Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 21, 2026, 6:01 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
240431 7.5 危険 jetbox - Jetbox CMS の index.php における設定変数を上書きされる脆弱性 - CVE-2006-3584 2012-09-25 15:35 2006-08-8 Show GitHub Exploit DB Packet Storm
240432 7.5 危険 jetbox - Jetbox CMS におけるセッションをハイジャックされる脆弱性 CWE-287
不適切な認証
CVE-2006-3583 2012-09-25 15:35 2006-08-8 Show GitHub Exploit DB Packet Storm
240433 7.5 危険 julian pawlowski - capi4hylafax の c2faxrecv における任意のコマンドを実行される脆弱性 - CVE-2006-3126 2012-09-25 15:35 2006-09-5 Show GitHub Exploit DB Packet Storm
240434 2.1 注意 matt blaze - Debian GNU/Linux パッケージの Matt Blaze CFS における整数オーバーフローの脆弱性 - CVE-2006-3123 2012-09-25 15:35 2006-08-2 Show GitHub Exploit DB Packet Storm
240435 5 警告 ISC, Inc. - dhcpd サーバの memory.c の supersede_lease 関数におけるサービス運用妨害 (DoS) の脆弱性 CWE-399
リソース管理の問題
CVE-2006-3122 2012-09-25 15:35 2006-08-9 Show GitHub Exploit DB Packet Storm
240436 4.6 警告 PC Tools - PC Tools AntiVirus における権限を取得される脆弱性 - CVE-2006-3114 2012-09-25 15:35 2006-08-8 Show GitHub Exploit DB Packet Storm
240437 5 警告 Mono Project
SUSE
- Mono/C# Web サーバにおけるディレクトリトラバーサルの脆弱性 - CVE-2006-2658 2012-09-25 15:35 2006-09-12 Show GitHub Exploit DB Packet Storm
240438 6.8 警告 pentaware
microchip data systems
- TZipTV コンポーネントにおけるヒープベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー
CVE-2006-2482 2012-09-25 15:35 2006-09-8 Show GitHub Exploit DB Packet Storm
240439 9.3 危険 マイクロソフト - Microsoft Publisher におけるスタックベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー
CVE-2006-0001 2012-09-25 15:35 2006-09-12 Show GitHub Exploit DB Packet Storm
240440 2.6 注意 ジャストシステム - ATOK for Android における学習情報ファイルのアクセス権限に関する問題 CWE-264
認可・権限・アクセス制御
CVE-2012-4016 2012-09-25 12:01 2012-09-25 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 21, 2026, 4:10 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
267661 7.8 HIGH
Local
apple mac_os_x QuickTime in Apple OS X before 10.11.4 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted FlashPix image, a different vulnerability than … CWE-119
Incorrect Access of Indexable Resource ('Range Error') 
CVE-2016-1767 2024-11-21 11:47 2016-03-24 Show GitHub Exploit DB Packet Storm
267662 7.5 HIGH
Network
apple iphone_os The Profiles component in Apple iOS before 9.3 does not properly validate certificates, which allows attackers to spoof an MDM profile trust relationship via unspecified vectors. NVD-CWE-noinfo
CVE-2016-1766 2024-11-21 11:47 2016-03-24 Show GitHub Exploit DB Packet Storm
267663 7.8 HIGH
Local
apple xcode otool in Apple Xcode before 7.3 allows local users to gain privileges or cause a denial of service (memory corruption and application crash) via unspecified vectors. CWE-119
Incorrect Access of Indexable Resource ('Range Error') 
CVE-2016-1765 2024-11-21 11:47 2016-03-24 Show GitHub Exploit DB Packet Storm
267664 4.3 MEDIUM
Network
apple mac_os_x The Content Security Policy (CSP) implementation in Messages in Apple OS X before 10.11.4 allows remote attackers to obtain sensitive information via a javascript: URL. CWE-200
Information Exposure
CVE-2016-1764 2024-11-21 11:47 2016-03-24 Show GitHub Exploit DB Packet Storm
267665 3.5 LOW
Network
apple iphone_os Messages in Apple iOS before 9.3 does not ensure that an auto-fill action applies to the intended message thread, which allows remote authenticated users to obtain sensitive information by providing … CWE-20
 Improper Input Validation 
CVE-2016-1763 2024-11-21 11:47 2016-03-24 Show GitHub Exploit DB Packet Storm
267666 8.1 HIGH
Network
apple
debian
canonical
xmlsoft
redhat
mcafee
watchos
iphone_os
mac_os_x
tvos
safari
debian_linux
ubuntu_linux
libxml2
enterprise_linux_desktop
enterprise_linux_server_aus
enterprise_linux_workstation
enterprise_…
The xmlNextChar function in libxml2 before 2.9.4 allows remote attackers to cause a denial of service (heap-based buffer over-read) via a crafted XML document. CWE-119
Incorrect Access of Indexable Resource ('Range Error') 
CVE-2016-1762 2024-11-21 11:47 2016-03-24 Show GitHub Exploit DB Packet Storm
267667 9.8 CRITICAL
Network
apple watchos
iphone_os
mac_os_x
libxml2 in Apple iOS before 9.3, OS X before 10.11.4, and watchOS before 2.2 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted XML docum… CWE-119
Incorrect Access of Indexable Resource ('Range Error') 
CVE-2016-1761 2024-11-21 11:47 2016-03-24 Show GitHub Exploit DB Packet Storm
267668 7.8 HIGH
Local
apple mac_os_x The kernel in Apple OS X before 10.11.4 allows attackers to execute arbitrary code in a privileged context or cause a denial of service (memory corruption) via a crafted app. CWE-119
Incorrect Access of Indexable Resource ('Range Error') 
CVE-2016-1759 2024-11-21 11:47 2016-03-24 Show GitHub Exploit DB Packet Storm
267669 3.3 LOW
Local
apple iphone_os
mac_os_x
The kernel in Apple iOS before 9.3 and OS X before 10.11.4 allows attackers to obtain sensitive memory-layout information or cause a denial of service (out-of-bounds read) via a crafted app. CWE-119
CWE-200
Incorrect Access of Indexable Resource ('Range Error') 
Information Exposure
CVE-2016-1758 2024-11-21 11:47 2016-03-24 Show GitHub Exploit DB Packet Storm
267670 7.0 HIGH
Local
apple iphone_os
mac_os_x
Race condition in the kernel in Apple iOS before 9.3 and OS X before 10.11.4 allows attackers to execute arbitrary code in a privileged context via a crafted app. CWE-362
Race Condition
CVE-2016-1757 2024-11-21 11:47 2016-03-24 Show GitHub Exploit DB Packet Storm