Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":Feb. 9, 2026, 12:59 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
228881 4.3 警告 Joomla! - Joomla! 用 Language Switcher モジュールにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2012-4532 2012-11-2 14:01 2012-09-13 Show GitHub Exploit DB Packet Storm
228882 4.3 警告 Joomla! - Joomla! におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2012-4531 2012-11-2 14:00 2012-09-13 Show GitHub Exploit DB Packet Storm
228883 10 危険 General Electric Company - GE Intelligent Platforms Proficy Real-Time Information Portal におけるサービス運用妨害 (DoS) の脆弱性 CWE-20
不適切な入力確認
CVE-2012-3026 2012-11-2 13:59 2012-08-14 Show GitHub Exploit DB Packet Storm
228884 10 危険 General Electric Company - GE Intelligent Platforms Proficy Real-Time Information Portal におけるサービス運用妨害 (DoS) の脆弱性 CWE-20
不適切な入力確認
CVE-2012-3021 2012-11-2 13:57 2012-08-14 Show GitHub Exploit DB Packet Storm
228885 10 危険 General Electric Company - GE Intelligent Platforms Proficy Real-Time Information Portal におけるサービス運用妨害 (DoS) の脆弱性 CWE-20
不適切な入力確認
CVE-2012-3010 2012-11-2 13:57 2012-08-14 Show GitHub Exploit DB Packet Storm
228886 2.1 注意 シトリックス・システムズ - Xen の PV ドメインビルダーにおけるサービス運用妨害 (DoS) の脆弱性 CWE-20
不適切な入力確認
CVE-2012-4544 2012-11-2 13:52 2012-10-31 Show GitHub Exploit DB Packet Storm
228887 4.3 警告 Pebble - Pebble におけるオープンリダイレクトの脆弱性 CWE-20
不適切な入力確認
CVE-2012-5170 2012-11-2 12:02 2012-11-2 Show GitHub Exploit DB Packet Storm
228888 4.3 警告 Pebble - Pebble における HTTP ヘッダインジェクションの脆弱性 CWE-Other
その他
CVE-2012-4023 2012-11-2 12:02 2012-11-2 Show GitHub Exploit DB Packet Storm
228889 5 警告 Pebble - Pebble において記事が閲覧不能になる脆弱性 CWE-Other
その他
CVE-2012-4022 2012-11-2 12:01 2012-11-2 Show GitHub Exploit DB Packet Storm
228890 6.5 警告 株式会社マインド - MosP勤怠管理システムにおける認証不備の脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2012-4021 2012-11-2 12:01 2012-11-2 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:April 26, 2026, 4:08 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
211491 7.2 HIGH
Network
alegrocart alegrocart Multiple SQL injection vulnerabilities in AlegroCart 1.2.8 allow remote administrators to execute arbitrary SQL commands via the download parameter in the (1) check_download and possibly (2) check_fi… CWE-89
SQL Injection
CVE-2015-9226 2024-11-21 11:40 2017-09-12 Show GitHub Exploit DB Packet Storm
211492 7.8 HIGH
Local
microsoft windows_rt_8.1
windows_server_2012
windows_7
windows_10
windows_server_2016
windows_8.1
windows_server_2008
windows_vista
The Common Log File System (CLFS) driver in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Go… CWE-119
Incorrect Access of Indexable Resource ('Range Error') 
CVE-2016-0026 2024-11-21 11:40 2016-11-10 Show GitHub Exploit DB Packet Storm
211493 5.5 MEDIUM
Local
microsoft outlook_web_access Outlook Web Access (OWA) in Microsoft Exchange Server 2013 SP1, Cumulative Update 11, and Cumulative Update 12 and 2016 Gold and Cumulative Update 1 does not properly restrict loading of IMG elements… CWE-200
Information Exposure
CVE-2016-0028 2024-11-21 11:40 2016-06-16 Show GitHub Exploit DB Packet Storm
211494 7.3 HIGH
Local
microsoft word
word_for_mac
office_web_apps
sharepoint_server
office
office_web_apps_server
office_compatibility_pack
office_online_server
Microsoft Word 2007 SP3, Office 2010 SP2, Word 2010 SP2, Word 2013 SP1, Word 2013 RT SP1, Office 2016, Word 2016, Word for Mac 2011, Word 2016 for Mac, Office Compatibility Pack SP3, Word Automation … CWE-20
 Improper Input Validation 
CVE-2016-0025 2024-11-21 11:40 2016-06-16 Show GitHub Exploit DB Packet Storm
211495 7.8 HIGH
Local
microsoft infopath Microsoft InfoPath 2007 SP3, 2010 SP2, and 2013 SP1 allows remote attackers to execute arbitrary code via a crafted Office document, aka "Microsoft Office Memory Corruption Vulnerability." CWE-119
Incorrect Access of Indexable Resource ('Range Error') 
CVE-2016-0021 2024-11-21 11:40 2016-03-9 Show GitHub Exploit DB Packet Storm
211496 7.8 HIGH
Local
microsoft word
word_for_mac
office
office_web_apps_server
sharepoint_server
office_compatibility_pack
word_viewer
Microsoft Word 2007 SP3, Office 2010 SP2, Word 2010 SP2, Word 2013 SP1, Word 2013 RT SP1, Word 2016, Word for Mac 2011, Word 2016 for Mac, Office Compatibility Pack SP3, Word Viewer, Word Automation … CWE-119
Incorrect Access of Indexable Resource ('Range Error') 
CVE-2016-0052 2024-11-21 11:40 2016-02-10 Show GitHub Exploit DB Packet Storm
211497 7.8 HIGH
Local
microsoft windows_rt_8.1
windows_server_2012
windows_7
windows_10
windows_8.1
windows_server_2008
windows_vista
The WebDAV client in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, and Windows 10 Gold and 1511 allows … CWE-264
Permissions, Privileges, and Access Controls
CVE-2016-0051 2024-11-21 11:40 2016-02-10 Show GitHub Exploit DB Packet Storm
211498 5.3 MEDIUM
Network
microsoft windows_server_2012
windows_server_2008
Network Policy Server (NPS) in Microsoft Windows Server 2008 SP2 and R2 SP1 and Server 2012 Gold and R2 misparses username queries, which allows remote attackers to cause a denial of service (RADIUS … CWE-20
 Improper Input Validation 
CVE-2016-0050 2024-11-21 11:40 2016-02-10 Show GitHub Exploit DB Packet Storm
211499 6.2 MEDIUM
Local
microsoft windows_server_2012
windows_7
windows_10
windows_8.1
windows_server_2008
windows_vista
Kerberos in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, and Windows 10 Gold and 1511 does not properly validate passw… CWE-255
Credentials Management
CVE-2016-0049 2024-11-21 11:40 2016-02-10 Show GitHub Exploit DB Packet Storm
211500 7.8 HIGH
Local
microsoft windows_rt_8.1
windows_server_2012
windows_7
windows_10
windows_8.1
windows_server_2008
windows_vista
The kernel-mode drivers in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, and Windows 10 Gold and 1511 a… CWE-264
Permissions, Privileges, and Access Controls
CVE-2016-0048 2024-11-21 11:40 2016-02-10 Show GitHub Exploit DB Packet Storm