Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 11, 2026, 6:13 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
228541 4.9 警告 マイクロソフト - Microsoft Windows のカーネルモードドライバ内の win32k.sys における権限昇格の脆弱性 CWE-362
競合状態
CVE-2013-1263 2013-02-14 17:11 2013-02-12 Show GitHub Exploit DB Packet Storm
228542 4.9 警告 マイクロソフト - Microsoft Windows のカーネルモードドライバ内の win32k.sys における権限昇格の脆弱性 CWE-362
競合状態
CVE-2013-1262 2013-02-14 17:11 2013-02-12 Show GitHub Exploit DB Packet Storm
228543 4.9 警告 マイクロソフト - Microsoft Windows のカーネルモードドライバ内の win32k.sys における権限昇格の脆弱性 CWE-362
競合状態
CVE-2013-1261 2013-02-14 17:11 2013-02-12 Show GitHub Exploit DB Packet Storm
228544 4.9 警告 マイクロソフト - Microsoft Windows のカーネルモードドライバ内の win32k.sys における権限昇格の脆弱性 CWE-362
競合状態
CVE-2013-1260 2013-02-14 17:11 2013-02-12 Show GitHub Exploit DB Packet Storm
228545 4.9 警告 マイクロソフト - Microsoft Windows のカーネルモードドライバ内の win32k.sys における権限昇格の脆弱性 CWE-362
競合状態
CVE-2013-1259 2013-02-14 17:11 2013-02-12 Show GitHub Exploit DB Packet Storm
228546 4.9 警告 マイクロソフト - Microsoft Windows のカーネルモードドライバ内の win32k.sys における権限昇格の脆弱性 CWE-362
競合状態
CVE-2013-1258 2013-02-14 17:11 2013-02-12 Show GitHub Exploit DB Packet Storm
228547 4.9 警告 マイクロソフト - Microsoft Windows のカーネルモードドライバ内の win32k.sys における権限昇格の脆弱性 CWE-362
競合状態
CVE-2013-1257 2013-02-14 17:11 2013-02-12 Show GitHub Exploit DB Packet Storm
228548 4.9 警告 マイクロソフト - Microsoft Windows のカーネルモードドライバ内の win32k.sys における権限昇格の脆弱性 CWE-362
競合状態
CVE-2013-1256 2013-02-14 17:11 2013-02-12 Show GitHub Exploit DB Packet Storm
228549 4.9 警告 マイクロソフト - Microsoft Windows のカーネルモードドライバ内の win32k.sys における権限昇格の脆弱性 CWE-362
競合状態
CVE-2013-1255 2013-02-14 17:11 2013-02-12 Show GitHub Exploit DB Packet Storm
228550 4.9 警告 マイクロソフト - Microsoft Windows のカーネルモードドライバ内の win32k.sys における権限昇格の脆弱性 CWE-362
競合状態
CVE-2013-1254 2013-02-14 17:11 2013-02-12 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 11, 2026, 5:13 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
274231 6.1 MEDIUM
Network
select2 select2 In Select2 through 4.0.5, as used in Snipe-IT and other products, rich selectlists allow XSS. This affects use cases with Ajax remote data loading when HTML templates are used to display listbox data. CWE-79
Cross-site Scripting
CVE-2016-10744 2024-11-21 11:44 2019-03-27 Show GitHub Exploit DB Packet Storm
274232 7.5 HIGH
Network
w1.fi hostapd hostapd before 2.6 does not prevent use of the low-quality PRNG that is reached by an os_random() function call. CWE-332
 Insufficient Entropy in PRNG
CVE-2016-10743 2024-11-21 11:44 2019-03-24 Show GitHub Exploit DB Packet Storm
274233 6.1 MEDIUM
Network
zabbix
debian
zabbix
debian_linux
Zabbix before 2.2.21rc1, 3.x before 3.0.13rc1, 3.1.x and 3.2.x before 3.2.10rc1, and 3.3.x and 3.4.x before 3.4.4rc1 allows open redirect via the request parameter. CWE-601
Open Redirect
CVE-2016-10742 2024-11-21 11:44 2019-02-18 Show GitHub Exploit DB Packet Storm
274234 4.7 MEDIUM
Local
linux
debian
linux_kernel
debian_linux
In the Linux kernel before 4.9.3, fs/xfs/xfs_aops.c allows local users to cause a denial of service (system crash) because there is a race condition between direct and memory-mapped I/O (associated w… CWE-362
Race Condition
CVE-2016-10741 2024-11-21 11:44 2019-02-2 Show GitHub Exploit DB Packet Storm
274235 4.9 MEDIUM
Network
atlassian crowd Various resources in Atlassian Crowd before version 2.10.1 allow remote attackers with administration rights to learn the passwords of configured LDAP directories by examining the responses to reques… CWE-200
Information Exposure
CVE-2016-10740 2024-11-21 11:44 2019-01-29 Show GitHub Exploit DB Packet Storm
274236 5.3 MEDIUM
Local
gnu
opensuse
glibc
leap
In the GNU C Library (aka glibc or libc6) through 2.28, the getaddrinfo function would successfully parse a string that contained an IPv4 address followed by whitespace and arbitrary characters, whic… CWE-20
 Improper Input Validation 
CVE-2016-10739 2024-11-21 11:44 2019-01-22 Show GitHub Exploit DB Packet Storm
274237 8.8 HIGH
Network
castlamp zenbership Zenbership v107 has CSRF via admin/cp-functions/event-add.php. CWE-352
 Origin Validation Error
CVE-2016-10738 2024-11-21 11:44 2019-01-16 Show GitHub Exploit DB Packet Storm
274238 5.4 MEDIUM
Network
s9y serendipity Serendipity 2.0.4 has XSS via the serendipity_admin.php serendipity[body] parameter. CWE-79
Cross-site Scripting
CVE-2016-10737 2024-11-21 11:44 2019-01-16 Show GitHub Exploit DB Packet Storm
274239 6.1 MEDIUM
Network
devpups social_pug The "Social Pug - Easy Social Share Buttons" plugin before 1.2.6 for WordPress allows XSS via the wp-admin/admin.php?page=dpsp-toolkit dpsp_message_class parameter. CWE-79
Cross-site Scripting
CVE-2016-10736 2024-11-21 11:44 2019-01-10 Show GitHub Exploit DB Packet Storm
274240 6.1 MEDIUM
Network
getbootstrap bootstrap In Bootstrap 3.x before 3.4.0 and 4.x-beta before 4.0.0-beta.2, XSS is possible in the data-target attribute, a different vulnerability than CVE-2018-14041. CWE-79
Cross-site Scripting
CVE-2016-10735 2024-11-21 11:44 2019-01-9 Show GitHub Exploit DB Packet Storm