Vulnerability Search Top

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

Vulnerability Information Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 23, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
242011	4.3	警告	マイクロソフト	-	Microsoft Windows の TLS プロトコルの CBC モードにおける平文データを取得される脆弱性	CWE-200 情報漏えい	CVE-2012-1870	2012-07-13 16:09	2012-07-10	Show	GitHub Exploit DB Packet Storm

242012	7.2	危険	マイクロソフト	-	Microsoft Windows のカーネルモードドライバ内の win32k.sys における権限昇格の脆弱性	CWE-20 不適切な入力確認	CVE-2012-1890	2012-07-13 16:07	2012-07-10	Show	GitHub Exploit DB Packet Storm

242013	9.3	危険	マイクロソフト	-	MDAC および WDAC におけるヒープベースのバッファオーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2012-1891	2012-07-13 16:06	2012-07-10	Show	GitHub Exploit DB Packet Storm

242014	7.2	危険	マイクロソフト	-	Microsoft Windows のカーネルモードドライバ内の win32k.sys における権限昇格の脆弱性	CWE-20 不適切な入力確認	CVE-2012-1893	2012-07-13 16:06	2012-07-10	Show	GitHub Exploit DB Packet Storm

242015	6.9	警告	マイクロソフト	-	Microsoft Office for Mac 2011 における権限昇格の脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2012-1894	2012-07-13 16:04	2012-07-10	Show	GitHub Exploit DB Packet Storm

242016	9	危険	シスコシステムズ	-	Cisco TelePresence Recording Server における任意のコマンドを実行される脆弱性	CWE-78 OSコマンド・インジェクション	CVE-2012-3076	2012-07-13 15:21	2012-07-11	Show	GitHub Exploit DB Packet Storm

242017	9	危険	シスコシステムズ	-	Cisco TelePresence Immersive エンドポイントデバイスにおける任意のコマンドを実行される脆弱性	CWE-78 OSコマンド・インジェクション	CVE-2012-3075	2012-07-13 15:20	2012-07-11	Show	GitHub Exploit DB Packet Storm

242018	8.3	危険	シスコシステムズ	-	Cisco TelePresence Immersive エンドポイントデバイスの API における任意のコマンドを実行される脆弱性	CWE-78 OSコマンド・インジェクション	CVE-2012-3074	2012-07-13 15:18	2012-07-11	Show	GitHub Exploit DB Packet Storm

242019	7.8	危険	シスコシステムズ	-	Cisco TelePresence 製品におけるサービス運用妨害 (DoS) の脆弱性	CWE-Other その他	CVE-2012-3073	2012-07-13 15:16	2012-07-11	Show	GitHub Exploit DB Packet Storm

242020	8.3	危険	シスコシステムズ	-	Cisco TelePresence 製品における任意のコードを実行される脆弱性	CWE-94 コード・インジェクション	CVE-2012-2486	2012-07-13 14:58	2012-07-11	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 23, 2026, 4:08 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
266471	7.8	HIGH Local	google	android	mm-video-v4l2/vidc/venc/src/omx_video_base.cpp in mediaserver in Android 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-08-01 allocates an incorrect amount of memory, which allows attack…	CWE-119 Incorrect Access of Indexable Resource ('Range Error')	CVE-2016-3825	2024-11-21 11:50	2016-08-6	Show	GitHub Exploit DB Packet Storm

266472	7.8	HIGH Local	google	android	omx/OMXNodeInstance.cpp in libstagefright in mediaserver in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-08-01 does not validate the buffer port, which allows…	CWE-119 Incorrect Access of Indexable Resource ('Range Error')	CVE-2016-3824	2024-11-21 11:50	2016-08-6	Show	GitHub Exploit DB Packet Storm

266473	7.8	HIGH Local	google	android	The secure-session feature in the mm-video-v4l2 venc component in mediaserver in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-08-01 mishandles heap pointers, …	CWE-119 Incorrect Access of Indexable Resource ('Range Error')	CVE-2016-3823	2024-11-21 11:50	2016-08-6	Show	GitHub Exploit DB Packet Storm

266474	7.8	HIGH Local	google debian	android debian_linux	exif.c in Matthias Wandel jhead 2.87, as used in libjhead in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-08-01, allows remote attackers to execute arbitrary …	CWE-119 Incorrect Access of Indexable Resource ('Range Error')	CVE-2016-3822	2024-11-21 11:50	2016-08-6	Show	GitHub Exploit DB Packet Storm

266475	9.8	CRITICAL Network	google	android	libmedia in mediaserver in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-08-01 has certain incorrect declarations, which allows remote attackers to execute arb…	CWE-476 NULL Pointer Dereference	CVE-2016-3821	2024-11-21 11:50	2016-08-6	Show	GitHub Exploit DB Packet Storm

266476	9.8	CRITICAL Network	google	android	The ih264d decoder in mediaserver in Android 6.x before 2016-08-01 mishandles slice numbers, which allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) v…	CWE-119 Incorrect Access of Indexable Resource ('Range Error')	CVE-2016-3820	2024-11-21 11:50	2016-08-6	Show	GitHub Exploit DB Packet Storm

266477	9.8	CRITICAL Network	google	android	Integer overflow in codecs/on2/h264dec/source/h264bsd_dpb.c in libstagefright in mediaserver in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-08-01 allows remo…	CWE-119 Incorrect Access of Indexable Resource ('Range Error')	CVE-2016-3819	2024-11-21 11:50	2016-08-6	Show	GitHub Exploit DB Packet Storm

266478	5.5	MEDIUM Local	sap	hana_db	The Extended Application Services (aka XS or XS Engine) in SAP HANA DB 1.00.091.00.1418659308 allows local users to obtain sensitive password information via vectors related to passwords in Web Dispa…	CWE-200 Information Exposure	CVE-2016-3640	2024-11-21 11:50	2016-08-5	Show	GitHub Exploit DB Packet Storm

266479	9.8	CRITICAL Network	redhat	jboss_operations_network	The server in Red Hat JBoss Operations Network (JON) before 3.3.6 allows remote attackers to execute arbitrary code via a crafted HTTP request, related to message deserialization.	CWE-20 Improper Input Validation	CVE-2016-3737	2024-11-21 11:50	2016-08-2	Show	GitHub Exploit DB Packet Storm

266480	5.3	MEDIUM Network	oracle mariadb ibm debian canonical	linux mariadb mysql powerkvm debian_linux ubuntu_linux	Unspecified vulnerability in Oracle MySQL 5.5.49 and earlier, 5.6.30 and earlier, and 5.7.12 and earlier and MariaDB before 5.5.50, 10.0.x before 10.0.26, and 10.1.x before 10.1.15 allows remote auth…	NVD-CWE-noinfo	CVE-2016-3615	2024-11-21 11:50	2016-07-21	Show	GitHub Exploit DB Packet Storm