Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 19, 2026, 6 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
228111 10 危険 アドビシステムズ - Adobe Flash Player および AIR の NetStream クラスにおける任意のコードを実行される脆弱性 CWE-119
バッファエラー
CVE-2012-0773 2013-06-7 17:58 2012-03-28 Show GitHub Exploit DB Packet Storm
228112 10 危険 アドビシステムズ - Windows 上で稼働する Adobe Flash Player および AIR における任意のコードを実行される脆弱性 CWE-119
バッファエラー
CVE-2012-0772 2013-06-7 17:56 2012-03-28 Show GitHub Exploit DB Packet Storm
228113 5 警告 アドビシステムズ - Adobe Flash Player における重要な情報を取得される脆弱性 CWE-189
数値処理の問題
CVE-2012-0769 2013-06-7 17:54 2012-03-5 Show GitHub Exploit DB Packet Storm
228114 10 危険 アドビシステムズ - Adobe Flash Player の Matrix3D コンポーネントにおける任意のコードを実行される脆弱性 CWE-399
リソース管理の問題
CVE-2012-0768 2013-06-7 17:53 2012-03-5 Show GitHub Exploit DB Packet Storm
228115 10 危険 アドビシステムズ
Google
- Google Chrome 上で稼働する Adobe Flash Player におけるサービス運用妨害 (メモリ破損) の脆弱性 CWE-119
バッファエラー
CVE-2012-0725 2013-06-7 16:59 2012-03-28 Show GitHub Exploit DB Packet Storm
228116 4.3 警告 シスコシステムズ - Cisco WebEx Meetings Server の Event Center モジュールにおけるホスト鍵およびイベントパスワードを破られる脆弱性 CWE-287
不適切な認証
CVE-2013-1205 2013-06-7 16:56 2013-06-5 Show GitHub Exploit DB Packet Storm
228117 2.1 注意 アップル - Apple Mac OS X の XNU kernel における KASLR 保護メカニズムを破られる脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2013-3952 2013-06-7 15:56 2013-04-26 Show GitHub Exploit DB Packet Storm
228118 2.1 注意 アップル - Apple Mac OS X の XNU カーネルの posix_spawn システムコールにおけるアクセス制限を回避される脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2013-3949 2013-06-7 14:58 2013-04-26 Show GitHub Exploit DB Packet Storm
228119 4.3 警告 アップル - Apple iOS における任意のアプリケーションのインストールを誘発される脆弱性 CWE-20
不適切な入力確認
CVE-2013-3948 2013-06-7 14:57 2013-04-26 Show GitHub Exploit DB Packet Storm
228120 9.3 危険 アップル - Apple QuickTime におけるバッファオーバーフローの脆弱性 CWE-119
バッファエラー
CVE-2013-0988 2013-06-7 13:54 2013-05-22 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 20, 2026, 4:01 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
275681 6.1 MEDIUM
Network
doxygen doxygen Insufficient sanitization of the query parameter in templates/html/search_opensearch.php could lead to reflected cross-site scripting or iframe injection. CWE-79
Cross-site Scripting
CVE-2016-10245 2024-11-21 11:43 2019-05-25 Show GitHub Exploit DB Packet Storm
275682 9.8 CRITICAL
Network
haraka_project haraka Haraka version 2.8.8 and earlier comes with a plugin for processing attachments for zip files. Versions 2.8.8 and earlier can be vulnerable to command injection. CWE-77
Command Injection
CVE-2016-1000282 2024-11-21 11:43 2019-02-6 Show GitHub Exploit DB Packet Storm
275683 9.8 CRITICAL
Network
dthdevelopment dt_register Joomla extension DT Register version before 3.1.12 (Joomla 3.x) / 2.8.18 (Joomla 2.5) contains an SQL injection in "/index.php?controller=calendar&format=raw&cat[0]=SQLi&task=events". This attack app… CWE-89
SQL Injection
CVE-2016-1000271 2024-11-21 11:43 2019-02-5 Show GitHub Exploit DB Packet Storm
275684 8.8 HIGH
Network
google chrome Insufficient data validation on image data in PDFium in Google Chrome prior to 51.0.2704.63 allowed a remote attacker to perform an out of bounds memory read via a crafted PDF file. CWE-125
Out-of-bounds Read
CVE-2016-10403 2024-11-21 11:43 2019-01-10 Show GitHub Exploit DB Packet Storm
275685 5.3 MEDIUM
Network
salesforce
ibm
redhat
tough-cookie
api_connect
openshift_container_platform
NodeJS Tough-Cookie version 2.2.2 contains a Regular Expression Parsing vulnerability in HTTP request Cookie Header parsing that can result in Denial of Service. This attack appear to be exploitable … CWE-20
 Improper Input Validation 
CVE-2016-1000232 2024-11-21 11:43 2018-09-6 Show GitHub Exploit DB Packet Storm
275686 7.4 HIGH
Network
bouncycastle legion-of-the-bouncy-castle-java-crytography-api In the Bouncy Castle JCE Provider version 1.55 and earlier the ECIES implementation allowed the use of ECB mode. This mode is regarded as unsafe and support for it has been removed from the provider. CWE-310
Cryptographic Issues
CVE-2016-1000352 2024-11-21 11:43 2018-06-5 Show GitHub Exploit DB Packet Storm
275687 3.7 LOW
Network
bouncycastle
debian
legion-of-the-bouncy-castle-java-crytography-api
debian_linux
In the Bouncy Castle JCE Provider version 1.55 and earlier the other party DH public key is not fully validated. This can cause issues as invalid keys can be used to reveal details about the other pa… CWE-320
 Key Management Errors
CVE-2016-1000346 2024-11-21 11:43 2018-06-5 Show GitHub Exploit DB Packet Storm
275688 5.9 MEDIUM
Network
bouncycastle
debian
legion-of-the-bouncy-castle-java-crytography-api
debian_linux
In the Bouncy Castle JCE Provider version 1.55 and earlier the DHIES/ECIES CBC mode vulnerable to padding oracle attack. For BC 1.55 and older, in an environment where timings can be easily observed,… CWE-361
 7PK - Time and State
CVE-2016-1000345 2024-11-21 11:43 2018-06-5 Show GitHub Exploit DB Packet Storm
275689 7.4 HIGH
Network
bouncycastle legion-of-the-bouncy-castle-java-crytography-api In the Bouncy Castle JCE Provider version 1.55 and earlier the DHIES implementation allowed the use of ECB mode. This mode is regarded as unsafe and support for it has been removed from the provider. CWE-310
Cryptographic Issues
CVE-2016-1000344 2024-11-21 11:43 2018-06-5 Show GitHub Exploit DB Packet Storm
275690 7.5 HIGH
Network
bouncycastle
debian
legion-of-the-bouncy-castle-java-crytography-api
debian_linux
In the Bouncy Castle JCE Provider version 1.55 and earlier the DSA key pair generator generates a weak private key if used with default values. If the JCA key pair generator is not explicitly initial… CWE-310
Cryptographic Issues
CVE-2016-1000343 2024-11-21 11:43 2018-06-4 Show GitHub Exploit DB Packet Storm