Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 4, 2026, 4 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
242551 6.8 警告 Novell - Novell ZENworks Configuration Management の AdminStudio におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2011-2657 2012-07-30 13:49 2011-10-14 Show GitHub Exploit DB Packet Storm
242552 5 警告 FreeBSD
NetBSD		 - FreeBSD および NetBSD 向けの libc の jemalloc におけるメモリ関連の脆弱性 CWE-189
数値処理の問題 		CVE-2007-6754 2012-07-30 13:44 2012-07-25 Show GitHub Exploit DB Packet Storm
242553 5 警告 FreeBSD
NetBSD		 - FreeBSD および NetBSD 向けの libc の jemalloc における整数オーバーフロー脆弱性 CWE-189
数値処理の問題 		CVE-2006-7252 2012-07-30 13:41 2012-07-25 Show GitHub Exploit DB Packet Storm
242554 5 警告 gperftools - gperftools の TCMalloc における整数オーバーフローの脆弱性 CWE-189
数値処理の問題 		CVE-2005-4895 2012-07-30 11:51 2012-07-25 Show GitHub Exploit DB Packet Storm
242555 6.9 警告 シーメンス - Siemens SIMATIC PCS7 で使用される SIMATIC STEP7 における権限を取得される脆弱性 CWE-Other
その他 		CVE-2012-3015 2012-07-30 11:32 2012-07-23 Show GitHub Exploit DB Packet Storm
242556 6.9 警告 Invensys - Invensys Wonderware InTouch における権限を取得される脆弱性 CWE-Other
その他 		CVE-2012-3005 2012-07-30 11:30 2012-07-26 Show GitHub Exploit DB Packet Storm
242557 7.5 危険 ASP-DEV - ASP-DEv XM Diary における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2012-4061 2012-07-30 11:25 2012-07-25 Show GitHub Exploit DB Packet Storm
242558 7.5 危険 ASP-DEV - ASP-DEv XM Forums における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2012-4060 2012-07-30 11:25 2012-07-25 Show GitHub Exploit DB Packet Storm
242559 6.8 警告 Creative Digital Resources - SocketMail Pro の home/secretqtn.php におけるクロスサイトリクエストフォージェリの脆弱性 CWE-352
同一生成元ポリシー違反 		CVE-2012-4059 2012-07-30 11:24 2012-07-25 Show GitHub Exploit DB Packet Storm
242560 4.3 警告 Creative Digital Resources - SocketMail Pro におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2012-4058 2012-07-30 11:21 2012-07-25 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 4, 2026, 4:17 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
266271 4.9 MEDIUM
Network 		kde
opensuse 		kde-cli-tools
leap
opensuse 		A maliciously crafted command line for kdesu can result in the user only seeing part of the commands that will actually get executed as super user. CWE-94
Code Injection 		CVE-2016-7787 2024-11-21 11:58 2016-12-24 Show GitHub Exploit DB Packet Storm
266272 5.5 MEDIUM
Local 		ffmpeg ffmpeg The read_gab2_sub function in libavformat/avidec.c in FFmpeg before 3.1.4 allows remote attackers to cause a denial of service (NULL pointer used) via a crafted AVI file. CWE-476
 NULL Pointer Dereference 		CVE-2016-7905 2024-11-21 11:58 2016-12-23 Show GitHub Exploit DB Packet Storm
266273 5.5 MEDIUM
Local 		ffmpeg ffmpeg The avi_read_seek function in libavformat/avidec.c in FFmpeg before 3.1.4 allows remote attackers to cause a denial of service (assert fault) via a crafted AVI file. CWE-20
 Improper Input Validation  		CVE-2016-7785 2024-11-21 11:58 2016-12-23 Show GitHub Exploit DB Packet Storm
266274 5.5 MEDIUM
Local 		ffmpeg ffmpeg The ff_draw_pc_font function in libavcodec/cga_data.c in FFmpeg before 3.1.4 allows remote attackers to cause a denial of service (buffer overflow) via a crafted AVI file. CWE-119
Incorrect Access of Indexable Resource ('Range Error')  		CVE-2016-7562 2024-11-21 11:58 2016-12-23 Show GitHub Exploit DB Packet Storm
266275 5.5 MEDIUM
Local 		ffmpeg ffmpeg The avi_read_header function in libavformat/avidec.c in FFmpeg before 3.1.4 is vulnerable to memory leak when decoding an AVI file that has a crafted "strh" structure. CWE-200
Information Exposure 		CVE-2016-7555 2024-11-21 11:58 2016-12-23 Show GitHub Exploit DB Packet Storm
266276 7.8 HIGH
Local 		ffmpeg ffmpeg The cavs_idct8_add_c function in libavcodec/cavsdsp.c in FFmpeg before 3.1.4 is vulnerable to reading out-of-bounds memory when decoding with cavs_decode. CWE-125
Out-of-bounds Read 		CVE-2016-7502 2024-11-21 11:58 2016-12-23 Show GitHub Exploit DB Packet Storm
266277 7.8 HIGH
Local 		ffmpeg ffmpeg The ff_log2_16bit_c function in libavutil/intmath.h in FFmpeg before 3.1.4 is vulnerable to reading out-of-bounds memory when it decodes a malformed AIFF file. CWE-125
Out-of-bounds Read 		CVE-2016-7450 2024-11-21 11:58 2016-12-23 Show GitHub Exploit DB Packet Storm
266278 9.8 CRITICAL
Network 		bundler bundler Bundler 1.x might allow remote attackers to inject arbitrary Ruby code into an application by leveraging a gem name collision on a secondary source. NOTE: this might overlap CVE-2013-0334. CWE-94
Code Injection 		CVE-2016-7954 2024-11-21 11:58 2016-12-23 Show GitHub Exploit DB Packet Storm
266279 8.0 HIGH
Adjacent 		technicolor xfinity_gateway_router_dpc3941t_firmware CSRF vulnerability on Technicolor TC dpc3941T (formerly Cisco dpc3941T) devices with firmware dpc3941-P20-18-v303r20421733-160413a-CMCST allows an attacker to change the Wi-Fi password, open the remo… CWE-352
 Origin Validation Error 		CVE-2016-7454 2024-11-21 11:58 2016-12-17 Show GitHub Exploit DB Packet Storm
266280 6.1 MEDIUM
Network 		adobe robohelp Adobe RoboHelp version 2015.0.3 and earlier, RoboHelp 11 and earlier have an input validation issue that could be used in cross-site scripting attacks. CWE-79
Cross-site Scripting 		CVE-2016-7891 2024-11-21 11:58 2016-12-15 Show GitHub Exploit DB Packet Storm