Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 22, 2026, 10 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
240531	4	警告	Moodle	-	Moodle の repository/repository_ajax.php におけるアップロードサイズの制限を回避される脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2012-4400	2012-09-20 16:40	2012-09-17	Show	GitHub Exploit DB Packet Storm

240532	4.3	警告	Mailtraq	-	Mailtraq におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2012-2586	2012-09-20 16:21	2012-09-19	Show	GitHub Exploit DB Packet Storm

240533	4.3	警告	SmarterTools Inc.	-	SmarterMail におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2012-2578	2012-09-20 16:18	2012-09-19	Show	GitHub Exploit DB Packet Storm

240534	4.3	警告	Novell	-	Novell GroupWise の WebAccess コンポーネントにおけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2012-0272	2012-09-20 16:13	2012-07-3	Show	GitHub Exploit DB Packet Storm

240535	10	危険	Novell	-	Novell GroupWise の GWIA の gwia.exe における整数オーバーフローの脆弱性	CWE-189 数値処理の問題	CVE-2012-0271	2012-09-20 16:12	2012-09-11	Show	GitHub Exploit DB Packet Storm

240536	4.3	警告	Novell	-	Novell GroupWise の GWIA 内の gwwww1.dll におけるサービス運用妨害 (DoS) の脆弱性	CWE-noinfo 情報不足	CVE-2011-3827	2012-09-20 16:12	2012-09-11	Show	GitHub Exploit DB Packet Storm

240537	2.1	注意	Webform project	-	Drupal 用 Webform モジュールにおけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2012-1660	2012-09-20 16:11	2012-03-7	Show	GitHub Exploit DB Packet Storm

240538	2.1	注意	Ariel Barreiro	-	Drupal 用 Node Recommendation モジュールにおけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2012-1659	2012-09-20 16:10	2012-03-7	Show	GitHub Exploit DB Packet Storm

240539	2.1	注意	Four Kitchens	-	Drupal 用 Read More Link モジュールにおけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2012-1658	2012-09-20 16:09	2012-03-7	Show	GitHub Exploit DB Packet Storm

240540	2.1	注意	Four Kitchens	-	Drupal 用 Block Class モジュールにおけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2012-1657	2012-09-20 16:08	2012-03-7	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 22, 2026, 4:08 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
268291	5.9	MEDIUM Network	dell netgear samsung zyxel zzinc	emc_powerscale_onefs jr6150_firmware x14j_firmware gs1900-10hp_firmware keymouse_firmware	The kernel in Cisco TelePresence Server 3.0 through 4.2(4.18) on Mobility Services Engine (MSE) 8710 devices allows remote attackers to cause a denial of service (panic and reboot) via a crafted sequ…	CWE-399 Resource Management Errors	CVE-2016-1346	2024-11-21 11:46	2016-04-7	Show	GitHub Exploit DB Packet Storm

268292	9.8	CRITICAL Network	cisco	ucs_invicta_c3124sa_appliance	Cisco UCS Invicta C3124SA Appliance 4.3.1 through 5.0.1, UCS Invicta Scaling System and Appliance, and Whiptail Racerunner improperly store a default SSH private key, which allows remote attackers to…	CWE-264 Permissions, Privileges, and Access Controls	CVE-2016-1313	2024-11-21 11:46	2016-04-7	Show	GitHub Exploit DB Packet Storm

268293	9.8	CRITICAL Network	cisco sun	prime_infrastructure opensolaris evolved_programmable_network_manager	Cisco Prime Infrastructure 1.2.0 through 2.2(2) and Cisco Evolved Programmable Network Manager (EPNM) 1.2 allow remote attackers to execute arbitrary code via crafted deserialized data in an HTTP POS…	CWE-20 Improper Input Validation	CVE-2016-1291	2024-11-21 11:46	2016-04-7	Show	GitHub Exploit DB Packet Storm

268294	8.1	HIGH Network	cisco sun	prime_infrastructure opensolaris evolved_programmable_network_manager	The web API in Cisco Prime Infrastructure 1.2.0 through 2.2(2) and Cisco Evolved Programmable Network Manager (EPNM) 1.2 allows remote authenticated users to bypass intended RBAC restrictions and gai…	CWE-264 Permissions, Privileges, and Access Controls	CVE-2016-1290	2024-11-21 11:46	2016-04-7	Show	GitHub Exploit DB Packet Storm

268295	7.5	HIGH Network	cisco	firesight_system_software asa_with_firepower_services	Cisco FireSIGHT System Software 5.4.0 through 6.0.1 and ASA with FirePOWER Services 5.4.0 through 6.0.0.1 allow remote attackers to bypass malware protection via crafted fields in HTTP headers, aka B…	CWE-20 Improper Input Validation	CVE-2016-1345	2024-11-21 11:46	2016-04-1	Show	GitHub Exploit DB Packet Storm

268296	8.8	HIGH Network	opensuse debian google	opensuse debian_linux chrome	The PageCaptureSaveAsMHTMLFunction::ReturnFailure function in browser/extensions/api/page_capture/page_capture_api.cc in Google Chrome before 49.0.2623.108 allows attackers to cause a denial of servi…	NVD-CWE-noinfo	CVE-2016-1650	2024-11-21 11:46	2016-03-29	Show	GitHub Exploit DB Packet Storm

268297	8.8	HIGH Network	debian canonical opensuse google	debian_linux ubuntu_linux opensuse chrome	The Program::getUniformInternal function in Program.cpp in libANGLE, as used in Google Chrome before 49.0.2623.108, does not properly handle a certain data-type mismatch, which allows remote attacker…	CWE-119 Incorrect Access of Indexable Resource ('Range Error')	CVE-2016-1649	2024-11-21 11:46	2016-03-29	Show	GitHub Exploit DB Packet Storm

268298	8.8	HIGH Network	google opensuse debian	chrome opensuse debian_linux	Use-after-free vulnerability in the GetLoadTimes function in renderer/loadtimes_extension_bindings.cc in the Extensions implementation in Google Chrome before 49.0.2623.108 allows remote attackers to…	NVD-CWE-Other	CVE-2016-1648	2024-11-21 11:46	2016-03-29	Show	GitHub Exploit DB Packet Storm

268299	8.8	HIGH Network	google canonical debian opensuse	chrome ubuntu_linux debian_linux opensuse	Use-after-free vulnerability in the RenderWidgetHostImpl::Destroy function in content/browser/renderer_host/render_widget_host_impl.cc in the Navigation implementation in Google Chrome before 49.0.26…	NVD-CWE-Other	CVE-2016-1647	2024-11-21 11:46	2016-03-29	Show	GitHub Exploit DB Packet Storm

268300	6.1	MEDIUM Network	sun	opensolaris	Cross-site scripting (XSS) vulnerability in Cisco Unified Communications Domain Manager (CDM) 8.1(1) allows remote authenticated users to inject arbitrary web script or HTML via a crafted URL, aka Bu…	CWE-79 Cross-site Scripting	CVE-2016-1314	2024-11-21 11:46	2016-03-29	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed