Vulnerability Search Top

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

Vulnerability Information Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 22, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
241861	4.9	警告	Moodle	-	Moodle のカレンダー設定ページにおけるオープンリダイレクトの脆弱性	CWE-20 不適切な入力確認	CVE-2011-4582	2012-07-23 14:39	2011-12-6	Show	GitHub Exploit DB Packet Storm

241862	4	警告	Moodle	-	Moodle の mod/wiki/pagelib.php における wiki 作成者のユーザ名を知られる脆弱性	CWE-200 情報漏えい	CVE-2011-4581	2012-07-23 14:31	2011-12-6	Show	GitHub Exploit DB Packet Storm

241863	6.8	警告	Phillip Lougher	-	Squashfs の unsquashfs の unsquashfs.c における整数オーバーフローの脆弱性	CWE-189 数値処理の問題	CVE-2012-4025	2012-07-23 13:45	2012-07-19	Show	GitHub Exploit DB Packet Storm

241864	6.8	警告	Phillip Lougher	-	Squashfs の unsquashfs の unsquashfs.c におけるスタックベースのバッファオーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2012-4024	2012-07-23 13:43	2012-07-19	Show	GitHub Exploit DB Packet Storm

241865	9.3	危険	シスコシステムズ	-	Cisco Linksys PlayerPT ActiveX コントロールにおけるスタックベースのバッファオーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2012-0284	2012-07-23 11:53	2012-07-19	Show	GitHub Exploit DB Packet Storm

241866	10	危険	OpenJPEG project	-	OpenJPEG の j2k.c におけるヒープベースのバッファオーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2012-3358	2012-07-23 11:52	2012-07-10	Show	GitHub Exploit DB Packet Storm

241867	6.8	警告	OpenJPEG project	-	OpenJPEG の tcd.c 内の tcd_free_encode 関数におけるサービス運用妨害 (DoS) の脆弱性	CWE-119 バッファエラー	CVE-2009-5030	2012-07-23 11:33	2012-05-29	Show	GitHub Exploit DB Packet Storm

241868	10	危険	Zingiri	-	WordPress 用 Zingiri Web Shop プラグインにおける脆弱性	CWE-noinfo 情報不足	CVE-2012-4033	2012-07-23 11:29	2012-07-18	Show	GitHub Exploit DB Packet Storm

241869	7.5	危険	Florian Weber	-	Drupal 用 Spaces モジュールにおける重要な情報を取得される脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2012-2303	2012-07-23 11:28	2012-04-25	Show	GitHub Exploit DB Packet Storm

241870	10	危険	サン・マイクロシステムズオラクル	-	Oracle Fusion Middleware の Oracle JRockit における脆弱性	CWE-noinfo 情報不足	CVE-2012-3135	2012-07-20 18:06	2012-07-17	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 23, 2026, 4:08 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
266471	7.8	HIGH Local	google	android	mm-video-v4l2/vidc/venc/src/omx_video_base.cpp in mediaserver in Android 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-08-01 allocates an incorrect amount of memory, which allows attack…	CWE-119 Incorrect Access of Indexable Resource ('Range Error')	CVE-2016-3825	2024-11-21 11:50	2016-08-6	Show	GitHub Exploit DB Packet Storm

266472	7.8	HIGH Local	google	android	omx/OMXNodeInstance.cpp in libstagefright in mediaserver in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-08-01 does not validate the buffer port, which allows…	CWE-119 Incorrect Access of Indexable Resource ('Range Error')	CVE-2016-3824	2024-11-21 11:50	2016-08-6	Show	GitHub Exploit DB Packet Storm

266473	7.8	HIGH Local	google	android	The secure-session feature in the mm-video-v4l2 venc component in mediaserver in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-08-01 mishandles heap pointers, …	CWE-119 Incorrect Access of Indexable Resource ('Range Error')	CVE-2016-3823	2024-11-21 11:50	2016-08-6	Show	GitHub Exploit DB Packet Storm

266474	7.8	HIGH Local	google debian	android debian_linux	exif.c in Matthias Wandel jhead 2.87, as used in libjhead in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-08-01, allows remote attackers to execute arbitrary …	CWE-119 Incorrect Access of Indexable Resource ('Range Error')	CVE-2016-3822	2024-11-21 11:50	2016-08-6	Show	GitHub Exploit DB Packet Storm

266475	9.8	CRITICAL Network	google	android	libmedia in mediaserver in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-08-01 has certain incorrect declarations, which allows remote attackers to execute arb…	CWE-476 NULL Pointer Dereference	CVE-2016-3821	2024-11-21 11:50	2016-08-6	Show	GitHub Exploit DB Packet Storm

266476	9.8	CRITICAL Network	google	android	The ih264d decoder in mediaserver in Android 6.x before 2016-08-01 mishandles slice numbers, which allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) v…	CWE-119 Incorrect Access of Indexable Resource ('Range Error')	CVE-2016-3820	2024-11-21 11:50	2016-08-6	Show	GitHub Exploit DB Packet Storm

266477	9.8	CRITICAL Network	google	android	Integer overflow in codecs/on2/h264dec/source/h264bsd_dpb.c in libstagefright in mediaserver in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-08-01 allows remo…	CWE-119 Incorrect Access of Indexable Resource ('Range Error')	CVE-2016-3819	2024-11-21 11:50	2016-08-6	Show	GitHub Exploit DB Packet Storm

266478	5.5	MEDIUM Local	sap	hana_db	The Extended Application Services (aka XS or XS Engine) in SAP HANA DB 1.00.091.00.1418659308 allows local users to obtain sensitive password information via vectors related to passwords in Web Dispa…	CWE-200 Information Exposure	CVE-2016-3640	2024-11-21 11:50	2016-08-5	Show	GitHub Exploit DB Packet Storm

266479	9.8	CRITICAL Network	redhat	jboss_operations_network	The server in Red Hat JBoss Operations Network (JON) before 3.3.6 allows remote attackers to execute arbitrary code via a crafted HTTP request, related to message deserialization.	CWE-20 Improper Input Validation	CVE-2016-3737	2024-11-21 11:50	2016-08-2	Show	GitHub Exploit DB Packet Storm

266480	5.3	MEDIUM Network	oracle mariadb ibm debian canonical	linux mariadb mysql powerkvm debian_linux ubuntu_linux	Unspecified vulnerability in Oracle MySQL 5.5.49 and earlier, 5.6.30 and earlier, and 5.7.12 and earlier and MariaDB before 5.5.50, 10.0.x before 10.0.26, and 10.1.x before 10.1.15 allows remote auth…	NVD-CWE-noinfo	CVE-2016-3615	2024-11-21 11:50	2016-07-21	Show	GitHub Exploit DB Packet Storm