Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 25, 2026, 6 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
242281 1.9 注意 レッドハット - Automatic Bug Reporting Tool (ABRT) の C handler プラグインにおける重要な情報を取得される脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2012-1106 2012-07-4 15:28 2012-06-20 Show GitHub Exploit DB Packet Storm
242282 2.3 注意 Fedora Project - 389 Directory Server の servers/plugins/acl/acllas.c におけるサービス運用妨害 (DoS) の脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2012-0833 2012-07-4 15:26 2012-01-6 Show GitHub Exploit DB Packet Storm
242283 4.7 警告 Linux - Linux Kernel の KVM の実装におけるサービス運用妨害 (ゲスト OS クラッシュ) の脆弱性 CWE-DesignError
CVE-2012-0045 2012-07-4 15:16 2012-07-3 Show GitHub Exploit DB Packet Storm
242284 4.6 警告 Linux - Linux Kernel における制限を回避される脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2011-4127 2012-07-4 15:14 2012-07-3 Show GitHub Exploit DB Packet Storm
242285 4.9 警告 Linux - Linux Kernel の fs/jbd2/transaction.c におけるサービス運用妨害 (DoS) の脆弱性 CWE-119
バッファエラー
CVE-2011-4086 2012-07-4 15:11 2012-07-3 Show GitHub Exploit DB Packet Storm
242286 4.3 警告 GNOME Project - gdk-pixbuf の gdk-pixbuf/io-gif.c におけるサービス運用妨害 (メモリ消費) の脆弱性 CWE-DesignError
CVE-2011-2485 2012-07-4 15:05 2011-06-24 Show GitHub Exploit DB Packet Storm
242287 7.5 危険 MantisBT Group - MantisBT の SOAP API の api/soap/mc_api.php における認証を回避される脆弱性 CWE-287
不適切な認証
CVE-2012-1123 2012-07-3 18:53 2012-03-3 Show GitHub Exploit DB Packet Storm
242288 3.6 注意 MantisBT Group - MantisBT の bug_actiongroup.php におけるアクセス制限を回避される脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2012-1122 2012-07-3 18:50 2012-03-3 Show GitHub Exploit DB Packet Storm
242289 4.9 警告 MantisBT Group - MantisBT におけるグローバルカテゴリを変更される脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2012-1121 2012-07-3 17:41 2012-03-3 Show GitHub Exploit DB Packet Storm
242290 3.6 注意 MantisBT Group - MantisBT の SOAP API における任意のバグレポートおよびバグノートを削除される脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2012-1120 2012-07-3 17:41 2012-03-3 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 25, 2026, 4:01 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
268961 8.8 HIGH
Network
adobe flash_player
flash_player_desktop_runtime
air_desktop_runtime
air_sdk
air_sdk_\&_compiler
Adobe Flash Player before 18.0.0.343 and 19.x through 21.x before 21.0.0.213 on Windows and OS X and before 11.2.202.616 on Linux allows attackers to execute arbitrary code or cause a denial of servi… CWE-787
 Out-of-bounds Write
CVE-2016-1012 2024-11-21 11:45 2016-04-9 Show GitHub Exploit DB Packet Storm
268962 8.1 HIGH
Network
adobe flash_player
flash_player_desktop_runtime
air_desktop_runtime
air_sdk
air_sdk_\&_compiler
Adobe Flash Player before 18.0.0.343 and 19.x through 21.x before 21.0.0.213 on Windows and OS X and before 11.2.202.616 on Linux allows attackers to bypass the ASLR protection mechanism via JIT data. NVD-CWE-noinfo
CVE-2016-1006 2024-11-21 11:45 2016-04-9 Show GitHub Exploit DB Packet Storm
268963 6.1 MEDIUM
Network
cyber-will social-button_premium Cross-site scripting (XSS) vulnerability in the Cyber-Will Social-button Premium plugin before 1.1 for EC-CUBE 2.13.x allows remote attackers to inject arbitrary web script or HTML via unspecified ve… CWE-79
Cross-site Scripting
CVE-2016-1180 2024-11-21 11:45 2016-04-9 Show GitHub Exploit DB Packet Storm
268964 8.8 HIGH
Network
hiniarata casebook_plugin Cross-site request forgery (CSRF) vulnerability in the Menubook plugin before 0.9.3 for baserCMS allows remote attackers to hijack the authentication of administrators. CWE-352
 Origin Validation Error
CVE-2016-1174 2024-11-21 11:45 2016-04-7 Show GitHub Exploit DB Packet Storm
268965 6.1 MEDIUM
Network
hiniarata casebook_plugin Cross-site scripting (XSS) vulnerability in the Menubook plugin before 0.9.3 for baserCMS allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. CWE-79
Cross-site Scripting
CVE-2016-1173 2024-11-21 11:45 2016-04-7 Show GitHub Exploit DB Packet Storm
268966 8.8 HIGH
Network
hiniarata casebook_plugin Cross-site request forgery (CSRF) vulnerability in the Recruit plugin before 0.9.3 for baserCMS allows remote attackers to hijack the authentication of administrators. CWE-352
 Origin Validation Error
CVE-2016-1172 2024-11-21 11:45 2016-04-7 Show GitHub Exploit DB Packet Storm
268967 6.1 MEDIUM
Network
hiniarata casebook_plugin Cross-site scripting (XSS) vulnerability in the Recruit plugin before 0.9.3 for baserCMS allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. CWE-79
Cross-site Scripting
CVE-2016-1171 2024-11-21 11:45 2016-04-7 Show GitHub Exploit DB Packet Storm
268968 8.8 HIGH
Network
hiniarata casebook_plugin Cross-site request forgery (CSRF) vulnerability in the Casebook plugin before 0.9.4 for baserCMS allows remote attackers to hijack the authentication of administrators. CWE-352
 Origin Validation Error
CVE-2016-1170 2024-11-21 11:45 2016-04-7 Show GitHub Exploit DB Packet Storm
268969 6.1 MEDIUM
Network
hiniarata casebook_plugin Cross-site scripting (XSS) vulnerability in the Casebook plugin before 0.9.4 for baserCMS allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. CWE-79
Cross-site Scripting
CVE-2016-1169 2024-11-21 11:45 2016-04-7 Show GitHub Exploit DB Packet Storm
268970 6.1 MEDIUM
Network
falconsc wisepoint_authenticator
wisepoint
The management screen in Falcon WisePoint 4.3.1 and earlier and WisePoint Authenticator 4.1.19.22 and earlier allows remote attackers to conduct clickjacking attacks via unspecified vectors. CWE-254
 7PK - Security Features
CVE-2016-1177 2024-11-21 11:45 2016-04-6 Show GitHub Exploit DB Packet Storm