Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":June 8, 2026, 2:12 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
243121	10	危険	シマンテック	-	Symantec Web Gateway の管理コンソールにおける任意のコマンドを実行される脆弱性	CWE-78 OSコマンド・インジェクション	CVE-2012-2953	2012-07-30 17:44	2012-07-20	Show	GitHub Exploit DB Packet Storm

243122	7.5	危険	Mozilla Foundation	-	複数の Mozilla 製品のブラウザエンジンの nsWindow 実装におけるサービス運用妨害 (DoS) の脆弱性	CWE-20 不適切な入力確認	CVE-2012-0463	2012-07-30 17:22	2012-03-13	Show	GitHub Exploit DB Packet Storm

243123	5	警告	SAND STUDIO	-	AirDroid のログインの実装における多重ログイン防止機能を回避される脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2012-3888	2012-07-30 16:53	2012-07-26	Show	GitHub Exploit DB Packet Storm

243124	5	警告	SAND STUDIO	-	AirDroid における重要な情報を取得される脆弱性	CWE-310 暗号の問題	CVE-2012-3887	2012-07-30 16:50	2012-07-26	Show	GitHub Exploit DB Packet Storm

243125	5	警告	SAND STUDIO	-	AirDroid における平文データを取得される脆弱性	CWE-200 情報漏えい	CVE-2012-3886	2012-07-30 16:39	2012-07-26	Show	GitHub Exploit DB Packet Storm

243126	7.5	危険	SAND STUDIO	-	AirDroid のデフォルト設定におけるアクセス権を取得される脆弱性	CWE-287 不適切な認証	CVE-2012-3885	2012-07-30 16:38	2012-07-26	Show	GitHub Exploit DB Packet Storm

243127	5	警告	SAND STUDIO	-	AirDroid におけるアクセス権を取得される脆弱性	CWE-287 不適切な認証	CVE-2012-3884	2012-07-30 16:35	2012-07-26	Show	GitHub Exploit DB Packet Storm

243128	5	警告	Igor Sysoev	-	nginx/Windows におけるアクセス制限を回避される脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2011-4963	2012-07-30 16:24	2012-07-26	Show	GitHub Exploit DB Packet Storm

243129	7.5	危険	シトリックス・システムズ	-	Citrix Provisioning Services の SoapServer サービスにおけるヒープベースのバッファオーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2012-4068	2012-07-30 16:22	2012-05-1	Show	GitHub Exploit DB Packet Storm

243130	4.3	警告	Palo Alto Networks	-	複数の Palo Alto Networks 製品におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2012-4043	2012-07-30 16:20	2012-07-26	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:June 8, 2026, 4:09 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
266771	3.3	LOW Local	foxitsoftware	reader	A large out-of-bounds read on the heap vulnerability in Foxit PDF Reader can potentially be abused for information disclosure. Combined with another vulnerability, it can be used to leak heap memory …	CWE-125 Out-of-bounds Read	CVE-2016-8334	2024-11-21 11:59	2017-01-7	Show	GitHub Exploit DB Packet Storm

266772	9.8	CRITICAL Network	libgd	libgd	Integer signedness error in the dynamicGetbuf function in gd_io_dp.c in the GD Graphics Library (aka libgd) through 2.2.3, as used in PHP before 5.6.28 and 7.x before 7.0.13, allows remote attackers …	CWE-119 Incorrect Access of Indexable Resource ('Range Error')	CVE-2016-8670	2024-11-21 11:59	2017-01-5	Show	GitHub Exploit DB Packet Storm

266773	7.8	HIGH Local	imagemagick debian	imagemagick debian_linux	An exploitable out of bounds write exists in the handling of compressed TIFF images in ImageMagicks's convert utility. A crafted TIFF document can lead to an out of bounds write which in particular c…	CWE-787 Out-of-bounds Write	CVE-2016-8707	2024-11-21 11:59	2016-12-24	Show	GitHub Exploit DB Packet Storm

266774	5.5	MEDIUM Local	ffmpeg	ffmpeg	The gsm_parse function in libavcodec/gsm_parser.c in FFmpeg before 3.1.5 allows remote attackers to cause a denial of service (assert fault) via a crafted AVI file.	CWE-20 Improper Input Validation	CVE-2016-8595	2024-11-21 11:59	2016-12-23	Show	GitHub Exploit DB Packet Storm

266775	8.8	HIGH Local	joyent	smartos	An exploitable integer overflow exists in the Joyent SmartOS 20161110T013148Z Hyprlofs file system. The vulnerability is present in the Ioctl system call with the command HYPRLOFS_ADD_ENTRIES when de…	CWE-190 Integer Overflow or Wraparound	CVE-2016-8733	2024-11-21 11:59	2016-12-15	Show	GitHub Exploit DB Packet Storm

266776	7.8	HIGH Local	linux canonical	linux_kernel ubuntu_linux	Race condition in net/packet/af_packet.c in the Linux kernel through 4.8.12 allows local users to gain privileges or cause a denial of service (use-after-free) by leveraging the CAP_NET_RAW capabilit…	CWE-362 CWE-416 Race Condition Use After Free	CVE-2016-8655	2024-11-21 11:59	2016-12-8	Show	GitHub Exploit DB Packet Storm

266777	7.5	HIGH Network	apache	http_server	The mod_http2 module in the Apache HTTP Server 2.4.17 through 2.4.23, when the Protocols configuration includes h2 or h2c, does not restrict request-header length, which allows remote attackers to ca…	CWE-20 CWE-399 Improper Input Validation Resource Management Errors	CVE-2016-8740	2024-11-21 11:59	2016-12-6	Show	GitHub Exploit DB Packet Storm

266778	4.4	MEDIUM Local	lenovo	thinkpad_10_ella_2_bios thinkpad_11e_beema_bios thinkpad_11e_braswell_bios thinkpad_11e_broadwell_bios thinkpad_11e_skylake_bios thinkpad_13e_bios thinkpad_e450_bios thinkpad_e45…	A vulnerability has been identified in a signed kernel driver for the BIOS of some ThinkPad systems that can allow an attacker with Windows administrator-level privileges to call System Management Mo…	CWE-284 Improper Access Control	CVE-2016-8222	2024-11-21 11:59	2016-12-1	Show	GitHub Exploit DB Packet Storm

266779	4.4	MEDIUM Local	lenovo	bios notebook_110_14ibr_bios notebook_110_15ibr_bios notebook_b70_80_bios notebook_e31_80_bios notebook_e40_80_bios notebook_e41_80_bios notebook_e51_80_bios notebook_g40_80_b…	A vulnerability has been identified in some Lenovo Notebook and ThinkServer systems where an attacker with administrative privileges on a system could install a program that circumvents Intel Managem…	CWE-310 Cryptographic Issues	CVE-2016-8224	2024-11-21 11:59	2016-11-30	Show	GitHub Exploit DB Packet Storm

266780	7.8	HIGH Local	lenovo	system_interface_foundation	During an internal security review, Lenovo identified a local privilege escalation vulnerability in Lenovo System Interface Foundation software installed on some Windows 10 PCs where a user with loca…	CWE-284 Improper Access Control	CVE-2016-8223	2024-11-21 11:59	2016-11-30	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed