Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 24, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
251581	9.3	危険	マイクロソフト AB Team	-	Microsoft Windows XP で利用される Indeo コーデックにおける権限昇格の脆弱性	CWE-Other その他	CVE-2010-3138	2012-02-16 16:14	2010-08-27	Show	GitHub Exploit DB Packet Storm

251582	4.4	警告	マイクロソフト	-	Microsoft Windows Server 2008 の colorcpl.exe における権限昇格の脆弱性	CWE-Other その他	CVE-2010-5082	2012-02-16 16:04	2012-01-17	Show	GitHub Exploit DB Packet Storm

251583	9.3	危険	アップルマイクロソフト	-	Microsoft Windows 7 Professional 64-bit におけるサービス運用妨害 (DoS) の脆弱性	CWE-20 不適切な入力確認	CVE-2011-5046	2012-02-16 11:40	2011-12-30	Show	GitHub Exploit DB Packet Storm

251584	4.3	警告	アドビシステムズ	-	Adobe RoboHelp for Word におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2012-0765	2012-02-16 11:27	2012-02-14	Show	GitHub Exploit DB Packet Storm

251585	10	危険	アドビシステムズ	-	Adobe Shockwave Player の Shockwave 3D Asset コンポーネントにおける任意のコードを実行される脆弱性	CWE-119 バッファエラー	CVE-2012-0766	2012-02-16 11:23	2012-02-14	Show	GitHub Exploit DB Packet Storm

251586	10	危険	アドビシステムズ	-	Adobe Shockwave Player の Shockwave 3D Asset コンポーネントにおける任意のコードを実行される脆弱性	CWE-119 バッファエラー	CVE-2012-0764	2012-02-16 11:23	2012-02-14	Show	GitHub Exploit DB Packet Storm

251587	10	危険	アドビシステムズ	-	Adobe Shockwave Player の Shockwave 3D Asset コンポーネントにおける任意のコードを実行される脆弱性	CWE-119 バッファエラー	CVE-2012-0763	2012-02-16 11:21	2012-02-14	Show	GitHub Exploit DB Packet Storm

251588	10	危険	アドビシステムズ	-	Adobe Shockwave Player の Shockwave 3D Asset コンポーネントにおける任意のコードを実行される脆弱性	CWE-119 バッファエラー	CVE-2012-0762	2012-02-16 11:13	2012-02-14	Show	GitHub Exploit DB Packet Storm

251589	10	危険	アドビシステムズ	-	Adobe Shockwave Player の Shockwave 3D Asset コンポーネントにおける任意のコードを実行される脆弱性	CWE-119 バッファエラー	CVE-2012-0761	2012-02-16 11:09	2012-02-14	Show	GitHub Exploit DB Packet Storm

251590	10	危険	アドビシステムズ	-	Adobe Shockwave Player の Shockwave 3D Asset コンポーネントにおける任意のコードを実行される脆弱性	CWE-119 バッファエラー	CVE-2012-0760	2012-02-16 11:06	2012-02-14	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 25, 2026, 4:01 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
253361	6.1	MEDIUM Network	mattermost	mattermost_server	An issue was discovered in Mattermost Server before 4.2.0, 4.1.1, and 4.0.5. Display names allow XSS.	CWE-79 Cross-site Scripting	CVE-2017-18893	2024-11-21 12:21	2020-06-20	Show	GitHub Exploit DB Packet Storm

253362	6.1	MEDIUM Network	mattermost	mattermost_server	An issue was discovered in Mattermost Server before 4.2.0, 4.1.1, and 4.0.5. E-mail templates can have a field in which HTML content is not neutralized.	CWE-116 Improper Encoding or Escaping of Output	CVE-2017-18892	2024-11-21 12:21	2020-06-20	Show	GitHub Exploit DB Packet Storm

253363	6.1	MEDIUM Network	mattermost	mattermost_server	An issue was discovered in Mattermost Server before 4.2.0, 4.1.1, and 4.0.5. It allows Phishing because an error page can have a link.	CWE-601 Open Redirect	CVE-2017-18891	2024-11-21 12:21	2020-06-20	Show	GitHub Exploit DB Packet Storm

253364	4.3	MEDIUM Network	mattermost	mattermost_server	An issue was discovered in Mattermost Server before 4.3.0, 4.2.1, and 4.1.2. It allows an attacker to create a button that, when pressed by a user, launches an API request.	CWE-20 Improper Input Validation	CVE-2017-18890	2024-11-21 12:21	2020-06-20	Show	GitHub Exploit DB Packet Storm

253365	4.3	MEDIUM Network	mattermost	mattermost_server	An issue was discovered in Mattermost Server before 4.3.0, 4.2.1, and 4.1.2. An attacker could create fictive system-message posts via webhooks and slash commands, in the v3 or v4 REST API.	CWE-20 Improper Input Validation	CVE-2017-18889	2024-11-21 12:21	2020-06-20	Show	GitHub Exploit DB Packet Storm

253366	9.8	CRITICAL Network	mattermost	mattermost_server	An issue was discovered in Mattermost Server before 4.3.0, 4.2.1, and 4.1.2. It allows SQL injection during the fetching of multiple posts.	CWE-89 SQL Injection	CVE-2017-18888	2024-11-21 12:21	2020-06-20	Show	GitHub Exploit DB Packet Storm

253367	5.3	MEDIUM Network	mattermost	mattermost_server	An issue was discovered in Mattermost Server before 4.3.0, 4.2.1, and 4.1.2. It discloses the team creator's e-mail address to members.	CWE-200 Information Exposure	CVE-2017-18887	2024-11-21 12:21	2020-06-20	Show	GitHub Exploit DB Packet Storm

253368	8.8	HIGH Network	mattermost	mattermost_server	An issue was discovered in Mattermost Server before 4.3.0, 4.2.1, and 4.1.2. It allows a bypass of restrictions on use of slash commands.	CWE-732 Incorrect Permission Assignment for Critical Resource	CVE-2017-18886	2024-11-21 12:21	2020-06-20	Show	GitHub Exploit DB Packet Storm

253369	9.8	CRITICAL Network	mattermost	mattermost_server	An issue was discovered in Mattermost Server before 4.3.0, 4.2.1, and 4.1.2. It allows attackers to gain privileges by accessing unintended API endpoints on a user's behalf.	CWE-269 Improper Privilege Management	CVE-2017-18885	2024-11-21 12:21	2020-06-20	Show	GitHub Exploit DB Packet Storm

253370	8.1	HIGH Network	mattermost	mattermost_server	An issue was discovered in Mattermost Server before 4.3.0, 4.2.1, and 4.1.2. It allows attackers to gain privileges by using a registered OAuth application with personal access tokens.	CWE-269 Improper Privilege Management	CVE-2017-18884	2024-11-21 12:21	2020-06-20	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed