Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 19, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
240791	2.1	注意	Tecnick.com	-	TCExam の admin/code/tce_edit_answer.php におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2012-4238	2012-08-22 16:44	2012-08-6	Show	GitHub Exploit DB Packet Storm

240792	6.8	警告	Tecnick.com	-	TCExam における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2012-4237	2012-08-22 16:43	2012-08-6	Show	GitHub Exploit DB Packet Storm

240793	4.3	警告	Jease	-	Jease におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2012-4052	2012-08-22 16:42	2012-08-20	Show	GitHub Exploit DB Packet Storm

240794	4.3	警告	Total Shop UK	-	Total Shop UK eCommerce Open Source におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2012-4236	2012-08-22 16:40	2012-08-20	Show	GitHub Exploit DB Packet Storm

240795	4.9	警告	OpenStack	-	OpenStack Compute (Nova) の virt/disk/api.py における任意のファイルを上書される脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2012-3447	2012-08-22 16:34	2012-07-31	Show	GitHub Exploit DB Packet Storm

240796	5	警告	Debian	-	devotee における秘密のあだ名を取得される脆弱性	CWE-200 情報漏えい	CVE-2012-2387	2012-08-22 16:24	2012-08-20	Show	GitHub Exploit DB Packet Storm

240797	5	警告	GNOME Project	-	libsoup における認証を回避される脆弱性	CWE-287 不適切な認証	CVE-2012-2132	2012-08-22 16:20	2011-12-15	Show	GitHub Exploit DB Packet Storm

240798	6.8	警告	Libav	-	Libav の libavcodec におけるヒープベースのバッファオーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2012-0947	2012-08-22 16:19	2012-05-4	Show	GitHub Exploit DB Packet Storm

240799	4.3	警告	FFmpeg Libav	-	FFmpeg および Libav の libavcodec におけるサービス運用妨害 (メモリ破損) の脆弱性	CWE-119 バッファエラー	CVE-2011-4579	2012-08-22 15:26	2011-12-25	Show	GitHub Exploit DB Packet Storm

240800	6.8	警告	FFmpeg Libav	-	FFmpeg および Libav の libavcodec におけるバッファオーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2011-4364	2012-08-22 15:25	2011-12-25	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 19, 2026, 4:16 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
266831	8.8	HIGH Network	mozilla	firefox	Unspecified vulnerability in the browser engine in Mozilla Firefox ESR 38.x before 38.8 allows remote attackers to cause a denial of service (memory corruption and application crash) or possibly exec…	CWE-119 Incorrect Access of Indexable Resource ('Range Error')	CVE-2016-2805	2024-11-21 11:48	2016-05-1	Show	GitHub Exploit DB Packet Storm

266832	8.8	HIGH Network	mozilla	firefox	Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 46.0 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly exe…	CWE-119 Incorrect Access of Indexable Resource ('Range Error')	CVE-2016-2804	2024-11-21 11:48	2016-05-1	Show	GitHub Exploit DB Packet Storm

266833	5.5	MEDIUM Local	linux	linux_kernel	The Linux kernel before 4.5 allows local users to bypass file-descriptor limits and cause a denial of service (memory consumption) by leveraging incorrect tracking of descriptor ownership and sending…	CWE-399 Resource Management Errors	CVE-2016-2550	2024-11-21 11:48	2016-04-28	Show	GitHub Exploit DB Packet Storm

266834	6.2	MEDIUM Local	linux	linux_kernel	sound/core/hrtimer.c in the Linux kernel before 4.4.1 does not prevent recursive callback access, which allows local users to cause a denial of service (deadlock) via a crafted ioctl call.	CWE-20 Improper Input Validation	CVE-2016-2549	2024-11-21 11:48	2016-04-28	Show	GitHub Exploit DB Packet Storm

266835	6.2	MEDIUM Local	linux	linux_kernel	sound/core/timer.c in the Linux kernel before 4.4.1 retains certain linked lists after a close or stop action, which allows local users to cause a denial of service (system crash) via a crafted ioctl…	CWE-20 Improper Input Validation	CVE-2016-2548	2024-11-21 11:48	2016-04-28	Show	GitHub Exploit DB Packet Storm

266836	6.2	MEDIUM Local	linux novell	linux_kernel suse_linux_enterprise_module_for_public_cloud suse_linux_enterprise_server suse_linux_enterprise_live_patching suse_linux_enterprise_real_time_extension suse_linux_enterpr…	fs/pipe.c in the Linux kernel before 4.5 does not limit the amount of unread data in pipes, which allows local users to cause a denial of service (memory consumption) by creating many pipes with non-…	CWE-399 Resource Management Errors	CVE-2016-2847	2024-11-21 11:48	2016-04-28	Show	GitHub Exploit DB Packet Storm

266837	4.6	MEDIUM Physics	linux suse	linux_kernel linux_enterprise_server linux_enterprise_software_development_kit linux_enterprise_debuginfo linux_enterprise_real_time_extension linux_enterprise_workstation_extension	The treo_attach function in drivers/usb/serial/visor.c in the Linux kernel before 4.5 allows physically proximate attackers to cause a denial of service (NULL pointer dereference and system crash) or…	CWE-476 NULL Pointer Dereference	CVE-2016-2782	2024-11-21 11:48	2016-04-28	Show	GitHub Exploit DB Packet Storm

266838	5.1	MEDIUM Local	linux	linux_kernel	sound/core/timer.c in the Linux kernel before 4.4.1 employs a locking approach that does not consider slave timer instances, which allows local users to cause a denial of service (race condition, use…	CWE-362 Race Condition	CVE-2016-2547	2024-11-21 11:48	2016-04-28	Show	GitHub Exploit DB Packet Storm

266839	5.1	MEDIUM Local	linux	linux_kernel	sound/core/timer.c in the Linux kernel before 4.4.1 uses an incorrect type of mutex, which allows local users to cause a denial of service (race condition, use-after-free, and system crash) via a cra…	CWE-362 Race Condition	CVE-2016-2546	2024-11-21 11:48	2016-04-28	Show	GitHub Exploit DB Packet Storm

266840	5.1	MEDIUM Local	linux	linux_kernel	The snd_timer_interrupt function in sound/core/timer.c in the Linux kernel before 4.4.1 does not properly maintain a certain linked list, which allows local users to cause a denial of service (race c…	CWE-362 Race Condition	CVE-2016-2545	2024-11-21 11:48	2016-04-28	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed