Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 21, 2026, 6:01 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
240821	4.3	警告	FreePBX	-	FreePBX におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2012-4870	2012-09-11 09:49	2012-03-23	Show	GitHub Exploit DB Packet Storm

240822	7.5	危険	FreePBX	-	FreePBX の recordings/misc/callme_page.php における任意のコマンドを実行される脆弱性	CWE-94 コード・インジェクション	CVE-2012-4869	2012-09-11 09:36	2012-03-23	Show	GitHub Exploit DB Packet Storm

240823	7.5	危険	Kunena	-	Joomla! 用 Kunena コンポーネントにおける SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2012-4868	2012-09-10 16:23	2012-09-6	Show	GitHub Exploit DB Packet Storm

240824	5	警告	Vtiger	-	vtiger CRM におけるディレクトリトラバーサルの脆弱性	CWE-22 パス・トラバーサル	CVE-2012-4867	2012-09-10 16:22	2012-09-6	Show	GitHub Exploit DB Packet Storm

240825	6.9	警告	Xtreme RAT	-	Xtreme RAT における任意のコードを実行される脆弱性	CWE-Other その他	CVE-2012-4866	2012-09-10 16:21	2012-09-6	Show	GitHub Exploit DB Packet Storm

240826	9.3	危険	Oreans Technologies	-	Oreans Themida におけるバッファオーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2012-4865	2012-09-10 16:20	2012-09-6	Show	GitHub Exploit DB Packet Storm

240827	9.3	危険	Oreans Technologies	-	Oreans WinLicense におけるサービス運用妨害 (DoS) の脆弱性	CWE-94 コード・インジェクション	CVE-2012-4864	2012-09-10 16:19	2012-09-6	Show	GitHub Exploit DB Packet Storm

240828	6.9	警告	Foxit Software Inc	-	Foxit Reader の Facebook プラグインにおける権限を取得される脆弱性	CWE-Other その他	CVE-2012-4759	2012-09-10 15:34	2012-09-6	Show	GitHub Exploit DB Packet Storm

240829	6.9	警告	サイバーリンク株式会社	-	CyberLink PowerProducer における権限を取得される脆弱性	CWE-Other その他	CVE-2012-4758	2012-09-10 15:33	2012-09-6	Show	GitHub Exploit DB Packet Storm

240830	6.9	警告	サイバーリンク株式会社	-	CyberLink StreamAuthor における権限を取得される脆弱性	CWE-Other その他	CVE-2012-4757	2012-09-10 15:32	2012-09-6	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 21, 2026, 4:10 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
266691	5.4	MEDIUM Network	ibm	connections	Cross-site scripting (XSS) vulnerability in the Web UI in IBM Connections 4.x through 4.5 CR5, 5.0 before CR4, and 5.5 before CR1 allows remote authenticated users to inject arbitrary web script or H…	CWE-79 Cross-site Scripting	CVE-2016-3003	2024-11-21 11:49	2016-09-26	Show	GitHub Exploit DB Packet Storm

266692	5.4	MEDIUM Network	ibm	connections	Cross-site scripting (XSS) vulnerability in the Web UI in IBM Connections 4.x through 4.5 CR5, 5.0 before CR4, and 5.5 before CR1 allows remote authenticated users to inject arbitrary web script or H…	CWE-79 Cross-site Scripting	CVE-2016-3001	2024-11-21 11:49	2016-09-26	Show	GitHub Exploit DB Packet Storm

266693	4.3	MEDIUM Network	ibm	connections	The help service in IBM Connections 4.x through 4.5 CR5, 5.0 before CR4, and 5.5 before CR1 allows remote authenticated users to cause a denial of service (service degradation) via a crafted URL.	CWE-20 Improper Input Validation	CVE-2016-3000	2024-11-21 11:49	2016-09-26	Show	GitHub Exploit DB Packet Storm

266694	6.5	MEDIUM Network	ibm	connections	IBM Connections 4.x through 4.5 CR5, 5.0 before CR4, and 5.5 before CR1 allows remote authenticated users to obtain sensitive information via an unspecified brute-force attack.	CWE-200 Information Exposure	CVE-2016-2999	2024-11-21 11:49	2016-09-26	Show	GitHub Exploit DB Packet Storm

266695	7.8	HIGH Local	microsoft	excel excel_viewer office_compatibility_pack	Microsoft Excel 2007 SP3, Excel 2010 SP2, Excel 2013 SP1, Excel 2013 RT SP1, Excel 2016, Office Compatibility Pack SP3, and Excel Viewer allow remote attackers to execute arbitrary code via a crafted…	CWE-119 Incorrect Access of Indexable Resource ('Range Error')	CVE-2016-3381	2024-11-21 11:49	2016-09-14	Show	GitHub Exploit DB Packet Storm

266696	6.1	MEDIUM Network	microsoft	exchange_server	Cross-site scripting (XSS) vulnerability in Microsoft Exchange Server 2016 Cumulative Update 1 and 2 allows remote attackers to inject arbitrary web script or HTML via a meeting-invitation request, a…	CWE-79 Cross-site Scripting	CVE-2016-3379	2024-11-21 11:49	2016-09-14	Show	GitHub Exploit DB Packet Storm

266697	7.4	HIGH Network	microsoft	exchange_server	Open redirect vulnerability in Microsoft Exchange Server 2013 SP1, 2013 Cumulative Update 12, 2013 Cumulative Update 13, 2016 Cumulative Update 1, and 2016 Cumulative Update 2 allows remote attackers…	CWE-20 Improper Input Validation	CVE-2016-3378	2024-11-21 11:49	2016-09-14	Show	GitHub Exploit DB Packet Storm

266698	7.5	HIGH Network	microsoft	edge	The Chakra JavaScript engine in Microsoft Edge allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Scripting Engine Memory …	CWE-119 Incorrect Access of Indexable Resource ('Range Error')	CVE-2016-3377	2024-11-21 11:49	2016-09-14	Show	GitHub Exploit DB Packet Storm

266699	7.5	HIGH Network	microsoft	windows_rt_8.1 internet_explorer windows_server_2012 windows_7 windows_10 windows_8.1 windows_server_2008 windows_vista	The OLE Automation mechanism and VBScript scripting engine in Microsoft Internet Explorer 9 through 11, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Serv…	CWE-119 Incorrect Access of Indexable Resource ('Range Error')	CVE-2016-3375	2024-11-21 11:49	2016-09-14	Show	GitHub Exploit DB Packet Storm

266700	6.5	MEDIUM Network	microsoft	windows_rt_8.1 windows_server_2012 windows_10 edge windows_8.1	The PDF library in Microsoft Edge, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, and Windows 10 Gold, 1511, and 1607 allows remote attackers to obtain sensitive information via a craf…	CWE-200 Information Exposure	CVE-2016-3374	2024-11-21 11:49	2016-09-14	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed