Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 7, 2026, noon

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
242791 4 警告 Moodle - Moodle の mod/forum/rsslib.php におけるアクセス制限を回避される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2012-3391 2012-07-25 13:47 2012-07-23 Show GitHub Exploit DB Packet Storm
242792 3.5 注意 Moodle - Moodle の lib/filelib.php における重要な情報を取得される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2012-3390 2012-07-25 13:40 2012-05-18 Show GitHub Exploit DB Packet Storm
242793 4.3 警告 Moodle - Moodle の mod/lti/typessettings.php におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2012-3389 2012-07-25 13:35 2012-07-23 Show GitHub Exploit DB Packet Storm
242794 4 警告 Moodle - Moodle の lib/accesslib.php における機能チェックを回避される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2012-3388 2012-07-25 12:28 2012-07-23 Show GitHub Exploit DB Packet Storm
242795 4 警告 Moodle - Moodle におけるエイリアスの制限を回避される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2012-3387 2012-07-25 12:22 2012-07-23 Show GitHub Exploit DB Packet Storm
242796 4.3 警告 ESET
マカフィー
AVG Technologies
Jiangmin
Norman
FRISK Software International
VirusBlokAda
クイックヒール・テクノロジーズ・ジャパン株式会社
エフ・セキュア
G Data Software
AVAST Software s.r.o.
Beijing Rising International Software
Panda Security
カスペルスキ		 - 複数の製品の TAR ファイルパーサにおけるマルウェア検知を回避される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2012-1459 2012-07-25 11:09 2012-03-21 Show GitHub Exploit DB Packet Storm
242797 4.3 警告 ClamAV
ソフォス		 - ClamAV および Sophos Anti-Virus の Microsoft CHM ファイルパーサにおけるマルウェア検知を回避される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2012-1458 2012-07-25 11:08 2012-03-21 Show GitHub Exploit DB Packet Storm
242798 4.3 警告 ESET
マカフィー
AVG Technologies
Jiangmin
Norman
FRISK Software International
VirusBlokAda
クイックヒール・テクノロジーズ・ジャパン株式会社
G Data Software
AVAST Software s.r.o.
Beijing Rising International Software
カスペルスキー
Avira
Emsisoft
シマン		 - 複数の製品の TAR ファイルパーサにおけるマルウェア検知を回避される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2012-1457 2012-07-25 11:06 2012-03-21 Show GitHub Exploit DB Packet Storm
242799 4.4 警告 Puppet - Puppet および Puppet Enterprise における権限を取得される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2012-1054 2012-07-25 11:02 2012-05-29 Show GitHub Exploit DB Packet Storm
242800 6.9 警告 Puppet - Puppet および Puppet Enterprise の change_user メソッドにおける権限を取得される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2012-1053 2012-07-25 11:00 2012-05-29 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 7, 2026, 4:13 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
266431 7.8 HIGH
Local 		google android An elevation of privilege vulnerability in the NVIDIA GPU driver. Product: Android. Versions: Android kernel. Android ID: A-31799863. References: N-CVE-2016-8482. CWE-264
Permissions, Privileges, and Access Controls 		CVE-2016-8482 2024-11-21 11:59 2018-04-6 Show GitHub Exploit DB Packet Storm
266432 7.3 HIGH
Network 		phoenixcontact ilc_plcs_firmware The web server in Phoenix Contact ILC PLCs allows access to read and write PLC variables without authentication. CWE-287
Improper Authentication 		CVE-2016-8380 2024-11-21 11:59 2018-04-6 Show GitHub Exploit DB Packet Storm
266433 7.3 HIGH
Network 		phoenixcontact ilc_plcs_firmware The web server in Phoenix Contact ILC PLCs can be accessed without authenticating even if the authentication mechanism is enabled. CWE-287
Improper Authentication 		CVE-2016-8371 2024-11-21 11:59 2018-04-6 Show GitHub Exploit DB Packet Storm
266434 7.3 HIGH
Network 		phoenixcontact ilc_plcs_firmware Webvisit in Phoenix Contact ILC PLCs offers a password macro to protect HMI pages on the PLC against casual or coincidental opening of HMI pages by the user. The password macro can be configured in a… CWE-255
Credentials Management 		CVE-2016-8366 2024-11-21 11:59 2018-04-6 Show GitHub Exploit DB Packet Storm
266435 9.8 CRITICAL
Network 		google android An elevation of privilege vulnerability in Qualcomm closed source components. Product: Android. Versions: Android kernel. Android ID: A-31625756. CWE-264
Permissions, Privileges, and Access Controls 		CVE-2016-8488 2024-11-21 11:59 2018-04-5 Show GitHub Exploit DB Packet Storm
266436 9.8 CRITICAL
Network 		google android An elevation of privilege vulnerability in Qualcomm closed source components. Product: Android. Versions: Android kernel. Android ID: A-28823724. CWE-264
Permissions, Privileges, and Access Controls 		CVE-2016-8487 2024-11-21 11:59 2018-04-5 Show GitHub Exploit DB Packet Storm
266437 7.5 HIGH
Network 		google android An information disclosure vulnerability in Qualcomm closed source components. Product: Android. Versions: Android kernel. Android ID: A-28823691. CWE-200
Information Exposure 		CVE-2016-8486 2024-11-21 11:59 2018-04-5 Show GitHub Exploit DB Packet Storm
266438 7.5 HIGH
Network 		google android An information disclosure vulnerability in Qualcomm closed source components. Product: Android. Versions: Android kernel. Android ID: A-28823681. CWE-200
Information Exposure 		CVE-2016-8485 2024-11-21 11:59 2018-04-5 Show GitHub Exploit DB Packet Storm
266439 9.8 CRITICAL
Network 		google android An elevation of privilege vulnerability in Qualcomm closed source components. Product: Android. Versions: Android kernel. Android ID: A-28823575. CWE-264
Permissions, Privileges, and Access Controls 		CVE-2016-8484 2024-11-21 11:59 2018-04-5 Show GitHub Exploit DB Packet Storm
266440 5.5 MEDIUM
Local 		osisoft pi_af_client
pi_sdk
pi_buffer_subsystem
pi_data_archive 		OSIsoft PI System software (Applications using PI Asset Framework (AF) Client versions prior to PI AF Client 2016, Version 2.8.0; Applications using PI Software Development Kit (SDK) versions prior t… CWE-284
Improper Access Control 		CVE-2016-8365 2024-11-21 11:59 2018-04-3 Show GitHub Exploit DB Packet Storm