Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 27, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
242191	6.8	警告	マイクロソフト	-	Microsoft Office SharePoint Server 2007 におけるオープンリダイレクトの脆弱性	CWE-20 不適切な入力確認	CVE-2012-1862	2012-07-13 16:11	2012-07-10	Show	GitHub Exploit DB Packet Storm

242192	4.3	警告	マイクロソフト	-	複数の Microsoft SharePoint 製品におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2012-1863	2012-07-13 16:09	2012-07-10	Show	GitHub Exploit DB Packet Storm

242193	4.3	警告	マイクロソフト	-	Microsoft Windows の TLS プロトコルの CBC モードにおける平文データを取得される脆弱性	CWE-200 情報漏えい	CVE-2012-1870	2012-07-13 16:09	2012-07-10	Show	GitHub Exploit DB Packet Storm

242194	7.2	危険	マイクロソフト	-	Microsoft Windows のカーネルモードドライバ内の win32k.sys における権限昇格の脆弱性	CWE-20 不適切な入力確認	CVE-2012-1890	2012-07-13 16:07	2012-07-10	Show	GitHub Exploit DB Packet Storm

242195	9.3	危険	マイクロソフト	-	MDAC および WDAC におけるヒープベースのバッファオーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2012-1891	2012-07-13 16:06	2012-07-10	Show	GitHub Exploit DB Packet Storm

242196	7.2	危険	マイクロソフト	-	Microsoft Windows のカーネルモードドライバ内の win32k.sys における権限昇格の脆弱性	CWE-20 不適切な入力確認	CVE-2012-1893	2012-07-13 16:06	2012-07-10	Show	GitHub Exploit DB Packet Storm

242197	6.9	警告	マイクロソフト	-	Microsoft Office for Mac 2011 における権限昇格の脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2012-1894	2012-07-13 16:04	2012-07-10	Show	GitHub Exploit DB Packet Storm

242198	9	危険	シスコシステムズ	-	Cisco TelePresence Recording Server における任意のコマンドを実行される脆弱性	CWE-78 OSコマンド・インジェクション	CVE-2012-3076	2012-07-13 15:21	2012-07-11	Show	GitHub Exploit DB Packet Storm

242199	9	危険	シスコシステムズ	-	Cisco TelePresence Immersive エンドポイントデバイスにおける任意のコマンドを実行される脆弱性	CWE-78 OSコマンド・インジェクション	CVE-2012-3075	2012-07-13 15:20	2012-07-11	Show	GitHub Exploit DB Packet Storm

242200	8.3	危険	シスコシステムズ	-	Cisco TelePresence Immersive エンドポイントデバイスの API における任意のコマンドを実行される脆弱性	CWE-78 OSコマンド・インジェクション	CVE-2012-3074	2012-07-13 15:18	2012-07-11	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 27, 2026, 4:52 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
266411	7.8	HIGH Local	linux	linux_kernel	arch/x86/kvm/vmx.c in the Linux kernel through 4.6.3 mishandles the APICv on/off state, which allows guest OS users to obtain direct APIC MSR access on the host OS, and consequently cause a denial of…	CWE-264 Permissions, Privileges, and Access Controls	CVE-2016-4440	2024-11-21 11:52	2016-06-27	Show	GitHub Exploit DB Packet Storm

266412	6.1	MEDIUM Network	schneider-electric	powerlogic_pm8ecc_firmware	Cross-site scripting (XSS) vulnerability in the Schneider Electric PowerLogic PM8ECC module before 2.651 for PowerMeter 800 devices allows remote attackers to inject arbitrary web script or HTML via …	CWE-79 Cross-site Scripting	CVE-2016-4513	2024-11-21 11:52	2016-06-26	Show	GitHub Exploit DB Packet Storm

266413	5.0	MEDIUM Local	advantech	webaccess	Buffer overflow in Advantech WebAccess before 8.1_20160519 allows local users to cause a denial of service via a crafted DLL file.	CWE-119 Incorrect Access of Indexable Resource ('Range Error')	CVE-2016-4528	2024-11-21 11:52	2016-06-25	Show	GitHub Exploit DB Packet Storm

266414	6.6	MEDIUM Local	advantech	webaccess	Unspecified ActiveX controls in Advantech WebAccess before 8.1_20160519 allow remote authenticated users to obtain sensitive information or modify data via unknown vectors, related to the INTERFACESA…	NVD-CWE-noinfo	CVE-2016-4525	2024-11-21 11:52	2016-06-25	Show	GitHub Exploit DB Packet Storm

266415	9.8	CRITICAL Network	unitronics	visilogic_oplc_ide	Stack-based buffer overflow in Unitronics VisiLogic OPLC IDE before 9.8.30 allows remote attackers to execute arbitrary code via a crafted filename field in a ZIP archive in a vlp file.	CWE-119 Incorrect Access of Indexable Resource ('Range Error')	CVE-2016-4519	2024-11-21 11:52	2016-06-25	Show	GitHub Exploit DB Packet Storm

266416	6.5	MEDIUM Network	osisoft	pi_sql_data_access_server_2016	OSIsoft PI SQL Data Access Server (aka OLE DB) 2016 1.5 allows remote authenticated users to cause a denial of service (service outage and data loss) via a message.	CWE-20 Improper Input Validation	CVE-2016-4530	2024-11-21 11:52	2016-06-20	Show	GitHub Exploit DB Packet Storm

266417	6.5	MEDIUM Network	osisoft	pi_af_server_2016	OSIsoft PI AF Server before 2016 2.8.0 allows remote authenticated users to cause a denial of service (service outage) via a message.	CWE-20 Improper Input Validation	CVE-2016-4518	2024-11-21 11:52	2016-06-20	Show	GitHub Exploit DB Packet Storm

266418	7.7	HIGH Network	moxa	pt-7728 pt-7728_firmware	Moxa PT-7728 devices with software 3.4 build 15081113 allow remote authenticated users to change the configuration via vectors involving a local proxy.	CWE-863 Incorrect Authorization	CVE-2016-4514	2024-11-21 11:52	2016-06-20	Show	GitHub Exploit DB Packet Storm

266419	7.5	HIGH Network	gnupg opensuse canonical	libksba leap ubuntu_linux	Libksba before 1.3.4 allows remote attackers to cause a denial of service (out-of-bounds read and crash) via unspecified vectors, related to the "returned length of the object from _ksba_ber_parse_tl…	CWE-20 Improper Input Validation	CVE-2016-4579	2024-11-21 11:52	2016-06-14	Show	GitHub Exploit DB Packet Storm

266420	7.5	HIGH Network	gnupg canonical opensuse	libksba ubuntu_linux leap opensuse	Off-by-one error in the append_utf8_value function in the DN decoder (dn.c) in Libksba before 1.3.4 allows remote attackers to cause a denial of service (out-of-bounds read) via invalid utf-8 encoded…	CWE-189 Numeric Errors	CVE-2016-4574	2024-11-21 11:52	2016-06-14	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed