Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 28, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
242241	4	警告	Moodle	-	Moodle における非表示フィールドから重要なユーザ情報を取得される脆弱性	CWE-200 情報漏えい	CVE-2012-2353	2012-07-24 15:46	2012-07-21	Show	GitHub Exploit DB Packet Storm

242242	7.5	危険	Nullsoft	-	Winamp の bmp.w5s におけるヒープベースのバッファオーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2012-4045	2012-07-24 15:38	2012-06-28	Show	GitHub Exploit DB Packet Storm

242243	5	警告	WordPress.org	-	WordPress における重要な情報を取得される脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2012-3385	2012-07-24 15:38	2012-06-27	Show	GitHub Exploit DB Packet Storm

242244	6.8	警告	WordPress.org	-	WordPress のカスタマイザにおけるクロスサイトリクエストフォージェリの脆弱性	CWE-352 同一生成元ポリシー違反	CVE-2012-3384	2012-07-24 15:37	2012-06-27	Show	GitHub Exploit DB Packet Storm

242245	2.6	注意	WordPress.org	-	WordPress におけるクロスサイトスクリプティングの脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2012-3383	2012-07-24 15:36	2012-06-27	Show	GitHub Exploit DB Packet Storm

242246	2.6	注意	フェンリル株式会社	-	Sleipnir Mobile for Android における WebView クラスに関する脆弱性	CWE-Other その他	CVE-2012-2646	2012-07-24 12:02	2012-07-24	Show	GitHub Exploit DB Packet Storm

242247	4.3	警告	Mozilla Foundation	-	複数の Mozilla 製品におけるアドレスバーを偽造される脆弱性	CWE-Other その他	CVE-2012-0479	2012-07-23 17:58	2012-04-24	Show	GitHub Exploit DB Packet Storm

242248	9.3	危険	Mozilla Foundation	-	複数の Mozilla 製品の texImage2D の実装における任意のコードを実行される脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2012-0478	2012-07-23 17:57	2012-04-24	Show	GitHub Exploit DB Packet Storm

242249	4.3	警告	Mozilla Foundation	-	複数の Mozilla 製品におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2012-0477	2012-07-23 17:57	2012-04-24	Show	GitHub Exploit DB Packet Storm

242250	4.3	警告	Mozilla Foundation	-	複数の Mozilla 製品の docshell の実装におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2012-0474	2012-07-23 17:56	2012-04-24	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 29, 2026, 4:16 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
266361	7.8	HIGH Local	symantec	norton_antivirus norton_family norton_antivirus_with_backup norton_security norton_360 norton_internet_security norton_security_with_backup endpoint_protection endpoint_protec…	A Privilege Escalation vulnerability exists in Symantec Norton Antivirus, Norton AntiVirus with Backup, Norton Security, Norton Security with Backup, Norton Internet Security, Norton 360, Endpoint Pr…	CWE-427 Uncontrolled Search Path Element	CVE-2016-5311	2024-11-21 11:54	2020-01-10	Show	GitHub Exploit DB Packet Storm

266362	5.5	MEDIUM Local	google	android	An Information Disclosure vulnerability exists in the Google Pixel/Pixel SL Qualcomm Avtimer Driver due to a NULL pointer dereference when processing an accept system call by the user process on AF_M…	CWE-200 Information Exposure	CVE-2016-5346	2024-11-21 11:54	2020-01-9	Show	GitHub Exploit DB Packet Storm

266363	7.5	HIGH Network	cloudera	cdh	Cloudera CDH before 5.9 has Potentially Sensitive Information in Diagnostic Support Bundles.	CWE-200 Information Exposure	CVE-2016-5724	2024-11-21 11:54	2019-11-26	Show	GitHub Exploit DB Packet Storm

266364	7.5	HIGH Network	php_jose_project	php_jose	The PHP JOSE Library by Gree Inc. before version 2.2.1 is vulnerable to key confusion/algorithm substitution in the JWS component resulting in bypassing the signature verification via crafted tokens.	CWE-327 Use of a Broken or Risky Cryptographic Algorithm	CVE-2016-5431	2024-11-21 11:54	2019-08-8	Show	GitHub Exploit DB Packet Storm

266365	8.8	HIGH Network	redhat	cloudforms cloudforms_management_engine	A code injection flaw was found in the way capacity and utilization imported control files are processed. A remote, authenticated attacker with access to the capacity and utilization feature could us…	-	CVE-2016-5402	2024-11-21 11:54	2018-10-31	Show	GitHub Exploit DB Packet Storm

266366	9.8	CRITICAL Network	netgear	dgn2200_firmware dgnd3700_firmware	A vulnerability is in the 'BSW_cxttongr.htm' page of the Netgear DGN2200, version DGN2200-V1.0.0.50_7.0.50, and DGND3700, version DGND3700-V1.0.0.17_1.0.17, which can allow a remote attacker to acces…	CWE-200 Information Exposure	CVE-2016-5649	2024-11-21 11:54	2018-07-25	Show	GitHub Exploit DB Packet Storm

266367	7.5	HIGH Network	netgear	wndr4500_firmware	There are few web pages associated with the genie app on the Netgear WNDR4500 running firmware version V1.0.1.40_1.0.6877. Genie app adds some capabilities over the Web GUI and can be accessed even w…	CWE-200 Information Exposure	CVE-2016-5638	2024-11-21 11:54	2018-07-25	Show	GitHub Exploit DB Packet Storm

266368	7.5	HIGH Network	mozilla	firefox	A previously installed malicious Android application with same signature-level permissions as Firefox can intercept AuthTokens meant for Firefox only. Note: This issue only affects Firefox for Androi…	CWE-275 Permission Issues	CVE-2016-5299	2024-11-21 11:54	2018-06-12	Show	GitHub Exploit DB Packet Storm

266369	6.5	MEDIUM Network	mozilla	firefox	A mechanism where disruption of the loading of a new web page can cause the previous page's favicon and SSL indicator to not be reset when the new page is loaded. Note: this issue only affects Firefo…	CWE-20 Improper Input Validation	CVE-2016-5298	2024-11-21 11:54	2018-06-12	Show	GitHub Exploit DB Packet Storm

266370	9.8	CRITICAL Network	mozilla debian	firefox thunderbird firefox_esr debian_linux	An error in argument length checking in JavaScript, leading to potential integer overflows or other bounds checking issues. This vulnerability affects Thunderbird < 45.5, Firefox ESR < 45.5, and Fire…	CWE-190 Integer Overflow or Wraparound	CVE-2016-5297	2024-11-21 11:54	2018-06-12	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed