Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 27, 2026, noon

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
251641	7.5	危険	Broadwin アドバンテック株式会社	-	Advantech/BroadWin WebAccess の ActiveX コントロールにおけるバッファオーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2012-0243	2012-02-23 11:40	2012-02-21	Show	GitHub Exploit DB Packet Storm

251642	7.5	危険	Broadwin アドバンテック株式会社	-	Advantech/BroadWin WebAccess におけるフォーマットストリングの脆弱性	CWE-134 書式文字列の問題	CVE-2012-0242	2012-02-23 11:37	2012-02-21	Show	GitHub Exploit DB Packet Storm

251643	5	警告	Broadwin アドバンテック株式会社	-	Advantech/BroadWin WebAccess におけるサービス運用妨害 (メモリ破損) の脆弱性	CWE-20 不適切な入力確認	CVE-2012-0241	2012-02-23 11:36	2012-02-21	Show	GitHub Exploit DB Packet Storm

251644	7.5	危険	Broadwin アドバンテック株式会社	-	Advantech/BroadWin WebAccess の GbScriptAddUp.asp における任意のコードを実行される脆弱性	CWE-287 不適切な認証	CVE-2012-0240	2012-02-23 11:33	2012-02-21	Show	GitHub Exploit DB Packet Storm

251645	5	警告	Broadwin アドバンテック株式会社	-	Advantech/BroadWin WebAccess の uaddUpAdmin.asp における管理者パスワードを変更される脆弱性	CWE-287 不適切な認証	CVE-2012-0239	2012-02-23 11:32	2012-02-21	Show	GitHub Exploit DB Packet Storm

251646	7.5	危険	Broadwin アドバンテック株式会社	-	Advantech/BroadWin WebAccess の opcImg.asp におけるスタックベースのバッファオーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2012-0238	2012-02-23 11:29	2012-02-21	Show	GitHub Exploit DB Packet Storm

251647	6.4	警告	Broadwin アドバンテック株式会社	-	Advantech/BroadWin WebAccess における日付と時刻の同期設定を変更される脆弱性	CWE-119 バッファエラー	CVE-2012-0237	2012-02-23 11:27	2012-02-21	Show	GitHub Exploit DB Packet Storm

251648	5	警告	Broadwin アドバンテック株式会社	-	Advantech/BroadWin WebAccess における重要な情報を取得される脆弱性	CWE-200 情報漏えい	CVE-2012-0236	2012-02-23 11:23	2012-02-21	Show	GitHub Exploit DB Packet Storm

251649	6	警告	Broadwin アドバンテック株式会社	-	Advantech/BroadWin WebAccess におけるクロスサイトリクエストフォージェリの脆弱性	CWE-352 同一生成元ポリシー違反	CVE-2012-0235	2012-02-23 11:22	2012-02-21	Show	GitHub Exploit DB Packet Storm

251650	7.5	危険	Broadwin アドバンテック株式会社	-	Advantech/BroadWin WebAccess における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2012-0234	2012-02-23 11:21	2012-02-21	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 27, 2026, 4:52 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
265841	9.8	CRITICAL Network	juniper	junos_space	Insufficient authentication vulnerability in Junos Space before 15.2R2 allows remote network based users with access to Junos Space web interface to perform certain administrative tasks without authe…	CWE-287 Improper Authentication	CVE-2016-4926	2024-11-21 11:53	2017-03-21	Show	GitHub Exploit DB Packet Storm

265842	9.8	CRITICAL Network	imagemagick	imagemagick	The gnuplot delegate functionality in ImageMagick before 6.9.4-0 and GraphicsMagick allows remote attackers to execute arbitrary commands via unspecified vectors.	CWE-284 Improper Access Control	CVE-2016-5239	2024-11-21 11:53	2017-03-16	Show	GitHub Exploit DB Packet Storm

265843	7.5	HIGH Network	cloudera	manager	Cloudera Manager 5.5 and earlier allows remote attackers to enumerate user sessions via a request to /api/v11/users/sessions.	CWE-200 Information Exposure	CVE-2016-4950	2024-11-21 11:53	2017-03-8	Show	GitHub Exploit DB Packet Storm

265844	7.5	HIGH Network	cloudera	manager	Cloudera Manager 5.5 and earlier allows remote attackers to obtain sensitive information via a (1) stderr.log or (2) stdout.log value in the filename parameter to /cmf/process/<process_id>/logs.	CWE-200 Information Exposure	CVE-2016-4949	2024-11-21 11:53	2017-03-8	Show	GitHub Exploit DB Packet Storm

265845	6.1	MEDIUM Network	cloudera	manager	Multiple cross-site scripting (XSS) vulnerabilities in Cloudera Manager 5.5 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) Template Name field when renaming a t…	CWE-79 Cross-site Scripting	CVE-2016-4948	2024-11-21 11:53	2017-03-8	Show	GitHub Exploit DB Packet Storm

265846	5.3	MEDIUM Network	cloudera	hue	Cloudera HUE 3.9.0 and earlier allows remote attackers to enumerate user accounts via a request to desktop/api/users/autocomplete.	CWE-200 Information Exposure	CVE-2016-4947	2024-11-21 11:53	2017-03-8	Show	GitHub Exploit DB Packet Storm

265847	6.1	MEDIUM Network	cloudera	hue	Multiple cross-site scripting (XSS) vulnerabilities in Cloudera HUE 3.9.0 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) First name or (2) Last name field in th…	CWE-79 Cross-site Scripting	CVE-2016-4946	2024-11-21 11:53	2017-03-8	Show	GitHub Exploit DB Packet Storm

265848	5.5	MEDIUM Local	graphicsmagick	graphicsmagick	The DrawDashPolygon function in magick/render.c in GraphicsMagick before 1.3.24 and the SVG renderer in ImageMagick allow remote attackers to cause a denial of service (infinite loop) by converting a…	CWE-20 Improper Input Validation	CVE-2016-5240	2024-11-21 11:53	2017-02-28	Show	GitHub Exploit DB Packet Storm

265849	5.5	MEDIUM Local	libdwarf_project	libdwarf	dwarf_form.c in libdwarf 20160115 allows remote attackers to cause a denial of service (crash) via a crafted elf file.	CWE-476 NULL Pointer Dereference	CVE-2016-5027	2024-11-21 11:53	2017-02-25	Show	GitHub Exploit DB Packet Storm

265850	7.5	HIGH Network	libdwarf_project	libdwarf	The WRITE_UNALIGNED function in dwarf_elf_access.c in libdwarf before 20160923 allows remote attackers to cause a denial of service (out-of-bounds write and crash) via a crafted DWARF section.	CWE-787 Out-of-bounds Write	CVE-2016-5044	2024-11-21 11:53	2017-02-18	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed