Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 27, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
241611 10 危険 マイクロソフト - Microsoft Windows の印刷スプーラーサービスにおけるフォーマット文字列の脆弱性 CWE-134
書式文字列の問題 		CVE-2012-1851 2012-08-21 17:28 2012-08-14 Show GitHub Exploit DB Packet Storm
241612 10 危険 マイクロソフト - Microsoft Windows XP の LanmanWorkstation サービスにおけるヒープベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2012-1852 2012-08-21 17:27 2012-08-14 Show GitHub Exploit DB Packet Storm
241613 10 危険 マイクロソフト - Microsoft Windows XP の LanmanWorkstation サービスにおけるスタックベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2012-1853 2012-08-21 17:26 2012-08-14 Show GitHub Exploit DB Packet Storm
241614 7.2 危険 マイクロソフト - Microsoft Windows のカーネルモードドライバ内の win32k.sys における権限昇格の脆弱性 CWE-399
リソース管理の問題 		CVE-2012-2527 2012-08-21 17:26 2012-08-14 Show GitHub Exploit DB Packet Storm
241615 9.3 危険 マイクロソフト - Microsoft Office 2007 および 2010 における任意のコードを実行される脆弱性 CWE-119
バッファエラー 		CVE-2012-2524 2012-08-21 17:24 2012-08-14 Show GitHub Exploit DB Packet Storm
241616 9.3 危険 マイクロソフト - Microsoft Visio 2010 および Visio Viewer 2010 におけるバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2012-1888 2012-08-21 17:23 2012-08-14 Show GitHub Exploit DB Packet Storm
241617 2.1 注意 Ubercart - Drupal 用 Ubercart モジュールにおける重要な情報を取得される脆弱性 CWE-255
証明書・パスワード管理 		CVE-2012-2299 2012-08-21 15:38 2012-04-25 Show GitHub Exploit DB Packet Storm
241618 5.1 警告 MySQLDumper-Team - MySQLDumper におけるクロスサイトリクエストフォージェリの脆弱性 CWE-352
同一生成元ポリシー違反 		CVE-2012-4252 2012-08-21 15:38 2012-08-13 Show GitHub Exploit DB Packet Storm
241619 9.3 危険 Sielco Sistemi - Sielco Sistemi Winlog Pro SCADA および Winlog Lite SCADA におけるサービス運用妨害 (DoS) の脆弱性 CWE-20
不適切な入力確認 		CVE-2012-4359 2012-08-21 15:32 2012-07-31 Show GitHub Exploit DB Packet Storm
241620 9.3 危険 Sielco Sistemi - Sielco Sistemi Winlog Pro SCADA および Winlog Lite SCADA におけるサービス運用妨害 (DoS) の脆弱性 CWE-20
不適切な入力確認 		CVE-2012-4358 2012-08-21 15:31 2012-07-17 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 27, 2026, 4:52 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
266161 7.5 HIGH
Network 		gnu gnutls The "GNUTLS_KEYLOGFILE" environment variable in gnutls 3.4.12 allows remote attackers to overwrite and corrupt arbitrary files in the filesystem. CWE-20
 Improper Input Validation  		CVE-2016-4456 2024-11-21 11:52 2017-08-9 Show GitHub Exploit DB Packet Storm
266162 8.4 HIGH
Network 		hp helion_openstack_glance The glance-manage db in all versions of HPE Helion Openstack Glance allows deleted image ids to be reassigned, which allows remote authenticated users to cause other users to boot into a modified ima… CWE-284
Improper Access Control 		CVE-2016-4383 2024-11-21 11:52 2017-06-28 Show GitHub Exploit DB Packet Storm
266163 9.8 CRITICAL
Network 		php
suse 		php
linux_enterprise_software_development_kit
linux_enterprise_module_for_web_scripting 		/ext/phar/phar_object.c in PHP 7.0.7 and 5.6.x allows remote attackers to execute arbitrary code. NOTE: Introduced as part of an incomplete fix to CVE-2015-6833. CWE-416
 Use After Free 		CVE-2016-4473 2024-11-21 11:52 2017-06-9 Show GitHub Exploit DB Packet Storm
266164 8.8 HIGH
Network 		redhat cloudforms ManageIQ in CloudForms before 4.1 allows remote authenticated users to execute arbitrary code. CWE-264
Permissions, Privileges, and Access Controls 		CVE-2016-4471 2024-11-21 11:52 2017-06-9 Show GitHub Exploit DB Packet Storm
266165 7.5 HIGH
Network 		redhat cloudforms_management_engine CloudForms Management Engine before 5.8 includes a default SSL/TLS certificate. CWE-310
Cryptographic Issues 		CVE-2016-4457 2024-11-21 11:52 2017-06-9 Show GitHub Exploit DB Packet Storm
266166 9.0 CRITICAL
Network 		pivotal bosh_stemcell An endpoint of the Agent running on the BOSH Director VM with stemcell versions prior to 3232.6 and 3146.13 may allow unauthenticated clients to read or write blobs or cause a denial of service attac… CWE-264
Permissions, Privileges, and Access Controls 		CVE-2016-4435 2024-11-21 11:52 2017-05-26 Show GitHub Exploit DB Packet Storm
266167 5.9 MEDIUM
Network 		apache qpid_proton The C client and C-based client bindings in the Apache Qpid Proton library before 0.13.1 on Windows do not properly verify that the server hostname matches a domain name in the subject's Common Name … CWE-295
Improper Certificate Validation  		CVE-2016-4467 2024-11-21 11:52 2017-05-2 Show GitHub Exploit DB Packet Storm
266168 5.3 MEDIUM
Network 		miniprofiler rack-mini-profiler The rack-mini-profiler gem before 0.10.1 for Ruby allows remote attackers to obtain sensitive information about allocated strings and objects by leveraging incorrect ordering of security checks. CWE-200
Information Exposure 		CVE-2016-4442 2024-11-21 11:52 2017-05-2 Show GitHub Exploit DB Packet Storm
266169 7.8 HIGH
Local 		apple iphone_os
mac_os_x
tvos 		Heap-based buffer overflow in IOHIDFamily in Apple iOS before 9.3.2, OS X before 10.11.5, and tvOS before 9.2.1 allows attackers to execute arbitrary code in a privileged context or cause a denial of… CWE-119
Incorrect Access of Indexable Resource ('Range Error')  		CVE-2016-4650 2024-11-21 11:52 2017-04-21 Show GitHub Exploit DB Packet Storm
266170 3.3 LOW
Local 		redhat enterprise_linux_desktop
enterprise_linux_workstation
enterprise_linux_server
enterprise_linux_hpc_node
subscription-manager 		The Subscription Manager package (aka subscription-manager) before 1.17.7-1 for Candlepin uses weak permissions (755) for subscription-manager cache directories, which allows local users to obtain se… CWE-264
Permissions, Privileges, and Access Controls 		CVE-2016-4455 2024-11-21 11:52 2017-04-15 Show GitHub Exploit DB Packet Storm