Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 23, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
226281 4 警告 シスコシステムズ - Cisco Cloud Portal の nsAPI インタフェースにおける重要な情報を取得される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2013-1139 2013-02-28 10:52 2013-02-25 Show GitHub Exploit DB Packet Storm
226282 7.8 危険 デル - Dell PowerConnect 6248P にサービス運用妨害 (DoS) の脆弱性 CWE-20
不適切な入力確認 		CVE-2013-0120 2013-02-27 16:51 2013-02-25 Show GitHub Exploit DB Packet Storm
226283 5 警告 CS-Cart - CS-Cart に検証不備の脆弱性 CWE-16
環境設定 		CVE-2013-0118 2013-02-27 16:41 2013-02-25 Show GitHub Exploit DB Packet Storm
226284 5 警告 シスコシステムズ - Cisco Adaptive Security Appliance デバイスにおけるサービス運用妨害 (DoS) の脆弱性 CWE-119
バッファエラー 		CVE-2013-1138 2013-02-27 16:33 2012-02-25 Show GitHub Exploit DB Packet Storm
226285 2.6 注意 CloudBees - CloudBees Jenkins におけるマスターの暗号鍵を取得される脆弱性 CWE-noinfo
情報不足 		CVE-2013-0158 2013-02-27 16:31 2013-01-4 Show GitHub Exploit DB Packet Storm
226286 3.5 注意 CloudBees - CloudBees Jenkins におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2012-6074 2013-02-27 16:25 2012-11-20 Show GitHub Exploit DB Packet Storm
226287 5.8 警告 CloudBees - CloudBees Jenkins におけるオープンリダイレクトの脆弱性 CWE-20
不適切な入力確認 		CVE-2012-6073 2013-02-27 16:25 2012-11-20 Show GitHub Exploit DB Packet Storm
226288 4.3 警告 CloudBees - CloudBees Jenkins における CRLF インジェクションの脆弱性 CWE-20
不適切な入力確認 		CVE-2012-6072 2013-02-27 16:10 2012-11-20 Show GitHub Exploit DB Packet Storm
226289 4.3 警告 Roundcube.net - Roundcube Webmail におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2012-6121 2013-02-27 16:08 2013-02-24 Show GitHub Exploit DB Packet Storm
226290 4.3 警告 The JForum Team - JForum の jforum.page におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2012-5337 2013-02-27 16:08 2013-02-24 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 23, 2026, 4:08 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
2851 9.1 CRITICAL
Network 		- - A vulnerability has been identified in SIMATIC CN 4100 (All versions < V5.0). The affected application does not properly restrict unauthenticated connections and is susceptible to resource exhaustion… CWE-306
Missing Authentication for Critical Function 		CVE-2026-22924 2026-05-12 23:19 2026-05-12 Show GitHub Exploit DB Packet Storm
2852 7.5 HIGH
Network 		- - A vulnerability has been identified in SIMATIC CN 4100 (All versions < V5.0). The affected application is susceptible to resource exhaustion when subjected to high volume of TCP SYN packets This cou… CWE-770
 Allocation of Resources Without Limits or Throttling 		CVE-2026-22925 2026-05-12 23:19 2026-05-12 Show GitHub Exploit DB Packet Storm
2853 9.1 CRITICAL
Network 		- - Affected devices do not properly validate and sanitize PLC/station name rendered on the "communication" parameters page of the web interface. This could allow an authenticated attacker who is author… CWE-79
Cross-site Scripting 		CVE-2026-25786 2026-05-12 23:19 2026-05-12 Show GitHub Exploit DB Packet Storm
2854 9.1 CRITICAL
Network 		- - Affected devices do not properly validate and sanitize Technology Object (TO) name rendered on the "Motion Control Diagnostics" page of the web interface. This could allow an authenticated attacker w… CWE-79
Cross-site Scripting 		CVE-2026-25787 2026-05-12 23:19 2026-05-12 Show GitHub Exploit DB Packet Storm
2855 8.3 HIGH
Adjacent 		- - A vulnerability has been identified in blueplanet 100 NX3 M8 (All versions), blueplanet 100 TL3 GEN2 (All versions < V6.1.4.9), blueplanet 105 TL3 (All versions), blueplanet 105 TL3 GEN2 (All version… CWE-321
 Use of Hard-coded Cryptographic Key 		CVE-2025-40946 2026-05-12 23:19 2026-05-12 Show GitHub Exploit DB Packet Storm
2856 7.5 HIGH
Network 		- - A vulnerability has been identified in RUGGEDCOM ROX MX5000 (All versions < V2.17.1), RUGGEDCOM ROX MX5000RE (All versions < V2.17.1), RUGGEDCOM ROX RX1400 (All versions < V2.17.1), RUGGEDCOM ROX RX1… CWE-78
OS Command  		CVE-2025-40947 2026-05-12 23:19 2026-05-12 Show GitHub Exploit DB Packet Storm
2857 6.8 MEDIUM
Network 		- - A vulnerability has been identified in RUGGEDCOM ROX MX5000 (All versions < V2.17.1), RUGGEDCOM ROX MX5000RE (All versions < V2.17.1), RUGGEDCOM ROX RX1400 (All versions < V2.17.1), RUGGEDCOM ROX RX1… CWE-88
Argument Injection 		CVE-2025-40948 2026-05-12 23:19 2026-05-12 Show GitHub Exploit DB Packet Storm
2858 9.1 CRITICAL
Network 		- - A vulnerability has been identified in RUGGEDCOM ROX MX5000 (All versions < V2.17.1), RUGGEDCOM ROX MX5000RE (All versions < V2.17.1), RUGGEDCOM ROX RX1400 (All versions < V2.17.1), RUGGEDCOM ROX RX1… CWE-78
OS Command  		CVE-2025-40949 2026-05-12 23:19 2026-05-12 Show GitHub Exploit DB Packet Storm
2859 7.1 HIGH
Network 		- - Affected devices do not properly validate and sanitize filenames on the Firmware Update page. This could allow a remote attacker to social engineer the user into selecting the modified firmware file… CWE-79
Cross-site Scripting 		CVE-2026-25789 2026-05-12 23:19 2026-05-12 Show GitHub Exploit DB Packet Storm
2860 7.7 HIGH
Local 		- - Affected devices do not properly restrict access to the web browser via the Control Panel when no corresponding security mechanisms are in place. This could allow an unauthenticated attacker to gain… CWE-1188
 Insecure Default Initialization of Resource 		CVE-2026-27662 2026-05-12 23:19 2026-05-12 Show GitHub Exploit DB Packet Storm