Vulnerability Search Top

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

Vulnerability Information Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":June 3, 2026, noon

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
242661	2.6	注意	NECビッグローブ株式会社	-	Android 版嫁コレにおける端末識別番号の管理不備の脆弱性	CWE-Other その他	CVE-2012-2640	2012-07-3 14:00	2012-07-3	Show	GitHub Exploit DB Packet Storm

242662	3.3	注意	Wireshark	-	Wireshark における整数アンダーフローの脆弱性	CWE-189 数値処理の問題	CVE-2012-3826	2012-07-3 13:42	2012-06-30	Show	GitHub Exploit DB Packet Storm

242663	3.3	注意	Wireshark	-	Wireshark における整数オーバーフローの脆弱性	CWE-189 数値処理の問題	CVE-2012-3825	2012-07-3 13:41	2012-06-30	Show	GitHub Exploit DB Packet Storm

242664	5	警告	Mikel Olasagasti	-	Revelation におけるパスワードを推測される脆弱性	CWE-255 証明書・パスワード管理	CVE-2012-2743	2012-07-2 11:45	2012-06-27	Show	GitHub Exploit DB Packet Storm

242665	5	警告	Mikel Olasagasti	-	Revelation におけるパスワードを解読される脆弱性	CWE-255 証明書・パスワード管理	CVE-2012-2742	2012-07-2 11:41	2012-06-27	Show	GitHub Exploit DB Packet Storm

242666	7.8	危険	Elite Research	-	WinRadius サーバにおけるサービス運用妨害 (クラッシュ) の脆弱性	CWE-noinfo 情報不足	CVE-2012-3816	2012-07-2 11:34	2012-06-27	Show	GitHub Exploit DB Packet Storm

242667	7.5	危険	Pippin Williamson	-	WordPress 用 Font Uploader プラグインの font-upload.php における任意の PHP コードを実行される脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2012-3814	2012-07-2 11:33	2012-06-27	Show	GitHub Exploit DB Packet Storm

242668	4.3	警告	Coldfront Labs	-	Drupal 用の Mobile Tools モジュールにおけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2012-2717	2012-07-2 11:25	2012-05-30	Show	GitHub Exploit DB Packet Storm

242669	7.5	危険	strongSwan	-	strongSwan の GMP プラグインにおける認証を回避される脆弱性	CWE-287 不適切な認証	CVE-2012-2388	2012-07-2 11:10	2012-05-31	Show	GitHub Exploit DB Packet Storm

242670	5	警告	WordPress.org	-	WordPress の wp-includes/formatting.php におけるサービス運用妨害 (クラッシュ) の脆弱性	CWE-20 不適切な入力確認	CVE-2011-4957	2012-07-2 11:08	2011-04-5	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:June 3, 2026, 4:18 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
266531	7.5	HIGH Network	novell openssl nodejs	suse_linux_enterprise_module_for_web_scripting openssl node.js	crypto/x509/x509_vfy.c in OpenSSL 1.0.2i allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) by triggering a CRL operation.	CWE-476 NULL Pointer Dereference	CVE-2016-7052	2024-11-21 11:57	2016-09-27	Show	GitHub Exploit DB Packet Storm

266532	9.8	CRITICAL Network	adobe	digital_editions	Use-after-free vulnerability in Adobe Digital Editions before 4.5.2 allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2016-4263.	CWE-416 Use After Free	CVE-2016-6980	2024-11-21 11:57	2016-09-27	Show	GitHub Exploit DB Packet Storm

266533	5.4	MEDIUM Network	alienvault	open_source_security_information_and_event_management unified_security_management	Cross-site scripting (XSS) vulnerability in AlienVault OSSIM before 5.3 and USM before 5.3 allows remote attackers to inject arbitrary web script or HTML via the back parameter to ossim/conf/reload.p…	CWE-79 Cross-site Scripting	CVE-2016-6913	2024-11-21 11:57	2016-09-27	Show	GitHub Exploit DB Packet Storm

266534	6.5	MEDIUM Network	huawei	ar_firmware netengine_16ex_firmware	Format string vulnerability in Huawei AR100, AR120, AR150, AR200, AR500, AR550, AR1200, AR2200, AR2500, AR3200, and AR3600 routers with software before V200R007C00SPC900 and NetEngine 16EX routers wi…	CWE-20 Improper Input Validation	CVE-2016-6901	2024-11-21 11:57	2016-09-27	Show	GitHub Exploit DB Packet Storm

266535	7.5	HIGH Network	canonical file_roller_project	ubuntu_linux file_roller	The _g_file_remove_directory function in file-utils.c in File Roller 3.5.4 through 3.20.2 allows remote attackers to delete arbitrary files via a symlink attack on a folder in an archive.	CWE-20 Improper Input Validation	CVE-2016-7162	2024-11-21 11:57	2016-09-27	Show	GitHub Exploit DB Packet Storm

266536	5.9	MEDIUM Network	inspircd debian	inspircd debian_linux	The m_sasl module in InspIRCd before 2.0.23, when used with a service that supports SASL_EXTERNAL authentication, allows remote attackers to spoof certificate fingerprints and consequently log in as …	CWE-264 Permissions, Privileges, and Access Controls	CVE-2016-7142	2024-11-21 11:57	2016-09-27	Show	GitHub Exploit DB Packet Storm

266537	8.1	HIGH Network	gnu	wget	Race condition in wget 1.17 and earlier, when used in recursive or mirroring mode to download a single file, might allow remote servers to bypass intended access list restrictions by keeping an HTTP …	CWE-362 Race Condition	CVE-2016-7098	2024-11-21 11:57	2016-09-26	Show	GitHub Exploit DB Packet Storm

266538	5.5	MEDIUM Local	redhat libarchive oracle	enterprise_linux_desktop enterprise_linux_server_aus enterprise_linux_workstation enterprise_linux_server enterprise_linux_hpc_node enterprise_linux_server_eus enterprise_linux_hpc_…	libarchive before 3.2.0 does not limit the number of recursive decompressions, which allows remote attackers to cause a denial of service (memory consumption and application crash) via a crafted gzip…	CWE-399 Resource Management Errors	CVE-2016-7166	2024-11-21 11:57	2016-09-21	Show	GitHub Exploit DB Packet Storm

266539	7.8	HIGH Local	uclouvain debian fedoraproject redhat	openjpeg debian_linux fedora enterprise_linux_desktop enterprise_linux_workstation enterprise_linux_server enterprise_linux_server_tus enterprise_linux_server_aus enterprise_l…	Integer overflow in the opj_pi_create_decode function in pi.c in OpenJPEG allows remote attackers to execute arbitrary code via a crafted JP2 file, which triggers an out-of-bounds read or write.	CWE-190 Integer Overflow or Wraparound	CVE-2016-7163	2024-11-21 11:57	2016-09-21	Show	GitHub Exploit DB Packet Storm

266540	6.7	MEDIUM Local	xen	xen	Use-after-free vulnerability in the FIFO event channel code in Xen 4.4.x allows local guest OS administrators to cause a denial of service (host crash) and possibly execute arbitrary code or obtain s…	CWE-416 Use After Free	CVE-2016-7154	2024-11-21 11:57	2016-09-21	Show	GitHub Exploit DB Packet Storm