Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 24, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
251911	1.9	注意	オラクル	-	Oracle Solaris における Kernel の処理に関する脆弱性	CWE-noinfo 情報不足	CVE-2012-0098	2012-01-23 10:25	2012-01-17	Show	GitHub Exploit DB Packet Storm

251912	2.1	注意	オラクル	-	Oracle Solaris における ksh93 シェルの処理に関する脆弱性	CWE-noinfo 情報不足	CVE-2012-0097	2012-01-23 10:16	2012-01-17	Show	GitHub Exploit DB Packet Storm

251913	2.6	注意	オラクル	-	Oracle Solaris における sshd の処理に関する脆弱性	CWE-noinfo 情報不足	CVE-2012-0099	2012-01-23 10:13	2012-01-17	Show	GitHub Exploit DB Packet Storm

251914	3.6	注意	オラクル	-	Oracle Solaris における TCP/IP の処理に関する脆弱性	CWE-noinfo 情報不足	CVE-2012-0109	2012-01-23 10:09	2012-01-17	Show	GitHub Exploit DB Packet Storm

251915	4.9	警告	オラクル	-	Oracle Solaris における Kernel の処理に関する脆弱性	CWE-noinfo 情報不足	CVE-2012-0103	2012-01-23 10:04	2012-01-17	Show	GitHub Exploit DB Packet Storm

251916	5	警告	オラクル	-	Oracle Solaris における Network の処理に関する脆弱性	CWE-noinfo 情報不足	CVE-2012-0096	2012-01-23 10:04	2012-01-17	Show	GitHub Exploit DB Packet Storm

251917	6.8	警告	オラクル	-	Oracle Solaris における Kerberos の処理に関する脆弱性	CWE-noinfo 情報不足	CVE-2012-0100	2012-01-23 10:03	2012-01-17	Show	GitHub Exploit DB Packet Storm

251918	7.8	危険	オラクル	-	Oracle Solaris における TCP/IP の処理に関する脆弱性	CWE-noinfo 情報不足	CVE-2012-0094	2012-01-23 09:59	2012-01-17	Show	GitHub Exploit DB Packet Storm

251919	9.3	危険	7-Technologies	-	7-Technologies Interactive Graphical SCADA System における権限を取得される脆弱性	CWE-Other その他	CVE-2011-4053	2012-01-20 16:50	2012-01-19	Show	GitHub Exploit DB Packet Storm

251920	2.1	注意	DELL EMC (旧 EMC Corporation)	-	EMC SourceOne Email Management の Web 検索機能における重要な情報を取得される脆弱性	CWE-255 証明書・パスワード管理	CVE-2011-4142	2012-01-20 16:49	2012-01-19	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 25, 2026, 4:01 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
265631	5.5	MEDIUM Local	uclouvain fedoraproject	openjpeg fedora	Heap-based buffer overflow in the color_cmyk_to_rgb in common/color.c in OpenJPEG before 2.1.1 allows remote attackers to cause a denial of service (crash) via a crafted .j2k file.	CWE-119 Incorrect Access of Indexable Resource ('Range Error')	CVE-2016-4796	2024-11-21 11:52	2017-02-4	Show	GitHub Exploit DB Packet Storm

265632	5.5	MEDIUM Local	mini-xml_project debian	mini-xml debian_linux	The mxml_write_node function in mxml-file.c in mxml 2.9, 2.7, and possibly earlier allows remote attackers to cause a denial of service (stack consumption) via crafted xml file.	CWE-400 Uncontrolled Resource Consumption	CVE-2016-4571	2024-11-21 11:52	2017-02-4	Show	GitHub Exploit DB Packet Storm

265633	5.5	MEDIUM Local	mini-xml_project debian	mini-xml debian_linux	The mxmlDelete function in mxml-node.c in mxml 2.9, 2.7, and possibly earlier allows remote attackers to cause a denial of service (stack consumption) via crafted xml file.	CWE-400 Uncontrolled Resource Consumption	CVE-2016-4570	2024-11-21 11:52	2017-02-4	Show	GitHub Exploit DB Packet Storm

265634	7.5	HIGH Network	cakephp	cakephp	The clientIp function in CakePHP 3.2.4 and earlier allows remote attackers to spoof their IP via the CLIENT-IP HTTP header.	CWE-20 Improper Input Validation	CVE-2016-4793	2024-11-21 11:52	2017-01-24	Show	GitHub Exploit DB Packet Storm

265635	6.8	MEDIUM Physics	cryptsetup_project	cryptsetup	The Debian initrd script for the cryptsetup package 2:1.7.3-2 and earlier allows physically proximate attackers to gain shell access via many log in attempts with an invalid password.	CWE-287 Improper Authentication	CVE-2016-4484	2024-11-21 11:52	2017-01-24	Show	GitHub Exploit DB Packet Storm

265636	6.1	MEDIUM Network	roundcube	webmail	Cross-site scripting (XSS) vulnerability in Roundcube Webmail before 1.2.0 allows remote attackers to inject arbitrary web script or HTML via the href attribute in an area tag in an e-mail message.	CWE-79 Cross-site Scripting	CVE-2016-4552	2024-11-21 11:52	2016-12-21	Show	GitHub Exploit DB Packet Storm

265637	5.5	MEDIUM Local	redhat	enterprise_virtualization	Red Hat Enterprise Virtualization (RHEV) Manager 3.6 allows local users to obtain encryption keys, certificates, and other sensitive information by reading the engine-setup log file.	CWE-532 Inclusion of Sensitive Information in Log Files	CVE-2016-4443	2024-11-21 11:52	2016-12-15	Show	GitHub Exploit DB Packet Storm

265638	4.4	MEDIUM Network	phpmyadmin	phpmyadmin	An issue was discovered in phpMyAdmin. A user can be tricked into following a link leading to phpMyAdmin, which after authentication redirects to another malicious site. The attacker must sniff the u…	CWE-254 7PK - Security Features	CVE-2016-4412	2024-11-21 11:52	2016-12-11	Show	GitHub Exploit DB Packet Storm

265639	7.5	HIGH Network	hp	system_management_homepage	HPE System Management Homepage before v7.6 allows remote attackers to have an unspecified impact via unknown vectors, related to a "Buffer Overflow" issue.	CWE-119 Incorrect Access of Indexable Resource ('Range Error')	CVE-2016-4396	2024-11-21 11:52	2016-10-29	Show	GitHub Exploit DB Packet Storm

265640	7.5	HIGH Network	hp	system_management_homepage	HPE System Management Homepage before v7.6 allows remote attackers to have an unspecified impact via unknown vectors, related to a "Buffer Overflow" issue.	CWE-119 Incorrect Access of Indexable Resource ('Range Error')	CVE-2016-4395	2024-11-21 11:52	2016-10-29	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed