Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 27, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
242271	4.3	警告	OpenSolution	-	Quick.CMS の admin/ 内のデフォルトインデックスページにおけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2012-3833	2012-07-5 15:09	2012-07-3	Show	GitHub Exploit DB Packet Storm

242272	4.3	警告	Miles Johnson	-	Decoda の decoda/Decoda.php におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2012-3832	2012-07-5 14:40	2012-07-3	Show	GitHub Exploit DB Packet Storm

242273	4.3	警告	Miles Johnson	-	Decoda の decoda/templates/video.php におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2012-3831	2012-07-5 14:35	2012-07-3	Show	GitHub Exploit DB Packet Storm

242274	4.3	警告	Miles Johnson	-	Decoda の decoda/templates/video.php におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2012-3830	2012-07-5 14:28	2012-07-3	Show	GitHub Exploit DB Packet Storm

242275	5	警告	Joomla!	-	Joomla! におけるインストールパスを取得される脆弱性	CWE-200 情報漏えい	CVE-2012-3829	2012-07-5 14:23	2012-07-3	Show	GitHub Exploit DB Packet Storm

242276	4.3	警告	Joomla!	-	Joomla! におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2012-3828	2012-07-5 14:22	2012-07-3	Show	GitHub Exploit DB Packet Storm

242277	2.1	注意	Fedora Project	-	Anacond のブートローダ設定モジュールにおけるパスワードハッシュを取得される脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2012-2314	2012-07-5 14:09	2012-05-10	Show	GitHub Exploit DB Packet Storm

242278	2.6	注意	Ned T. Crigler	-	dtach の attach.cにおける整数符号エラーの脆弱性	CWE-189 数値処理の問題	CVE-2012-3368	2012-07-5 14:00	2012-07-3	Show	GitHub Exploit DB Packet Storm

242279	5	警告	IBM	-	IBM WebSphere Portal の Dojo モジュールにおけるディレクトリトラバーサルの脆弱性	CWE-22 パス・トラバーサル	CVE-2012-2181	2012-07-5 13:57	2012-07-3	Show	GitHub Exploit DB Packet Storm

242280	10	危険	アバイア	-	Avaya Aura Application Server 5300 におけるスタックベースのバッファオーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2011-5096	2012-07-5 13:46	2011-08-2	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 27, 2026, 4:52 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
266411	7.8	HIGH Local	linux	linux_kernel	arch/x86/kvm/vmx.c in the Linux kernel through 4.6.3 mishandles the APICv on/off state, which allows guest OS users to obtain direct APIC MSR access on the host OS, and consequently cause a denial of…	CWE-264 Permissions, Privileges, and Access Controls	CVE-2016-4440	2024-11-21 11:52	2016-06-27	Show	GitHub Exploit DB Packet Storm

266412	6.1	MEDIUM Network	schneider-electric	powerlogic_pm8ecc_firmware	Cross-site scripting (XSS) vulnerability in the Schneider Electric PowerLogic PM8ECC module before 2.651 for PowerMeter 800 devices allows remote attackers to inject arbitrary web script or HTML via …	CWE-79 Cross-site Scripting	CVE-2016-4513	2024-11-21 11:52	2016-06-26	Show	GitHub Exploit DB Packet Storm

266413	5.0	MEDIUM Local	advantech	webaccess	Buffer overflow in Advantech WebAccess before 8.1_20160519 allows local users to cause a denial of service via a crafted DLL file.	CWE-119 Incorrect Access of Indexable Resource ('Range Error')	CVE-2016-4528	2024-11-21 11:52	2016-06-25	Show	GitHub Exploit DB Packet Storm

266414	6.6	MEDIUM Local	advantech	webaccess	Unspecified ActiveX controls in Advantech WebAccess before 8.1_20160519 allow remote authenticated users to obtain sensitive information or modify data via unknown vectors, related to the INTERFACESA…	NVD-CWE-noinfo	CVE-2016-4525	2024-11-21 11:52	2016-06-25	Show	GitHub Exploit DB Packet Storm

266415	9.8	CRITICAL Network	unitronics	visilogic_oplc_ide	Stack-based buffer overflow in Unitronics VisiLogic OPLC IDE before 9.8.30 allows remote attackers to execute arbitrary code via a crafted filename field in a ZIP archive in a vlp file.	CWE-119 Incorrect Access of Indexable Resource ('Range Error')	CVE-2016-4519	2024-11-21 11:52	2016-06-25	Show	GitHub Exploit DB Packet Storm

266416	6.5	MEDIUM Network	osisoft	pi_sql_data_access_server_2016	OSIsoft PI SQL Data Access Server (aka OLE DB) 2016 1.5 allows remote authenticated users to cause a denial of service (service outage and data loss) via a message.	CWE-20 Improper Input Validation	CVE-2016-4530	2024-11-21 11:52	2016-06-20	Show	GitHub Exploit DB Packet Storm

266417	6.5	MEDIUM Network	osisoft	pi_af_server_2016	OSIsoft PI AF Server before 2016 2.8.0 allows remote authenticated users to cause a denial of service (service outage) via a message.	CWE-20 Improper Input Validation	CVE-2016-4518	2024-11-21 11:52	2016-06-20	Show	GitHub Exploit DB Packet Storm

266418	7.7	HIGH Network	moxa	pt-7728 pt-7728_firmware	Moxa PT-7728 devices with software 3.4 build 15081113 allow remote authenticated users to change the configuration via vectors involving a local proxy.	CWE-863 Incorrect Authorization	CVE-2016-4514	2024-11-21 11:52	2016-06-20	Show	GitHub Exploit DB Packet Storm

266419	7.5	HIGH Network	gnupg opensuse canonical	libksba leap ubuntu_linux	Libksba before 1.3.4 allows remote attackers to cause a denial of service (out-of-bounds read and crash) via unspecified vectors, related to the "returned length of the object from _ksba_ber_parse_tl…	CWE-20 Improper Input Validation	CVE-2016-4579	2024-11-21 11:52	2016-06-14	Show	GitHub Exploit DB Packet Storm

266420	7.5	HIGH Network	gnupg canonical opensuse	libksba ubuntu_linux leap opensuse	Off-by-one error in the append_utf8_value function in the DN decoder (dn.c) in Libksba before 1.3.4 allows remote attackers to cause a denial of service (out-of-bounds read) via invalid utf-8 encoded…	CWE-189 Numeric Errors	CVE-2016-4574	2024-11-21 11:52	2016-06-14	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed