Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 18, 2026, 2:16 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
240691	5.8	警告	アップル	-	Apple iChat Server におけるドメインになりすまされる脆弱性	CWE-20 不適切な入力確認	CVE-2012-4672	2012-08-28 16:28	2012-08-25	Show	GitHub Exploit DB Packet Storm

240692	5.8	警告	Psyced	-	psyced におけるドメインになりすまされる脆弱性	CWE-20 不適切な入力確認	CVE-2012-4671	2012-08-28 16:25	2012-08-25	Show	GitHub Exploit DB Packet Storm

240693	6.4	警告	Tigase	-	Tigase XMPP Server におけるドメインになりすまされる脆弱性	CWE-20 不適切な入力確認	CVE-2012-4670	2012-08-28 16:22	2012-08-21	Show	GitHub Exploit DB Packet Storm

240694	5.8	警告	Isode	-	M-Link におけるドメインになりすまされる脆弱性	CWE-20 不適切な入力確認	CVE-2012-4669	2012-08-28 16:19	2012-08-22	Show	GitHub Exploit DB Packet Storm

240695	4.3	警告	Roundcube.net	-	Roundcube Webmail におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2012-4668	2012-08-28 16:11	2012-08-14	Show	GitHub Exploit DB Packet Storm

240696	4.3	警告	Gilles Darold	-	SquidClamav におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2012-4667	2012-08-28 16:09	2012-08-25	Show	GitHub Exploit DB Packet Storm

240697	5	警告	Nicolas Cannasse	-	OCaml Xml-Light Library におけるサービス運用妨害 (DoS) の脆弱性	CWE-310 暗号の問題	CVE-2012-3514	2012-08-28 16:06	2012-08-25	Show	GitHub Exploit DB Packet Storm

240698	4.3	警告	Roundcube.net	-	Roundcube Webmail の program/lib/washtml.php におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2012-3508	2012-08-28 15:56	2012-08-14	Show	GitHub Exploit DB Packet Storm

240699	2.6	注意	Roundcube.net	-	RoundCube Webmail の program/steps/mail/func.inc におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2012-3507	2012-08-28 15:36	2012-06-7	Show	GitHub Exploit DB Packet Storm

240700	6.5	警告	Katello Project	-	Katello における任意のユーザーとして CloudForms System Engine の Web インターフェイスに認証される脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2012-3503	2012-08-28 15:35	2012-08-25	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 18, 2026, 4:12 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
267101	3.3	LOW Local	apple	mac_os_x	The AMD subsystem in Apple OS X before 10.11.5 allows attackers to obtain sensitive kernel memory-layout information via a crafted app.	CWE-200 Information Exposure	CVE-2016-1791	2024-11-21 11:47	2016-05-20	Show	GitHub Exploit DB Packet Storm

267102	3.3	LOW Local	apple	iphone_os	Buffer overflow in the Accessibility component in Apple iOS before 9.3.2 allows attackers to obtain sensitive kernel memory-layout information via a crafted app.	CWE-119 Incorrect Access of Indexable Resource ('Range Error')	CVE-2016-1790	2024-11-21 11:47	2016-05-20	Show	GitHub Exploit DB Packet Storm

267103	9.8	CRITICAL Network	vmware	player workstation	VMware Workstation 11.x before 11.1.3 and VMware Player 7.x before 7.1.3 on Windows incorrectly access an executable file, which allows host OS users to gain host OS privileges via unspecified vector…	CWE-264 Permissions, Privileges, and Access Controls	CVE-2016-2077	2024-11-21 11:47	2016-05-18	Show	GitHub Exploit DB Packet Storm

267104	5.5	MEDIUM Local	hp	base-vxfs-50 base-vxfs-501 base-vxfs-51	Base-VxFS-50 B.05.00.01 through B.05.00.02, Base-VxFS-501 B.05.01.0 through B.05.01.03, and Base-VxFS-51 B.05.10.00 through B.05.10.02 on HPE HP-UX 11iv3 with VxFS 5.0, VxFS 5.0.1, and VxFS 5.1SP1 mi…	CWE-284 Improper Access Control	CVE-2016-2016	2024-11-21 11:47	2016-05-15	Show	GitHub Exploit DB Packet Storm

267105	7.1	HIGH Local	hp	system_management_homepage	HPE System Management Homepage before 7.5.5 allows local users to obtain sensitive information or modify data via unspecified vectors.	CWE-200 Information Exposure	CVE-2016-2015	2024-11-21 11:47	2016-05-15	Show	GitHub Exploit DB Packet Storm

267106	9.8	CRITICAL Network	apache opensuse	xerces-c\+\+ opensuse	Use-after-free vulnerability in validators/DTD/DTDScanner.cpp in Apache Xerces C++ 3.1.3 and earlier allows context-dependent attackers to have unspecified impact via an invalid character in an XML d…	NVD-CWE-Other	CVE-2016-2099	2024-11-21 11:47	2016-05-13	Show	GitHub Exploit DB Packet Storm

267107	7.8	HIGH Local	google	android	server/TetherController.cpp in the tethering controller in netd, as distributed with Qualcomm Innovation Center (QuIC) Android contributions for MSM devices and other products, does not properly vali…	CWE-264 Permissions, Privileges, and Access Controls	CVE-2016-2060	2024-11-21 11:47	2016-05-9	Show	GitHub Exploit DB Packet Storm

267108	8.1	HIGH Network	hp	network_node_manager_i	HPE Network Node Manager i (NNMi) 9.20, 9.23, 9.24, 9.25, 10.00, and 10.01 allows remote authenticated users to modify data or cause a denial of service via unspecified vectors.	CWE-284 Improper Access Control	CVE-2016-2014	2024-11-21 11:47	2016-05-7	Show	GitHub Exploit DB Packet Storm

267109	6.5	MEDIUM Network	hp	network_node_manager_i	HPE Network Node Manager i (NNMi) 9.20, 9.23, 9.24, 9.25, 10.00, and 10.01 allows remote authenticated users to obtain sensitive information via unspecified vectors.	CWE-200 Information Exposure	CVE-2016-2013	2024-11-21 11:47	2016-05-7	Show	GitHub Exploit DB Packet Storm

267110	6.5	MEDIUM Network	hp	network_node_manager_i	HPE Network Node Manager i (NNMi) 9.20, 9.23, 9.24, 9.25, 10.00, and 10.01 allows remote attackers to bypass authentication via unspecified vectors.	CWE-287 Improper Authentication	CVE-2016-2012	2024-11-21 11:47	2016-05-7	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed