Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 28, 2026, 10 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
242061	5.1	警告	オラクル	-	Oracle Solaris における Gnome PDF viewer の処理に関する脆弱性	CWE-noinfo 情報不足	CVE-2012-3129	2012-07-20 16:14	2012-07-17	Show	GitHub Exploit DB Packet Storm

242062	3.7	注意	オラクル	-	Oracle SPARC T シリーズサーバのファームウェアにおける Integrated Lights Out Manager の処理に関する脆弱性	CWE-noinfo 情報不足	CVE-2012-3128	2012-07-20 16:13	2012-07-17	Show	GitHub Exploit DB Packet Storm

242063	5.4	警告	オラクル	-	Oracle Solaris における SCTP の処理に関する脆弱性	CWE-noinfo 情報不足	CVE-2012-3127	2012-07-20 16:11	2012-07-17	Show	GitHub Exploit DB Packet Storm

242064	6.2	警告	オラクル	-	Oracle Solaris Cluster における Apache Tomcat Agent の処理に関する脆弱性	CWE-noinfo 情報不足	CVE-2012-3126	2012-07-20 16:10	2012-07-17	Show	GitHub Exploit DB Packet Storm

242065	7.1	危険	オラクル	-	Oracle Solaris における TCP/IP の処理に関する脆弱性	CWE-noinfo 情報不足	CVE-2012-3125	2012-07-20 16:09	2012-07-17	Show	GitHub Exploit DB Packet Storm

242066	5	警告	オラクル	-	Oracle Solaris における Kernel/KSSL の処理に関する脆弱性	CWE-noinfo 情報不足	CVE-2012-3124	2012-07-20 16:07	2012-07-17	Show	GitHub Exploit DB Packet Storm

242067	5	警告	オラクル	-	Oracle Solaris における Apache HTTP サーバの処理に関する脆弱性	CWE-noinfo 情報不足	CVE-2012-3123	2012-07-20 16:06	2012-07-17	Show	GitHub Exploit DB Packet Storm

242068	2.6	注意	オラクル	-	Oracle Solaris におけるソートの処理に関する脆弱性	CWE-noinfo 情報不足	CVE-2012-3122	2012-07-20 16:05	2012-07-17	Show	GitHub Exploit DB Packet Storm

242069	5	警告	オラクル	-	Oracle Solaris における in.tnamed の処理に関する脆弱性	CWE-noinfo 情報不足	CVE-2012-3121	2012-07-20 16:04	2012-07-17	Show	GitHub Exploit DB Packet Storm

242070	7.8	危険	オラクル	-	Oracle Solaris における TCP/IP の処理に関する脆弱性	CWE-noinfo 情報不足	CVE-2012-3120	2012-07-20 16:02	2012-07-17	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 28, 2026, 4:16 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
266271	9.8	CRITICAL Network	animas	onetouch_ping_firmware	Johnson & Johnson Animas OneTouch Ping devices mishandle acknowledgements, which makes it easier for remote attackers to bypass authentication via a custom communication protocol.	CWE-287 Improper Authentication	CVE-2016-5686	2024-11-21 11:54	2016-10-5	Show	GitHub Exploit DB Packet Storm

266272	3.3	LOW Local	redhat	enterprise_virtualization	The ovirt-engine-provisiondb utility in Red Hat Enterprise Virtualization (RHEV) Engine 4.0 allows local users to obtain sensitive database provisioning information by reading log files.	CWE-532 Inclusion of Sensitive Information in Log Files	CVE-2016-5432	2024-11-21 11:54	2016-10-4	Show	GitHub Exploit DB Packet Storm

266273	5.4	MEDIUM Network	redhat	jboss_bpm_suite	Cross-site scripting (XSS) vulnerability in Business Process Editor in Red Hat JBoss BPM Suite before 6.3.3 allows remote authenticated users to inject arbitrary web script or HTML by levering permis…	CWE-79 Cross-site Scripting	CVE-2016-5398	2024-11-21 11:54	2016-10-4	Show	GitHub Exploit DB Packet Storm

266274	9.8	CRITICAL Network	f5	big-ip_policy_enforcement_manager big-ip_local_traffic_manager big-ip_websafe big-ip_link_controller big-ip_application_acceleration_manager big-ip_access_policy_manager big-ip_adva…	Virtual servers in F5 BIG-IP systems 11.5.0, 11.5.1 before HF11, 11.5.2, 11.5.3, 11.5.4 before HF2, 11.6.0 before HF8, 11.6.1 before HF1, 12.0.0 before HF4, and 12.1.0 before HF2, when configured wit…	CWE-284 Improper Access Control	CVE-2016-5700	2024-11-21 11:54	2016-10-4	Show	GitHub Exploit DB Packet Storm

266275	5.1	MEDIUM Local	opensuse yast	libstorage-ng yast-storage libstorage leap	libstorage, libstorage-ng, and yast-storage improperly store passphrases for encrypted storage devices in a temporary file on disk, which might allow local users to obtain sensitive information by re…	NVD-CWE-Other	CVE-2016-5746	2024-11-21 11:54	2016-09-27	Show	GitHub Exploit DB Packet Storm

266276	8.8	HIGH Network	redhat	jboss_enterprise_application_platform	The domain controller in Red Hat JBoss Enterprise Application Platform (EAP) 7.x before 7.0.2 allows remote authenticated users to gain privileges by leveraging failure to propagate administrative RB…	CWE-264 Permissions, Privileges, and Access Controls	CVE-2016-5406	2024-11-21 11:54	2016-09-26	Show	GitHub Exploit DB Packet Storm

266277	4.8	MEDIUM Network	apache	ranger	Cross-site scripting (XSS) vulnerability in the create user functionality in the policy admin tool in Apache Ranger before 0.6.1 allows remote authenticated administrators to inject arbitrary web scr…	CWE-79 Cross-site Scripting	CVE-2016-5395	2024-11-21 11:54	2016-09-26	Show	GitHub Exploit DB Packet Storm

266278	7.5	HIGH Network	powerdns	authoritative	PowerDNS (aka pdns) Authoritative Server before 3.4.10 does not properly handle a . (dot) inside labels, which allows remote attackers to cause a denial of service (backend CPU consumption) via a cra…	CWE-399 Resource Management Errors	CVE-2016-5427	2024-11-21 11:54	2016-09-21	Show	GitHub Exploit DB Packet Storm

266279	7.5	HIGH Network	powerdns	authoritative	PowerDNS (aka pdns) Authoritative Server before 3.4.10 allows remote attackers to cause a denial of service (backend CPU consumption) via a long qname.	CWE-399 Resource Management Errors	CVE-2016-5426	2024-11-21 11:54	2016-09-21	Show	GitHub Exploit DB Packet Storm

266280	7.5	HIGH Network	redhat oracle libarchive	enterprise_linux_hpc_node enterprise_linux_desktop enterprise_linux_server enterprise_linux_workstation linux openshift libarchive enterprise_linux_server_aus enterprise_linux…	The sandboxing code in libarchive 3.2.0 and earlier mishandles hardlink archive entries of non-zero data size, which might allow remote attackers to write to arbitrary files via a crafted archive fil…	CWE-20 CWE-19 Improper Input Validation Data Processing Errors	CVE-2016-5418	2024-11-21 11:54	2016-09-21	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed