Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 7, 2026, 10 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
242791 4 警告 Moodle - Moodle の mod/forum/rsslib.php におけるアクセス制限を回避される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2012-3391 2012-07-25 13:47 2012-07-23 Show GitHub Exploit DB Packet Storm
242792 3.5 注意 Moodle - Moodle の lib/filelib.php における重要な情報を取得される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2012-3390 2012-07-25 13:40 2012-05-18 Show GitHub Exploit DB Packet Storm
242793 4.3 警告 Moodle - Moodle の mod/lti/typessettings.php におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2012-3389 2012-07-25 13:35 2012-07-23 Show GitHub Exploit DB Packet Storm
242794 4 警告 Moodle - Moodle の lib/accesslib.php における機能チェックを回避される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2012-3388 2012-07-25 12:28 2012-07-23 Show GitHub Exploit DB Packet Storm
242795 4 警告 Moodle - Moodle におけるエイリアスの制限を回避される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2012-3387 2012-07-25 12:22 2012-07-23 Show GitHub Exploit DB Packet Storm
242796 4.3 警告 ESET
マカフィー
AVG Technologies
Jiangmin
Norman
FRISK Software International
VirusBlokAda
クイックヒール・テクノロジーズ・ジャパン株式会社
エフ・セキュア
G Data Software
AVAST Software s.r.o.
Beijing Rising International Software
Panda Security
カスペルスキ		 - 複数の製品の TAR ファイルパーサにおけるマルウェア検知を回避される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2012-1459 2012-07-25 11:09 2012-03-21 Show GitHub Exploit DB Packet Storm
242797 4.3 警告 ClamAV
ソフォス		 - ClamAV および Sophos Anti-Virus の Microsoft CHM ファイルパーサにおけるマルウェア検知を回避される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2012-1458 2012-07-25 11:08 2012-03-21 Show GitHub Exploit DB Packet Storm
242798 4.3 警告 ESET
マカフィー
AVG Technologies
Jiangmin
Norman
FRISK Software International
VirusBlokAda
クイックヒール・テクノロジーズ・ジャパン株式会社
G Data Software
AVAST Software s.r.o.
Beijing Rising International Software
カスペルスキー
Avira
Emsisoft
シマン		 - 複数の製品の TAR ファイルパーサにおけるマルウェア検知を回避される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2012-1457 2012-07-25 11:06 2012-03-21 Show GitHub Exploit DB Packet Storm
242799 4.4 警告 Puppet - Puppet および Puppet Enterprise における権限を取得される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2012-1054 2012-07-25 11:02 2012-05-29 Show GitHub Exploit DB Packet Storm
242800 6.9 警告 Puppet - Puppet および Puppet Enterprise の change_user メソッドにおける権限を取得される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2012-1053 2012-07-25 11:00 2012-05-29 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 7, 2026, 4:13 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
266421 7.8 HIGH
Local 		redhat jboss_enterprise_application_platform Jboss jbossas before versions 5.2.0-23, 6.4.13, 7.0.5 is vulnerable to an unsafe file handling in the jboss init script which could result in local privilege escalation. CWE-264
Permissions, Privileges, and Access Controls 		CVE-2016-8656 2024-11-21 11:59 2018-05-23 Show GitHub Exploit DB Packet Storm
266422 6.5 MEDIUM
Network 		redhat jboss_enterprise_application_platform
keycloak 		admin-cli before versions 3.0.0.alpha25, 2.2.1.cr2 is vulnerable to an EAP feature to download server log files that allows logs to be available via GET requests making them vulnerable to cross-origi… CWE-400
 Uncontrolled Resource Consumption 		CVE-2016-8627 2024-11-21 11:59 2018-05-11 Show GitHub Exploit DB Packet Storm
266423 7.8 HIGH
Local 		sophos invincea_dell_protected_workspace Multiple security flaws exists in InvProtectDrv.sys which is a part of Invincea Dell Protected Workspace 5.1.1-22303. Weak restrictions on the driver communication channel and additional insufficient… CWE-275
 Permission Issues 		CVE-2016-8732 2024-11-21 11:59 2018-04-25 Show GitHub Exploit DB Packet Storm
266424 7.8 HIGH
Local 		corel coreldraw_photo_paint_x8 An of bound write / memory corruption vulnerability exists in the GIF parsing functionality of Core PHOTO-PAINT X8 18.1.0.661. A specially crafted GIF file can cause a vulnerability resulting in pote… CWE-787
 Out-of-bounds Write 		CVE-2016-8730 2024-11-21 11:59 2018-04-25 Show GitHub Exploit DB Packet Storm
266425 7.8 HIGH
Local 		artifex mupdf An exploitable memory corruption vulnerability exists in the JBIG2 parser of Artifex MuPDF 1.9. A specially crafted PDF can cause a negative number to be passed to a memset resulting in memory corrup… CWE-119
Incorrect Access of Indexable Resource ('Range Error')  		CVE-2016-8729 2024-11-21 11:59 2018-04-25 Show GitHub Exploit DB Packet Storm
266426 7.8 HIGH
Local 		artifex mupdf An exploitable heap out of bounds write vulnerability exists in the Fitz graphical library part of the MuPDF renderer. A specially crafted PDF file can cause a out of bounds write resulting in heap m… CWE-787
 Out-of-bounds Write 		CVE-2016-8728 2024-11-21 11:59 2018-04-25 Show GitHub Exploit DB Packet Storm
266427 8.8 HIGH
Network 		marklogic marklogic An exploitable heap corruption vulnerability exists in the DHFSummary functionality of AntennaHouse DMC HTMLFilter. CWE-119
Incorrect Access of Indexable Resource ('Range Error')  		CVE-2016-8384 2024-11-21 11:59 2018-04-25 Show GitHub Exploit DB Packet Storm
266428 8.8 HIGH
Network 		marklogic marklogic An exploitable heap corruption vulnerability exists in the Doc_GetFontTable functionality of AntennaHouse DMC HTMLFilter. A specially crafted doc file can cause a heap corruption resulting in arbitra… CWE-119
Incorrect Access of Indexable Resource ('Range Error')  		CVE-2016-8383 2024-11-21 11:59 2018-04-25 Show GitHub Exploit DB Packet Storm
266429 8.8 HIGH
Network 		marklogic marklogic An exploitable heap corruption vulnerability exists in the Doc_SetSummary functionality of AntennaHouse DMC HTMLFilter. A specially crafted doc file can cause a heap corruption resulting in arbitrary… CWE-119
Incorrect Access of Indexable Resource ('Range Error')  		CVE-2016-8382 2024-11-21 11:59 2018-04-25 Show GitHub Exploit DB Packet Storm
266430 7.5 HIGH
Network 		pivotal_software gemfire Pivotal Gemfire for PCF, versions 1.6.x prior to 1.6.5.0 and 1.7.x prior to 1.7.1.0, contain an information disclosure vulnerability. The application inadvertently exposed WAN replication credentials… CWE-200
Information Exposure 		CVE-2016-8220 2024-11-21 11:59 2018-04-19 Show GitHub Exploit DB Packet Storm