Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 21, 2026, 6:01 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
240571 6.8 警告 Ubercart.org - Drupal 用 Ubercart Bulk Stock Updater モジュールにおけるクロスサイトリクエストフォージェリの脆弱性 CWE-352
同一生成元ポリシー違反
CVE-2012-2057 2012-09-19 16:33 2012-03-14 Show GitHub Exploit DB Packet Storm
240572 6.8 警告 Nathan Phillip Brink - Drupal 用 Content Lock モジュールにおけるクロスサイトリクエストフォージェリの脆弱性 CWE-352
同一生成元ポリシー違反
CVE-2012-2056 2012-09-19 16:31 2012-03-14 Show GitHub Exploit DB Packet Storm
240573 4.3 警告 Nikola Posa - Webfolio CMS におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2012-1899 2012-09-19 16:29 2012-09-17 Show GitHub Exploit DB Packet Storm
240574 4.3 警告 Netwin Ltd - NetWin SurgeMail におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2012-2575 2012-09-19 16:25 2012-09-17 Show GitHub Exploit DB Packet Storm
240575 4.3 警告 Oxwall - Oxwall の ow_updates/index.php におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2012-4928 2012-09-19 16:21 2012-09-15 Show GitHub Exploit DB Packet Storm
240576 7.5 危険 LimeSurvey - LimeSurvey における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2012-4927 2012-09-19 16:21 2012-02-24 Show GitHub Exploit DB Packet Storm
240577 6.4 警告 ImgPals - ImgPals Photo Host の approve.php における管理者のアクティベーションを変更される脆弱性 CWE-287
不適切な認証
CVE-2012-4926 2012-09-19 16:20 2012-09-15 Show GitHub Exploit DB Packet Storm
240578 7.5 危険 ImgPals - ImgPals Photo Host の approve.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2012-4925 2012-09-19 16:20 2012-09-15 Show GitHub Exploit DB Packet Storm
240579 9.3 危険 ASUSTeK Computer Inc. - ASUS Net4Switch 用 ipswcom.dll ActiveX コンポーネントにおけるバッファオーバーフローの脆弱性 CWE-119
バッファエラー
CVE-2012-4924 2012-09-19 16:18 2012-09-15 Show GitHub Exploit DB Packet Storm
240580 4.3 警告 Endian - Endian Firewall におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2012-4923 2012-09-19 16:17 2012-09-15 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 21, 2026, 4:10 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
267091 8.8 HIGH
Network
mozilla
debian
redhat
novell
opensuse
canonical
firefox
debian_linux
enterprise_linux_desktop
enterprise_linux_server
enterprise_linux_server_aus
enterprise_linux_for_scientific_computing
enterprise_linux_workstation
enterpris…
Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 47.0 and Firefox ESR 45.x before 45.2 allow remote attackers to cause a denial of service (memory corruption and a… CWE-119
Incorrect Access of Indexable Resource ('Range Error') 
CVE-2016-2818 2024-11-21 11:48 2016-06-13 Show GitHub Exploit DB Packet Storm
267092 8.8 HIGH
Network
mozilla
canonical
novell
opensuse
firefox_esr
ubuntu_linux
suse_linux_enterprise_server
suse_linux_enterprise_desktop
suse_linux_enterprise_software_development_kit
leap
opensuse
firefox
Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 47.0 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly exe… CWE-119
Incorrect Access of Indexable Resource ('Range Error') 
CVE-2016-2815 2024-11-21 11:48 2016-06-13 Show GitHub Exploit DB Packet Storm
267093 5.5 MEDIUM
Local
google android Activity Manager in Android 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-06-01 does not properly terminate process groups, which allows attackers to obtain sensitive information via a … CWE-200
Information Exposure
CVE-2016-2500 2024-11-21 11:48 2016-06-13 Show GitHub Exploit DB Packet Storm
267094 5.5 MEDIUM
Local
google android AudioSource.cpp in libstagefright in mediaserver in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-06-01 does not initialize certain data, which allows attacker… CWE-200
Information Exposure
CVE-2016-2499 2024-11-21 11:48 2016-06-13 Show GitHub Exploit DB Packet Storm
267095 5.5 MEDIUM
Local
google android The Qualcomm Wi-Fi driver in Android before 2016-06-01 on Nexus 7 (2013) devices allows attackers to bypass intended data-access restrictions via a crafted application, aka internal bug 27777162. CWE-200
Information Exposure
CVE-2016-2498 2024-11-21 11:48 2016-06-13 Show GitHub Exploit DB Packet Storm
267096 9.8 CRITICAL
Network
google android The Framework UI permission-dialog implementation in Android 6.x before 2016-06-01 allows attackers to conduct tapjacking attacks and access arbitrary private-storage files by creating a partially ov… CWE-1021
 Improper Restriction of Rendered UI Layers or Frames
CVE-2016-2496 2024-11-21 11:48 2016-06-13 Show GitHub Exploit DB Packet Storm
267097 5.5 MEDIUM
Local
google android SampleTable.cpp in libstagefright in mediaserver in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-06-01 allows remote attackers to cause a denial of service (d… CWE-20
 Improper Input Validation 
CVE-2016-2495 2024-11-21 11:48 2016-06-13 Show GitHub Exploit DB Packet Storm
267098 7.8 HIGH
Local
google android Off-by-one error in sdcard/sdcard.c in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-06-01 allows attackers to gain privileges via a crafted application, as de… CWE-264
Permissions, Privileges, and Access Controls
CVE-2016-2494 2024-11-21 11:48 2016-06-13 Show GitHub Exploit DB Packet Storm
267099 7.8 HIGH
Local
google android The Broadcom Wi-Fi driver in Android before 2016-06-01 on Nexus 5, Nexus 6, Nexus 6P, Nexus 7 (2013), Nexus Player, and Pixel C devices allows attackers to gain privileges via a crafted application, … CWE-264
Permissions, Privileges, and Access Controls
CVE-2016-2493 2024-11-21 11:48 2016-06-13 Show GitHub Exploit DB Packet Storm
267100 7.8 HIGH
Local
google android The MediaTek power-management driver in Android before 2016-06-01 on Android One devices allows attackers to gain privileges via a crafted application, aka internal bug 28085410. CWE-264
Permissions, Privileges, and Access Controls
CVE-2016-2492 2024-11-21 11:48 2016-06-13 Show GitHub Exploit DB Packet Storm