Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 27, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
241761	4.3	警告	WinWebMail	-	WinWebMail Servert におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2012-2571	2012-08-14 16:33	2012-08-12	Show	GitHub Exploit DB Packet Storm

241762	10	危険	Amazon.com, Inc.	-	Amazon Kindle Touch における任意のコマンドを実行される脆弱性	CWE-94 コード・インジェクション	CVE-2012-4249	2012-08-14 16:31	2012-08-12	Show	GitHub Exploit DB Packet Storm

241763	9.3	危険	Amazon.com, Inc.	-	Amazon Kindle Touch における脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2012-4248	2012-08-14 16:30	2012-08-12	Show	GitHub Exploit DB Packet Storm

241764	7.5	危険	Dir2web	-	Dir2web における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2012-4070	2012-08-14 16:29	2012-08-12	Show	GitHub Exploit DB Packet Storm

241765	5	警告	Dir2web	-	Dir2web におけるデータベースをダウンロードされる脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2012-4069	2012-08-14 16:26	2012-08-12	Show	GitHub Exploit DB Packet Storm

241766	4.3	警告	Alt-N	-	Alt-N MDaemon フリー版におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2012-2584	2012-08-14 16:22	2012-08-12	Show	GitHub Exploit DB Packet Storm

241767	6.4	警告	Caucho Technology	-	Resin に同梱されている Caucho Quercus におけるファイル名の拡張子による制限を回避される脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2012-2969	2012-08-14 16:16	2012-08-12	Show	GitHub Exploit DB Packet Storm

241768	5	警告	Caucho Technology	-	Resin に同梱されている Caucho Quercus におけるディレクトリトラバーサルの脆弱性	CWE-22 パス・トラバーサル	CVE-2012-2968	2012-08-14 16:09	2012-08-12	Show	GitHub Exploit DB Packet Storm

241769	7.5	危険	Caucho Technology	-	Resin に同梱されている Caucho Quercus における脆弱性	CWE-Other その他	CVE-2012-2967	2012-08-14 16:08	2012-08-12	Show	GitHub Exploit DB Packet Storm

241770	7.5	危険	Caucho Technology	-	Resin に同梱されている Caucho Quercus における脆弱性	CWE-Other その他	CVE-2012-2966	2012-08-14 16:05	2012-08-12	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 27, 2026, 4:52 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
266221	7.5	HIGH Network	samsung	samsung_mobile	Samsung devices with Android KK(4.4), L(5.0/5.1), or M(6.0) allow attackers to cause a denial of service (system crash) via a crafted system call to TvoutService_C.	CWE-20 Improper Input Validation	CVE-2016-4547	2024-11-21 11:52	2017-02-14	Show	GitHub Exploit DB Packet Storm

266222	5.5	MEDIUM Local	samsung	samsung_mobile	Samsung devices with Android KK(4.4) or L(5.0/5.1) allow local users to cause a denial of service (IAndroidShm service crash) via crafted data in a service call.	CWE-20 Improper Input Validation	CVE-2016-4546	2024-11-21 11:52	2017-02-14	Show	GitHub Exploit DB Packet Storm

266223	5.5	MEDIUM Local	uclouvain fedoraproject	openjpeg fedora	Divide-by-zero vulnerability in the opj_tcd_init_tile function in tcd.c in OpenJPEG before 2.1.1 allows remote attackers to cause a denial of service (application crash) via a crafted jp2 file. NOTE:…	CWE-369 Divide By Zero	CVE-2016-4797	2024-11-21 11:52	2017-02-4	Show	GitHub Exploit DB Packet Storm

266224	5.5	MEDIUM Local	uclouvain fedoraproject	openjpeg fedora	Heap-based buffer overflow in the color_cmyk_to_rgb in common/color.c in OpenJPEG before 2.1.1 allows remote attackers to cause a denial of service (crash) via a crafted .j2k file.	CWE-119 Incorrect Access of Indexable Resource ('Range Error')	CVE-2016-4796	2024-11-21 11:52	2017-02-4	Show	GitHub Exploit DB Packet Storm

266225	5.5	MEDIUM Local	mini-xml_project debian	mini-xml debian_linux	The mxml_write_node function in mxml-file.c in mxml 2.9, 2.7, and possibly earlier allows remote attackers to cause a denial of service (stack consumption) via crafted xml file.	CWE-400 Uncontrolled Resource Consumption	CVE-2016-4571	2024-11-21 11:52	2017-02-4	Show	GitHub Exploit DB Packet Storm

266226	5.5	MEDIUM Local	mini-xml_project debian	mini-xml debian_linux	The mxmlDelete function in mxml-node.c in mxml 2.9, 2.7, and possibly earlier allows remote attackers to cause a denial of service (stack consumption) via crafted xml file.	CWE-400 Uncontrolled Resource Consumption	CVE-2016-4570	2024-11-21 11:52	2017-02-4	Show	GitHub Exploit DB Packet Storm

266227	7.5	HIGH Network	cakephp	cakephp	The clientIp function in CakePHP 3.2.4 and earlier allows remote attackers to spoof their IP via the CLIENT-IP HTTP header.	CWE-20 Improper Input Validation	CVE-2016-4793	2024-11-21 11:52	2017-01-24	Show	GitHub Exploit DB Packet Storm

266228	6.8	MEDIUM Physics	cryptsetup_project	cryptsetup	The Debian initrd script for the cryptsetup package 2:1.7.3-2 and earlier allows physically proximate attackers to gain shell access via many log in attempts with an invalid password.	CWE-287 Improper Authentication	CVE-2016-4484	2024-11-21 11:52	2017-01-24	Show	GitHub Exploit DB Packet Storm

266229	6.1	MEDIUM Network	roundcube	webmail	Cross-site scripting (XSS) vulnerability in Roundcube Webmail before 1.2.0 allows remote attackers to inject arbitrary web script or HTML via the href attribute in an area tag in an e-mail message.	CWE-79 Cross-site Scripting	CVE-2016-4552	2024-11-21 11:52	2016-12-21	Show	GitHub Exploit DB Packet Storm

266230	5.5	MEDIUM Local	redhat	enterprise_virtualization	Red Hat Enterprise Virtualization (RHEV) Manager 3.6 allows local users to obtain encryption keys, certificates, and other sensitive information by reading the engine-setup log file.	CWE-532 Inclusion of Sensitive Information in Log Files	CVE-2016-4443	2024-11-21 11:52	2016-12-15	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed