Vulnerability Search Top

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

Vulnerability Information Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 20, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
240501	10	危険	FFmpeg	-	FFmpeg の libavcodec/dfa.c 内の decode_dds1 関数における脆弱性	CWE-noinfo 情報不足	CVE-2012-2798	2012-09-13 10:57	2012-05-25	Show	GitHub Exploit DB Packet Storm

240502	10	危険	FFmpeg	-	FFmpeg の libavcodec/mpegaudiodec.c 内の decode_frame_mp3on4 関数における脆弱性	CWE-noinfo 情報不足	CVE-2012-2797	2012-09-13 10:55	2012-05-25	Show	GitHub Exploit DB Packet Storm

240503	10	危険	FFmpeg	-	FFmpeg の libavcodec/vc1dec.c 内の vc1_decode_frame 関数における脆弱性	CWE-noinfo 情報不足	CVE-2012-2796	2012-09-13 10:55	2012-05-25	Show	GitHub Exploit DB Packet Storm

240504	10	危険	FFmpeg	-	FFmpeg の libavcodec/wmalosslessdec.c における脆弱性	CWE-noinfo 情報不足	CVE-2012-2795	2012-09-13 10:52	2012-05-25	Show	GitHub Exploit DB Packet Storm

240505	10	危険	FFmpeg	-	FFmpeg の libavcodec/indeo5.c 内の decode_mb_info 関数における脆弱性	CWE-noinfo 情報不足	CVE-2012-2794	2012-09-13 10:40	2012-05-25	Show	GitHub Exploit DB Packet Storm

240506	10	危険	FFmpeg	-	FFmpeg の libavcodec/lagarith.c 内の lag_decode_zero_run_line 関数における脆弱性	CWE-noinfo 情報不足	CVE-2012-2793	2012-09-13 10:39	2012-05-25	Show	GitHub Exploit DB Packet Storm

240507	10	危険	FFmpeg	-	FFmpeg の libavcodec/wmalosslessdec.c 内の decode_init 関数における脆弱性	CWE-noinfo 情報不足	CVE-2012-2792	2012-09-13 10:38	2012-05-25	Show	GitHub Exploit DB Packet Storm

240508	10	危険	FFmpeg	-	FFmpeg の libavcodec/ の indeo4.c および ivi_common.c における脆弱性	CWE-noinfo 情報不足	CVE-2012-2791	2012-09-13 10:21	2012-05-25	Show	GitHub Exploit DB Packet Storm

240509	10	危険	FFmpeg	-	FFmpeg の libavcodec/alsdec.c 内の read_var_block_data 関数における脆弱性	CWE-noinfo 情報不足	CVE-2012-2790	2012-09-13 10:20	2012-05-25	Show	GitHub Exploit DB Packet Storm

240510	10	危険	FFmpeg	-	FFmpeg の libavformat/avidec.c 内の avi_read_packet 関数における脆弱性	CWE-noinfo 情報不足	CVE-2012-2789	2012-09-13 10:19	2012-05-25	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 20, 2026, 4:14 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
267441	8.1	HIGH Network	saltstack opensuse	salt leap	Salt 2015.8.x before 2015.8.4 does not properly handle clear messages on the minion, which allows man-in-the-middle attackers to execute arbitrary code by inserting packets into the minion-master dat…	CWE-284 Improper Access Control	CVE-2016-1866	2024-11-21 11:47	2016-04-12	Show	GitHub Exploit DB Packet Storm

267442	6.2	MEDIUM Local	freebsd	freebsd	Integer signedness error in the amd64_set_ldt function in sys/amd64/amd64/sys_machdep.c in FreeBSD 9.3 before p39, 10.1 before p31, and 10.2 before p14 allows local users to cause a denial of service…	CWE-119 Incorrect Access of Indexable Resource ('Range Error')	CVE-2016-1885	2024-11-21 11:47	2016-04-12	Show	GitHub Exploit DB Packet Storm

267443	7.5	HIGH Network	apache	jetspeed	The User Manager service in Apache Jetspeed before 2.3.1 does not properly restrict access using Jetspeed Security, which allows remote attackers to (1) add, (2) edit, or (3) delete users via the RES…	CWE-264 Permissions, Privileges, and Access Controls	CVE-2016-2171	2024-11-21 11:47	2016-04-11	Show	GitHub Exploit DB Packet Storm

267444	7.5	HIGH Network	apache	openmeetings	The (1) FileService.importFileByInternalUserId and (2) FileService.importFile SOAP API methods in Apache OpenMeetings before 3.1.1 improperly use the Java URL class without checking the specified pro…	CWE-200 Information Exposure	CVE-2016-2164	2024-11-21 11:47	2016-04-11	Show	GitHub Exploit DB Packet Storm

267445	6.1	MEDIUM Network	apache	openmeetings	Cross-site scripting (XSS) vulnerability in Apache OpenMeetings before 3.1.1 allows remote attackers to inject arbitrary web script or HTML via the event description when creating an event.	CWE-79 Cross-site Scripting	CVE-2016-2163	2024-11-21 11:47	2016-04-11	Show	GitHub Exploit DB Packet Storm

267446	7.3	HIGH Network	debian rubyonrails	debian_linux ruby_on_rails rails	Action Pack in Ruby on Rails before 3.2.22.2, 4.x before 4.1.14.2, and 4.2.x before 4.2.5.2 allows remote attackers to execute arbitrary Ruby code by leveraging an application's unrestricted use of t…	CWE-20 Improper Input Validation	CVE-2016-2098	2024-11-21 11:47	2016-04-8	Show	GitHub Exploit DB Packet Storm

267447	5.3	MEDIUM Network	rubyonrails	ruby_on_rails rails	Directory traversal vulnerability in Action View in Ruby on Rails before 3.2.22.2 and 4.x before 4.1.14.2 allows remote attackers to read arbitrary files by leveraging an application's unrestricted u…	CWE-22 Path Traversal	CVE-2016-2097	2024-11-21 11:47	2016-04-8	Show	GitHub Exploit DB Packet Storm

267448	7.5	HIGH Network	nodejs fedoraproject	node.js fedora	Node.js 0.10.x before 0.10.42, 0.12.x before 0.12.10, 4.x before 4.3.0, and 5.x before 5.6.0 allow remote attackers to conduct HTTP request smuggling attacks via a crafted Content-Length HTTP header.	CWE-20 Improper Input Validation	CVE-2016-2086	2024-11-21 11:47	2016-04-8	Show	GitHub Exploit DB Packet Storm

267449	9.8	CRITICAL Network	hp	asset_manager asset_manager_cloudsystem_chargeback	HPE Asset Manager 9.40, 9.41, and 9.50 and Asset Manager CloudSystem Chargeback 9.40 allow remote attackers to execute arbitrary commands via a crafted serialized Java object, related to the Apache C…	CWE-19 Data Processing Errors	CVE-2016-2000	2024-11-21 11:47	2016-04-6	Show	GitHub Exploit DB Packet Storm

267450	5.5	MEDIUM Local	apple	ibooks_author	Apple iBooks Author before 2.4.1 allows remote attackers to read arbitrary files via an iBooks Author file containing an XML external entity declaration in conjunction with an entity reference, relat…	NVD-CWE-Other	CVE-2016-1789	2024-11-21 11:47	2016-04-6	Show	GitHub Exploit DB Packet Storm