Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 29, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
241231	4.3	警告	Novell	-	Novell GroupWise の WebAccess コンポーネントにおけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2012-0272	2012-09-20 16:13	2012-07-3	Show	GitHub Exploit DB Packet Storm

241232	10	危険	Novell	-	Novell GroupWise の GWIA の gwia.exe における整数オーバーフローの脆弱性	CWE-189 数値処理の問題	CVE-2012-0271	2012-09-20 16:12	2012-09-11	Show	GitHub Exploit DB Packet Storm

241233	4.3	警告	Novell	-	Novell GroupWise の GWIA 内の gwwww1.dll におけるサービス運用妨害 (DoS) の脆弱性	CWE-noinfo 情報不足	CVE-2011-3827	2012-09-20 16:12	2012-09-11	Show	GitHub Exploit DB Packet Storm

241234	2.1	注意	Webform project	-	Drupal 用 Webform モジュールにおけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2012-1660	2012-09-20 16:11	2012-03-7	Show	GitHub Exploit DB Packet Storm

241235	2.1	注意	Ariel Barreiro	-	Drupal 用 Node Recommendation モジュールにおけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2012-1659	2012-09-20 16:10	2012-03-7	Show	GitHub Exploit DB Packet Storm

241236	2.1	注意	Four Kitchens	-	Drupal 用 Read More Link モジュールにおけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2012-1658	2012-09-20 16:09	2012-03-7	Show	GitHub Exploit DB Packet Storm

241237	2.1	注意	Four Kitchens	-	Drupal 用 Block Class モジュールにおけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2012-1657	2012-09-20 16:08	2012-03-7	Show	GitHub Exploit DB Packet Storm

241238	6.8	警告	Wesley Jones	-	Drupal 用 Multisite Search モジュールにおける SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2012-1656	2012-09-20 16:07	2012-03-7	Show	GitHub Exploit DB Packet Storm

241239	4	警告	Sven Decabooter	-	Drupal 用 UC PayDutchGroup / WeDeal payment モジュールにおけるアカウントの資格情報を取得される脆弱性	CWE-noinfo 情報不足	CVE-2012-1655	2012-09-20 16:06	2012-03-7	Show	GitHub Exploit DB Packet Storm

241240	2.1	注意	Alex Barth	-	Drupal 用 Data モジュールにおけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2012-1654	2012-09-20 16:05	2012-03-7	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 30, 2026, 4:16 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
269281	6.5	MEDIUM Network	microsoft	windows_server_2012 windows_server_2008	Active Directory in Microsoft Windows Server 2008 R2 SP1 and Server 2012 Gold and R2 allows remote authenticated users to cause a denial of service (service hang) by creating many machine accounts, a…	CWE-284 Improper Access Control	CVE-2016-3226	2024-11-21 11:49	2016-06-16	Show	GitHub Exploit DB Packet Storm

269282	8.8	HIGH Network	microsoft	edge	Microsoft Edge allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Microsoft Edge Memory Corruption Vulnerability."	CWE-119 Incorrect Access of Indexable Resource ('Range Error')	CVE-2016-3222	2024-11-21 11:49	2016-06-16	Show	GitHub Exploit DB Packet Storm

269283	7.8	HIGH Local	microsoft	windows_rt_8.1 windows_server_2012 windows_7 windows_10 windows_8.1 windows_server_2008 windows_vista	The kernel-mode drivers in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, and Windows 10 Gold and 1511 a…	CWE-264 Permissions, Privileges, and Access Controls	CVE-2016-3221	2024-11-21 11:49	2016-06-16	Show	GitHub Exploit DB Packet Storm

269284	7.8	HIGH Local	microsoft	windows_rt_8.1 windows_server_2012 windows_7 windows_10 windows_8.1 windows_server_2008 windows_vista	atmfd.dll in the Adobe Type Manager Font Driver in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, and Wi…	CWE-264 Permissions, Privileges, and Access Controls	CVE-2016-3220	2024-11-21 11:49	2016-06-16	Show	GitHub Exploit DB Packet Storm

269285	7.8	HIGH Local	microsoft	windows_10	The kernel-mode driver in Microsoft Windows 10 Gold and 1511 allows local users to gain privileges via a crafted application, aka "Win32k Elevation of Privilege Vulnerability."	CWE-264 Permissions, Privileges, and Access Controls	CVE-2016-3219	2024-11-21 11:49	2016-06-16	Show	GitHub Exploit DB Packet Storm

269286	7.8	HIGH Local	microsoft	windows_rt_8.1 windows_server_2012 windows_7 windows_10 windows_8.1 windows_server_2008 windows_vista	The kernel-mode drivers in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, and Windows 10 Gold and 1511 a…	CWE-264 Permissions, Privileges, and Access Controls	CVE-2016-3218	2024-11-21 11:49	2016-06-16	Show	GitHub Exploit DB Packet Storm

269287	4.3	MEDIUM Network	microsoft	windows_rt_8.1 windows_server_2012 windows_10 windows_8.1 windows_7 windows_server_2008 windows_vista	GDI32.dll in the Graphics component in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, and Windows 10 Gol…	CWE-200 Information Exposure	CVE-2016-3216	2024-11-21 11:49	2016-06-16	Show	GitHub Exploit DB Packet Storm

269288	5.5	MEDIUM Local	microsoft	windows_server_2012 windows_10 windows_8.1 edge	Microsoft Windows 8.1, Windows Server 2012 Gold and R2, Windows 10 1511, and Microsoft Edge allow remote attackers to obtain sensitive information from process memory via a crafted PDF document, aka …	CWE-200 Information Exposure	CVE-2016-3215	2024-11-21 11:49	2016-06-16	Show	GitHub Exploit DB Packet Storm

269289	8.8	HIGH Network	microsoft	edge	The Chakra JavaScript engine in Microsoft Edge allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Scripting Engine Memory …	CWE-119 Incorrect Access of Indexable Resource ('Range Error')	CVE-2016-3214	2024-11-21 11:49	2016-06-16	Show	GitHub Exploit DB Packet Storm

269290	6.1	MEDIUM Network	microsoft	internet_explorer	The XSS Filter in Microsoft Internet Explorer 9 through 11 does not properly identify JavaScript, which makes it easier for remote attackers to conduct cross-site scripting (XSS) attacks via a crafte…	CWE-79 Cross-site Scripting	CVE-2016-3212	2024-11-21 11:49	2016-06-16	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed