Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 31, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
242591	4.3	警告	KENT-WEB	-	YY-BOARD におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2012-2643	2012-07-6 12:02	2012-07-6	Show	GitHub Exploit DB Packet Storm

242592	4.3	警告	MT4i	-	Movable Type 用プラグイン MT4i におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2012-2642	2012-07-6 12:01	2012-07-6	Show	GitHub Exploit DB Packet Storm

242593	5	警告	Ruby-lang.org	-	Ruby のハッシュ関数の実装におけるサービス運用妨害 (DoS) の脆弱性	CWE-399 リソース管理の問題	CVE-2011-4815	2012-07-6 12:00	2012-07-6	Show	GitHub Exploit DB Packet Storm

242594	6.8	警告	webatall.org	-	web@all におけるクロスサイトリクエストフォージェリの脆弱性	CWE-352 同一生成元ポリシー違反	CVE-2012-3231	2012-07-5 16:38	2012-06-27	Show	GitHub Exploit DB Packet Storm

242595	6.8	警告	アップル	-	複数の Apple 製品で使用される WebKit における任意のコードを実行される脆弱性	CWE-119 バッファエラー	CVE-2012-0608	2012-07-5 16:33	2012-03-8	Show	GitHub Exploit DB Packet Storm

242596	4.3	警告	Atmoner	-	PHP-pastebin の index.php におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2012-3846	2012-07-5 15:58	2012-07-3	Show	GitHub Exploit DB Packet Storm

242597	5	警告	Qualia Digital Solutions	-	LAN Messenger におけるバッファオーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2012-3845	2012-07-5 15:56	2012-07-3	Show	GitHub Exploit DB Packet Storm

242598	4.3	警告	vBulletin Solutions, Inc.	-	vBulletin におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2012-3844	2012-07-5 15:42	2012-07-3	Show	GitHub Exploit DB Packet Storm

242599	4.3	警告	e107.org	-	e107 の登録ページにおけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2012-3843	2012-07-5 15:39	2012-07-3	Show	GitHub Exploit DB Packet Storm

242600	4.3	警告	JBMC Software	-	JBMC Software DirectAdmin の CMD_DOMAIN におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2012-3842	2012-07-5 15:38	2012-07-3	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 31, 2026, 4:16 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
269011	7.8	HIGH Local	watchguard	panda_endpoint_administration_agent	Panda Endpoint Administration Agent before 7.50.00, as used in Panda Security for Business products for Windows, uses a weak ACL for the Panda Security/WaAgent directory and sub-directories, which al…	CWE-276 Incorrect Default Permissions	CVE-2016-3943	2024-11-21 11:50	2016-04-19	Show	GitHub Exploit DB Packet Storm

269012	5.5	MEDIUM Local	videolan canonical	vlc_media_player ubuntu_linux	Buffer overflow in the AStreamPeekStream function in input/stream.c in VideoLAN VLC media player before 2.2.0 allows remote attackers to cause a denial of service (crash) via a crafted wav file, rela…	CWE-119 Incorrect Access of Indexable Resource ('Range Error')	CVE-2016-3941	2024-11-21 11:50	2016-04-19	Show	GitHub Exploit DB Packet Storm

269013	5.9	MEDIUM Network	f5	big-ip_edge_gateway big-ip_access_policy_manager	The Single Sign-On (SSO) feature in F5 BIG-IP APM 11.x before 11.6.0 HF6 and BIG-IP Edge Gateway 11.0.0 through 11.3.0 might allow remote attackers to obtain sensitive SessionId information by levera…	CWE-200 Information Exposure	CVE-2016-3686	2024-11-21 11:50	2016-04-14	Show	GitHub Exploit DB Packet Storm

269014	8.8	HIGH Network	fedoraproject opensuse mercurial debian suse	fedora leap mercurial debian_linux linux_enterprise_software_development_kit linux_enterprise_debuginfo opensuse	The binary delta decoder in Mercurial before 3.7.3 allows remote attackers to execute arbitrary code via a (1) clone, (2) push, or (3) pull command, related to (a) a list sizing rounding error and (b…	CWE-19 Data Processing Errors	CVE-2016-3630	2024-11-21 11:50	2016-04-14	Show	GitHub Exploit DB Packet Storm

269015	9.8	CRITICAL Network	paloaltonetworks	pan-os	Buffer overflow in the GlobalProtect Portal in Palo Alto Networks PAN-OS before 5.0.18, 6.0.x before 6.0.13, 6.1.x before 6.1.10, and 7.0.x before 7.0.5 allows remote attackers to cause a denial of s…	CWE-119 Incorrect Access of Indexable Resource ('Range Error')	CVE-2016-3657	2024-11-21 11:50	2016-04-13	Show	GitHub Exploit DB Packet Storm

269016	7.5	HIGH Network	paloaltonetworks	pan-os	The GlobalProtect Portal in Palo Alto Networks PAN-OS before 5.0.18, 6.0.x before 6.0.13, 6.1.x before 6.1.10, and 7.0.x before 7.0.5H2 allows remote attackers to cause a denial of service (service c…	CWE-119 Incorrect Access of Indexable Resource ('Range Error')	CVE-2016-3656	2024-11-21 11:50	2016-04-13	Show	GitHub Exploit DB Packet Storm

269017	9.8	CRITICAL Network	paloaltonetworks	pan-os	The management web interface in Palo Alto Networks PAN-OS before 5.0.18, 6.0.x before 6.0.13, 6.1.x before 6.1.10, and 7.0.x before 7.0.5 allows remote attackers to execute arbitrary OS commands via …	CWE-20 CWE-78 Improper Input Validation OS Command	CVE-2016-3655	2024-11-21 11:50	2016-04-13	Show	GitHub Exploit DB Packet Storm

269018	7.2	HIGH Network	paloaltonetworks	pan-os	The device management command line interface (CLI) in Palo Alto Networks PAN-OS before 5.0.18, 5.1.x before 5.1.11, 6.0.x before 6.0.13, 6.1.x before 6.1.10, and 7.0.x before 7.0.5H2 allows remote au…	CWE-20 Improper Input Validation	CVE-2016-3654	2024-11-21 11:50	2016-04-13	Show	GitHub Exploit DB Packet Storm

269019	7.5	HIGH Network	huawei	s5300_firmware s5700_firmware s7700_firmware s9300_firmware s9700_firmware	Huawei Quidway S9700, S5700, S5300, S9300, and S7700 switches with software before V200R003SPH012 allow remote attackers to cause a denial of service (switch restart) via crafted traffic.	CWE-20 Improper Input Validation	CVE-2016-3678	2024-11-21 11:50	2016-04-12	Show	GitHub Exploit DB Packet Storm

269020	6.4	MEDIUM Adjacent	huawei	e3276s_firmware	Huawei E3276s USB modems with software before E3276s-150TCPU-V200R002B436D09SP00C00 allow man-in-the-middle attackers to intercept, spoof, or modify network traffic via unspecified vectors related to…	CWE-254 7PK - Security Features	CVE-2016-3676	2024-11-21 11:50	2016-04-12	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed