Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":Feb. 9, 2026, 12:59 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
228881 4.3 警告 Joomla! - Joomla! 用 Language Switcher モジュールにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2012-4532 2012-11-2 14:01 2012-09-13 Show GitHub Exploit DB Packet Storm
228882 4.3 警告 Joomla! - Joomla! におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2012-4531 2012-11-2 14:00 2012-09-13 Show GitHub Exploit DB Packet Storm
228883 10 危険 General Electric Company - GE Intelligent Platforms Proficy Real-Time Information Portal におけるサービス運用妨害 (DoS) の脆弱性 CWE-20
不適切な入力確認 		CVE-2012-3026 2012-11-2 13:59 2012-08-14 Show GitHub Exploit DB Packet Storm
228884 10 危険 General Electric Company - GE Intelligent Platforms Proficy Real-Time Information Portal におけるサービス運用妨害 (DoS) の脆弱性 CWE-20
不適切な入力確認 		CVE-2012-3021 2012-11-2 13:57 2012-08-14 Show GitHub Exploit DB Packet Storm
228885 10 危険 General Electric Company - GE Intelligent Platforms Proficy Real-Time Information Portal におけるサービス運用妨害 (DoS) の脆弱性 CWE-20
不適切な入力確認 		CVE-2012-3010 2012-11-2 13:57 2012-08-14 Show GitHub Exploit DB Packet Storm
228886 2.1 注意 シトリックス・システムズ - Xen の PV ドメインビルダーにおけるサービス運用妨害 (DoS) の脆弱性 CWE-20
不適切な入力確認 		CVE-2012-4544 2012-11-2 13:52 2012-10-31 Show GitHub Exploit DB Packet Storm
228887 4.3 警告 Pebble - Pebble におけるオープンリダイレクトの脆弱性 CWE-20
不適切な入力確認 		CVE-2012-5170 2012-11-2 12:02 2012-11-2 Show GitHub Exploit DB Packet Storm
228888 4.3 警告 Pebble - Pebble における HTTP ヘッダインジェクションの脆弱性 CWE-Other
その他 		CVE-2012-4023 2012-11-2 12:02 2012-11-2 Show GitHub Exploit DB Packet Storm
228889 5 警告 Pebble - Pebble において記事が閲覧不能になる脆弱性 CWE-Other
その他 		CVE-2012-4022 2012-11-2 12:01 2012-11-2 Show GitHub Exploit DB Packet Storm
228890 6.5 警告 株式会社マインド - MosP勤怠管理システムにおける認証不備の脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2012-4021 2012-11-2 12:01 2012-11-2 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:April 26, 2026, 4:08 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
199001 6.5 MEDIUM
Adjacent 		blipcare wi-fi_blood_pressure_monitor_firmware Blipcare Wifi blood pressure monitor BP700 10.1 devices allow memory corruption that results in Denial of Service. When connected to the "Blip" open wireless connection provided by the device, if a l… CWE-399
 Resource Management Errors 		CVE-2017-11580 2024-11-21 12:08 2019-07-3 Show GitHub Exploit DB Packet Storm
199002 7.1 HIGH
Adjacent 		blipcare wi-fi_blood_pressure_monitor_firmware In the most recent firmware for Blipcare, the device provides an open Wireless network called "Blip" for communicating with the device. The user connects to this open Wireless network and uses the we… CWE-254
 7PK - Security Features 		CVE-2017-11579 2024-11-21 12:08 2019-07-3 Show GitHub Exploit DB Packet Storm
199003 5.9 MEDIUM
Network 		blipcare wi-fi_blood_pressure_monitor_firmware It was discovered as a part of the research on IoT devices in the most recent firmware for Blipcare device that the device allows to connect to web management interface on a non-SSL connection using … CWE-200
Information Exposure 		CVE-2017-11578 2024-11-21 12:08 2019-07-3 Show GitHub Exploit DB Packet Storm
199004 5.4 MEDIUM
Network 		zohocorp manageengine_opmanager An issue was discovered in ZOHO ManageEngine OpManager 12.2. By adding a Google Map to the application, an authenticated user can upload an HTML file. This HTML file is then rendered in various locat… CWE-79
Cross-site Scripting 		CVE-2017-11560 2024-11-21 12:08 2019-05-24 Show GitHub Exploit DB Packet Storm
199005 7.5 HIGH
Network 		zohocorp manageengine_opmanager An issue was discovered in ZOHO ManageEngine OpManager 12.2. The 'apiKey' parameter of "/api/json/admin/getmailserversettings" and "/api/json/dashboard/gotoverviewlist" is vulnerable to a Blind SQL I… CWE-89
SQL Injection 		CVE-2017-11559 2024-11-21 12:08 2019-05-24 Show GitHub Exploit DB Packet Storm
199006 5.3 MEDIUM
Network 		zohocorp manageengine_applications_manager An issue was discovered in ZOHO ManageEngine Applications Manager 12.3. It is possible for an unauthenticated user to view the list of domain names and usernames used in a company's network environme… CWE-200
Information Exposure 		CVE-2017-11557 2024-11-21 12:08 2019-05-24 Show GitHub Exploit DB Packet Storm
199007 8.8 HIGH
Network 		zohocorp manageengine_applications_manager In Zoho ManageEngine Application Manager 13.1 Build 13100, the administrative user has the ability to upload files/binaries that can be executed upon the occurrence of an alarm. An attacker can abuse… CWE-20
 Improper Input Validation  		CVE-2017-11740 2024-11-21 12:08 2019-05-24 Show GitHub Exploit DB Packet Storm
199008 6.1 MEDIUM
Network 		zohocorp manageengine_applications_manager In Zoho ManageEngine Application Manager 13.1 Build 13100, an authenticated user, with administrative privileges, has the ability to add a widget on any dashboard. This widget can be a "Utility Widge… CWE-79
Cross-site Scripting 		CVE-2017-11739 2024-11-21 12:08 2019-05-24 Show GitHub Exploit DB Packet Storm
199009 8.1 HIGH
Network 		zohocorp manageengine_applications_manager In Zoho ManageEngine Application Manager prior to 14.6 Build 14660, the 'haid' parameter of the '/auditLogAction.do' module is vulnerable to a Time-based Blind SQL Injection attack. CWE-89
SQL Injection 		CVE-2017-11738 2024-11-21 12:08 2019-05-24 Show GitHub Exploit DB Packet Storm
199010 6.5 MEDIUM
Network 		zohocorp manageengine_opmanager An issue was discovered in ZOHO ManageEngine OpManager 12.2. An authenticated user can upload any file they want to share in the "Group Chat" or "Alarm" section. This functionality can be abused by a… CWE-434
 Unrestricted Upload of File with Dangerous Type  		CVE-2017-11561 2024-11-21 12:08 2019-05-24 Show GitHub Exploit DB Packet Storm