Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 27, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
251201	5	警告	g.rodola	-	pyftpdlib の FTPServer.py におけるサービス運用妨害 (DoS) の脆弱性	CWE-20 不適切な入力確認	CVE-2007-6739	2012-03-27 18:42	2007-05-18	Show	GitHub Exploit DB Packet Storm

251202	7.5	危険	g.rodola	-	pyftpdlib の FTPServer.py におけるアクセスを取得される脆弱性	CWE-287 不適切な認証	CVE-2007-6737	2012-03-27 18:42	2007-07-13	Show	GitHub Exploit DB Packet Storm

251203	6.5	警告	g.rodola	-	pyftpdlib の FTPServer.py におけるディレクトリトラバーサルの脆弱性	CWE-22 パス・トラバーサル	CVE-2007-6736	2012-03-27 18:42	2007-06-15	Show	GitHub Exploit DB Packet Storm

251204	4	警告	IBM	-	IBM FileNet P8AE の Workplace コンポーネントにおけるアクセス制限を回避する脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2006-7242	2012-03-27 18:42	2010-09-20	Show	GitHub Exploit DB Packet Storm

251205	4	警告	IBM	-	IBM FileNet P8AE の Image Viewer コンポーネントにおけるアクセス制限を回避する脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2006-7241	2012-03-27 18:42	2010-09-20	Show	GitHub Exploit DB Packet Storm

251206	7.2	危険	GNOME Project	-	gnome-power-manager における無人のラップトップにアクセスされる脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2006-7240	2012-03-27 18:42	2010-09-7	Show	GitHub Exploit DB Packet Storm

251207	5	警告	Apache Software Foundation	-	Apache Wicket におけるディレクトリトラバーサルの脆弱性	CWE-22 パス・トラバーサル	CVE-2012-1089	2012-03-27 14:46	2012-03-23	Show	GitHub Exploit DB Packet Storm

251208	4.3	警告	Apache Software Foundation	-	Apache Wicket におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2012-0047	2012-03-27 14:43	2012-03-23	Show	GitHub Exploit DB Packet Storm

251209	5	警告	Google	-	Google Chrome におけるサービス運用妨害 (システムリクエスト妨害) の脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2011-3049	2012-03-27 14:26	2012-03-21	Show	GitHub Exploit DB Packet Storm

251210	10	危険	Google	-	Google Chrome におけるサンドボックス保護メカニズムを回避される脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2012-1846	2012-03-27 14:21	2012-03-22	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 27, 2026, 4:52 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
266411	7.8	HIGH Local	linux	linux_kernel	arch/x86/kvm/vmx.c in the Linux kernel through 4.6.3 mishandles the APICv on/off state, which allows guest OS users to obtain direct APIC MSR access on the host OS, and consequently cause a denial of…	CWE-264 Permissions, Privileges, and Access Controls	CVE-2016-4440	2024-11-21 11:52	2016-06-27	Show	GitHub Exploit DB Packet Storm

266412	6.1	MEDIUM Network	schneider-electric	powerlogic_pm8ecc_firmware	Cross-site scripting (XSS) vulnerability in the Schneider Electric PowerLogic PM8ECC module before 2.651 for PowerMeter 800 devices allows remote attackers to inject arbitrary web script or HTML via …	CWE-79 Cross-site Scripting	CVE-2016-4513	2024-11-21 11:52	2016-06-26	Show	GitHub Exploit DB Packet Storm

266413	5.0	MEDIUM Local	advantech	webaccess	Buffer overflow in Advantech WebAccess before 8.1_20160519 allows local users to cause a denial of service via a crafted DLL file.	CWE-119 Incorrect Access of Indexable Resource ('Range Error')	CVE-2016-4528	2024-11-21 11:52	2016-06-25	Show	GitHub Exploit DB Packet Storm

266414	6.6	MEDIUM Local	advantech	webaccess	Unspecified ActiveX controls in Advantech WebAccess before 8.1_20160519 allow remote authenticated users to obtain sensitive information or modify data via unknown vectors, related to the INTERFACESA…	NVD-CWE-noinfo	CVE-2016-4525	2024-11-21 11:52	2016-06-25	Show	GitHub Exploit DB Packet Storm

266415	9.8	CRITICAL Network	unitronics	visilogic_oplc_ide	Stack-based buffer overflow in Unitronics VisiLogic OPLC IDE before 9.8.30 allows remote attackers to execute arbitrary code via a crafted filename field in a ZIP archive in a vlp file.	CWE-119 Incorrect Access of Indexable Resource ('Range Error')	CVE-2016-4519	2024-11-21 11:52	2016-06-25	Show	GitHub Exploit DB Packet Storm

266416	6.5	MEDIUM Network	osisoft	pi_sql_data_access_server_2016	OSIsoft PI SQL Data Access Server (aka OLE DB) 2016 1.5 allows remote authenticated users to cause a denial of service (service outage and data loss) via a message.	CWE-20 Improper Input Validation	CVE-2016-4530	2024-11-21 11:52	2016-06-20	Show	GitHub Exploit DB Packet Storm

266417	6.5	MEDIUM Network	osisoft	pi_af_server_2016	OSIsoft PI AF Server before 2016 2.8.0 allows remote authenticated users to cause a denial of service (service outage) via a message.	CWE-20 Improper Input Validation	CVE-2016-4518	2024-11-21 11:52	2016-06-20	Show	GitHub Exploit DB Packet Storm

266418	7.7	HIGH Network	moxa	pt-7728 pt-7728_firmware	Moxa PT-7728 devices with software 3.4 build 15081113 allow remote authenticated users to change the configuration via vectors involving a local proxy.	CWE-863 Incorrect Authorization	CVE-2016-4514	2024-11-21 11:52	2016-06-20	Show	GitHub Exploit DB Packet Storm

266419	7.5	HIGH Network	gnupg opensuse canonical	libksba leap ubuntu_linux	Libksba before 1.3.4 allows remote attackers to cause a denial of service (out-of-bounds read and crash) via unspecified vectors, related to the "returned length of the object from _ksba_ber_parse_tl…	CWE-20 Improper Input Validation	CVE-2016-4579	2024-11-21 11:52	2016-06-14	Show	GitHub Exploit DB Packet Storm

266420	7.5	HIGH Network	gnupg canonical opensuse	libksba ubuntu_linux leap opensuse	Off-by-one error in the append_utf8_value function in the DN decoder (dn.c) in Libksba before 1.3.4 allows remote attackers to cause a denial of service (out-of-bounds read) via invalid utf-8 encoded…	CWE-189 Numeric Errors	CVE-2016-4574	2024-11-21 11:52	2016-06-14	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed