Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":June 2, 2026, 10 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
222051	4.3	警告	IBM	-	複数の IBM 製品におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2013-6746	2014-01-23 15:36	2013-12-23	Show	GitHub Exploit DB Packet Storm

222052	10	危険	IBM	-	IBM Java SDK における脆弱性	CWE-noinfo 情報不足	CVE-2013-0485	2014-01-23 15:36	2013-04-9	Show	GitHub Exploit DB Packet Storm

222053	4.3	警告	IBM	-	IBM Platform Symphony における重要な情報を取得される脆弱性	CWE-310 暗号の問題	CVE-2013-6305	2014-01-23 15:33	2013-10-31	Show	GitHub Exploit DB Packet Storm

222054	2.1	注意	IBM	-	IBM Tivoli Federated Identity Manager および Tivoli Federated Identity Manager Business Gateway におけるトランザクションを完了される脆弱性	CWE-287 不適切な認証	CVE-2013-5429	2014-01-23 15:33	2013-12-31	Show	GitHub Exploit DB Packet Storm

222055	4	警告	The Tor Project	-	Tor における暗号保護メカニズムを回避される脆弱性	CWE-310 暗号の問題	CVE-2013-7295	2014-01-23 12:13	2013-12-22	Show	GitHub Exploit DB Packet Storm

222056	7.8	危険	デル	-	Dell PowerConnect スイッチ上で稼働する GoAhead Web Server のログインページにおけるサービス運用妨害 (DoS) の脆弱性	CWE-20 不適切な入力確認	CVE-2013-3606	2014-01-22 19:13	2014-01-17	Show	GitHub Exploit DB Packet Storm

222057	6.8	警告	デル	-	Dell PowerConnect スイッチ上で稼働する OpenManage Web Application におけるサービス運用妨害 (DoS) の脆弱性	CWE-20 不適切な入力確認	CVE-2013-3595	2014-01-22 19:13	2014-01-17	Show	GitHub Exploit DB Packet Storm

222058	10	危険	デル	-	Dell PowerConnect スイッチの SSH サービスにおけるサービス運用妨害 (DoS) の脆弱性	CWE-20 不適切な入力確認	CVE-2013-3594	2014-01-22 19:12	2014-01-17	Show	GitHub Exploit DB Packet Storm

222059	4	警告	WordPress.org	-	WordPress の wp-admin/press-this.php における publish アクションを実行される脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2011-5270	2014-01-22 18:49	2011-04-26	Show	GitHub Exploit DB Packet Storm

222060	2.1	注意	WordPress.org	-	WordPress におけるアクセス制限を回避される脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2010-5297	2014-01-22 18:47	2010-06-27	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:June 2, 2026, 4:18 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
272951	5.5	MEDIUM Local	microsoft	windows_10	Microsoft Windows 10 Gold and 1511 allows local users to bypass the Virtual Secure Mode Hypervisor Code Integrity (HVCI) protection mechanism and perform RWX markings of kernel-mode pages via a craft…	CWE-254 7PK - Security Features	CVE-2016-0181	2024-11-21 11:41	2016-05-11	Show	GitHub Exploit DB Packet Storm

272952	7.8	HIGH Local	microsoft	windows_rt_8.1 windows_server_2012 windows_7 windows_10 windows_8.1 windows_server_2008 windows_vista	The kernel in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, and Windows 10 Gold and 1511 mishandles sym…	CWE-264 Permissions, Privileges, and Access Controls	CVE-2016-0180	2024-11-21 11:41	2016-05-11	Show	GitHub Exploit DB Packet Storm

272953	7.8	HIGH Local	microsoft	windows_rt_8.1 windows_server_2012 windows_10 windows_8.1	Windows Shell in Microsoft Windows 8.1, Windows Server 2012 R2, Windows RT 8.1, and Windows 10 Gold and 1511 allows remote attackers to execute arbitrary code via a crafted web site, aka "Windows She…	CWE-284 Improper Access Control	CVE-2016-0179	2024-11-21 11:41	2016-05-11	Show	GitHub Exploit DB Packet Storm

272954	7.8	HIGH Local	microsoft	windows_rt_8.1 windows_server_2012 windows_7 windows_10 windows_8.1 windows_server_2008	dxgkrnl.sys in the DirectX Graphics kernel subsystem in the kernel-mode drivers in Microsoft Windows 7 SP1, Windows Server 2008 R2 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, a…	CWE-264 Permissions, Privileges, and Access Controls	CVE-2016-0176	2024-11-21 11:41	2016-05-11	Show	GitHub Exploit DB Packet Storm

272955	8.8	HIGH Network	microsoft	windows_rt_8.1 windows_server_2012 windows_7 windows_10 windows_8.1 windows_server_2008 windows_vista	GDI in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, and Windows 10 Gold and 1511 allows remote attacke…	CWE-284 Improper Access Control	CVE-2016-0170	2024-11-21 11:41	2016-05-11	Show	GitHub Exploit DB Packet Storm

272956	7.8	HIGH Local	microsoft	windows_rt_8.1 windows_server_2012 windows_7 windows_10 windows_8.1 windows_server_2008 windows_vista	dxgkrnl.sys in the DirectX Graphics kernel subsystem in the kernel-mode drivers in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gol…	CWE-264 Permissions, Privileges, and Access Controls	CVE-2016-0197	2024-11-21 11:41	2016-05-11	Show	GitHub Exploit DB Packet Storm

272957	7.8	HIGH Local	microsoft	windows_rt_8.1 windows_server_2012 windows_7 windows_10 windows_8.1 windows_server_2008 windows_vista	The kernel-mode drivers in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, and Windows 10 Gold and 1511 a…	CWE-264 Permissions, Privileges, and Access Controls	CVE-2016-0196	2024-11-21 11:41	2016-05-11	Show	GitHub Exploit DB Packet Storm

272958	7.8	HIGH Local	microsoft	windows_vista windows_server_2008	Internet Information Services (IIS) in Microsoft Windows Vista SP2 and Server 2008 SP2 mishandles library loading, which allows local users to gain privileges via a crafted application, aka "Windows …	CWE-264 Permissions, Privileges, and Access Controls	CVE-2016-0152	2024-11-21 11:41	2016-05-11	Show	GitHub Exploit DB Packet Storm

272959	5.9	MEDIUM Network	microsoft	.net_framework	Microsoft .NET Framework 2.0 SP2, 3.0 SP2, 3.5, 3.5.1, 4.5.2, 4.6, and 4.6.1 allows man-in-the-middle attackers to obtain sensitive cleartext information via vectors involving injection of cleartext …	CWE-200 Information Exposure	CVE-2016-0149	2024-11-21 11:41	2016-05-11	Show	GitHub Exploit DB Packet Storm

272960	7.8	HIGH Local	microsoft	office office_web_apps sharepoint_server	Microsoft Office 2007 SP3, Office 2010 SP2, Word Automation Services on SharePoint Server 2010 SP2, and Office Web Apps 2010 SP2 allow remote attackers to execute arbitrary code via a crafted Office …	CWE-119 Incorrect Access of Indexable Resource ('Range Error')	CVE-2016-0140	2024-11-21 11:41	2016-05-11	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed