identified in SIMATIC CN 4100 (All versions < V5.0). The affected application is susceptible to resource exhaustion when subjected to high volume of TCP SYN packets This cou… CWE-770
 Allocation of Resources Without Limits or Throttling
CVE-2026-22925 2026-05-12 23:19 2026-05-12 Show GitHub Exploit DB Packet Storm
5884 9.1 CRITICAL
Network
- - Affected devices do not properly validate and sanitize PLC/station name rendered on the "communication" parameters page of the web interface. This could allow an authenticated attacker who is author… CWE-79
Cross-site Scripting
CVE-2026-25786 2026-05-12 23:19 2026-05-12 Show GitHub Exploit DB Packet Storm
5885 9.1 CRITICAL
Network
- - Affected devices do not properly validate and sanitize Technology Object (TO) name rendered on the "Motion Control Diagnostics" page of the web interface. This could allow an authenticated attacker w… CWE-79
Cross-site Scripting
CVE-2026-25787 2026-05-12 23:19 2026-05-12 Show GitHub Exploit DB Packet Storm
5886 8.3 HIGH
Adjacent
- - A vulnerability has been identified in blueplanet 100 NX3 M8 (All versions), blueplanet 100 TL3 GEN2 (All versions < V6.1.4.9), blueplanet 105 TL3 (All versions), blueplanet 105 TL3 GEN2 (All version… CWE-321
 Use of Hard-coded Cryptographic Key
CVE-2025-40946 2026-05-12 23:19 2026-05-12 Show GitHub Exploit DB Packet Storm
5887 7.5 HIGH
Network
- - A vulnerability has been identified in RUGGEDCOM ROX MX5000 (All versions < V2.17.1), RUGGEDCOM ROX MX5000RE (All versions < V2.17.1), RUGGEDCOM ROX RX1400 (All versions < V2.17.1), RUGGEDCOM ROX RX1… CWE-78
OS Command 
CVE-2025-40947 2026-05-12 23:19 2026-05-12 Show GitHub Exploit DB Packet Storm
5888 6.8 MEDIUM
Network
- - A vulnerability has been identified in RUGGEDCOM ROX MX5000 (All versions < V2.17.1), RUGGEDCOM ROX MX5000RE (All versions < V2.17.1), RUGGEDCOM ROX RX1400 (All versions < V2.17.1), RUGGEDCOM ROX RX1… CWE-88
Argument Injection
CVE-2025-40948 2026-05-12 23:19 2026-05-12 Show GitHub Exploit DB Packet Storm
5889 9.1 CRITICAL
Network
- - A vulnerability has been identified in RUGGEDCOM ROX MX5000 (All versions < V2.17.1), RUGGEDCOM ROX MX5000RE (All versions < V2.17.1), RUGGEDCOM ROX RX1400 (All versions < V2.17.1), RUGGEDCOM ROX RX1… CWE-78
OS Command 
CVE-2025-40949 2026-05-12 23:19 2026-05-12 Show GitHub Exploit DB Packet Storm
5890 7.1 HIGH
Network
- - Affected devices do not properly validate and sanitize filenames on the Firmware Update page. This could allow a remote attacker to social engineer the user into selecting the modified firmware file… CWE-79
Cross-site Scripting
CVE-2026-25789 2026-05-12 23:19 2026-05-12 Show GitHub Exploit DB Packet Storm