Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 17, 2026, noon

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
240941 4.3 警告 マイクロソフト - Microsoft SharePoint 製品および Microsoft Office Web Apps におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2012-1859 2012-07-13 16:13 2012-07-10 Show GitHub Exploit DB Packet Storm
240942 5.5 警告 マイクロソフト - Microsoft SharePoint 製品および Microsoft Office Web Apps における重要な情報を取得される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2012-1860 2012-07-13 16:13 2012-07-10 Show GitHub Exploit DB Packet Storm
240943 4.3 警告 マイクロソフト - Microsoft SharePoint 製品および Microsoft Office Web Apps におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2012-1861 2012-07-13 16:12 2012-07-10 Show GitHub Exploit DB Packet Storm
240944 6.8 警告 マイクロソフト - Microsoft Office SharePoint Server 2007 におけるオープンリダイレクトの脆弱性 CWE-20
不適切な入力確認 		CVE-2012-1862 2012-07-13 16:11 2012-07-10 Show GitHub Exploit DB Packet Storm
240945 4.3 警告 マイクロソフト - 複数の Microsoft SharePoint 製品におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2012-1863 2012-07-13 16:09 2012-07-10 Show GitHub Exploit DB Packet Storm
240946 4.3 警告 マイクロソフト - Microsoft Windows の TLS プロトコルの CBC モードにおける平文データを取得される脆弱性 CWE-200
情報漏えい 		CVE-2012-1870 2012-07-13 16:09 2012-07-10 Show GitHub Exploit DB Packet Storm
240947 7.2 危険 マイクロソフト - Microsoft Windows のカーネルモードドライバ内の win32k.sys における権限昇格の脆弱性 CWE-20
不適切な入力確認 		CVE-2012-1890 2012-07-13 16:07 2012-07-10 Show GitHub Exploit DB Packet Storm
240948 9.3 危険 マイクロソフト - MDAC および WDAC におけるヒープベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2012-1891 2012-07-13 16:06 2012-07-10 Show GitHub Exploit DB Packet Storm
240949 7.2 危険 マイクロソフト - Microsoft Windows のカーネルモードドライバ内の win32k.sys における権限昇格の脆弱性 CWE-20
不適切な入力確認 		CVE-2012-1893 2012-07-13 16:06 2012-07-10 Show GitHub Exploit DB Packet Storm
240950 6.9 警告 マイクロソフト - Microsoft Office for Mac 2011 における権限昇格の脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2012-1894 2012-07-13 16:04 2012-07-10 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 17, 2026, 4:15 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
268481 6.1 MEDIUM
Network 		reduce-css-calc_project reduce-css-calc Arbitrary code execution is possible in reduce-css-calc node module <=1.2.4 through crafted css. This makes cross sites scripting (XSS) possible on the client and arbitrary code injection possible on… CWE-79
Cross-site Scripting 		CVE-2016-10548 2024-11-21 11:44 2018-06-1 Show GitHub Exploit DB Packet Storm
268482 6.1 MEDIUM
Network 		mozilla nunjucks Nunjucks is a full featured templating engine for JavaScript. Versions 2.4.2 and lower have a cross site scripting (XSS) vulnerability in autoescape mode. In autoescape mode, all template vars should… CWE-79
Cross-site Scripting 		CVE-2016-10547 2024-11-21 11:44 2018-06-1 Show GitHub Exploit DB Packet Storm
268483 9.8 CRITICAL
Network 		pouchdb pouchdb An arbitrary code injection vector was found in PouchDB 6.0.4 and lesser via the map/reduce functions used in PouchDB temporary views and design documents. The code execution engine for this branch i… CWE-94
Code Injection 		CVE-2016-10546 2024-11-21 11:44 2018-06-1 Show GitHub Exploit DB Packet Storm
268484 5.9 MEDIUM
Network 		uws_project uws uws is a WebSocket server library. By sending a 256mb websocket message to a uws server instance with permessage-deflate enabled, there is a possibility used compression will shrink said 256mb down t… CWE-20
 Improper Input Validation  		CVE-2016-10544 2024-11-21 11:44 2018-06-1 Show GitHub Exploit DB Packet Storm
268485 5.3 MEDIUM
Network 		call_project call call is an HTTP router that is primarily used by the hapi framework. There exists a bug in call versions 2.0.1-3.0.1 that does not validate empty parameters, which could result in invalid input bypas… CWE-20
 Improper Input Validation  		CVE-2016-10543 2024-11-21 11:44 2018-06-1 Show GitHub Exploit DB Packet Storm
268486 7.5 HIGH
Network 		ws_project ws ws is a "simple to use, blazing fast and thoroughly tested websocket client, server and console for node.js, up-to-date against RFC-6455". By sending an overly long websocket payload to a `ws` server… CWE-20
 Improper Input Validation  		CVE-2016-10542 2024-11-21 11:44 2018-06-1 Show GitHub Exploit DB Packet Storm
268487 9.8 CRITICAL
Network 		shell-quote_project shell-quote The npm module "shell-quote" 1.6.0 and earlier cannot correctly escape ">" and "<" operator used for redirection in shell. Applications that depend on shell-quote may also be vulnerable. A malicious … CWE-94
Code Injection 		CVE-2016-10541 2024-11-21 11:44 2018-06-1 Show GitHub Exploit DB Packet Storm
268488 7.5 HIGH
Network 		minimatch_project minimatch Minimatch is a minimal matching utility that works by converting glob expressions into JavaScript `RegExp` objects. The primary function, `minimatch(path, pattern)` in Minimatch 3.0.1 and earlier is … CWE-20
 Improper Input Validation  		CVE-2016-10540 2024-11-21 11:44 2018-06-1 Show GitHub Exploit DB Packet Storm
268489 7.5 HIGH
Network 		negotiator_project negotiator negotiator is an HTTP content negotiator for Node.js and is used by many modules and frameworks including Express and Koa. The header for "Accept-Language", when parsed by negotiator 0.6.0 and earlie… CWE-20
 Improper Input Validation  		CVE-2016-10539 2024-11-21 11:44 2018-06-1 Show GitHub Exploit DB Packet Storm
268490 3.5 LOW
Network 		cli_project
debian 		cli
debian_linux 		The package `node-cli` before 1.0.0 insecurely uses the lock_file and log_file. Both of these are temporary, but it allows the starting user to overwrite any file they have access to. CWE-362
Race Condition 		CVE-2016-10538 2024-11-21 11:44 2018-06-1 Show GitHub Exploit DB Packet Storm