Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 25, 2026, 2:01 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
241931 4.3 警告 Emery Berger - Hoard の malloc および calloc 関数における整数オーバーフローの脆弱性 CWE-189
数値処理の問題 		CVE-2012-2676 2012-07-30 10:39 2012-06-10 Show GitHub Exploit DB Packet Storm
241932 4.3 警告 ned Productions - nedmalloc における整数オーバーフローの脆弱性 CWE-189
数値処理の問題 		CVE-2012-2675 2012-07-30 10:33 2012-07-25 Show GitHub Exploit DB Packet Storm
241933 4.3 警告 Google - Android 用 Bionic の libc/bionic/malloc_debug_leak.c における整数オーバーフローの脆弱性 CWE-189
数値処理の問題 		CVE-2012-2674 2012-07-30 10:32 2012-07-25 Show GitHub Exploit DB Packet Storm
241934 6.8 警告 eZ - eZ Publish の eZOE flash player におけるクロスサイトリクエストフォージェリの脆弱性 CWE-352
同一生成元ポリシー違反 		CVE-2012-4053 2012-07-30 10:00 2012-07-8 Show GitHub Exploit DB Packet Storm
241935 4.3 警告 ノキア - Nokia PC Suite の Video Manager におけるバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2012-2442 2012-07-30 09:58 2012-07-25 Show GitHub Exploit DB Packet Storm
241936 7.1 危険 アップル - Apple Safari 6.0 未満で使用される WebKit におけるサンドボックスの制限を回避される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2012-3697 2012-07-27 14:28 2012-07-25 Show GitHub Exploit DB Packet Storm
241937 4.3 警告 アップル - Apple Safari 6.0 未満で使用される WebKit における任意のファイルを読まれる脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2012-3690 2012-07-27 12:18 2012-07-25 Show GitHub Exploit DB Packet Storm
241938 5.8 警告 アップル - Apple Safari 6.0 未満で使用される WebKit における同一生成元ポリシーを回避される脆弱性 CWE-20
不適切な入力確認 		CVE-2012-3689 2012-07-27 12:16 2012-07-25 Show GitHub Exploit DB Packet Storm
241939 4.3 警告 アップル - Apple Safari 6.0 未満における任意のファイルを読まれる脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2012-0679 2012-07-27 12:02 2012-07-25 Show GitHub Exploit DB Packet Storm
241940 4.3 警告 Opera Software ASA - Opera における SSL サーバ証明書の検証不備の脆弱性 CWE-Other
その他 		CVE-2012-1251 2012-07-26 17:30 2012-05-25 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 25, 2026, 4:01 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
266411 7.8 HIGH
Local 		libtiff
oracle 		libtiff
vm_server 		The _TIFFVGetField function in tif_dirinfo.c in LibTIFF 4.0.6 and earlier allows remote attackers to cause a denial of service (out-of-bounds write) or execute arbitrary code via a crafted TIFF image. CWE-787
 Out-of-bounds Write 		CVE-2016-3632 2024-11-21 11:50 2016-09-22 Show GitHub Exploit DB Packet Storm
266412 5.5 MEDIUM
Local 		google android OMXCodec.cpp in libstagefright in mediaserver in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, 6.x before 2016-09-01, and 7.0 before 2016-09-01 does not validate a certain pointer… CWE-284
Improper Access Control 		CVE-2016-3899 2024-11-21 11:50 2016-09-12 Show GitHub Exploit DB Packet Storm
266413 5.5 MEDIUM
Local 		google android Telephony in Android 5.0.x before 5.0.2, 5.1.x before 5.1.1, 6.x before 2016-09-01, and 7.0 before 2016-09-01 allows attackers to cause a denial of service (loss of locked-screen 911 TTY functionalit… CWE-284
Improper Access Control 		CVE-2016-3898 2024-11-21 11:50 2016-09-12 Show GitHub Exploit DB Packet Storm
266414 5.5 MEDIUM
Local 		google android The WifiEnterpriseConfig class in net/wifi/WifiEnterpriseConfig.java in Wi-Fi in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-09-01 includes a password in the… CWE-200
Information Exposure 		CVE-2016-3897 2024-11-21 11:50 2016-09-12 Show GitHub Exploit DB Packet Storm
266415 5.5 MEDIUM
Local 		google android AOSP Mail in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-09-01 allows attackers to obtain sensitive EmailAccountCacheProvider information via a crafted appli… CWE-200
Information Exposure 		CVE-2016-3896 2024-11-21 11:50 2016-09-12 Show GitHub Exploit DB Packet Storm
266416 5.5 MEDIUM
Local 		google android Integer overflow in the Region::unflatten function in libs/ui/Region.cpp in mediaserver in Android 6.x before 2016-09-01 and 7.0 before 2016-09-01 allows attackers to obtain sensitive information via… CWE-200
CWE-190
Information Exposure
 Integer Overflow or Wraparound 		CVE-2016-3895 2024-11-21 11:50 2016-09-12 Show GitHub Exploit DB Packet Storm
266417 5.5 MEDIUM
Local 		google android The Qualcomm DMA component in Android before 2016-09-05 on Nexus 6 devices allows attackers to obtain sensitive information via a crafted application, aka Android internal bug 29618014 and Qualcomm i… CWE-200
Information Exposure 		CVE-2016-3894 2024-11-21 11:50 2016-09-12 Show GitHub Exploit DB Packet Storm
266418 5.5 MEDIUM
Local 		google android The wcdcal_hwdep_ioctl_shared function in sound/soc/codecs/wcdcal-hwdep.c in the Qualcomm sound codec in Android before 2016-09-05 on Nexus 6P devices does not properly copy firmware data, which allo… CWE-200
Information Exposure 		CVE-2016-3893 2024-11-21 11:50 2016-09-12 Show GitHub Exploit DB Packet Storm
266419 5.5 MEDIUM
Local 		google android The Qualcomm SPMI driver in Android before 2016-09-05 on Nexus 5, 5X, 6, and 6P devices allows attackers to obtain sensitive information via a crafted application, aka Android internal bug 28760543 a… CWE-200
Information Exposure 		CVE-2016-3892 2024-11-21 11:50 2016-09-12 Show GitHub Exploit DB Packet Storm
266420 7.0 HIGH
Local 		google android The Java Debug Wire Protocol (JDWP) implementation in adb/sockets.cpp in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-09-01 mishandles socket close operations… CWE-264
Permissions, Privileges, and Access Controls 		CVE-2016-3890 2024-11-21 11:50 2016-09-12 Show GitHub Exploit DB Packet Storm