Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":June 4, 2026, 4 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
242791	5	警告	ジョンソンコントロールズ	-	Johnson Controls Pegasys P2000 サーバにおける不正なアラートを生成される脆弱性	CWE-20 不適切な入力確認	CVE-2012-4026	2012-07-18 16:45	2012-07-16	Show	GitHub Exploit DB Packet Storm

242792	7.5	危険	ジョンソンコントロールズ	-	Johnson Controls CK721-A コントローラのファームウェアにおける任意のコマンドを実行される脆弱性	CWE-78 OSコマンド・インジェクション	CVE-2012-2607	2012-07-18 16:37	2012-07-16	Show	GitHub Exploit DB Packet Storm

242793	5	警告	Tridium	-	Tridium Niagara AX Framework におけるディレクトリトラバーサルの脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2012-4027	2012-07-18 11:49	2012-07-13	Show	GitHub Exploit DB Packet Storm

242794	4.3	警告	ヒューレット・パッカード	-	HP AssetManager におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2012-2021	2012-07-18 11:39	2012-07-12	Show	GitHub Exploit DB Packet Storm

242795	5	警告	RSAセキュリティ	-	EMC RSA Authentication Manager および RSA SecurID Appliance における任意の Web スクリプトを挿入される脆弱性	CWE-Other その他	CVE-2012-2280	2012-07-18 10:58	2012-07-13	Show	GitHub Exploit DB Packet Storm

242796	6.4	警告	RSAセキュリティ	-	EMC RSA Authentication Manager および RSA SecurID Appliance におけるオープンリダイレクトの脆弱性	CWE-20 不適切な入力確認	CVE-2012-2279	2012-07-18 10:57	2012-07-13	Show	GitHub Exploit DB Packet Storm

242797	4.3	警告	RSAセキュリティ	-	EMC RSA Authentication Manager および RSA SecurID Appliance におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2012-2278	2012-07-18 10:56	2012-07-13	Show	GitHub Exploit DB Packet Storm

242798	4.3	警告	CKEditor Team	-	FCKeditor におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2012-4000	2012-07-17 16:44	2012-07-12	Show	GitHub Exploit DB Packet Storm

242799	4.3	警告	Sayak Banerjee	-	Sticky Notes の admin/login.php におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2012-3999	2012-07-17 16:43	2012-07-12	Show	GitHub Exploit DB Packet Storm

242800	7.5	危険	Sayak Banerjee	-	Sticky Notes における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2012-3998	2012-07-17 16:43	2012-07-12	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:June 4, 2026, 4:17 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
266521	7.1	HIGH Local	microsoft	office_for_mac office	Microsoft Office 2007 SP3, Office 2010 SP2, Office 2013 SP1, Office for Mac 2011, and Office 2016 for Mac allow remote attackers to obtain sensitive information from process memory or cause a denial …	CWE-125 Out-of-bounds Read	CVE-2016-7276	2024-11-21 11:57	2016-12-20	Show	GitHub Exploit DB Packet Storm

266522	7.8	HIGH Local	microsoft	office	Microsoft Office 2010 SP2, 2013 SP1, 2013 RT SP1, and 2016 mishandles library loading, which allows local users to gain privileges via a crafted application, aka "Microsoft Office OLE DLL Side Loadin…	CWE-264 CWE-19 Permissions, Privileges, and Access Controls Data Processing Errors	CVE-2016-7275	2024-11-21 11:57	2016-12-20	Show	GitHub Exploit DB Packet Storm

266523	8.8	HIGH Network	microsoft	windows_rt_8.1 windows_server_2012 windows_server_2016 windows_7 windows_10 windows_8.1 windows_server_2008 windows_vista	Uniscribe in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, and 1607, and Windows…	CWE-19 Data Processing Errors	CVE-2016-7274	2024-11-21 11:57	2016-12-20	Show	GitHub Exploit DB Packet Storm

266524	8.8	HIGH Network	microsoft	windows_server_2016 windows_10	The Graphics component in Microsoft Windows 10 Gold, 1511, and 1607 and Windows Server 2016 allows remote attackers to execute arbitrary code via a crafted web site, aka "Windows Graphics Remote Code…	CWE-19 Data Processing Errors	CVE-2016-7273	2024-11-21 11:57	2016-12-20	Show	GitHub Exploit DB Packet Storm

266525	7.8	HIGH Local	microsoft	windows_server_2016 windows_10	The Secure Kernel Mode implementation in Microsoft Windows 10 Gold, 1511, and 1607 and Windows Server 2016 allows local users to bypass the virtual trust level (VTL) protection mechanism via a crafte…	CWE-264 Permissions, Privileges, and Access Controls	CVE-2016-7271	2024-11-21 11:57	2016-12-20	Show	GitHub Exploit DB Packet Storm

266526	7.5	HIGH Network	microsoft	.net_framework	The Data Provider for SQL Server in Microsoft .NET Framework 4.6.2 mishandles a developer-supplied key, which allows remote attackers to bypass the Always Encrypted protection mechanism and obtain se…	CWE-310 Cryptographic Issues	CVE-2016-7270	2024-11-21 11:57	2016-12-20	Show	GitHub Exploit DB Packet Storm

266527	5.5	MEDIUM Local	microsoft	excel	Microsoft Excel 2010 SP2, 2013 SP1, 2013 RT SP1, and 2016 misparses file formats, which makes it easier for remote attackers to execute arbitrary code via a crafted document, aka "Microsoft Office Se…	CWE-20 Improper Input Validation	CVE-2016-7267	2024-11-21 11:57	2016-12-20	Show	GitHub Exploit DB Packet Storm

266528	7.8	HIGH Local	microsoft	excel excel_viewer excel_for_mac office_compatibility_pack	Microsoft Excel 2007 SP3, Excel 2010 SP2, Excel 2013 SP1, Excel 2013 RT SP1, Excel 2016, Office Compatibility Pack SP3, Excel Viewer, and Excel 2016 for Mac mishandle a registry check, which allows u…	CWE-20 Improper Input Validation	CVE-2016-7266	2024-11-21 11:57	2016-12-20	Show	GitHub Exploit DB Packet Storm

266529	8.8	HIGH Network	microsoft	windows_rt_8.1 windows_server_2012 windows_server_2016 windows_7 windows_10 windows_8.1 windows_server_2008 windows_vista	The Graphics component in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, and 1607…	CWE-19 Data Processing Errors	CVE-2016-7272	2024-11-21 11:57	2016-12-20	Show	GitHub Exploit DB Packet Storm

266530	7.1	HIGH Local	microsoft	word_for_mac office_web_apps sharepoint_server office office_compatibility_pack word_viewer word	Microsoft Word 2007 SP3, Office 2010 SP2, Word 2010 SP2, Office Compatibility Pack SP3, Word Viewer, Word for Mac 2011, Word Automation Services on SharePoint Server 2010 SP2, and Office Web Apps 201…	CWE-125 Out-of-bounds Read	CVE-2016-7268	2024-11-21 11:57	2016-12-20	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed