Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 1, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
251631 4.3 警告 idevSpot - IDevSpot idev-BusinessDirectory におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2012-1779 2012-03-22 17:33 2012-03-19 Show GitHub Exploit DB Packet Storm
251632 7.5 危険 CreateVision - CreateVision CMS の artykul_print.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2012-1778 2012-03-22 17:32 2012-03-19 Show GitHub Exploit DB Packet Storm
251633 6.8 警告 Webfolio CMS - Webfolio CMS におけるクロスサイトリクエストフォージェリの脆弱性 CWE-352
同一生成元ポリシー違反 		CVE-2012-1498 2012-03-22 17:25 2012-03-19 Show GitHub Exploit DB Packet Storm
251634 4.3 警告 NetMechanica - NetMechanica NetDecision の HTTP Server におけるスタックベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2012-1465 2012-03-22 17:22 2012-03-19 Show GitHub Exploit DB Packet Storm
251635 5 警告 NetMechanica - NetMechanica NetDecision の Dashboard Server におけるインストールパスを取得される脆弱性 CWE-200
情報漏えい 		CVE-2012-1464 2012-03-22 17:22 2012-03-19 Show GitHub Exploit DB Packet Storm
251636 6.8 警告 Contao - Contao の main.php におけるクロスサイトリクエストフォージェリの脆弱性 CWE-352
同一生成元ポリシー違反 		CVE-2012-1297 2012-03-22 17:18 2012-03-19 Show GitHub Exploit DB Packet Storm
251637 4.3 警告 tskynet - Kongreg8 におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2012-1789 2012-03-22 17:16 2012-03-19 Show GitHub Exploit DB Packet Storm
251638 7.5 危険 Dotclear - Dotclear の inc/swf/swfupload.swf における任意のコードを実行される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2011-5083 2012-03-22 17:15 2012-03-19 Show GitHub Exploit DB Packet Storm
251639 4.3 警告 WonderDesk - WonderDesk SQL の wonderdesk.cgi におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2012-1788 2012-03-22 16:59 2012-03-19 Show GitHub Exploit DB Packet Storm
251640 4.3 警告 s2Member - WordPress 用 s2Member Pro プラグインにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2011-5082 2012-03-22 16:55 2012-03-19 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 1, 2026, 4:12 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
265581 9.8 CRITICAL
Network 		fedoraproject
x.org 		fedora
libxrandr 		Multiple integer overflows in X.org libXrandr before 1.5.1 allow remote X servers to trigger out-of-bounds write operations via a crafted response. CWE-787
CWE-190
 Out-of-bounds Write
 Integer Overflow or Wraparound 		CVE-2016-7947 2024-11-21 11:58 2016-12-14 Show GitHub Exploit DB Packet Storm
265582 7.5 HIGH
Network 		x.org
fedoraproject 		libxi
fedora 		X.org libXi before 1.7.7 allows remote X servers to cause a denial of service (infinite loop) via vectors involving length fields. CWE-284
Improper Access Control 		CVE-2016-7946 2024-11-21 11:58 2016-12-14 Show GitHub Exploit DB Packet Storm
265583 7.5 HIGH
Network 		fedoraproject
x.org 		fedora
libxi 		Multiple integer overflows in X.org libXi before 1.7.7 allow remote X servers to cause a denial of service (out-of-bounds memory access or infinite loop) via vectors involving length fields. CWE-125
CWE-190
Out-of-bounds Read
 Integer Overflow or Wraparound 		CVE-2016-7945 2024-11-21 11:58 2016-12-14 Show GitHub Exploit DB Packet Storm
265584 9.8 CRITICAL
Network 		x.org
fedoraproject 		libxfixes
fedora 		Integer overflow in X.org libXfixes before 5.0.3 on 32-bit platforms might allow remote X servers to gain privileges via a length value of INT_MAX, which triggers the client to stop reading data and … CWE-264
CWE-190
Permissions, Privileges, and Access Controls
 Integer Overflow or Wraparound 		CVE-2016-7944 2024-11-21 11:58 2016-12-14 Show GitHub Exploit DB Packet Storm
265585 9.8 CRITICAL
Network 		fedoraproject
x.org 		fedora
libx11 		The XListFonts function in X.org libX11 before 1.6.4 might allow remote X servers to gain privileges via vectors involving length fields, which trigger out-of-bounds write operations. CWE-787
 Out-of-bounds Write 		CVE-2016-7943 2024-11-21 11:58 2016-12-14 Show GitHub Exploit DB Packet Storm
265586 9.8 CRITICAL
Network 		fedoraproject
x.org 		fedora
libx11 		The XGetImage function in X.org libX11 before 1.6.4 might allow remote X servers to gain privileges via vectors involving image type and geometry, which triggers out-of-bounds read operations. CWE-264
CWE-787
Permissions, Privileges, and Access Controls
 Out-of-bounds Write 		CVE-2016-7942 2024-11-21 11:58 2016-12-14 Show GitHub Exploit DB Packet Storm
265587 5.5 MEDIUM
Local 		mariadb
oracle
wolfssl
debian 		mariadb
mysql
wolfssl
debian_linux 		The C software implementation of AES Encryption and Decryption in wolfSSL (formerly CyaSSL) before 3.9.10 makes it easier for local users to discover AES keys by leveraging cache-bank timing differen… NVD-CWE-noinfo
CVE-2016-7440 2024-11-21 11:58 2016-12-14 Show GitHub Exploit DB Packet Storm
265588 5.5 MEDIUM
Local 		wolfssl wolfssl The C software implementation of RSA in wolfSSL (formerly CyaSSL) before 3.9.10 makes it easier for local users to discover RSA keys by leveraging cache-bank hit differences. CWE-310
Cryptographic Issues 		CVE-2016-7439 2024-11-21 11:58 2016-12-14 Show GitHub Exploit DB Packet Storm
265589 5.5 MEDIUM
Local 		wolfssl wolfssl The C software implementation of ECC in wolfSSL (formerly CyaSSL) before 3.9.10 makes it easier for local users to discover RSA keys by leveraging cache-bank hit differences. CWE-310
Cryptographic Issues 		CVE-2016-7438 2024-11-21 11:58 2016-12-14 Show GitHub Exploit DB Packet Storm
265590 6.0 MEDIUM
Local 		qemu
opensuse 		qemu
leap 		Memory leak in the ehci_process_itd function in hw/usb/hcd-ehci.c in QEMU (aka Quick Emulator) allows local guest OS administrators to cause a denial of service (memory consumption) via a large numbe… CWE-772
 Missing Release of Resource after Effective Lifetime 		CVE-2016-7995 2024-11-21 11:58 2016-12-10 Show GitHub Exploit DB Packet Storm