Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 8, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
243011 10 危険 Mozilla Foundation - 複数の Mozilla 製品における任意のコードを実行される脆弱性 CWE-399
リソース管理の問題 		CVE-2011-3659 2012-08-10 14:32 2012-01-31 Show GitHub Exploit DB Packet Storm
243012 3.5 注意 日立 - 日立の JP1/Integrated Management - Service Support におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		- 2012-08-10 14:02 2012-08-8 Show GitHub Exploit DB Packet Storm
243013 4 警告 Linux - x86 プラットフォーム上の Linux Kernel におけるサービス運用妨害 (パニック) の脆弱性 CWE-362
競合状態 		CVE-2012-2373 2012-08-10 11:43 2012-08-9 Show GitHub Exploit DB Packet Storm
243014 7.5 危険 Google - Google Chrome の PDF 機能におけるサービス運用妨害 (DoS) の脆弱性 CWE-119
バッファエラー 		CVE-2012-2863 2012-08-10 11:35 2012-08-8 Show GitHub Exploit DB Packet Storm
243015 6.8 警告 Google - Google Chrome の PDF 機能におけるサービス運用妨害 (DoS) の脆弱性 CWE-399
リソース管理の問題 		CVE-2012-2862 2012-08-10 11:32 2012-08-8 Show GitHub Exploit DB Packet Storm
243016 5.6 警告 Todd C. Miller
レッドハット		 - RHEL 上で稼働する sudo 用の特定の Red Hat のスクリプトにおける任意のファイルを上書きされる脆弱性 CWE-59
リンク解釈の問題 		CVE-2012-3440 2012-08-10 10:33 2012-08-7 Show GitHub Exploit DB Packet Storm
243017 7.5 危険 IBM - IBM Global Security Kit における SSL サーバになりすまされる脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2012-2203 2012-08-10 10:29 2012-08-8 Show GitHub Exploit DB Packet Storm
243018 5 警告 IBM - IBM Global Security Kit におけるサービス運用妨害 (アプリケーションクラッシュ) の脆弱性 CWE-20
不適切な入力確認 		CVE-2012-2191 2012-08-10 10:27 2012-08-8 Show GitHub Exploit DB Packet Storm
243019 6.5 警告 Chef Software, Inc. - Chef の Chef Server におけるアクセス制限を回避される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2011-5098 2012-08-10 10:13 2011-10-1 Show GitHub Exploit DB Packet Storm
243020 5.5 警告 Chef Software, Inc. - Chef の Chef Server における cookbooks をアップロードまたは削除される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2011-5097 2012-08-10 10:11 2011-06-23 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 9, 2026, 4:16 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
266621 7.5 HIGH
Network 		haxx curl A flaw was found in curl before version 7.51.0. The way curl handles cookies permits other threads to trigger a use-after-free leading to information disclosure. - CVE-2016-8623 2024-11-21 11:59 2018-08-1 Show GitHub Exploit DB Packet Storm
266622 9.8 CRITICAL
Network 		haxx curl The 'globbing' feature in curl before version 7.51.0 has a flaw that leads to integer overflow and out-of-bounds read via user controlled input. CWE-125
CWE-190
Out-of-bounds Read
 Integer Overflow or Wraparound 		CVE-2016-8620 2024-11-21 11:59 2018-08-1 Show GitHub Exploit DB Packet Storm
266623 9.8 CRITICAL
Network 		haxx curl The function `read_data()` in security.c in curl before version 7.51.0 is vulnerable to memory double free. CWE-415
 Double Free 		CVE-2016-8619 2024-11-21 11:59 2018-08-1 Show GitHub Exploit DB Packet Storm
266624 5.9 MEDIUM
Network 		haxx curl A flaw was found in curl before version 7.51.0 When re-using a connection, curl was doing case insensitive comparisons of user name and password with the existing connections. This means that if an u… CWE-255
Credentials Management 		CVE-2016-8616 2024-11-21 11:59 2018-08-1 Show GitHub Exploit DB Packet Storm
266625 7.5 HIGH
Network 		haxx curl A flaw was found in curl before version 7.51. If cookie state is written into a cookie jar file that is later read back and used for subsequent requests, a malicious HTTP server can inject new cookie… - CVE-2016-8615 2024-11-21 11:59 2018-08-1 Show GitHub Exploit DB Packet Storm
266626 7.5 HIGH
Network 		haxx curl The `curl_getdate` function in curl before version 7.51.0 is vulnerable to an out of bounds read if it receives an input with one digit short. CWE-125
Out-of-bounds Read 		CVE-2016-8621 2024-11-21 11:59 2018-08-1 Show GitHub Exploit DB Packet Storm
266627 7.0 HIGH
Local 		haxx curl The base64 encode function in curl before version 7.51.0 is prone to a buffer being under allocated in 32bit systems if it receives at least 1Gb as input via `CURLOPT_USERNAME`. - CVE-2016-8617 2024-11-21 11:59 2018-08-1 Show GitHub Exploit DB Packet Storm
266628 7.5 HIGH
Network 		haxx curl curl before version 7.51.0 doesn't parse the authority component of the URL correctly when the host name part ends with a '#' character, and could instead be tricked into connecting to a different ho… - CVE-2016-8624 2024-11-21 11:59 2018-08-1 Show GitHub Exploit DB Packet Storm
266629 9.8 CRITICAL
Network 		haxx libcurl The URL percent-encoding decode function in libcurl before 7.51.0 is called `curl_easy_unescape`. Internally, even if this function would be made to allocate a unscape destination buffer larger than … CWE-787
 Out-of-bounds Write 		CVE-2016-8622 2024-11-21 11:59 2018-08-1 Show GitHub Exploit DB Packet Storm
266630 9.8 CRITICAL
Network 		haxx curl The libcurl API function called `curl_maprintf()` before version 7.51.0 can be tricked into doing a double-free due to an unsafe `size_t` multiplication, on systems using 32 bit `size_t` variables. CWE-415
 Double Free 		CVE-2016-8618 2024-11-21 11:59 2018-08-1 Show GitHub Exploit DB Packet Storm