Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":April 30, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
253311 4.3 警告 アップル
Ruby on Rails project		 - Ruby on Rails の strip_tags 関数におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2009-4214 2010-04-16 16:58 2009-12-7 Show GitHub Exploit DB Packet Storm
253312 4.3 警告 アップル
Ruby on Rails project		 - Ruby on Rails におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2009-3009 2010-04-16 16:58 2009-09-8 Show GitHub Exploit DB Packet Storm
253313 7.5 危険 アップル
Ruby on Rails project		 - Ruby on Rails のダイジェスト認証における認証を回避される脆弱性 CWE-287
不適切な認証 		CVE-2009-2422 2010-04-16 16:57 2009-07-10 Show GitHub Exploit DB Packet Storm
253314 6.8 警告 アップル - Apple Mac OS X の QuickTime におけるヒープベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2010-0526 2010-04-16 16:57 2010-03-29 Show GitHub Exploit DB Packet Storm
253315 6.8 警告 アップル - Apple Mac OS X の QuickTime におけるヒープベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2010-0520 2010-04-16 16:57 2010-03-29 Show GitHub Exploit DB Packet Storm
253316 6.8 警告 アップル - Apple Mac OS X の QuickTime における整数オーバーフローの脆弱性 CWE-189
数値処理の問題 		CVE-2010-0519 2010-04-16 16:57 2010-03-29 Show GitHub Exploit DB Packet Storm
253317 6.8 警告 アップル - Apple Mac OS X の QuickTime における任意のコードを実行される脆弱性 CWE-119
バッファエラー 		CVE-2010-0518 2010-04-16 16:56 2010-03-29 Show GitHub Exploit DB Packet Storm
253318 6.8 警告 アップル - Apple Mac OS X の QuickTime におけるヒープベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2010-0517 2010-04-16 16:56 2010-03-29 Show GitHub Exploit DB Packet Storm
253319 6.8 警告 アップル - Apple Mac OS X の QuickTime におけるヒープベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2010-0516 2010-04-15 18:39 2010-03-29 Show GitHub Exploit DB Packet Storm
253320 6.8 警告 アップル - Apple Mac OS X の QuickTime における任意のコードを実行される脆弱性 CWE-119
バッファエラー 		CVE-2010-0515 2010-04-15 18:39 2010-03-29 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:April 30, 2026, 4:58 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
288641 - rockwellautomation guardlogix_controllers
compactlogix_controllers
1794-aentr_flex_i\/o_ethernet\/ip_adapter
flexlogix_1788-enbt_adapter
micrologix
guardlogix
1768-enbt
1756-enbt
compactlogix 		The web-server password-authentication functionality in Rockwell Automation EtherNet/IP products; 1756-ENBT, 1756-EWEB, 1768-ENBT, and 1768-EWEB communication modules; CompactLogix L32E and L35E cont… CWE-287
Improper Authentication 		CVE-2012-6440 2024-11-21 10:46 2013-01-25 Show GitHub Exploit DB Packet Storm
288642 - rockwellautomation guardlogix_controllers
compactlogix_controllers
1794-aentr_flex_i\/o_ethernet\/ip_adapter
flexlogix_1788-enbt_adapter
micrologix
guardlogix
1768-enbt
1756-enbt
compactlogix 		Rockwell Automation EtherNet/IP products; 1756-ENBT, 1756-EWEB, 1768-ENBT, and 1768-EWEB communication modules; CompactLogix L32E and L35E controllers; 1788-ENBT FLEXLogix adapter; 1794-AENTR FLEX I/… NVD-CWE-Other
CVE-2012-6439 2024-11-21 10:46 2013-01-25 Show GitHub Exploit DB Packet Storm
288643 - rockwellautomation guardlogix_controllers
compactlogix_controllers
1794-aentr_flex_i\/o_ethernet\/ip_adapter
flexlogix_1788-enbt_adapter
micrologix
guardlogix
1768-enbt
1756-enbt
compactlogix 		Buffer overflow in Rockwell Automation EtherNet/IP products; 1756-ENBT, 1756-EWEB, 1768-ENBT, and 1768-EWEB communication modules; CompactLogix L32E and L35E controllers; 1788-ENBT FLEXLogix adapter;… CWE-119
Incorrect Access of Indexable Resource ('Range Error')  		CVE-2012-6438 2024-11-21 10:46 2013-01-25 Show GitHub Exploit DB Packet Storm
288644 - rockwellautomation guardlogix_controllers
compactlogix_controllers
1794-aentr_flex_i\/o_ethernet\/ip_adapter
flexlogix_1788-enbt_adapter
micrologix
guardlogix
1768-enbt
1756-enbt
compactlogix 		Rockwell Automation EtherNet/IP products; 1756-ENBT, 1756-EWEB, 1768-ENBT, and 1768-EWEB communication modules; CompactLogix L32E and L35E controllers; 1788-ENBT FLEXLogix adapter; 1794-AENTR FLEX I/… CWE-287
Improper Authentication 		CVE-2012-6437 2024-11-21 10:46 2013-01-25 Show GitHub Exploit DB Packet Storm
288645 - rockwellautomation guardlogix_controllers
compactlogix_controllers
1794-aentr_flex_i\/o_ethernet\/ip_adapter
flexlogix_1788-enbt_adapter
micrologix
guardlogix
1768-enbt
1756-enbt
compactlogix 		Buffer overflow in Rockwell Automation EtherNet/IP products; 1756-ENBT, 1756-EWEB, 1768-ENBT, and 1768-EWEB communication modules; CompactLogix L32E and L35E controllers; 1788-ENBT FLEXLogix adapter;… CWE-119
Incorrect Access of Indexable Resource ('Range Error')  		CVE-2012-6436 2024-11-21 10:46 2013-01-25 Show GitHub Exploit DB Packet Storm
288646 - elefantcms elefantcms Cross-site scripting (XSS) vulnerability in apps/admin/handlers/versions.php in Elefant CMS 1.2.0 allows remote attackers to inject arbitrary web script or HTML via the id parameter to admin/versions. CWE-79
Cross-site Scripting 		CVE-2012-6521 2024-11-21 10:46 2013-01-24 Show GitHub Exploit DB Packet Storm
288647 - wikidforum wikidforum Multiple SQL injection vulnerabilities in the advanced search in Wikidforum 2.10 allow remote attackers to execute arbitrary SQL commands via the (1) select_sort or (2) opt_search_select parameters. … CWE-89
SQL Injection 		CVE-2012-6520 2024-11-21 10:46 2013-01-24 Show GitHub Exploit DB Packet Storm
288648 - diy-cms diy-cms SQL injection vulnerability in modules/poll/index.php in DIY-CMS 1.0 allows remote attackers to execute arbitrary SQL commands via the start parameter to mod.php. CWE-89
SQL Injection 		CVE-2012-6519 2024-11-21 10:46 2013-01-24 Show GitHub Exploit DB Packet Storm
288649 - diy-cms diy-cms Cross-site request forgery (CSRF) vulnerability in mod.php in DiY-CMS 1.0 allows remote attackers to hijack the authentication of administrators for requests that create a poll via an add action to t… CWE-352
 Origin Validation Error 		CVE-2012-6518 2024-11-21 10:46 2013-01-24 Show GitHub Exploit DB Packet Storm
288650 - diy-cms diy-cms Multiple cross-site scripting (XSS) vulnerabilities in DiY-CMS 1.0 allow remote attackers to inject arbitrary web script or HTML via the (1) question parameter to in /modules/poll/add.php or (2) ques… CWE-79
Cross-site Scripting 		CVE-2012-6517 2024-11-21 10:46 2013-01-24 Show GitHub Exploit DB Packet Storm