Vulnerability Search Top
Show Search Menu
|
You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database). |
JVN Vulnerability Information
Update Date":May 23, 2026, noon
| No | CVSS | Level Attach Vector |
Vendor Name | Project Name | Title | CWE | CVE | Update Date | Publication Date | Impact Show |
Exploit PoC Search |
|---|---|---|---|---|---|---|---|---|---|---|---|
| 240781 | 7.5 | 危険 | CoSoSys Ltd | - | Endpoint Protector 4 の認証機能に脆弱性 |
CWE-264
認可・権限・アクセス制御 |
CVE-2012-2994 | 2012-09-19 10:37 | 2012-09-18 | Show | GitHub Exploit DB Packet Storm |
| 240782 | 3.5 | 注意 | シスコシステムズ | - | Cisco IOS の SSLVPN の実装におけるサービス運用妨害 (デバイスクラッシュ) の脆弱性 |
CWE-DesignError
|
CVE-2012-3924 | 2012-09-18 16:57 | 2012-09-16 | Show | GitHub Exploit DB Packet Storm |
| 240783 | 3.5 | 注意 | シスコシステムズ | - | Cisco IOS の SSLVPN の実装におけるサービス運用妨害 (デバイスクラッシュ) の脆弱性 |
CWE-noinfo
情報不足 |
CVE-2012-3923 | 2012-09-18 16:56 | 2012-09-16 | Show | GitHub Exploit DB Packet Storm |
| 240784 | 5 | 警告 | シスコシステムズ | - | 複数の Cisco 製品で使用される Cisco ACE モジュールにおけるサービス運用妨害 (DoS) の脆弱性 |
CWE-399
リソース管理の問題 |
CVE-2012-3919 | 2012-09-18 16:54 | 2012-09-16 | Show | GitHub Exploit DB Packet Storm |
| 240785 | 5 | 警告 | シスコシステムズ | - | Cisco IOS の DMVPN トンネルの実装におけるサービス運用妨害 (DoS) の脆弱性 |
CWE-119
バッファエラー |
CVE-2012-3915 | 2012-09-18 16:54 | 2012-09-16 | Show | GitHub Exploit DB Packet Storm |
| 240786 | 6.8 | 警告 | シスコシステムズ | - | Cisco ISE 3300 シリーズの ISE 管理者ユーザインターフェースにおけるクロスサイトリクエストフォージェリの脆弱性 |
CWE-352
同一生成元ポリシー違反 |
CVE-2012-3908 | 2012-09-18 16:53 | 2012-04-11 | Show | GitHub Exploit DB Packet Storm |
| 240787 | 5 | 警告 | シスコシステムズ | - | Cisco IPS 4200 シリーズセンサーの sensorApp におけるサービス運用妨害 (DoS) の脆弱性 |
CWE-119
バッファエラー |
CVE-2012-3901 | 2012-09-18 16:53 | 2010-07-22 | Show | GitHub Exploit DB Packet Storm |
| 240788 | 5 | 警告 | シスコシステムズ | - | Cisco IPS 4200 シリーズセンサー上で稼働する sensorApp におけるサービス運用妨害 (DoS) の脆弱性 |
CWE-399
リソース管理の問題 |
CVE-2012-3899 | 2012-09-18 16:52 | 2012-09-16 | Show | GitHub Exploit DB Packet Storm |
| 240789 | 6.3 | 警告 | シスコシステムズ | - | Cisco IOS におけるサービス運用妨害 (デバイスクラッシュ) の脆弱性 |
CWE-Other
その他 |
CVE-2012-3895 | 2012-09-18 16:52 | 2012-09-16 | Show | GitHub Exploit DB Packet Storm |
| 240790 | 6.3 | 警告 | シスコシステムズ | - | Cisco IOS の FlexVPN の実装におけるサービス運用妨害 (スポーククラッシュ) の脆弱性 |
CWE-Other
その他 |
CVE-2012-3893 | 2012-09-18 16:51 | 2012-09-16 | Show | GitHub Exploit DB Packet Storm |
NVD Vulnerability Information
Update Date:May 23, 2026, 4:08 a.m.
| No | CVSS | Level Attach Vector |
Vendor Name | Project Name | Title | CWE | CVE | Update Date | Publication Date | Show Affected | Exploit PoC Search |
|---|---|---|---|---|---|---|---|---|---|---|---|
| 266721 | 6.5 |
MEDIUM
Network |
redhat jenkins |
openshift jenkins |
Jenkins before 2.3 and LTS before 1.651.2 allow remote authenticated users with extended read access to obtain sensitive password information by reading a job configuration. |
CWE-200
Information Exposure |
CVE-2016-3724 | 2024-11-21 11:50 | 2016-05-17 | Show | GitHub Exploit DB Packet Storm |
| 266722 | 4.3 |
MEDIUM
Network |
jenkins redhat |
jenkins openshift |
Jenkins before 2.3 and LTS before 1.651.2 allow remote authenticated users with read access to obtain sensitive plugin installation information by leveraging missing permissions checks in unspecified… |
CWE-200
Information Exposure |
CVE-2016-3723 | 2024-11-21 11:50 | 2016-05-17 | Show | GitHub Exploit DB Packet Storm |
| 266723 | 4.3 |
MEDIUM
Network |
jenkins redhat |
jenkins openshift |
Jenkins before 2.3 and LTS before 1.651.2 allow remote authenticated users with multiple accounts to cause a denial of service (unable to login) by editing the "full name." |
CWE-264
Permissions, Privileges, and Access Controls |
CVE-2016-3722 | 2024-11-21 11:50 | 2016-05-17 | Show | GitHub Exploit DB Packet Storm |
| 266724 | 6.5 |
MEDIUM
Network |
redhat jenkins |
openshift jenkins |
Jenkins before 2.3 and LTS before 1.651.2 might allow remote authenticated users to inject arbitrary build parameters into the build environment via environment variables. |
CWE-17
Code |
CVE-2016-3721 | 2024-11-21 11:50 | 2016-05-17 | Show | GitHub Exploit DB Packet Storm |
| 266725 | 7.5 |
HIGH
Network |
canonical xmlsoft debian hp opensuse |
ubuntu_linux libxml2 debian_linux icewall_file_manager icewall_federation_agent leap |
The (1) xmlParserEntityCheck and (2) xmlParseAttValueComplex functions in parser.c in libxml2 2.9.3 do not properly keep track of the recursion depth, which allows context-dependent attackers to caus… |
CWE-20
Improper Input Validation |
CVE-2016-3705 | 2024-11-21 11:50 | 2016-05-17 | Show | GitHub Exploit DB Packet Storm |
| 266726 | 7.5 |
HIGH
Network |
fedoraproject debian xstream_project |
fedora debian_linux xstream |
Multiple XML external entity (XXE) vulnerabilities in the (1) Dom4JDriver, (2) DomDriver, (3) JDomDriver, (4) JDom2Driver, (5) SjsxpDriver, (6) StandardStaxDriver, and (7) WstxDriver drivers in XStre… |
CWE-200
Information Exposure |
CVE-2016-3674 | 2024-11-21 11:50 | 2016-05-17 | Show | GitHub Exploit DB Packet Storm |
| 266727 | 7.5 |
HIGH
Network |
opensuse debian hp xmlsoft canonical redhat oracle |
leap debian_linux icewall_file_manager icewall_federation_agent libxml2 ubuntu_linux enterprise_linux_desktop enterprise_linux_server_aus enterprise_linux_workstation enter… |
The xmlStringGetNodeList function in tree.c in libxml2 2.9.3 and earlier, when used in recovery mode, allows context-dependent attackers to cause a denial of service (infinite recursion, stack consum… |
CWE-674
Uncontrolled Recursion |
CVE-2016-3627 | 2024-11-21 11:50 | 2016-05-17 | Show | GitHub Exploit DB Packet Storm |
| 266728 | 5.5 |
MEDIUM
Local |
oracle qemu canonical debian redhat citrix |
vm_server qemu ubuntu_linux debian_linux enterprise_linux_desktop enterprise_linux_workstation enterprise_linux_server enterprise_linux_server_tus enterprise_linux_server_aus<… |
Integer overflow in the VGA module in QEMU allows local guest OS users to cause a denial of service (out-of-bounds read and QEMU process crash) by editing VGA registers in VBE mode. |
CWE-190
Integer Overflow or Wraparound |
CVE-2016-3712 | 2024-11-21 11:50 | 2016-05-12 | Show | GitHub Exploit DB Packet Storm |
| 266729 | 8.8 |
HIGH
Local |
debian hp canonical qemu oracle citrix redhat |
debian_linux helion_openstack ubuntu_linux qemu linux vm_server xenserver enterprise_linux_desktop enterprise_linux_server_aus enterprise_linux_workstation enterprise_li… |
The VGA module in QEMU improperly performs bounds checking on banked access to video memory, which allows local guest OS administrators to execute arbitrary code on the host by changing access modes … |
CWE-119
Incorrect Access of Indexable Resource ('Range Error') |
CVE-2016-3710 | 2024-11-21 11:50 | 2016-05-12 | Show | GitHub Exploit DB Packet Storm |
| 266730 | 5.5 |
MEDIUM
Local |
canonical redhat imagemagick |
ubuntu_linux enterprise_linux_server_supplementary_eus enterprise_linux_desktop enterprise_linux_server_aus enterprise_linux_workstation enterprise_linux_server enterprise_linux_hpc… |
The LABEL coder in ImageMagick before 6.9.3-10 and 7.x before 7.0.1-1 allows remote attackers to read arbitrary files via a crafted image. |
CWE-200
Information Exposure |
CVE-2016-3717 | 2024-11-21 11:50 | 2016-05-6 | Show | GitHub Exploit DB Packet Storm |