Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 22, 2026, 6 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
241471 4.3 警告 Jesse Vincent - RT 用 Extension::MobileUI エクステンションにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2012-2769 2012-08-20 15:42 2012-07-25 Show GitHub Exploit DB Packet Storm
241472 4.3 警告 Best Practical Solutions - RT 用 RTFM エクステンションにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2012-2768 2012-08-20 15:40 2012-07-25 Show GitHub Exploit DB Packet Storm
241473 7.5 危険 Bharat Mediratta - Gallery における任意の PHP コードを実行される脆弱性 CWE-noinfo
情報不足
CVE-2012-4343 2012-08-20 12:17 2012-06-12 Show GitHub Exploit DB Packet Storm
241474 4.3 警告 Bharat Mediratta - Gallery におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2012-4342 2012-08-20 12:16 2012-06-12 Show GitHub Exploit DB Packet Storm
241475 10 危険 SAP - SAP NetWeaver ABAP の msg_server.exe におけるスタックベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー
CVE-2012-4341 2012-08-20 12:15 2012-08-15 Show GitHub Exploit DB Packet Storm
241476 4.3 警告 Qualiteam Software Limited - X-Cart Gold の products_map.php におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2012-2570 2012-08-20 12:01 2012-08-15 Show GitHub Exploit DB Packet Storm
241477 6.8 警告 Kyle Browning - Drupal 用 CDN2 Video モジュールにおけるクロスサイトリクエストフォージェリの脆弱性 CWE-352
同一生成元ポリシー違反
CVE-2012-2155 2012-08-17 15:56 2012-03-28 Show GitHub Exploit DB Packet Storm
241478 4.3 警告 Kyle Browning - Drupal 用 CDN2 Video モジュールにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2012-2154 2012-08-17 15:55 2012-03-28 Show GitHub Exploit DB Packet Storm
241479 2.1 注意 Angry Donuts - Drupal 用 Chaos tool suite モジュールにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2012-2082 2012-08-17 15:54 2012-03-28 Show GitHub Exploit DB Packet Storm
241480 5 警告 Moshe Weitzman - Drupal 用 Organic Groups モジュールにおける重要な情報を取得される脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2012-2081 2012-08-17 15:53 2012-03-28 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 22, 2026, 4:08 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
266391 9.8 CRITICAL
Network
google android libmedia in mediaserver in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-08-01 has certain incorrect declarations, which allows remote attackers to execute arb… CWE-476
 NULL Pointer Dereference
CVE-2016-3821 2024-11-21 11:50 2016-08-6 Show GitHub Exploit DB Packet Storm
266392 9.8 CRITICAL
Network
google android The ih264d decoder in mediaserver in Android 6.x before 2016-08-01 mishandles slice numbers, which allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) v… CWE-119
Incorrect Access of Indexable Resource ('Range Error') 
CVE-2016-3820 2024-11-21 11:50 2016-08-6 Show GitHub Exploit DB Packet Storm
266393 9.8 CRITICAL
Network
google android Integer overflow in codecs/on2/h264dec/source/h264bsd_dpb.c in libstagefright in mediaserver in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-08-01 allows remo… CWE-119
Incorrect Access of Indexable Resource ('Range Error') 
CVE-2016-3819 2024-11-21 11:50 2016-08-6 Show GitHub Exploit DB Packet Storm
266394 5.5 MEDIUM
Local
sap hana_db The Extended Application Services (aka XS or XS Engine) in SAP HANA DB 1.00.091.00.1418659308 allows local users to obtain sensitive password information via vectors related to passwords in Web Dispa… CWE-200
Information Exposure
CVE-2016-3640 2024-11-21 11:50 2016-08-5 Show GitHub Exploit DB Packet Storm
266395 9.8 CRITICAL
Network
redhat jboss_operations_network The server in Red Hat JBoss Operations Network (JON) before 3.3.6 allows remote attackers to execute arbitrary code via a crafted HTTP request, related to message deserialization. CWE-20
 Improper Input Validation 
CVE-2016-3737 2024-11-21 11:50 2016-08-2 Show GitHub Exploit DB Packet Storm
266396 5.3 MEDIUM
Network
oracle
mariadb
ibm
debian
canonical
linux
mariadb
mysql
powerkvm
debian_linux
ubuntu_linux
Unspecified vulnerability in Oracle MySQL 5.5.49 and earlier, 5.6.30 and earlier, and 5.7.12 and earlier and MariaDB before 5.5.50, 10.0.x before 10.0.26, and 10.1.x before 10.1.15 allows remote auth… NVD-CWE-noinfo
CVE-2016-3615 2024-11-21 11:50 2016-07-21 Show GitHub Exploit DB Packet Storm
266397 5.3 MEDIUM
Network
oracle
canonical
mysql
ubuntu_linux
Unspecified vulnerability in Oracle MySQL 5.6.30 and earlier and 5.7.12 and earlier allows remote authenticated users to affect availability via vectors related to Server: Security: Encryption. NVD-CWE-noinfo
CVE-2016-3614 2024-11-21 11:50 2016-07-21 Show GitHub Exploit DB Packet Storm
266398 9.8 CRITICAL
Network
oracle secure_global_desktop Unspecified vulnerability in the Oracle Secure Global Desktop component in Oracle Virtualization 4.63, 4.71, and 5.2 allows remote attackers to affect confidentiality, integrity, and availability via… NVD-CWE-noinfo
CVE-2016-3613 2024-11-21 11:50 2016-07-21 Show GitHub Exploit DB Packet Storm
266399 5.9 MEDIUM
Network
oracle vm_virtualbox Unspecified vulnerability in the Oracle VM VirtualBox component in Oracle Virtualization VirtualBox before 5.0.22 allows remote attackers to affect confidentiality via vectors related to Core. NVD-CWE-noinfo
CVE-2016-3612 2024-11-21 11:50 2016-07-21 Show GitHub Exploit DB Packet Storm
266400 5.4 MEDIUM
Network
oracle retail_order_broker_cloud_service Unspecified vulnerability in the Oracle Retail Order Broker component in Oracle Retail Applications 15.0 allows remote attackers to affect confidentiality and integrity via vectors related to System … NVD-CWE-noinfo
CVE-2016-3611 2024-11-21 11:50 2016-07-21 Show GitHub Exploit DB Packet Storm