Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":June 4, 2026, 4 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
242091	7.5	危険	DELL EMC (旧 EMC Corporation)	-	EMC ApplicationXtender Desktop および ApplicationXtender Web Access .NET におけるファイルをアップロードされる脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2012-2289	2012-08-28 16:40	2012-08-26	Show	GitHub Exploit DB Packet Storm

242092	5.8	警告	アップル	-	Apple iChat Server におけるドメインになりすまされる脆弱性	CWE-20 不適切な入力確認	CVE-2012-4672	2012-08-28 16:28	2012-08-25	Show	GitHub Exploit DB Packet Storm

242093	5.8	警告	Psyced	-	psyced におけるドメインになりすまされる脆弱性	CWE-20 不適切な入力確認	CVE-2012-4671	2012-08-28 16:25	2012-08-25	Show	GitHub Exploit DB Packet Storm

242094	6.4	警告	Tigase	-	Tigase XMPP Server におけるドメインになりすまされる脆弱性	CWE-20 不適切な入力確認	CVE-2012-4670	2012-08-28 16:22	2012-08-21	Show	GitHub Exploit DB Packet Storm

242095	5.8	警告	Isode	-	M-Link におけるドメインになりすまされる脆弱性	CWE-20 不適切な入力確認	CVE-2012-4669	2012-08-28 16:19	2012-08-22	Show	GitHub Exploit DB Packet Storm

242096	4.3	警告	Roundcube.net	-	Roundcube Webmail におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2012-4668	2012-08-28 16:11	2012-08-14	Show	GitHub Exploit DB Packet Storm

242097	4.3	警告	Gilles Darold	-	SquidClamav におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2012-4667	2012-08-28 16:09	2012-08-25	Show	GitHub Exploit DB Packet Storm

242098	5	警告	Nicolas Cannasse	-	OCaml Xml-Light Library におけるサービス運用妨害 (DoS) の脆弱性	CWE-310 暗号の問題	CVE-2012-3514	2012-08-28 16:06	2012-08-25	Show	GitHub Exploit DB Packet Storm

242099	4.3	警告	Roundcube.net	-	Roundcube Webmail の program/lib/washtml.php におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2012-3508	2012-08-28 15:56	2012-08-14	Show	GitHub Exploit DB Packet Storm

242100	2.6	注意	Roundcube.net	-	RoundCube Webmail の program/steps/mail/func.inc におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2012-3507	2012-08-28 15:36	2012-06-7	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:June 5, 2026, 4:11 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
269421	8.1	HIGH Network	hp	systems_insight_manager matrix_operating_environment	HPE Matrix Operating Environment before 7.5.1 allows remote authenticated users to obtain sensitive information or modify data via unspecified vectors, a different vulnerability than CVE-2016-2028.	NVD-CWE-noinfo	CVE-2016-4357	2024-11-21 11:51	2016-06-8	Show	GitHub Exploit DB Packet Storm

269422	7.8	HIGH Local	adobe	connect	Untrusted search path vulnerability in the installer in Adobe Connect Add-In before 11.9.976.291 on Windows allows local users to gain privileges via unspecified vectors.	CWE-264 Permissions, Privileges, and Access Controls	CVE-2016-4118	2024-11-21 11:51	2016-05-30	Show	GitHub Exploit DB Packet Storm

269423	7.5	HIGH Network	fedoraproject pgpdump_project	fedora pgpdump	The read_binary function in buffer.c in pgpdump before 0.30 allows context-dependent attackers to cause a denial of service (infinite loop and CPU consumption) via crafted input, as demonstrated by t…	CWE-399 Resource Management Errors	CVE-2016-4021	2024-11-21 11:51	2016-05-26	Show	GitHub Exploit DB Packet Storm

269424	6.5	MEDIUM Local	qemu canonical debian redhat	qemu ubuntu_linux debian_linux enterprise_linux_desktop enterprise_linux_workstation enterprise_linux_server openstack enterprise_linux_server_aus enterprise_linux_eus ente…	The patch_instruction function in hw/i386/kvmvapic.c in QEMU does not initialize the imm32 variable, which allows local guest OS administrators to obtain sensitive information from host stack memory …	NVD-CWE-noinfo	CVE-2016-4020	2024-11-21 11:51	2016-05-26	Show	GitHub Exploit DB Packet Storm

269425	8.1	HIGH Network	huawei	s12700_firmware s5700_firmware	Huawei S12700 switches with software before V200R008C00SPC500 and S5700 switches with software before V200R005SPH010, when the debug switch is enabled, allows remote attackers to cause a denial of se…	CWE-20 Improper Input Validation	CVE-2016-4087	2024-11-21 11:51	2016-05-24	Show	GitHub Exploit DB Packet Storm

269426	7.5	HIGH Network	quagga opensuse	quagga leap opensuse	The bgp_dump_routes_func function in bgpd/bgp_dump.c in Quagga does not perform size checks when dumping data, which might allow remote attackers to cause a denial of service (assertion failure and d…	CWE-20 Improper Input Validation	CVE-2016-4049	2024-11-21 11:51	2016-05-24	Show	GitHub Exploit DB Packet Storm

269427	6.0	MEDIUM Local	fedoraproject canonical qemu debian	fedora ubuntu_linux qemu debian_linux	The ehci_advance_state function in hw/usb/hcd-ehci.c in QEMU allows local guest OS administrators to cause a denial of service (infinite loop and CPU consumption) via a circular split isochronous tra…	CWE-400 Uncontrolled Resource Consumption	CVE-2016-4037	2024-11-21 11:51	2016-05-24	Show	GitHub Exploit DB Packet Storm

269428	8.6	HIGH Network	qemu canonical fedoraproject debian	qemu ubuntu_linux fedora debian_linux	Buffer overflow in the stellaris_enet_receive function in hw/net/stellaris_enet.c in QEMU, when the Stellaris ethernet controller is configured to accept large packets, allows remote attackers to cau…	CWE-120 Classic Buffer Overflow	CVE-2016-4001	2024-11-21 11:51	2016-05-24	Show	GitHub Exploit DB Packet Storm

269429	7.5	HIGH Network	opensuse golang fedoraproject	leap go fedora	The Verify function in crypto/dsa/dsa.go in Go before 1.5.4 and 1.6.x before 1.6.1 does not properly check parameters passed to the big integer library, which might allow remote attackers to cause a …	CWE-20 Improper Input Validation	CVE-2016-3959	2024-11-21 11:51	2016-05-24	Show	GitHub Exploit DB Packet Storm

269430	7.8	HIGH Local	golang	go	Untrusted search path vulnerability in Go before 1.5.4 and 1.6.x before 1.6.1 on Windows allows local users to gain privileges via a Trojan horse DLL in the current working directory, related to use …	CWE-264 Permissions, Privileges, and Access Controls	CVE-2016-3958	2024-11-21 11:51	2016-05-24	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed