Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":Feb. 9, 2026, 12:59 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
228491 4.4 警告 シトリックス・システムズ - Xen の Transcendent Memory におけるサービス運用妨害 (DoS) の脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2012-6036 2012-11-27 16:48 2012-09-5 Show GitHub Exploit DB Packet Storm
228492 6.9 警告 シトリックス・システムズ - Xen の Transcendent Memory におけるサービス運用妨害 (DoS) の脆弱性 CWE-20
不適切な入力確認 		CVE-2012-6035 2012-11-27 16:44 2012-09-5 Show GitHub Exploit DB Packet Storm
228493 4.4 警告 シトリックス・システムズ - Xen の Transcendent Memory における制御スタックオペレーションにアクセスされる脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2012-6033 2012-11-27 16:24 2012-09-5 Show GitHub Exploit DB Packet Storm
228494 4.9 警告 シトリックス・システムズ - Xen の Transcendent Memory における整数オーバーフローの脆弱性 CWE-189
数値処理の問題 		CVE-2012-6032 2012-11-27 16:22 2012-09-5 Show GitHub Exploit DB Packet Storm
228495 4.7 警告 シトリックス・システムズ - Xen の Transcendent Memory におけるサービス運用妨害 (DoS) の脆弱性 CWE-20
不適切な入力確認 		CVE-2012-6031 2012-11-27 16:21 2012-09-5 Show GitHub Exploit DB Packet Storm
228496 7.2 危険 シトリックス・システムズ - Xen の Transcendent Memory におけるサービス運用妨害 (DoS) の脆弱性 CWE-20
不適切な入力確認 		CVE-2012-6030 2012-11-27 16:18 2012-09-5 Show GitHub Exploit DB Packet Storm
228497 4.3 警告 Tecnick.com - Nicola Asuni TCExam の admin/code/tce_select_users_popup.php におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2012-4602 2012-11-27 16:12 2012-11-23 Show GitHub Exploit DB Packet Storm
228498 6 警告 Tecnick.com - Nicola Asuni TCExam における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2012-4601 2012-11-27 16:11 2012-11-23 Show GitHub Exploit DB Packet Storm
228499 4.6 警告 シトリックス・システムズ - Xen のグラフィカルコンソールにおける重要なホストリソース情報を取得される脆弱性 CWE-200
情報漏えい 		CVE-2012-4411 2012-11-27 16:11 2012-09-7 Show GitHub Exploit DB Packet Storm
228500 6.9 警告 シトリックス・システムズ - Xen および Citrix XenServer の grant table hypercall におけるサービス運用妨害 (DoS) の脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2012-3516 2012-11-27 16:09 2012-09-5 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:April 20, 2026, 4:09 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
212361 6.8 MEDIUM
Adjacent 		mediabridge medialink_mwn-wapr300n_firmware The web management interface on Mediabridge Medialink MWN-WAPR300N devices with firmware 5.07.50 has a default password of admin for the admin account and a default password of password for the media… CWE-255
Credentials Management 		CVE-2015-5994 2024-11-21 11:34 2015-12-31 Show GitHub Exploit DB Packet Storm
212362 6.9 MEDIUM
Network 		progress whatsup_gold Multiple cross-site scripting (XSS) vulnerabilities in IPSwitch WhatsUp Gold before 16.4 allow remote attackers to inject arbitrary web script or HTML via (1) an SNMP OID object, (2) an SNMP trap mes… CWE-79
Cross-site Scripting 		CVE-2015-6005 2024-11-21 11:34 2015-12-27 Show GitHub Exploit DB Packet Storm
212363 6.5 MEDIUM
Network 		progress whatsup_gold Multiple SQL injection vulnerabilities in IPSwitch WhatsUp Gold before 16.4 allow remote attackers to execute arbitrary SQL commands via (1) the UniqueID (aka sUniqueID) parameter to WrFreeFormText.a… CWE-89
SQL Injection 		CVE-2015-6004 2024-11-21 11:34 2015-12-27 Show GitHub Exploit DB Packet Storm
212364 5.9 MEDIUM
Network 		cisco jabber Cisco Jabber 10.6.x, 11.0.x, and 11.1.x on Windows allows man-in-the-middle attackers to conduct STARTTLS downgrade attacks and trigger cleartext XMPP sessions via unspecified vectors, aka Bug ID CSC… CWE-200
Information Exposure 		CVE-2015-6409 2024-11-21 11:34 2015-12-27 Show GitHub Exploit DB Packet Storm
212365 6.5 MEDIUM
Adjacent 		cisco ios_xe Cisco IOS XE 16.1.1 allows remote attackers to cause a denial of service (device reload) via a packet with the 00-00-00-00-00-00 source MAC address, aka Bug ID CSCux48405. CWE-399
 Resource Management Errors 		CVE-2015-6431 2024-11-21 11:34 2015-12-23 Show GitHub Exploit DB Packet Storm
212366 - cisco ios
ios_xe 		The IKEv1 state machine in Cisco IOS 15.4 through 15.6 and IOS XE 3.15 through 3.17 allows remote attackers to cause a denial of service (IPsec connection termination) via a crafted IKEv1 packet to a… CWE-19
 Data Processing Errors 		CVE-2015-6429 2024-11-21 11:34 2015-12-19 Show GitHub Exploit DB Packet Storm
212367 - cisco dpq3925_8x4_docsis_3.0_wireless_residential_gateway_with_embedded_digital_voice_adapter Cisco DPQ3925 devices with EDVA r1 Base allow remote attackers to obtain sensitive information via a crafted HTTP request, aka Bug ID CSCuv03958. CWE-200
Information Exposure 		CVE-2015-6428 2024-11-21 11:34 2015-12-18 Show GitHub Exploit DB Packet Storm
212368 - cisco firesight_system_software Cisco FireSIGHT Management Center allows remote attackers to bypass the HTTP attack detection feature and avoid triggering Snort IDS rules via an SSL session that is mishandled after decryption, aka … CWE-254
 7PK - Security Features 		CVE-2015-6427 2024-11-21 11:34 2015-12-18 Show GitHub Exploit DB Packet Storm
212369 - cisco prime_network_services_controller Cisco Prime Network Services Controller 3.0 allows local users to bypass intended access restrictions and execute arbitrary commands via additional parameters to an unspecified command, aka Bug ID CS… CWE-20
 Improper Input Validation  		CVE-2015-6426 2024-11-21 11:34 2015-12-18 Show GitHub Exploit DB Packet Storm
212370 - cisco application_policy_infrastructure_controller The boot manager in Cisco Application Policy Infrastructure Controller (APIC) 1.1(0.920a) allows local users to bypass intended access restrictions and obtain single-user-mode root access via unspeci… CWE-255
Credentials Management 		CVE-2015-6424 2024-11-21 11:34 2015-12-18 Show GitHub Exploit DB Packet Storm