Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 31, 2026, 6 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
252141 3.5 注意 Symphony CMS - Symphony CMS におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2011-4340 2012-02-14 14:45 2012-02-12 Show GitHub Exploit DB Packet Storm
252142 4.3 警告 Deon George - phpLDAPadmin におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2012-0834 2012-02-14 14:45 2012-02-11 Show GitHub Exploit DB Packet Storm
252143 7.5 危険 Mozilla Foundation - 複数の Mozilla 製品におけるサービス運用妨害 (DoS) の脆弱性 CWE-399
リソース管理の問題
CVE-2012-0452 2012-02-14 14:42 2012-02-10 Show GitHub Exploit DB Packet Storm
252144 4.3 警告 IBM - IBM Cognos TM1 の TM1 Web におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2012-1046 2012-02-14 14:18 2012-02-10 Show GitHub Exploit DB Packet Storm
252145 5 警告 Apache Software Foundation - Apache Portable Runtime ライブラリの apr_hash.c におけるサービス運用妨害 (DoS) の脆弱性 CWE-20
不適切な入力確認
CVE-2012-0840 2012-02-14 14:17 2012-02-10 Show GitHub Exploit DB Packet Storm
252146 5 警告 AdaCore - AdaCore Ada Web Services におけるサービス運用妨害 (CPU 資源の消費) の脆弱性 CWE-20
不適切な入力確認
CVE-2012-1035 2012-02-13 16:39 2012-01-27 Show GitHub Exploit DB Packet Storm
252147 6.5 警告 サイベース - Sybase M-Business Anywhere の Web 管理インターフェイスにおけるユーザーアカウントをリストアップされる脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2011-5078 2012-02-13 16:15 2012-02-8 Show GitHub Exploit DB Packet Storm
252148 5 警告 INRIA - OCaml におけるサービス運用妨害 (CPU 資源の消費) の脆弱性 CWE-20
不適切な入力確認
CVE-2012-0839 2012-02-13 16:13 2012-02-8 Show GitHub Exploit DB Packet Storm
252149 9.3 危険 リアルネットワークス - RealNetworks RealPlayer および RealPlayer SP における任意のコードを実行される脆弱性 CWE-94
コード・インジェクション
CVE-2012-0927 2012-02-13 14:37 2012-02-6 Show GitHub Exploit DB Packet Storm
252150 9.3 危険 リアルネットワークス - RealNetworks RealPlayer および RealPlayer SP の RV10 コーデックにおける任意のコードを実行される脆弱性 CWE-94
コード・インジェクション
CVE-2012-0926 2012-02-13 14:36 2012-02-6 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 1, 2026, 4:12 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
265021 5.5 MEDIUM
Local
potrace_project potrace The bm_readbody_bmp function in bitmap_io.c in potrace before 1.13 allows remote attackers to cause a denial of service (NULL pointer dereference and crash) via a crafted BMP image, a different vulne… CWE-476
 NULL Pointer Dereference
CVE-2016-8694 2024-11-21 11:59 2017-02-1 Show GitHub Exploit DB Packet Storm
265022 7.8 HIGH
Local
potrace_project potrace The bm_new function in bitmap.h in potrace 1.13 allows remote attackers to have unspecified impact via a crafted image, which triggers a memory allocation failure. CWE-119
Incorrect Access of Indexable Resource ('Range Error') 
CVE-2016-8686 2024-11-21 11:59 2017-02-1 Show GitHub Exploit DB Packet Storm
265023 5.5 MEDIUM
Local
potrace_project potrace The findnext function in decompose.c in potrace 1.13 allows remote attackers to cause a denial of service (invalid memory access and crash) via a crafted BMP image. CWE-119
Incorrect Access of Indexable Resource ('Range Error') 
CVE-2016-8685 2024-11-21 11:59 2017-02-1 Show GitHub Exploit DB Packet Storm
265024 9.8 CRITICAL
Network
tcpdump tcpdump The Q.933 parser in tcpdump before 4.9.0 has a buffer overflow in print-fr.c:q933_print(), a different vulnerability than CVE-2017-5482. CWE-119
Incorrect Access of Indexable Resource ('Range Error') 
CVE-2016-8575 2024-11-21 11:59 2017-01-28 Show GitHub Exploit DB Packet Storm
265025 9.8 CRITICAL
Network
tcpdump tcpdump The FRF.15 parser in tcpdump before 4.9.0 has a buffer overflow in print-fr.c:frf15_print(). CWE-119
Incorrect Access of Indexable Resource ('Range Error') 
CVE-2016-8574 2024-11-21 11:59 2017-01-28 Show GitHub Exploit DB Packet Storm
265026 3.7 LOW
Network
oracle solaris Vulnerability in the Solaris component of Oracle Sun Systems Products Suite (subcomponent: Kernel). The supported version that is affected is 11.3. Difficult to exploit vulnerability allows unauthent… CWE-284
Improper Access Control
CVE-2016-8330 2024-11-21 11:59 2017-01-28 Show GitHub Exploit DB Packet Storm
265027 9.8 CRITICAL
Network
google android Buffer overflow vulnerability while processing QMI QOS TLVs. Product: Android. Versions: versions that have qmi_qos_srvc.c. Android ID: 31805216. References: QC CR#912775. CWE-119
Incorrect Access of Indexable Resource ('Range Error') 
CVE-2016-8411 2024-11-21 11:59 2017-01-28 Show GitHub Exploit DB Packet Storm
265028 7.8 HIGH
Local
libbpg_project libbpg An exploitable heap write out of bounds vulnerability exists in the decoding of BPG images in Libbpg library. A crafted BPG image decoded by libbpg can cause an integer underflow vulnerability causin… CWE-787
 Out-of-bounds Write
CVE-2016-8710 2024-11-21 11:59 2017-01-27 Show GitHub Exploit DB Packet Storm
265029 7.8 HIGH
Local
lenovo transition Privilege escalation vulnerability in Lenovo Transition application used in Lenovo Yoga, Flex and Miix systems running Windows allows local users to execute code with elevated privileges. CWE-284
Improper Access Control
CVE-2016-8227 2024-11-21 11:59 2017-01-27 Show GitHub Exploit DB Packet Storm
265030 4.9 MEDIUM
Network
lenovo system_x3650_m5_bios
flex_system_x280_m6_bios
system_x3500_m5_bios
flex_system_x240_m5_bios
system_x3250_m6_bios
system_x3550_m5_bios
flex_system_x880_x6_bios
nextscale_nx360_m5_…
The BIOS in Lenovo System X M5, M6, and X6 systems allows administrators to cause a denial of service via updating a UEFI data structure. CWE-19
 Data Processing Errors
CVE-2016-8226 2024-11-21 11:59 2017-01-27 Show GitHub Exploit DB Packet Storm