Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 18, 2026, 10 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
240761 5.5 警告 Moodle - Moodle におけるアクティビティの読み取り専用の状態を回避される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2012-2358 2012-07-24 16:00 2012-07-21 Show GitHub Exploit DB Packet Storm
240762 5 警告 Moodle - Moodle の auth/cas/cas_form.html 内 のマルチ認証機能における資格情報を取得される脆弱性 CWE-200
情報漏えい 		CVE-2012-2357 2012-07-24 15:54 2012-07-21 Show GitHub Exploit DB Packet Storm
240763 4 警告 Moodle - Moodle の question-bank 機能における機能制限を回避される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2012-2356 2012-07-24 15:52 2012-07-21 Show GitHub Exploit DB Packet Storm
240764 4 警告 Moodle - Moodle における question:use* 機能の制限を回避される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2012-2355 2012-07-24 15:51 2012-07-21 Show GitHub Exploit DB Packet Storm
240765 4 警告 Moodle - Moodle における moodle/site:readallmessages 機能の制限を回避される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2012-2354 2012-07-24 15:50 2012-07-21 Show GitHub Exploit DB Packet Storm
240766 4 警告 Moodle - Moodle における非表示フィールドから重要なユーザ情報を取得される脆弱性 CWE-200
情報漏えい 		CVE-2012-2353 2012-07-24 15:46 2012-07-21 Show GitHub Exploit DB Packet Storm
240767 7.5 危険 Nullsoft - Winamp の bmp.w5s におけるヒープベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2012-4045 2012-07-24 15:38 2012-06-28 Show GitHub Exploit DB Packet Storm
240768 5 警告 WordPress.org - WordPress における重要な情報を取得される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2012-3385 2012-07-24 15:38 2012-06-27 Show GitHub Exploit DB Packet Storm
240769 6.8 警告 WordPress.org - WordPress のカスタマイザにおけるクロスサイトリクエストフォージェリの脆弱性 CWE-352
同一生成元ポリシー違反 		CVE-2012-3384 2012-07-24 15:37 2012-06-27 Show GitHub Exploit DB Packet Storm
240770 2.6 注意 WordPress.org - WordPress におけるクロスサイトスクリプティングの脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2012-3383 2012-07-24 15:36 2012-06-27 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 18, 2026, 4:12 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
268341 6.5 MEDIUM
Network 		cpanel cpanel cPanel before 55.9999.141 allows arbitrary file-read operations because of a multipart form processing error (SEC-99). CWE-552
 Files or Directories Accessible to External Parties 		CVE-2016-10829 2024-11-21 11:44 2019-08-2 Show GitHub Exploit DB Packet Storm
268342 8.8 HIGH
Network 		cpanel cpanel cPanel before 55.9999.141 allows arbitrary code execution because of an unsafe @INC path (SEC-97). CWE-22
Path Traversal 		CVE-2016-10828 2024-11-21 11:44 2019-08-2 Show GitHub Exploit DB Packet Storm
268343 5.4 MEDIUM
Network 		cpanel cpanel cPanel before 55.9999.141 allows self stored XSS in WHM Edit System Mail Preferences (SEC-96). CWE-79
Cross-site Scripting 		CVE-2016-10827 2024-11-21 11:44 2019-08-2 Show GitHub Exploit DB Packet Storm
268344 8.1 HIGH
Network 		cpanel cpanel cPanel before 55.9999.141 allows attackers to bypass a Security Policy by faking static documents (SEC-92). CWE-358
 Improperly Implemented Security Check for Standard 		CVE-2016-10825 2024-11-21 11:44 2019-08-2 Show GitHub Exploit DB Packet Storm
268345 9.8 CRITICAL
Network 		cpanel cpanel cPanel before 55.9999.141 allows unauthenticated arbitrary code execution via DNS NS entry poisoning (SEC-90). CWE-20
 Improper Input Validation  		CVE-2016-10824 2024-11-21 11:44 2019-08-2 Show GitHub Exploit DB Packet Storm
268346 8.8 HIGH
Network 		cpanel cpanel cPanel before 55.9999.141 allows arbitrary code execution in the context of the root account because of MakeText interpolation (SEC-89). CWE-20
 Improper Input Validation  		CVE-2016-10823 2024-11-21 11:44 2019-08-2 Show GitHub Exploit DB Packet Storm
268347 5.4 MEDIUM
Network 		cpanel cpanel cPanel before 55.9999.141 allows self XSS in X3 Reseller Branding Images (SEC-88). CWE-79
Cross-site Scripting 		CVE-2016-10822 2024-11-21 11:44 2019-08-2 Show GitHub Exploit DB Packet Storm
268348 6.5 MEDIUM
Network 		cpanel cpanel cPanel before 11.54.0.4 allows certain file-chmod operations in scripts/secureit (SEC-82). CWE-77
Command Injection 		CVE-2016-10849 2024-11-21 11:44 2019-08-2 Show GitHub Exploit DB Packet Storm
268349 7.2 HIGH
Network 		cpanel cpanel cPanel before 11.54.0.4 allows arbitrary file-overwrite operations in scripts/quotacheck (SEC-81). CWE-285
Improper Authorization 		CVE-2016-10848 2024-11-21 11:44 2019-08-2 Show GitHub Exploit DB Packet Storm
268350 8.1 HIGH
Network 		cpanel cpanel cPanel before 11.54.0.4 allows arbitrary file-read and file-write operations via scripts/fixmailboxpath (SEC-80). CWE-74
Injection 		CVE-2016-10847 2024-11-21 11:44 2019-08-2 Show GitHub Exploit DB Packet Storm