Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 23, 2026, noon

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
240691	6.1	警告	Mercurycom	-	Mercury MR804 ルータにおけるサービス運用妨害 (DoS) の脆弱性	CWE-20 不適切な入力確認	CVE-2012-4999	2012-09-21 12:14	2012-09-19	Show	GitHub Exploit DB Packet Storm

240692	4.3	警告	starCMS	-	starCMS の index.php におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2012-4998	2012-09-21 11:32	2012-09-19	Show	GitHub Exploit DB Packet Storm

240693	7.5	危険	AneCMS	-	AneCMS の acp/index.php におけるディレクトリトラバーサルの脆弱性	CWE-22 パス・トラバーサル	CVE-2012-4997	2012-09-21 11:32	2012-09-19	Show	GitHub Exploit DB Packet Storm

240694	4.3	警告	LimeSurvey	-	LimeSurvey の admin/userrighthandling.php におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2012-4995	2012-09-21 11:31	2012-09-19	Show	GitHub Exploit DB Packet Storm

240695	6.5	警告	LimeSurvey	-	LimeSurvey の admin/admin.php における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2012-4994	2012-09-21 11:30	2012-09-19	Show	GitHub Exploit DB Packet Storm

240696	7.5	危険	RivetCode Software	-	RivetTracker における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2012-4996	2012-09-21 11:30	2012-09-19	Show	GitHub Exploit DB Packet Storm

240697	7.5	危険	RivetCode Software	-	RivetTracker の torrent_functions.php における脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2012-4993	2012-09-21 11:29	2012-09-19	Show	GitHub Exploit DB Packet Storm

240698	9	危険	FlashFXP	-	FlashFXP の FlashFXP.exe におけるバッファオーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2012-4992	2012-09-21 11:29	2012-03-4	Show	GitHub Exploit DB Packet Storm

240699	4.3	警告	Apache Software Foundation	-	Apache Wicket におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2012-3373	2012-09-21 11:16	2012-09-6	Show	GitHub Exploit DB Packet Storm

240700	7.5	危険	Timesheet	-	Timesheet Next Gen の login.php における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2012-2105	2012-09-21 11:15	2012-09-19	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 23, 2026, 4:08 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
266761	8.8	HIGH Network	fedoraproject opensuse mercurial debian suse	fedora leap mercurial debian_linux linux_enterprise_software_development_kit linux_enterprise_debuginfo opensuse	The binary delta decoder in Mercurial before 3.7.3 allows remote attackers to execute arbitrary code via a (1) clone, (2) push, or (3) pull command, related to (a) a list sizing rounding error and (b…	CWE-19 Data Processing Errors	CVE-2016-3630	2024-11-21 11:50	2016-04-14	Show	GitHub Exploit DB Packet Storm

266762	9.8	CRITICAL Network	paloaltonetworks	pan-os	Buffer overflow in the GlobalProtect Portal in Palo Alto Networks PAN-OS before 5.0.18, 6.0.x before 6.0.13, 6.1.x before 6.1.10, and 7.0.x before 7.0.5 allows remote attackers to cause a denial of s…	CWE-119 Incorrect Access of Indexable Resource ('Range Error')	CVE-2016-3657	2024-11-21 11:50	2016-04-13	Show	GitHub Exploit DB Packet Storm

266763	7.5	HIGH Network	paloaltonetworks	pan-os	The GlobalProtect Portal in Palo Alto Networks PAN-OS before 5.0.18, 6.0.x before 6.0.13, 6.1.x before 6.1.10, and 7.0.x before 7.0.5H2 allows remote attackers to cause a denial of service (service c…	CWE-119 Incorrect Access of Indexable Resource ('Range Error')	CVE-2016-3656	2024-11-21 11:50	2016-04-13	Show	GitHub Exploit DB Packet Storm

266764	9.8	CRITICAL Network	paloaltonetworks	pan-os	The management web interface in Palo Alto Networks PAN-OS before 5.0.18, 6.0.x before 6.0.13, 6.1.x before 6.1.10, and 7.0.x before 7.0.5 allows remote attackers to execute arbitrary OS commands via …	CWE-20 CWE-78 Improper Input Validation OS Command	CVE-2016-3655	2024-11-21 11:50	2016-04-13	Show	GitHub Exploit DB Packet Storm

266765	7.2	HIGH Network	paloaltonetworks	pan-os	The device management command line interface (CLI) in Palo Alto Networks PAN-OS before 5.0.18, 5.1.x before 5.1.11, 6.0.x before 6.0.13, 6.1.x before 6.1.10, and 7.0.x before 7.0.5H2 allows remote au…	CWE-20 Improper Input Validation	CVE-2016-3654	2024-11-21 11:50	2016-04-13	Show	GitHub Exploit DB Packet Storm

266766	7.5	HIGH Network	huawei	s5300_firmware s5700_firmware s7700_firmware s9300_firmware s9700_firmware	Huawei Quidway S9700, S5700, S5300, S9300, and S7700 switches with software before V200R003SPH012 allow remote attackers to cause a denial of service (switch restart) via crafted traffic.	CWE-20 Improper Input Validation	CVE-2016-3678	2024-11-21 11:50	2016-04-12	Show	GitHub Exploit DB Packet Storm

266767	6.4	MEDIUM Adjacent	huawei	e3276s_firmware	Huawei E3276s USB modems with software before E3276s-150TCPU-V200R002B436D09SP00C00 allow man-in-the-middle attackers to intercept, spoof, or modify network traffic via unspecified vectors related to…	CWE-254 7PK - Security Features	CVE-2016-3676	2024-11-21 11:50	2016-04-12	Show	GitHub Exploit DB Packet Storm

266768	8.1	HIGH Network	huawei	policy_center_firmware	SQL injection vulnerability in Huawei Policy Center with software before V100R003C10SPC020 allows remote authenticated users to execute arbitrary SQL commands via unspecified vectors related to syste…	CWE-89 SQL Injection	CVE-2016-3675	2024-11-21 11:50	2016-04-12	Show	GitHub Exploit DB Packet Storm

266769	8.8	HIGH Network	cacti	cacti	SQL injection vulnerability in graph_view.php in Cacti 0.8.8.g allows remote authenticated users to execute arbitrary SQL commands via the host_group_data parameter.	CWE-89 SQL Injection	CVE-2016-3659	2024-11-21 11:50	2016-04-12	Show	GitHub Exploit DB Packet Storm

266770	8.8	HIGH Network	google canonical opensuse	v8 ubuntu_linux opensuse chrome	Multiple unspecified vulnerabilities in Google V8 before 4.9.385.33, as used in Google Chrome before 49.0.2623.108, allow attackers to cause a denial of service or possibly have other impact via unkn…	NVD-CWE-noinfo	CVE-2016-3679	2024-11-21 11:50	2016-03-29	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed