Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 31, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
241321	5	警告	Bitcoin Project	-	bitcoind および Bitcoin-Qt におけるサービス運用妨害 (DoS) の脆弱性	CWE-noinfo 情報不足	CVE-2012-4683	2012-09-18 15:19	2012-09-14	Show	GitHub Exploit DB Packet Storm

241322	5	警告	Bitcoin Project	-	bitcoind および Bitcoin-Qt におけるサービス運用妨害 (DoS) の脆弱性	CWE-noinfo 情報不足	CVE-2012-4682	2012-09-18 15:17	2012-09-14	Show	GitHub Exploit DB Packet Storm

241323	4.3	警告	Google	-	Android 上で稼働する Google Chrome における Cookie 情報を取得される脆弱性	CWE-200 情報漏えい	CVE-2012-4909	2012-09-18 15:14	2012-09-12	Show	GitHub Exploit DB Packet Storm

241324	7.5	危険	Google	-	Android 上で稼働する Google Chrome における同一生成元ポリシーを回避される脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2012-4908	2012-09-18 15:13	2012-09-12	Show	GitHub Exploit DB Packet Storm

241325	9.3	危険	Google	-	Android 上で稼働する Google Chrome における脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2012-4907	2012-09-18 15:12	2012-09-12	Show	GitHub Exploit DB Packet Storm

241326	5	警告	Google	-	Android 上で稼働する Google Chrome における重要な情報を取得される脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2012-4906	2012-09-18 15:06	2012-09-12	Show	GitHub Exploit DB Packet Storm

241327	4.3	警告	Google	-	Android 上で稼働する Google Chrome におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2012-4905	2012-09-18 15:04	2012-09-12	Show	GitHub Exploit DB Packet Storm

241328	4.3	警告	Google	-	Android 上で稼働する Google Chrome におけるクロスアプリケーションスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2012-4904	2012-09-18 14:59	2012-09-12	Show	GitHub Exploit DB Packet Storm

241329	5	警告	Google	-	Android 上で稼働する Google Chrome における重要な情報を取得される脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2012-4903	2012-09-18 14:58	2012-09-12	Show	GitHub Exploit DB Packet Storm

241330	3.5	注意	The phpMyAdmin Project	-	phpMyAdmin の Database Structure ページにおけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2012-4345	2012-09-14 16:38	2012-08-16	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 31, 2026, 4:16 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
266111	9.8	CRITICAL Network	facebook	hhvm	Infinite recursion in wddx in Facebook HHVM before 3.15.0 allows attackers to have unspecified impact via unknown vectors.	NVD-CWE-Other	CVE-2016-6875	2024-11-21 11:56	2017-02-18	Show	GitHub Exploit DB Packet Storm

266112	9.8	CRITICAL Network	facebook	hhvm	The array_*_recursive functions in Facebook HHVM before 3.15.0 allows attackers to have unspecified impact via unknown vectors, related to recursion.	NVD-CWE-Other	CVE-2016-6874	2024-11-21 11:56	2017-02-18	Show	GitHub Exploit DB Packet Storm

266113	9.8	CRITICAL Network	facebook	hhvm	Self recursion in compact in Facebook HHVM before 3.15.0 allows attackers to have unspecified impact via unknown vectors.	NVD-CWE-Other	CVE-2016-6873	2024-11-21 11:56	2017-02-18	Show	GitHub Exploit DB Packet Storm

266114	9.8	CRITICAL Network	facebook	hhvm	Integer overflow in StringUtil::implode in Facebook HHVM before 3.15.0 allows attackers to have unspecified impact via unknown vectors.	CWE-190 Integer Overflow or Wraparound	CVE-2016-6872	2024-11-21 11:56	2017-02-18	Show	GitHub Exploit DB Packet Storm

266115	9.8	CRITICAL Network	facebook	hhvm	Integer overflow in bcmath in Facebook HHVM before 3.15.0 allows attackers to have unspecified impact via unknown vectors, which triggers a buffer overflow.	CWE-190 Integer Overflow or Wraparound	CVE-2016-6871	2024-11-21 11:56	2017-02-18	Show	GitHub Exploit DB Packet Storm

266116	9.8	CRITICAL Network	facebook	hhvm	Out-of-bounds write in the (1) mb_detect_encoding, (2) mb_send_mail, and (3) mb_detect_order functions in Facebook HHVM before 3.15.0 allows attackers to have unspecified impact via unknown vectors.	CWE-787 Out-of-bounds Write	CVE-2016-6870	2024-11-21 11:56	2017-02-18	Show	GitHub Exploit DB Packet Storm

266117	7.5	HIGH Network	suckless fedoraproject	slock fedora	slock allows attackers to bypass the screen lock via vectors involving an invalid password hash, which triggers a NULL pointer dereference and crash.	CWE-476 NULL Pointer Dereference	CVE-2016-6866	2024-11-21 11:56	2017-02-16	Show	GitHub Exploit DB Packet Storm

266118	5.5	MEDIUM Local	libav	libav	Heap-based buffer overflow in the ff_audio_resample function in resample.c in libav before 11.4 allows remote attackers to cause a denial of service (crash) via vectors related to buffer resizing.	CWE-119 Incorrect Access of Indexable Resource ('Range Error')	CVE-2016-6832	2024-11-21 11:56	2017-02-16	Show	GitHub Exploit DB Packet Storm

266119	9.8	CRITICAL Network	netapp	oncommand_unified_manager_for_clustered_data_ontap	NetApp OnCommand Unified Manager for Clustered Data ONTAP 6.3 through 6.4P1 contain a default privileged account, which allows remote attackers to execute arbitrary code via unspecified vectors.	NVD-CWE-noinfo	CVE-2016-6667	2024-11-21 11:56	2017-02-8	Show	GitHub Exploit DB Packet Storm

266120	5.9	MEDIUM Network	netapp	data_ontap	NetApp Data ONTAP before 8.2.4P5, when operating in 7-Mode, allows remote attackers to obtain information about the volumes configured for HTTP access.	CWE-200 Information Exposure	CVE-2016-6495	2024-11-21 11:56	2017-02-8	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed