Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 15, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
240941 4.3 警告 マイクロソフト - Microsoft SharePoint 製品および Microsoft Office Web Apps におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2012-1859 2012-07-13 16:13 2012-07-10 Show GitHub Exploit DB Packet Storm
240942 5.5 警告 マイクロソフト - Microsoft SharePoint 製品および Microsoft Office Web Apps における重要な情報を取得される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2012-1860 2012-07-13 16:13 2012-07-10 Show GitHub Exploit DB Packet Storm
240943 4.3 警告 マイクロソフト - Microsoft SharePoint 製品および Microsoft Office Web Apps におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2012-1861 2012-07-13 16:12 2012-07-10 Show GitHub Exploit DB Packet Storm
240944 6.8 警告 マイクロソフト - Microsoft Office SharePoint Server 2007 におけるオープンリダイレクトの脆弱性 CWE-20
不適切な入力確認 		CVE-2012-1862 2012-07-13 16:11 2012-07-10 Show GitHub Exploit DB Packet Storm
240945 4.3 警告 マイクロソフト - 複数の Microsoft SharePoint 製品におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2012-1863 2012-07-13 16:09 2012-07-10 Show GitHub Exploit DB Packet Storm
240946 4.3 警告 マイクロソフト - Microsoft Windows の TLS プロトコルの CBC モードにおける平文データを取得される脆弱性 CWE-200
情報漏えい 		CVE-2012-1870 2012-07-13 16:09 2012-07-10 Show GitHub Exploit DB Packet Storm
240947 7.2 危険 マイクロソフト - Microsoft Windows のカーネルモードドライバ内の win32k.sys における権限昇格の脆弱性 CWE-20
不適切な入力確認 		CVE-2012-1890 2012-07-13 16:07 2012-07-10 Show GitHub Exploit DB Packet Storm
240948 9.3 危険 マイクロソフト - MDAC および WDAC におけるヒープベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2012-1891 2012-07-13 16:06 2012-07-10 Show GitHub Exploit DB Packet Storm
240949 7.2 危険 マイクロソフト - Microsoft Windows のカーネルモードドライバ内の win32k.sys における権限昇格の脆弱性 CWE-20
不適切な入力確認 		CVE-2012-1893 2012-07-13 16:06 2012-07-10 Show GitHub Exploit DB Packet Storm
240950 6.9 警告 マイクロソフト - Microsoft Office for Mac 2011 における権限昇格の脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2012-1894 2012-07-13 16:04 2012-07-10 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 15, 2026, 4:28 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
268321 7.5 HIGH
Network 		atutor atutor Directory Traversal exists in ATutor before 2.2.2 via the icon parameter to /mods/_core/courses/users/create_course.php. The attacker can read an arbitrary file by visiting get_course_icon.php?id= af… CWE-22
Path Traversal 		CVE-2016-10400 2024-11-21 11:43 2017-07-23 Show GitHub Exploit DB Packet Storm
268322 6.2 MEDIUM
Physics 		google android Android 6.0 has an authentication bypass for attackers with root and physical access. Cryptographic authentication tokens (AuthTokens) used by the Trusted Execution Environment (TEE) are protected by… CWE-264
Permissions, Privileges, and Access Controls 		CVE-2016-10398 2024-11-21 11:43 2017-07-17 Show GitHub Exploit DB Packet Storm
268323 7.5 HIGH
Network 		php php In PHP before 5.6.28 and 7.x before 7.0.13, incorrect handling of various URI components in the URL parser could be used by attackers to bypass hostname-specific URL checks, as demonstrated by evil.e… CWE-20
 Improper Input Validation  		CVE-2016-10397 2024-11-21 11:43 2017-07-10 Show GitHub Exploit DB Packet Storm
268324 7.5 HIGH
Network 		ipsec-tools ipsec-tools The racoon daemon in IPsec-Tools 0.8.2 contains a remotely exploitable computational-complexity attack when parsing and storing ISAKMP fragments. The implementation permits a remote attacker to exhau… CWE-407
 Inefficient Algorithmic Complexity 		CVE-2016-10396 2024-11-21 11:43 2017-07-6 Show GitHub Exploit DB Packet Storm
268325 7.5 HIGH
Network 		arcadyan swisscom_internet-box_firmware Authorization Bypass in the Web interface of Arcadyan SLT-00 Star* (aka Swisscom Internet-Box) devices before R7.7 allows unauthorized reconfiguration of the static routing table via an unauthenticat… CWE-284
Improper Access Control 		CVE-2016-10042 2024-11-21 11:43 2017-06-29 Show GitHub Exploit DB Packet Storm
268326 6.1 MEDIUM
Network 		elastic kibana Kibana versions after and including 4.3 and before 4.6.2 are vulnerable to a cross-site scripting (XSS) attack. CWE-79
Cross-site Scripting 		CVE-2016-10366 2024-11-21 11:43 2017-06-17 Show GitHub Exploit DB Packet Storm
268327 6.1 MEDIUM
Network 		elastic kibana Kibana versions before 4.6.3 and 5.0.1 have an open redirect vulnerability that would enable an attacker to craft a link in the Kibana domain that redirects to an arbitrary website. CWE-601
Open Redirect 		CVE-2016-10365 2024-11-21 11:43 2017-06-17 Show GitHub Exploit DB Packet Storm
268328 6.5 MEDIUM
Network 		elastic kibana With X-Pack installed, Kibana versions 5.0.0 and 5.0.1 were not properly authenticating requests to advanced settings and the short URL service, any authenticated user could make requests to those se… CWE-264
Permissions, Privileges, and Access Controls 		CVE-2016-10364 2024-11-21 11:43 2017-06-17 Show GitHub Exploit DB Packet Storm
268329 7.5 HIGH
Network 		elastic logstash Logstash versions prior to 2.3.3, when using the Netflow Codec plugin, a remote attacker crafting malicious Netflow v5, Netflow v9 or IPFIX packets could perform a denial of service attack on the Log… CWE-404
 Improper Resource Shutdown or Release 		CVE-2016-10363 2024-11-21 11:43 2017-06-17 Show GitHub Exploit DB Packet Storm
268330 6.5 MEDIUM
Network 		elasticsearch output_plugin Prior to Logstash version 5.0.1, Elasticsearch Output plugin when updating connections after sniffing, would log to file HTTP basic auth credentials. CWE-200
Information Exposure 		CVE-2016-10362 2024-11-21 11:43 2017-06-17 Show GitHub Exploit DB Packet Storm