Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 17, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
240811	5	警告	The PHP Group サイボウズオラクル	-	PHP におけるサービス運用妨害 (CPU 資源の消費) の脆弱性	CWE-20 不適切な入力確認	CVE-2011-4885	2012-07-20 17:18	2011-12-28	Show	GitHub Exploit DB Packet Storm

240812	4.3	警告	オラクル	-	Oracle Solaris における Network/NFS の処理に関する脆弱性	CWE-noinfo 情報不足	CVE-2012-3131	2012-07-20 16:17	2012-07-17	Show	GitHub Exploit DB Packet Storm

240813	4.3	警告	オラクル	-	Oracle Solaris における pkg.depotd に関する脆弱性	CWE-noinfo 情報不足	CVE-2012-3130	2012-07-20 16:16	2012-07-17	Show	GitHub Exploit DB Packet Storm

240814	5.1	警告	オラクル	-	Oracle Solaris における Gnome PDF viewer の処理に関する脆弱性	CWE-noinfo 情報不足	CVE-2012-3129	2012-07-20 16:14	2012-07-17	Show	GitHub Exploit DB Packet Storm

240815	3.7	注意	オラクル	-	Oracle SPARC T シリーズサーバのファームウェアにおける Integrated Lights Out Manager の処理に関する脆弱性	CWE-noinfo 情報不足	CVE-2012-3128	2012-07-20 16:13	2012-07-17	Show	GitHub Exploit DB Packet Storm

240816	5.4	警告	オラクル	-	Oracle Solaris における SCTP の処理に関する脆弱性	CWE-noinfo 情報不足	CVE-2012-3127	2012-07-20 16:11	2012-07-17	Show	GitHub Exploit DB Packet Storm

240817	6.2	警告	オラクル	-	Oracle Solaris Cluster における Apache Tomcat Agent の処理に関する脆弱性	CWE-noinfo 情報不足	CVE-2012-3126	2012-07-20 16:10	2012-07-17	Show	GitHub Exploit DB Packet Storm

240818	7.1	危険	オラクル	-	Oracle Solaris における TCP/IP の処理に関する脆弱性	CWE-noinfo 情報不足	CVE-2012-3125	2012-07-20 16:09	2012-07-17	Show	GitHub Exploit DB Packet Storm

240819	5	警告	オラクル	-	Oracle Solaris における Kernel/KSSL の処理に関する脆弱性	CWE-noinfo 情報不足	CVE-2012-3124	2012-07-20 16:07	2012-07-17	Show	GitHub Exploit DB Packet Storm

240820	5	警告	オラクル	-	Oracle Solaris における Apache HTTP サーバの処理に関する脆弱性	CWE-noinfo 情報不足	CVE-2012-3123	2012-07-20 16:06	2012-07-17	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 18, 2026, 4:12 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
266961	9.8	CRITICAL Network	busybox debian canonical	busybox debian_linux ubuntu_linux	Heap-based buffer overflow in the DHCP client (udhcpc) in BusyBox before 1.25.0 allows remote attackers to have unspecified impact via vectors involving OPTION_6RD parsing.	CWE-119 Incorrect Access of Indexable Resource ('Range Error')	CVE-2016-2148	2024-11-21 11:47	2017-02-10	Show	GitHub Exploit DB Packet Storm

266962	7.5	HIGH Network	busybox debian canonical	busybox debian_linux ubuntu_linux	Integer overflow in the DHCP client (udhcpc) in BusyBox before 1.25.0 allows remote attackers to cause a denial of service (crash) via a malformed RFC1035-encoded domain name, which triggers an out-o…	CWE-190 Integer Overflow or Wraparound	CVE-2016-2147	2024-11-21 11:47	2017-02-10	Show	GitHub Exploit DB Packet Storm

266963	8.1	HIGH Network	netapp	oncommand_workflow_automation	NetApp OnCommand Workflow Automation before 3.1P2 allows remote attackers to bypass authentication via unspecified vectors.	CWE-284 Improper Access Control	CVE-2016-1894	2024-11-21 11:47	2017-02-8	Show	GitHub Exploit DB Packet Storm

266964	6.5	MEDIUM Network	libdwarf_project	libdwarf	The get_abbrev_array_info function in libdwarf-20151114 allows remote attackers to cause a denial of service (out-of-bounds write) via a crafted elf file.	CWE-787 Out-of-bounds Write	CVE-2016-2050	2024-11-21 11:47	2017-02-1	Show	GitHub Exploit DB Packet Storm

266965	5.5	MEDIUM Local	samsung	knox	Samsung KNOX 1.0.0 uses the shared certificate on Android, which allows local users to conduct man-in-the-middle attacks as demonstrated by installing a certificate and running a VPN service.	CWE-284 Improper Access Control	CVE-2016-1920	2024-11-21 11:47	2017-01-28	Show	GitHub Exploit DB Packet Storm

266966	4.7	MEDIUM Local	samsung	knox	Samsung KNOX 1.0 uses a weak eCryptFS Key generation algorithm, which makes it easier for local users to obtain sensitive information by leveraging knowledge of the TIMA key and a brute-force attack.	CWE-310 CWE-200 Cryptographic Issues Information Exposure	CVE-2016-1919	2024-11-21 11:47	2017-01-28	Show	GitHub Exploit DB Packet Storm

266967	9.8	CRITICAL Network	lha_for_unix_project	lha_for_unix	Integer underflow in header.c in lha allows remote attackers to have unspecified impact via a large header size value for the (1) level0 or (2) level1 header in a lha archive, which triggers a buffer…	CWE-191 Integer Underflow (Wrap or Wraparound)	CVE-2016-1925	2024-11-21 11:47	2017-01-24	Show	GitHub Exploit DB Packet Storm

266968	7.4	HIGH Network	hexchat_project	hexchat	Directory traversal vulnerability in the client in HexChat 2.11.0 allows remote IRC servers to read or modify arbitrary files via a .. (dot dot) in the server name.	CWE-22 Path Traversal	CVE-2016-2087	2024-11-21 11:47	2017-01-19	Show	GitHub Exploit DB Packet Storm

266969	9.8	CRITICAL Network	fedoraproject freedesktop debian canonical	fedora libbsd debian_linux ubuntu_linux	Off-by-one vulnerability in the fgetwln function in libbsd before 0.8.2 allows attackers to have unspecified impact via unknown vectors, which trigger a heap-based buffer overflow.	CWE-119 Incorrect Access of Indexable Resource ('Range Error')	CVE-2016-2090	2024-11-21 11:47	2017-01-14	Show	GitHub Exploit DB Packet Storm

266970	5.5	MEDIUM Local	qemu debian	qemu debian_linux	QEMU (aka Quick Emulator) built with the e1000 NIC emulation support is vulnerable to an infinite loop issue. It could occur while processing data via transmit or receive descriptors, provided the in…	CWE-835 Loop with Unreachable Exit Condition ('Infinite Loop')	CVE-2016-1981	2024-11-21 11:47	2016-12-30	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed