Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":June 6, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
242131	5	警告	Boost.org	-	Boost Pool の boost/pool/pool.hpp における整数オーバーフローの脆弱性	CWE-189 数値処理の問題	CVE-2012-2677	2012-09-4 17:47	2012-05-4	Show	GitHub Exploit DB Packet Storm

242132	7.2	危険	Todd C. Miller	-	sudo におけるコマンドの制限を回避される脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2012-2337	2012-09-4 17:45	2012-05-18	Show	GitHub Exploit DB Packet Storm

242133	5	警告	ConnMan project	-	ConnMan の dhcpv6_get_option 関数における整数オーバーフローの脆弱性	CWE-189 数値処理の問題	CVE-2012-2322	2012-09-4 17:42	2012-05-18	Show	GitHub Exploit DB Packet Storm

242134	10	危険	ConnMan project	-	ConnMan の loopback プラグインにおける任意のコマンドを実行される脆弱性	CWE-20 不適切な入力確認	CVE-2012-2321	2012-09-4 17:39	2012-05-18	Show	GitHub Exploit DB Packet Storm

242135	7.8	危険	ConnMan project	-	ConnMan におけるアクセス制限を回避される脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2012-2320	2012-09-4 17:38	2012-05-18	Show	GitHub Exploit DB Packet Storm

242136	6.5	警告	Samba Project	-	Samba における Take Ownership 権限を取得される脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2012-2111	2012-09-4 17:32	2012-04-30	Show	GitHub Exploit DB Packet Storm

242137	3.5	注意	OpenStack	-	Openstack Compute (Nova) におけるサービス運用妨害 (CPU およびハードドライブの消費) の脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2012-2101	2012-09-4 17:22	2012-03-30	Show	GitHub Exploit DB Packet Storm

242138	4.3	警告	OpenStack	-	OpenStack Dashboard (Horizon) におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2012-2094	2012-09-4 17:20	2012-06-5	Show	GitHub Exploit DB Packet Storm

242139	4.3	警告	The phpMyAdmin Project	-	phpMyAdmin の show_config_errors.php における重要な情報を取得される脆弱性	CWE-200 情報漏えい	CVE-2012-1902	2012-09-4 17:18	2012-03-28	Show	GitHub Exploit DB Packet Storm

242140	3.6	注意	オラクル	-	Oracle Virtualization の Oracle VM VirtualBox コンポーネントにおける脆弱性	CWE-noinfo 情報不足	CVE-2012-0111	2012-09-4 10:01	2012-01-17	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:June 7, 2026, 4:13 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
269521	5.5	MEDIUM Local	uclouvain fedoraproject	openjpeg fedora	Divide-by-zero vulnerability in the opj_tcd_init_tile function in tcd.c in OpenJPEG before 2.1.1 allows remote attackers to cause a denial of service (application crash) via a crafted jp2 file. NOTE:…	CWE-369 Divide By Zero	CVE-2016-4797	2024-11-21 11:52	2017-02-4	Show	GitHub Exploit DB Packet Storm

269522	5.5	MEDIUM Local	uclouvain fedoraproject	openjpeg fedora	Heap-based buffer overflow in the color_cmyk_to_rgb in common/color.c in OpenJPEG before 2.1.1 allows remote attackers to cause a denial of service (crash) via a crafted .j2k file.	CWE-119 Incorrect Access of Indexable Resource ('Range Error')	CVE-2016-4796	2024-11-21 11:52	2017-02-4	Show	GitHub Exploit DB Packet Storm

269523	5.5	MEDIUM Local	mini-xml_project debian	mini-xml debian_linux	The mxml_write_node function in mxml-file.c in mxml 2.9, 2.7, and possibly earlier allows remote attackers to cause a denial of service (stack consumption) via crafted xml file.	CWE-400 Uncontrolled Resource Consumption	CVE-2016-4571	2024-11-21 11:52	2017-02-4	Show	GitHub Exploit DB Packet Storm

269524	5.5	MEDIUM Local	mini-xml_project debian	mini-xml debian_linux	The mxmlDelete function in mxml-node.c in mxml 2.9, 2.7, and possibly earlier allows remote attackers to cause a denial of service (stack consumption) via crafted xml file.	CWE-400 Uncontrolled Resource Consumption	CVE-2016-4570	2024-11-21 11:52	2017-02-4	Show	GitHub Exploit DB Packet Storm

269525	7.5	HIGH Network	cakephp	cakephp	The clientIp function in CakePHP 3.2.4 and earlier allows remote attackers to spoof their IP via the CLIENT-IP HTTP header.	CWE-20 Improper Input Validation	CVE-2016-4793	2024-11-21 11:52	2017-01-24	Show	GitHub Exploit DB Packet Storm

269526	6.8	MEDIUM Physics	cryptsetup_project	cryptsetup	The Debian initrd script for the cryptsetup package 2:1.7.3-2 and earlier allows physically proximate attackers to gain shell access via many log in attempts with an invalid password.	CWE-287 Improper Authentication	CVE-2016-4484	2024-11-21 11:52	2017-01-24	Show	GitHub Exploit DB Packet Storm

269527	6.1	MEDIUM Network	roundcube	webmail	Cross-site scripting (XSS) vulnerability in Roundcube Webmail before 1.2.0 allows remote attackers to inject arbitrary web script or HTML via the href attribute in an area tag in an e-mail message.	CWE-79 Cross-site Scripting	CVE-2016-4552	2024-11-21 11:52	2016-12-21	Show	GitHub Exploit DB Packet Storm

269528	5.5	MEDIUM Local	redhat	enterprise_virtualization	Red Hat Enterprise Virtualization (RHEV) Manager 3.6 allows local users to obtain encryption keys, certificates, and other sensitive information by reading the engine-setup log file.	CWE-532 Inclusion of Sensitive Information in Log Files	CVE-2016-4443	2024-11-21 11:52	2016-12-15	Show	GitHub Exploit DB Packet Storm

269529	4.4	MEDIUM Network	phpmyadmin	phpmyadmin	An issue was discovered in phpMyAdmin. A user can be tricked into following a link leading to phpMyAdmin, which after authentication redirects to another malicious site. The attacker must sniff the u…	CWE-254 7PK - Security Features	CVE-2016-4412	2024-11-21 11:52	2016-12-11	Show	GitHub Exploit DB Packet Storm

269530	7.5	HIGH Network	hp	system_management_homepage	HPE System Management Homepage before v7.6 allows remote attackers to have an unspecified impact via unknown vectors, related to a "Buffer Overflow" issue.	CWE-119 Incorrect Access of Indexable Resource ('Range Error')	CVE-2016-4396	2024-11-21 11:52	2016-10-29	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed