Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 28, 2026, 4 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
228591 4.3 警告 WordPress.org - WordPress におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2012-2399 2013-07-26 12:07 2012-04-21 Show GitHub Exploit DB Packet Storm
228592 7.5 危険 Pidgin - Pidgin の libpurple の MXit プロトコルプラグインにおけるバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2012-3374 2013-07-25 16:24 2012-07-5 Show GitHub Exploit DB Packet Storm
228593 4.3 警告 Best Practical Solutions - Best Practical Solutions Request Tracker における製品の鍵束の鍵の読み取り制限を回避される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2012-6581 2013-07-25 14:54 2012-10-25 Show GitHub Exploit DB Packet Storm
228594 4.3 警告 Best Practical Solutions - Best Practical Solutions Request Tracker におけるメッセージの生成元の詳細を偽装される脆弱性 CWE-310
暗号の問題 		CVE-2012-6580 2013-07-25 14:51 2012-10-25 Show GitHub Exploit DB Packet Storm
228595 6.4 警告 Best Practical Solutions - Best Practical Solutions Request Tracker における特定の送信メールに対して暗号化または署名を設定される脆弱性 CWE-310
暗号の問題 		CVE-2012-6579 2013-07-25 14:49 2012-10-25 Show GitHub Exploit DB Packet Storm
228596 4.3 警告 Best Practical Solutions - Best Practical Solutions Request Tracker におけるメッセージを偽装される脆弱性 CWE-310
暗号の問題 		CVE-2012-6578 2013-07-25 14:48 2012-10-25 Show GitHub Exploit DB Packet Storm
228597 5 警告 シスコシステムズ - Cisco Unified MeetingPlace Web Conferencing サーバにおけるアクセス制限を回避される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2013-3438 2013-07-25 14:02 2013-07-23 Show GitHub Exploit DB Packet Storm
228598 10 危険 日本電気
Portable SDK for UPnP project
ソニー株式会社
古河電気工業		 - Portable SDK for UPnP Devices におけるスタックベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2012-5958 2013-07-24 17:04 2012-12-6 Show GitHub Exploit DB Packet Storm
228599 10 危険 日本電気
Portable SDK for UPnP project
ソニー株式会社
古河電気工業		 - Portable SDK for UPnP Devices におけるスタックベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2012-5959 2013-07-24 17:04 2012-12-6 Show GitHub Exploit DB Packet Storm
228600 10 危険 日本電気
Portable SDK for UPnP project
ソニー株式会社
古河電気工業		 - Portable SDK for UPnP Devices におけるスタックベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2012-5960 2013-07-24 17:03 2012-12-6 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 28, 2026, 4:01 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
276261 7.8 HIGH
Local 		apple mac_os_x QuickTime in Apple OS X before 10.11.4 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted FlashPix image, a different vulnerability than … CWE-119
Incorrect Access of Indexable Resource ('Range Error')  		CVE-2016-1767 2024-11-21 11:47 2016-03-24 Show GitHub Exploit DB Packet Storm
276262 7.5 HIGH
Network 		apple iphone_os The Profiles component in Apple iOS before 9.3 does not properly validate certificates, which allows attackers to spoof an MDM profile trust relationship via unspecified vectors. NVD-CWE-noinfo
CVE-2016-1766 2024-11-21 11:47 2016-03-24 Show GitHub Exploit DB Packet Storm
276263 7.8 HIGH
Local 		apple xcode otool in Apple Xcode before 7.3 allows local users to gain privileges or cause a denial of service (memory corruption and application crash) via unspecified vectors. CWE-119
Incorrect Access of Indexable Resource ('Range Error')  		CVE-2016-1765 2024-11-21 11:47 2016-03-24 Show GitHub Exploit DB Packet Storm
276264 4.3 MEDIUM
Network 		apple mac_os_x The Content Security Policy (CSP) implementation in Messages in Apple OS X before 10.11.4 allows remote attackers to obtain sensitive information via a javascript: URL. CWE-200
Information Exposure 		CVE-2016-1764 2024-11-21 11:47 2016-03-24 Show GitHub Exploit DB Packet Storm
276265 3.5 LOW
Network 		apple iphone_os Messages in Apple iOS before 9.3 does not ensure that an auto-fill action applies to the intended message thread, which allows remote authenticated users to obtain sensitive information by providing … CWE-20
 Improper Input Validation  		CVE-2016-1763 2024-11-21 11:47 2016-03-24 Show GitHub Exploit DB Packet Storm
276266 8.1 HIGH
Network 		apple
debian
canonical
xmlsoft
redhat
mcafee 		watchos
iphone_os
mac_os_x
tvos
safari
debian_linux
ubuntu_linux
libxml2
enterprise_linux_desktop
enterprise_linux_server_aus
enterprise_linux_workstation
enterprise_… 		The xmlNextChar function in libxml2 before 2.9.4 allows remote attackers to cause a denial of service (heap-based buffer over-read) via a crafted XML document. CWE-119
Incorrect Access of Indexable Resource ('Range Error')  		CVE-2016-1762 2024-11-21 11:47 2016-03-24 Show GitHub Exploit DB Packet Storm
276267 9.8 CRITICAL
Network 		apple watchos
iphone_os
mac_os_x 		libxml2 in Apple iOS before 9.3, OS X before 10.11.4, and watchOS before 2.2 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted XML docum… CWE-119
Incorrect Access of Indexable Resource ('Range Error')  		CVE-2016-1761 2024-11-21 11:47 2016-03-24 Show GitHub Exploit DB Packet Storm
276268 7.8 HIGH
Local 		apple mac_os_x The kernel in Apple OS X before 10.11.4 allows attackers to execute arbitrary code in a privileged context or cause a denial of service (memory corruption) via a crafted app. CWE-119
Incorrect Access of Indexable Resource ('Range Error')  		CVE-2016-1759 2024-11-21 11:47 2016-03-24 Show GitHub Exploit DB Packet Storm
276269 3.3 LOW
Local 		apple iphone_os
mac_os_x 		The kernel in Apple iOS before 9.3 and OS X before 10.11.4 allows attackers to obtain sensitive memory-layout information or cause a denial of service (out-of-bounds read) via a crafted app. CWE-119
CWE-200
Incorrect Access of Indexable Resource ('Range Error') 
Information Exposure 		CVE-2016-1758 2024-11-21 11:47 2016-03-24 Show GitHub Exploit DB Packet Storm
276270 7.0 HIGH
Local 		apple iphone_os
mac_os_x 		Race condition in the kernel in Apple iOS before 9.3 and OS X before 10.11.4 allows attackers to execute arbitrary code in a privileged context via a crafted app. CWE-362
Race Condition 		CVE-2016-1757 2024-11-21 11:47 2016-03-24 Show GitHub Exploit DB Packet Storm