Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 30, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
252281	4.3	警告	Earl Miles	-	Drupal 用 Panels モジュールにおけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2012-0914	2012-02-2 16:59	2012-01-24	Show	GitHub Exploit DB Packet Storm

252282	7.2	危険	Todd C. Miller	-	Sudo の sudo_debug 関数における任意のコードを実行される脆弱性	CWE-134 書式文字列の問題	CVE-2012-0809	2012-02-2 14:18	2012-02-1	Show	GitHub Exploit DB Packet Storm

252283	5	警告	Samba Project	-	Samba におけるサービス運用妨害 (メモリおよび CPU 資源の消費) の脆弱性	CWE-200 情報漏えい	CVE-2012-0817	2012-02-1 16:29	2012-01-29	Show	GitHub Exploit DB Packet Storm

252284	4.9	警告	KVM	-	KVM の arch/x86/kvm/i8254.c におけるサービス運用妨害 (NULL ポインタデリファレンス) の脆弱性	CWE-noinfo 情報不足	CVE-2011-4622	2012-02-1 16:28	2012-01-27	Show	GitHub Exploit DB Packet Storm

252285	7.5	危険	レッドハット	-	Red Hat Linux 用の JBoss Enterprise Application Platform におけるアクセス制限を回避される脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2011-4608	2012-02-1 16:27	2012-01-18	Show	GitHub Exploit DB Packet Storm

252286	5.8	警告	Kay Framework OpenID レッドハット	-	OpenID4Java の message/ax/AxMessage.java における AX 情報を変更される脆弱性	CWE-20 不適切な入力確認	CVE-2011-4314	2012-02-1 16:26	2011-05-5	Show	GitHub Exploit DB Packet Storm

252287	9.3	危険	Google	-	Android におけるスタックベースのバッファオーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2011-3874	2012-02-1 16:24	2011-11-9	Show	GitHub Exploit DB Packet Storm

252288	7.5	危険	Kerry Thompson drusus	-	Logsurfer および Logsurfer+ におけるメモリ二重解放の脆弱性	CWE-399 リソース管理の問題	CVE-2011-3626	2012-02-1 16:24	2012-01-27	Show	GitHub Exploit DB Packet Storm

252289	5	警告	The Support Incident Tracker Project	-	Support Incident Tracker の translate.php における重要な情報を取得される脆弱性	CWE-noinfo 情報不足	CVE-2011-5075	2012-02-1 16:20	2011-11-13	Show	GitHub Exploit DB Packet Storm

252290	6.8	警告	The Support Incident Tracker Project	-	Support Incident Tracker におけるクロスサイトリクエストフォージェリの脆弱性	CWE-352 同一生成元ポリシー違反	CVE-2011-5074	2012-02-1 16:18	2012-01-29	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 30, 2026, 4:16 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
264991	3.3	LOW Local	foxitsoftware	reader	A large out-of-bounds read on the heap vulnerability in Foxit PDF Reader can potentially be abused for information disclosure. Combined with another vulnerability, it can be used to leak heap memory …	CWE-125 Out-of-bounds Read	CVE-2016-8334	2024-11-21 11:59	2017-01-7	Show	GitHub Exploit DB Packet Storm

264992	9.8	CRITICAL Network	libgd	libgd	Integer signedness error in the dynamicGetbuf function in gd_io_dp.c in the GD Graphics Library (aka libgd) through 2.2.3, as used in PHP before 5.6.28 and 7.x before 7.0.13, allows remote attackers …	CWE-119 Incorrect Access of Indexable Resource ('Range Error')	CVE-2016-8670	2024-11-21 11:59	2017-01-5	Show	GitHub Exploit DB Packet Storm

264993	7.8	HIGH Local	imagemagick debian	imagemagick debian_linux	An exploitable out of bounds write exists in the handling of compressed TIFF images in ImageMagicks's convert utility. A crafted TIFF document can lead to an out of bounds write which in particular c…	CWE-787 Out-of-bounds Write	CVE-2016-8707	2024-11-21 11:59	2016-12-24	Show	GitHub Exploit DB Packet Storm

264994	5.5	MEDIUM Local	ffmpeg	ffmpeg	The gsm_parse function in libavcodec/gsm_parser.c in FFmpeg before 3.1.5 allows remote attackers to cause a denial of service (assert fault) via a crafted AVI file.	CWE-20 Improper Input Validation	CVE-2016-8595	2024-11-21 11:59	2016-12-23	Show	GitHub Exploit DB Packet Storm

264995	8.8	HIGH Local	joyent	smartos	An exploitable integer overflow exists in the Joyent SmartOS 20161110T013148Z Hyprlofs file system. The vulnerability is present in the Ioctl system call with the command HYPRLOFS_ADD_ENTRIES when de…	CWE-190 Integer Overflow or Wraparound	CVE-2016-8733	2024-11-21 11:59	2016-12-15	Show	GitHub Exploit DB Packet Storm

264996	7.8	HIGH Local	linux canonical	linux_kernel ubuntu_linux	Race condition in net/packet/af_packet.c in the Linux kernel through 4.8.12 allows local users to gain privileges or cause a denial of service (use-after-free) by leveraging the CAP_NET_RAW capabilit…	CWE-362 CWE-416 Race Condition Use After Free	CVE-2016-8655	2024-11-21 11:59	2016-12-8	Show	GitHub Exploit DB Packet Storm

264997	7.5	HIGH Network	apache	http_server	The mod_http2 module in the Apache HTTP Server 2.4.17 through 2.4.23, when the Protocols configuration includes h2 or h2c, does not restrict request-header length, which allows remote attackers to ca…	CWE-20 CWE-399 Improper Input Validation Resource Management Errors	CVE-2016-8740	2024-11-21 11:59	2016-12-6	Show	GitHub Exploit DB Packet Storm

264998	4.4	MEDIUM Local	lenovo	thinkpad_10_ella_2_bios thinkpad_11e_beema_bios thinkpad_11e_braswell_bios thinkpad_11e_broadwell_bios thinkpad_11e_skylake_bios thinkpad_13e_bios thinkpad_e450_bios thinkpad_e45…	A vulnerability has been identified in a signed kernel driver for the BIOS of some ThinkPad systems that can allow an attacker with Windows administrator-level privileges to call System Management Mo…	CWE-284 Improper Access Control	CVE-2016-8222	2024-11-21 11:59	2016-12-1	Show	GitHub Exploit DB Packet Storm

264999	4.4	MEDIUM Local	lenovo	bios notebook_110_14ibr_bios notebook_110_15ibr_bios notebook_b70_80_bios notebook_e31_80_bios notebook_e40_80_bios notebook_e41_80_bios notebook_e51_80_bios notebook_g40_80_b…	A vulnerability has been identified in some Lenovo Notebook and ThinkServer systems where an attacker with administrative privileges on a system could install a program that circumvents Intel Managem…	CWE-310 Cryptographic Issues	CVE-2016-8224	2024-11-21 11:59	2016-11-30	Show	GitHub Exploit DB Packet Storm

265000	7.8	HIGH Local	lenovo	system_interface_foundation	During an internal security review, Lenovo identified a local privilege escalation vulnerability in Lenovo System Interface Foundation software installed on some Windows 10 PCs where a user with loca…	CWE-284 Improper Access Control	CVE-2016-8223	2024-11-21 11:59	2016-11-30	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed