Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 9, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
228561 5 警告 Google - Google Chrome におけるポップアップブロッカーを回避される脆弱性 CWE-noinfo
情報不足 		CVE-2012-2892 2012-12-26 18:05 2012-09-25 Show GitHub Exploit DB Packet Storm
228562 5 警告 Google - Google Chrome の IPC の実装における重要な情報を取得される脆弱性 CWE-200
情報漏えい 		CVE-2012-2891 2012-12-26 18:04 2012-09-25 Show GitHub Exploit DB Packet Storm
228563 7.5 危険 Google - Google Chrome におけるサービス運用妨害 (DoS) の脆弱性 CWE-399
リソース管理の問題 		CVE-2012-2888 2012-12-26 18:02 2012-09-25 Show GitHub Exploit DB Packet Storm
228564 7.5 危険 Google - Google Chrome におけるサービス運用妨害 (DoS) の脆弱性 CWE-399
リソース管理の問題 		CVE-2012-2887 2012-12-26 18:01 2012-09-25 Show GitHub Exploit DB Packet Storm
228565 4.3 警告 Google - Google Chrome におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2012-2886 2012-12-26 18:00 2012-09-25 Show GitHub Exploit DB Packet Storm
228566 2.6 注意 VMware
Python Software Foundation		 - Python SimpleHTTPServer におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2011-4940 2012-12-26 18:00 2012-06-19 Show GitHub Exploit DB Packet Storm
228567 7.5 危険 Google - Google Chrome におけるメモリ二重解放の脆弱性 CWE-399
リソース管理の問題 		CVE-2012-2885 2012-12-26 17:59 2012-09-25 Show GitHub Exploit DB Packet Storm
228568 5 警告 Google - Google Chrome で使用される Skia におけるサービス運用妨害 (out-of-bounds read) の脆弱性 CWE-119
バッファエラー 		CVE-2012-2884 2012-12-26 17:58 2012-09-25 Show GitHub Exploit DB Packet Storm
228569 4.6 警告 GNU Project
VMware		 - GNU C Library の stdlib における整数オーバーフローの脆弱性 CWE-189
数値処理の問題 		CVE-2012-3480 2012-12-26 17:57 2012-08-25 Show GitHub Exploit DB Packet Storm
228570 3.3 注意 GNU Project
VMware		 - GNU C Library の addmntent 関数における /etc/mtab ファイルの破損を誘発される脆弱性 CWE-16
環境設定 		CVE-2011-1089 2012-12-26 17:55 2011-04-10 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 9, 2026, 4:16 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
274281 7.5 HIGH
Network 		rubyonrails ruby_on_rails
rails 		actionpack/lib/action_dispatch/http/mime_type.rb in Action Pack in Ruby on Rails before 3.2.22.1, 4.0.x and 4.1.x before 4.1.14.1, 4.2.x before 4.2.5.1, and 5.x before 5.0.0.beta1.1 does not properly… CWE-399
 Resource Management Errors 		CVE-2016-0751 2024-11-21 11:42 2016-02-16 Show GitHub Exploit DB Packet Storm
274282 5.3 MEDIUM
Network 		f5
canonical
debian
opensuse
apple 		nginx
ubuntu_linux
debian_linux
leap
xcode 		The resolver in nginx before 1.8.1 and 1.9.x before 1.9.10 does not properly limit CNAME resolution, which allows remote attackers to cause a denial of service (worker process resource consumption) v… CWE-400
 Uncontrolled Resource Consumption 		CVE-2016-0747 2024-11-21 11:42 2016-02-16 Show GitHub Exploit DB Packet Storm
274283 9.8 CRITICAL
Network 		f5
canonical
debian
opensuse
apple 		nginx
ubuntu_linux
debian_linux
leap
xcode 		Use-after-free vulnerability in the resolver in nginx 0.6.18 through 1.8.0 and 1.9.x before 1.9.10 allows remote attackers to cause a denial of service (worker process crash) or possibly have unspeci… CWE-416
 Use After Free 		CVE-2016-0746 2024-11-21 11:42 2016-02-16 Show GitHub Exploit DB Packet Storm
274284 7.5 HIGH
Network 		f5
canonical
debian
opensuse
apple
redhat 		nginx
ubuntu_linux
debian_linux
leap
xcode
software_collections 		The resolver in nginx before 1.8.1 and 1.9.x before 1.9.10 allows remote attackers to cause a denial of service (invalid pointer dereference and worker process crash) via a crafted UDP DNS response. CWE-476
 NULL Pointer Dereference 		CVE-2016-0742 2024-11-21 11:42 2016-02-16 Show GitHub Exploit DB Packet Storm
274285 3.7 LOW
Network 		openssl openssl The DH_check_pub_key function in crypto/dh/dh_check.c in OpenSSL 1.0.2 before 1.0.2f does not ensure that prime numbers are appropriate for Diffie-Hellman (DH) key exchange, which makes it easier for… CWE-200
Information Exposure 		CVE-2016-0701 2024-11-21 11:42 2016-02-15 Show GitHub Exploit DB Packet Storm
274286 6.1 MEDIUM
Network 		tollgrade smartgrid_lighthouse_sensor_management_system Cross-site scripting (XSS) vulnerability in Tollgrade SmartGrid LightHouse Sensor Management System (SMS) Software EMS before 5.1, and 4.1.0 Build 16, allows remote attackers to inject arbitrary web … CWE-79
Cross-site Scripting 		CVE-2016-0866 2024-11-21 11:42 2016-02-13 Show GitHub Exploit DB Packet Storm
274287 8.8 HIGH
Network 		tollgrade smartgrid_lighthouse_sensor_management_system Tollgrade SmartGrid LightHouse Sensor Management System (SMS) Software EMS before 5.1, and 4.1.0 Build 16, allows remote authenticated users to change arbitrary passwords via unspecified vectors. CWE-255
Credentials Management 		CVE-2016-0865 2024-11-21 11:42 2016-02-13 Show GitHub Exploit DB Packet Storm
274288 5.3 MEDIUM
Network 		tollgrade smartgrid_lighthouse_sensor_management_system Tollgrade SmartGrid LightHouse Sensor Management System (SMS) Software EMS before 5.1, and 4.1.0 Build 16, allows remote attackers to obtain sensitive report and username information via unspecified … CWE-200
Information Exposure 		CVE-2016-0864 2024-11-21 11:42 2016-02-13 Show GitHub Exploit DB Packet Storm
274289 8.8 HIGH
Network 		tollgrade smartgrid_lighthouse_sensor_management_system Cross-site request forgery (CSRF) vulnerability in Tollgrade SmartGrid LightHouse Sensor Management System (SMS) Software EMS before 5.1, and 4.1.0 Build 16, allows remote attackers to hijack the aut… CWE-352
 Origin Validation Error 		CVE-2016-0863 2024-11-21 11:42 2016-02-13 Show GitHub Exploit DB Packet Storm
274290 5.4 MEDIUM
Network 		emc documentum_xcp EMC Documentum xCP 2.1 before patch 23 and 2.2 before patch 11 allows remote authenticated users to read arbitrary files via a POST request containing an XML external entity declaration in conjunctio… NVD-CWE-Other
CVE-2016-0882 2024-11-21 11:42 2016-02-12 Show GitHub Exploit DB Packet Storm