Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 18, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
240671 4.4 警告 Google - Tunnelblick における権限を取得される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2012-4677 2012-08-29 11:53 2012-08-26 Show GitHub Exploit DB Packet Storm
240672 1.2 注意 Google - Tunnelblick の errorExitIfAttackViaString 関数における任意のファイルを削除される脆弱性 CWE-59
リンク解釈の問題 		CVE-2012-4676 2012-08-29 11:51 2012-08-26 Show GitHub Exploit DB Packet Storm
240673 1.2 注意 Google - Tunnelblick における予期せぬプロセスを停止される脆弱性 CWE-362
競合状態 		CVE-2012-3487 2012-08-29 11:50 2012-08-26 Show GitHub Exploit DB Packet Storm
240674 6.9 警告 Google - Tunnelblick における権限を取得される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2012-3486 2012-08-29 11:49 2012-08-26 Show GitHub Exploit DB Packet Storm
240675 7.2 危険 Google - Tunnelblick における権限を取得される脆弱性 CWE-20
不適切な入力確認 		CVE-2012-3485 2012-08-29 11:48 2012-08-26 Show GitHub Exploit DB Packet Storm
240676 7.2 危険 Google - Tunnelblick におけるアクセス制限を回避される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2012-3484 2012-08-29 11:47 2012-08-26 Show GitHub Exploit DB Packet Storm
240677 6.2 警告 Google - Tunnelblick の runScript 関数における権限を取得される脆弱性 CWE-362
競合状態 		CVE-2012-3483 2012-08-29 11:35 2012-08-26 Show GitHub Exploit DB Packet Storm
240678 5 警告 Munin - Munin の munin-cgi-graph におけるサービス運用妨害 (ディスク消費) の脆弱性 CWE-399
リソース管理の問題 		CVE-2012-4678 2012-08-29 11:25 2012-04-27 Show GitHub Exploit DB Packet Storm
240679 2.1 注意 Creative Commons module Project - Drupal 用 Creative Commons モジュールにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2012-2297 2012-08-29 11:20 2012-04-25 Show GitHub Exploit DB Packet Storm
240680 5 警告 Munin - Munin の munin-cgi-graph におけるサービス運用妨害 (DoS) の脆弱性 CWE-399
リソース管理の問題 		CVE-2012-2147 2012-08-29 11:17 2012-08-26 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 19, 2026, 4:16 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
267041 8.8 HIGH
Network 		blackberry blackberry_enterprise_service Multiple SQL injection vulnerabilities in the com.rim.mdm.ui.server.ImageServlet servlet in BlackBerry Enterprise Server 12 (BES12) Self-Service before 12.4 allow remote attackers to execute arbitrar… CWE-89
SQL Injection 		CVE-2016-1914 2024-11-21 11:47 2017-04-13 Show GitHub Exploit DB Packet Storm
267042 9.8 CRITICAL
Network 		openbsd
debian
oracle
redhat 		openssh
debian_linux
linux
enterprise_linux_desktop
enterprise_linux_server_aus
enterprise_linux_workstation
enterprise_linux_server_tus
enterprise_linux_server
enterprise_lin… 		The client in OpenSSH before 7.2 mishandles failed cookie generation for untrusted X11 forwarding and relies on the local X11 server for access-control decisions, which allows remote X11 clients to t… CWE-287
Improper Authentication 		CVE-2016-1908 2024-11-21 11:47 2017-04-12 Show GitHub Exploit DB Packet Storm
267043 7.8 HIGH
Local 		freebsd freebsd Integer overflow in the bhyve hypervisor in FreeBSD 10.1, 10.2, 10.3, and 11.0 when configured with a large amount of guest memory, allows local users to gain privilege via a crafted device descripto… CWE-190
 Integer Overflow or Wraparound 		CVE-2016-1889 2024-11-21 11:47 2017-02-16 Show GitHub Exploit DB Packet Storm
267044 7.5 HIGH
Network 		freebsd freebsd The telnetd service in FreeBSD 9.3, 10.1, 10.2, 10.3, and 11.0 allows remote attackers to inject arguments to login and bypass authentication via vectors involving a "sequence of memory allocation fa… CWE-287
Improper Authentication 		CVE-2016-1888 2024-11-21 11:47 2017-02-16 Show GitHub Exploit DB Packet Storm
267045 7.8 HIGH
Local 		freebsd freebsd The issetugid system call in the Linux compatibility layer in FreeBSD 9.3, 10.1, and 10.2 allows local users to gain privilege via unspecified vectors. CWE-264
Permissions, Privileges, and Access Controls 		CVE-2016-1883 2024-11-21 11:47 2017-02-16 Show GitHub Exploit DB Packet Storm
267046 7.8 HIGH
Local 		freebsd freebsd The kernel in FreeBSD 9.3, 10.1, and 10.2 allows local users to cause a denial of service (crash) or potentially gain privilege via a crafted Linux compatibility layer setgroups system call. CWE-264
Permissions, Privileges, and Access Controls 		CVE-2016-1881 2024-11-21 11:47 2017-02-16 Show GitHub Exploit DB Packet Storm
267047 7.8 HIGH
Local 		freebsd freebsd The Linux compatibility layer in the kernel in FreeBSD 9.3, 10.1, and 10.2 allows local users to read portions of kernel memory and potentially gain privilege via unspecified vectors, related to "han… CWE-264
Permissions, Privileges, and Access Controls 		CVE-2016-1880 2024-11-21 11:47 2017-02-16 Show GitHub Exploit DB Packet Storm
267048 9.8 CRITICAL
Network 		busybox
debian
canonical 		busybox
debian_linux
ubuntu_linux 		Heap-based buffer overflow in the DHCP client (udhcpc) in BusyBox before 1.25.0 allows remote attackers to have unspecified impact via vectors involving OPTION_6RD parsing. CWE-119
Incorrect Access of Indexable Resource ('Range Error')  		CVE-2016-2148 2024-11-21 11:47 2017-02-10 Show GitHub Exploit DB Packet Storm
267049 7.5 HIGH
Network 		busybox
debian
canonical 		busybox
debian_linux
ubuntu_linux 		Integer overflow in the DHCP client (udhcpc) in BusyBox before 1.25.0 allows remote attackers to cause a denial of service (crash) via a malformed RFC1035-encoded domain name, which triggers an out-o… CWE-190
 Integer Overflow or Wraparound 		CVE-2016-2147 2024-11-21 11:47 2017-02-10 Show GitHub Exploit DB Packet Storm
267050 8.1 HIGH
Network 		netapp oncommand_workflow_automation NetApp OnCommand Workflow Automation before 3.1P2 allows remote attackers to bypass authentication via unspecified vectors. CWE-284
Improper Access Control 		CVE-2016-1894 2024-11-21 11:47 2017-02-8 Show GitHub Exploit DB Packet Storm