Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 20, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
251771 7.5 危険 Mads Brunn
Claudio Klingler		 - QuiXplorer におけるファイルをアップロードされる脆弱性 CWE-Other
その他 		CVE-2011-5005 2011-12-28 14:29 2011-12-25 Show GitHub Exploit DB Packet Storm
251772 6 警告 Fabrik - Joomla! 用 Fabrik コンポーネントの models/importcsv.php における任意のコードを実行される脆弱性 CWE-Other
その他 		CVE-2011-5004 2011-12-28 14:28 2011-09-23 Show GitHub Exploit DB Packet Storm
251773 10 危険 Avid Technology - Avid Media Composer の Phonetic Indexer におけるスタックベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2011-5003 2011-12-28 14:27 2011-12-25 Show GitHub Exploit DB Packet Storm
251774 10 危険 Final Draft - Final Draft におけるスタックベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2011-5002 2011-12-28 14:24 2011-12-25 Show GitHub Exploit DB Packet Storm
251775 10 危険 Attachmate - Reflection FTP クライアントにおけるヒープベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2011-5012 2011-12-28 11:44 2011-12-25 Show GitHub Exploit DB Packet Storm
251776 4.3 警告 xt:Commerce - xt:Commerce におけるクロスサイトリクエストフォージェリの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2011-5011 2011-12-28 11:41 2011-12-25 Show GitHub Exploit DB Packet Storm
251777 10 危険 Ctek, Inc. - Ctek SkyRouter の apps/a3/cfg_ethping.cgi における任意のコマンドを実行される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2011-5010 2011-12-28 11:40 2011-12-25 Show GitHub Exploit DB Packet Storm
251778 5 警告 3S-Smart Software Solutions - 3S CoDeSys におけるサービス運用妨害 (NULL ポインタデリファレンス) の脆弱性 CWE-Other
その他 		CVE-2011-5009 2011-12-28 11:36 2011-12-25 Show GitHub Exploit DB Packet Storm
251779 7.5 危険 3S-Smart Software Solutions - 3S CoDeSys の GatewayService コンポーネントにおける整数オーバーフローの脆弱性 CWE-189
数値処理の問題 		CVE-2011-5008 2011-12-28 11:35 2011-12-25 Show GitHub Exploit DB Packet Storm
251780 10 危険 3S-Smart Software Solutions - 3S CoDeSys におけるスタックベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2011-5007 2011-12-28 11:34 2011-12-25 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 20, 2026, 4:14 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
266001 7.8 HIGH
Local 		google android The secure-session feature in the mm-video-v4l2 venc component in mediaserver in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-08-01 mishandles heap pointers, … CWE-119
Incorrect Access of Indexable Resource ('Range Error')  		CVE-2016-3823 2024-11-21 11:50 2016-08-6 Show GitHub Exploit DB Packet Storm
266002 7.8 HIGH
Local 		google
debian 		android
debian_linux 		exif.c in Matthias Wandel jhead 2.87, as used in libjhead in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-08-01, allows remote attackers to execute arbitrary … CWE-119
Incorrect Access of Indexable Resource ('Range Error')  		CVE-2016-3822 2024-11-21 11:50 2016-08-6 Show GitHub Exploit DB Packet Storm
266003 9.8 CRITICAL
Network 		google android libmedia in mediaserver in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-08-01 has certain incorrect declarations, which allows remote attackers to execute arb… CWE-476
 NULL Pointer Dereference 		CVE-2016-3821 2024-11-21 11:50 2016-08-6 Show GitHub Exploit DB Packet Storm
266004 9.8 CRITICAL
Network 		google android The ih264d decoder in mediaserver in Android 6.x before 2016-08-01 mishandles slice numbers, which allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) v… CWE-119
Incorrect Access of Indexable Resource ('Range Error')  		CVE-2016-3820 2024-11-21 11:50 2016-08-6 Show GitHub Exploit DB Packet Storm
266005 9.8 CRITICAL
Network 		google android Integer overflow in codecs/on2/h264dec/source/h264bsd_dpb.c in libstagefright in mediaserver in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-08-01 allows remo… CWE-119
Incorrect Access of Indexable Resource ('Range Error')  		CVE-2016-3819 2024-11-21 11:50 2016-08-6 Show GitHub Exploit DB Packet Storm
266006 5.5 MEDIUM
Local 		sap hana_db The Extended Application Services (aka XS or XS Engine) in SAP HANA DB 1.00.091.00.1418659308 allows local users to obtain sensitive password information via vectors related to passwords in Web Dispa… CWE-200
Information Exposure 		CVE-2016-3640 2024-11-21 11:50 2016-08-5 Show GitHub Exploit DB Packet Storm
266007 9.8 CRITICAL
Network 		redhat jboss_operations_network The server in Red Hat JBoss Operations Network (JON) before 3.3.6 allows remote attackers to execute arbitrary code via a crafted HTTP request, related to message deserialization. CWE-20
 Improper Input Validation  		CVE-2016-3737 2024-11-21 11:50 2016-08-2 Show GitHub Exploit DB Packet Storm
266008 5.3 MEDIUM
Network 		oracle
mariadb
ibm
debian
canonical 		linux
mariadb
mysql
powerkvm
debian_linux
ubuntu_linux 		Unspecified vulnerability in Oracle MySQL 5.5.49 and earlier, 5.6.30 and earlier, and 5.7.12 and earlier and MariaDB before 5.5.50, 10.0.x before 10.0.26, and 10.1.x before 10.1.15 allows remote auth… NVD-CWE-noinfo
CVE-2016-3615 2024-11-21 11:50 2016-07-21 Show GitHub Exploit DB Packet Storm
266009 5.3 MEDIUM
Network 		oracle
canonical 		mysql
ubuntu_linux 		Unspecified vulnerability in Oracle MySQL 5.6.30 and earlier and 5.7.12 and earlier allows remote authenticated users to affect availability via vectors related to Server: Security: Encryption. NVD-CWE-noinfo
CVE-2016-3614 2024-11-21 11:50 2016-07-21 Show GitHub Exploit DB Packet Storm
266010 9.8 CRITICAL
Network 		oracle secure_global_desktop Unspecified vulnerability in the Oracle Secure Global Desktop component in Oracle Virtualization 4.63, 4.71, and 5.2 allows remote attackers to affect confidentiality, integrity, and availability via… NVD-CWE-noinfo
CVE-2016-3613 2024-11-21 11:50 2016-07-21 Show GitHub Exploit DB Packet Storm