Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 31, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
242121 5 警告 RSGallery2 Team - Joomla! 用 RSGallery2 コンポーネントにおける画像のファイル名を一覧表示される脆弱性 CWE-200
情報漏えい 		CVE-2012-4235 2012-08-13 12:27 2012-08-10 Show GitHub Exploit DB Packet Storm
242122 4.3 警告 RSGallery2 Team - Joomla! 用 RSGallery2 コンポーネントにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2012-4071 2012-08-13 12:23 2012-08-10 Show GitHub Exploit DB Packet Storm
242123 7.5 危険 RSGallery2 Team - Joomla! 用 RSGallery2 コンポーネントにおける SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2012-3554 2012-08-13 12:21 2012-08-10 Show GitHub Exploit DB Packet Storm
242124 10 危険 Mozilla Foundation - 複数の Mozilla 製品における任意のコードを実行される脆弱性 CWE-399
リソース管理の問題 		CVE-2011-3659 2012-08-10 14:32 2012-01-31 Show GitHub Exploit DB Packet Storm
242125 3.5 注意 日立 - 日立の JP1/Integrated Management - Service Support におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		- 2012-08-10 14:02 2012-08-8 Show GitHub Exploit DB Packet Storm
242126 4 警告 Linux - x86 プラットフォーム上の Linux Kernel におけるサービス運用妨害 (パニック) の脆弱性 CWE-362
競合状態 		CVE-2012-2373 2012-08-10 11:43 2012-08-9 Show GitHub Exploit DB Packet Storm
242127 7.5 危険 Google - Google Chrome の PDF 機能におけるサービス運用妨害 (DoS) の脆弱性 CWE-119
バッファエラー 		CVE-2012-2863 2012-08-10 11:35 2012-08-8 Show GitHub Exploit DB Packet Storm
242128 6.8 警告 Google - Google Chrome の PDF 機能におけるサービス運用妨害 (DoS) の脆弱性 CWE-399
リソース管理の問題 		CVE-2012-2862 2012-08-10 11:32 2012-08-8 Show GitHub Exploit DB Packet Storm
242129 5.6 警告 Todd C. Miller
レッドハット		 - RHEL 上で稼働する sudo 用の特定の Red Hat のスクリプトにおける任意のファイルを上書きされる脆弱性 CWE-59
リンク解釈の問題 		CVE-2012-3440 2012-08-10 10:33 2012-08-7 Show GitHub Exploit DB Packet Storm
242130 7.5 危険 IBM - IBM Global Security Kit における SSL サーバになりすまされる脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2012-2203 2012-08-10 10:29 2012-08-8 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 31, 2026, 4:16 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
269301 5.5 MEDIUM
Local 		microsoft onenote
onenote_for_mac 		Microsoft OneNote 2007 SP3, 2010 SP2, 2013 SP1, 2013 RT SP1, 2016, and 2016 for Mac allow remote attackers to obtain sensitive information via a crafted OneNote file, aka "Microsoft OneNote Informati… CWE-200
Information Exposure 		CVE-2016-3315 2024-11-21 11:49 2016-08-10 Show GitHub Exploit DB Packet Storm
269302 7.8 HIGH
Local 		microsoft office
word_for_mac
word_viewer 		Microsoft Office 2007 SP3, 2010 SP2, 2013 SP1, 2013 RT SP1, and 2016, Word 2016 for Mac, and Word Viewer allow remote attackers to execute arbitrary code via a crafted file, aka "Microsoft Office Mem… CWE-119
Incorrect Access of Indexable Resource ('Range Error')  		CVE-2016-3313 2024-11-21 11:49 2016-08-10 Show GitHub Exploit DB Packet Storm
269303 9.1 CRITICAL
Network 		microsoft windows_10 ActiveSyncProvider in Microsoft Windows 10 Gold and 1511 allows attackers to discover credentials by leveraging failure of Universal Outlook to obtain a secure connection, aka "Universal Outlook Info… CWE-200
Information Exposure 		CVE-2016-3312 2024-11-21 11:49 2016-08-10 Show GitHub Exploit DB Packet Storm
269304 7.8 HIGH
Local 		microsoft windows_rt_8.1
windows_server_2012
windows_7
windows_10
windows_8.1
windows_server_2008
windows_vista 		The kernel-mode drivers in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8.1; Windows Server 2012 Gold and R2; Windows RT 8.1; and Windows 10 Gold, 1511, and… CWE-264
Permissions, Privileges, and Access Controls 		CVE-2016-3311 2024-11-21 11:49 2016-08-10 Show GitHub Exploit DB Packet Storm
269305 7.8 HIGH
Local 		microsoft windows_rt_8.1
windows_server_2012
windows_7
windows_10
windows_8.1
windows_server_2008
windows_vista 		The kernel-mode drivers in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8.1; Windows Server 2012 Gold and R2; Windows RT 8.1; and Windows 10 Gold, 1511, and… CWE-264
Permissions, Privileges, and Access Controls 		CVE-2016-3310 2024-11-21 11:49 2016-08-10 Show GitHub Exploit DB Packet Storm
269306 7.8 HIGH
Local 		microsoft windows_rt_8.1
windows_server_2012
windows_7
windows_10
windows_8.1
windows_server_2008
windows_vista 		The kernel-mode drivers in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8.1; Windows Server 2012 Gold and R2; Windows RT 8.1; and Windows 10 Gold, 1511, and… CWE-264
Permissions, Privileges, and Access Controls 		CVE-2016-3308 2024-11-21 11:49 2016-08-10 Show GitHub Exploit DB Packet Storm
269307 7.8 HIGH
Local 		microsoft live_meeting
lync
office
windows_7
skype_for_business
windows_server_2008
word_viewer
windows_vista 		The Windows font library in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Office 2007 SP3, Office 2010 SP2, Word Viewer, Skype for Business 2016, Lync 2013 SP1, Lync… CWE-20
 Improper Input Validation  		CVE-2016-3304 2024-11-21 11:49 2016-08-10 Show GitHub Exploit DB Packet Storm
269308 7.8 HIGH
Local 		microsoft windows_server_2012
windows_8.1
windows_rt_8.1 		The Netlogon service in Microsoft Windows 8.1, Windows Server 2012 Gold and R2, and Windows RT 8.1 improperly establishes secure communications channels, which allows local users to gain privileges b… CWE-264
Permissions, Privileges, and Access Controls 		CVE-2016-3300 2024-11-21 11:49 2016-08-10 Show GitHub Exploit DB Packet Storm
269309 7.5 HIGH
Network 		microsoft edge The Chakra JavaScript engine in Microsoft Edge allows remote attackers to execute arbitrary code via a crafted web site, aka "Scripting Engine Memory Corruption Vulnerability." CWE-119
Incorrect Access of Indexable Resource ('Range Error')  		CVE-2016-3296 2024-11-21 11:49 2016-08-10 Show GitHub Exploit DB Packet Storm
269310 7.5 HIGH
Network 		microsoft internet_explorer
edge 		Microsoft Internet Explorer 9 through 11 and Edge allow remote attackers to execute arbitrary code via a crafted web page, aka "Microsoft Browser Memory Corruption Vulnerability." CWE-119
Incorrect Access of Indexable Resource ('Range Error')  		CVE-2016-3293 2024-11-21 11:49 2016-08-10 Show GitHub Exploit DB Packet Storm