Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 21, 2026, 12:08 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
240511 7.5 危険 blueteck - deV!L'z Clanportal 用 Witze アドオンにおける SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2012-5000 2012-09-21 12:15 2012-09-19 Show GitHub Exploit DB Packet Storm
240512 6.1 警告 Mercurycom - Mercury MR804 ルータにおけるサービス運用妨害 (DoS) の脆弱性 CWE-20
不適切な入力確認
CVE-2012-4999 2012-09-21 12:14 2012-09-19 Show GitHub Exploit DB Packet Storm
240513 4.3 警告 starCMS - starCMS の index.php におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2012-4998 2012-09-21 11:32 2012-09-19 Show GitHub Exploit DB Packet Storm
240514 7.5 危険 AneCMS - AneCMS の acp/index.php におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル
CVE-2012-4997 2012-09-21 11:32 2012-09-19 Show GitHub Exploit DB Packet Storm
240515 4.3 警告 LimeSurvey - LimeSurvey の admin/userrighthandling.php におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2012-4995 2012-09-21 11:31 2012-09-19 Show GitHub Exploit DB Packet Storm
240516 6.5 警告 LimeSurvey - LimeSurvey の admin/admin.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2012-4994 2012-09-21 11:30 2012-09-19 Show GitHub Exploit DB Packet Storm
240517 7.5 危険 RivetCode Software - RivetTracker における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2012-4996 2012-09-21 11:30 2012-09-19 Show GitHub Exploit DB Packet Storm
240518 7.5 危険 RivetCode Software - RivetTracker の torrent_functions.php における脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2012-4993 2012-09-21 11:29 2012-09-19 Show GitHub Exploit DB Packet Storm
240519 9 危険 FlashFXP - FlashFXP の FlashFXP.exe におけるバッファオーバーフローの脆弱性 CWE-119
バッファエラー
CVE-2012-4992 2012-09-21 11:29 2012-03-4 Show GitHub Exploit DB Packet Storm
240520 4.3 警告 Apache Software Foundation - Apache Wicket におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2012-3373 2012-09-21 11:16 2012-09-6 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 21, 2026, 4:10 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
268061 7.5 HIGH
Network
google
suse
opensuse
chrome
linux_enterprise
leap
The download implementation in Google Chrome before 50.0.2661.75 on Android allows remote attackers to bypass intended pathname restrictions via unspecified vectors. CWE-284
Improper Access Control
CVE-2016-1656 2024-11-21 11:46 2016-04-18 Show GitHub Exploit DB Packet Storm
268062 8.8 HIGH
Network
debian
suse
opensuse
google
canonical
debian_linux
linux_enterprise
leap
chrome
ubuntu_linux
Google Chrome before 50.0.2661.75 does not properly consider that frame removal may occur during callback execution, which allows remote attackers to cause a denial of service (use-after-free) or pos… NVD-CWE-Other
CVE-2016-1655 2024-11-21 11:46 2016-04-18 Show GitHub Exploit DB Packet Storm
268063 6.5 MEDIUM
Network
debian
suse
opensuse
google
canonical
debian_linux
linux_enterprise
leap
chrome
ubuntu_linux
The media subsystem in Google Chrome before 50.0.2661.75 does not initialize an unspecified data structure, which allows remote attackers to cause a denial of service (invalid read operation) via unk… CWE-20
 Improper Input Validation 
CVE-2016-1654 2024-11-21 11:46 2016-04-18 Show GitHub Exploit DB Packet Storm
268064 8.8 HIGH
Network
debian
suse
opensuse
canonical
google
debian_linux
linux_enterprise
leap
ubuntu_linux
chrome
The LoadBuffer implementation in Google V8, as used in Google Chrome before 50.0.2661.75, mishandles data types, which allows remote attackers to cause a denial of service or possibly have unspecifie… CWE-119
Incorrect Access of Indexable Resource ('Range Error') 
CVE-2016-1653 2024-11-21 11:46 2016-04-18 Show GitHub Exploit DB Packet Storm
268065 6.1 MEDIUM
Network
debian
suse
opensuse
google
debian_linux
linux_enterprise
leap
chrome
Cross-site scripting (XSS) vulnerability in the ModuleSystem::RequireForJsInner function in extensions/renderer/module_system.cc in the Extensions subsystem in Google Chrome before 50.0.2661.75 allow… CWE-79
Cross-site Scripting
CVE-2016-1652 2024-11-21 11:46 2016-04-18 Show GitHub Exploit DB Packet Storm
268066 8.1 HIGH
Network
google
debian
suse
opensuse
chrome
debian_linux
linux_enterprise
leap
fxcodec/codec/fx_codec_jpx_opj.cpp in PDFium, as used in Google Chrome before 50.0.2661.75, does not properly implement the sycc420_to_rgb and sycc422_to_rgb functions, which allows remote attackers … CWE-200
Information Exposure
CVE-2016-1651 2024-11-21 11:46 2016-04-18 Show GitHub Exploit DB Packet Storm
268067 9.8 CRITICAL
Network
dhcpcd_project
google
dhcpcd
android
dhcpcd before 6.10.0, as used in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-04-01 and other products, mismanages option lengths, which allows remote attacke… CWE-119
Incorrect Access of Indexable Resource ('Range Error') 
CVE-2016-1503 2024-11-21 11:46 2016-04-18 Show GitHub Exploit DB Packet Storm
268068 8.4 HIGH
Local
cisco unified_computing_system_platform_emulator Heap-based buffer overflow in Cisco Unified Computing System (UCS) Platform Emulator 2.5(2)TS4, 3.0(2c)A, and 3.0(2c)TS9 allows local users to gain privileges via crafted libclimeta.so filename argum… CWE-119
Incorrect Access of Indexable Resource ('Range Error') 
CVE-2016-1340 2024-11-21 11:46 2016-04-16 Show GitHub Exploit DB Packet Storm
268069 7.8 HIGH
Local
cisco unified_computing_system_platform_emulator Cisco Unified Computing System (UCS) Platform Emulator 2.5(2)TS4, 3.0(2c)A, and 3.0(2c)TS9 allows local users to gain privileges via crafted arguments on a ucspe-copy command line, aka Bug ID CSCux68… CWE-78
OS Command 
CVE-2016-1339 2024-11-21 11:46 2016-04-16 Show GitHub Exploit DB Packet Storm
268070 7.5 HIGH
Network
juniper junos Juniper Junos OS 14.1X53 before 14.1X53-D30 on QFX Series switches allows remote attackers to cause a denial of service (PFE panic) via a high rate of unspecified VXLAN packets. CWE-19
 Data Processing Errors
CVE-2016-1274 2024-11-21 11:46 2016-04-15 Show GitHub Exploit DB Packet Storm