Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 29, 2026, 6 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
252281 4.3 警告 Earl Miles - Drupal 用 Panels モジュールにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2012-0914 2012-02-2 16:59 2012-01-24 Show GitHub Exploit DB Packet Storm
252282 7.2 危険 Todd C. Miller - Sudo の sudo_debug 関数における任意のコードを実行される脆弱性 CWE-134
書式文字列の問題
CVE-2012-0809 2012-02-2 14:18 2012-02-1 Show GitHub Exploit DB Packet Storm
252283 5 警告 Samba Project - Samba におけるサービス運用妨害 (メモリおよび CPU 資源の消費) の脆弱性 CWE-200
情報漏えい
CVE-2012-0817 2012-02-1 16:29 2012-01-29 Show GitHub Exploit DB Packet Storm
252284 4.9 警告 KVM - KVM の arch/x86/kvm/i8254.c におけるサービス運用妨害 (NULL ポインタデリファレンス) の脆弱性 CWE-noinfo
情報不足
CVE-2011-4622 2012-02-1 16:28 2012-01-27 Show GitHub Exploit DB Packet Storm
252285 7.5 危険 レッドハット - Red Hat Linux 用の JBoss Enterprise Application Platform におけるアクセス制限を回避される脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2011-4608 2012-02-1 16:27 2012-01-18 Show GitHub Exploit DB Packet Storm
252286 5.8 警告 Kay Framework
OpenID
レッドハット
- OpenID4Java の message/ax/AxMessage.java における AX 情報を変更される脆弱性 CWE-20
不適切な入力確認
CVE-2011-4314 2012-02-1 16:26 2011-05-5 Show GitHub Exploit DB Packet Storm
252287 9.3 危険 Google - Android におけるスタックベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー
CVE-2011-3874 2012-02-1 16:24 2011-11-9 Show GitHub Exploit DB Packet Storm
252288 7.5 危険 Kerry Thompson
drusus
- Logsurfer および Logsurfer+ におけるメモリ二重解放の脆弱性 CWE-399
リソース管理の問題
CVE-2011-3626 2012-02-1 16:24 2012-01-27 Show GitHub Exploit DB Packet Storm
252289 5 警告 The Support Incident Tracker Project - Support Incident Tracker の translate.php における重要な情報を取得される脆弱性 CWE-noinfo
情報不足
CVE-2011-5075 2012-02-1 16:20 2011-11-13 Show GitHub Exploit DB Packet Storm
252290 6.8 警告 The Support Incident Tracker Project - Support Incident Tracker におけるクロスサイトリクエストフォージェリの脆弱性 CWE-352
同一生成元ポリシー違反
CVE-2011-5074 2012-02-1 16:18 2012-01-29 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 29, 2026, 4:16 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
265031 3.3 LOW
Local
sap netweaver SAP Netweaver 7.40 improperly logs (1) DUI and (2) DUJ events in the SAP Security Audit Log as non-critical, which might allow local users to hide rejected attempts to execute RFC function callbacks … NVD-CWE-Other
CVE-2016-7437 2024-11-21 11:58 2016-10-13 Show GitHub Exploit DB Packet Storm
265032 2.5 LOW
Local
siemens simatic_step_7 Siemens SIMATIC STEP 7 (TIA Portal) before 14 uses an improper format for managing TIA project files during version updates, which makes it easier for local users to obtain sensitive configuration in… CWE-200
Information Exposure
CVE-2016-7960 2024-11-21 11:58 2016-10-13 Show GitHub Exploit DB Packet Storm
265033 4.7 MEDIUM
Local
siemens simatic_step_7 Siemens SIMATIC STEP 7 (TIA Portal) before 14 improperly stores pre-shared key data in TIA project files, which makes it easier for local users to obtain sensitive information by leveraging access to… CWE-254
 7PK - Security Features
CVE-2016-7959 2024-11-21 11:58 2016-10-13 Show GitHub Exploit DB Packet Storm
265034 5.5 MEDIUM
Local
systemd_project
novell
redhat
systemd
suse_linux_enterprise_server
suse_linux_enterprise_desktop
suse_linux_enterprise_server_for_sap
suse_linux_enterprise_software_development_kit
enterprise_linux_desktop
enter…
The manager_dispatch_notify_fd function in systemd allows local users to cause a denial of service (system hang) via a zero-length message received over a notify socket, which causes an error to be r… CWE-20
 Improper Input Validation 
CVE-2016-7796 2024-11-21 11:58 2016-10-13 Show GitHub Exploit DB Packet Storm
265035 7.8 HIGH
Local
intel solid-state_drive_toolbox The updater subsystem in Intel SSD Toolbox before 3.3.7 allows local users to gain privileges via unspecified vectors. CWE-264
Permissions, Privileges, and Access Controls
CVE-2016-8101 2024-11-21 11:58 2016-10-11 Show GitHub Exploit DB Packet Storm
265036 5.5 MEDIUM
Local
intel integrated_performance_primitives Intel Integrated Performance Primitives (aka IPP) Cryptography before 9.0.4 makes it easier for local users to discover RSA private keys via a side-channel attack. CWE-200
Information Exposure
CVE-2016-8100 2024-11-21 11:58 2016-10-11 Show GitHub Exploit DB Packet Storm
265037 6.3 MEDIUM
Local
xen xen Xen 4.7.x and earlier does not properly honor CR0.TS and CR0.EM, which allows local x86 HVM guest OS users to read or modify FPU, MMX, or XMM register state information belonging to arbitrary tasks o… CWE-362
Race Condition
CVE-2016-7777 2024-11-21 11:58 2016-10-7 Show GitHub Exploit DB Packet Storm
265038 4.4 MEDIUM
Local
qemu
debian
qemu
debian_linux
The pcnet_rdra_addr function in hw/net/pcnet.c in QEMU (aka Quick Emulator) allows local guest OS administrators to cause a denial of service (infinite loop and QEMU process crash) by setting the (1)… CWE-835
 Loop with Unreachable Exit Condition ('Infinite Loop')
CVE-2016-7909 2024-11-21 11:58 2016-10-6 Show GitHub Exploit DB Packet Storm
265039 4.4 MEDIUM
Local
qemu
debian
qemu
debian_linux
The mcf_fec_do_tx function in hw/net/mcf_fec.c in QEMU (aka Quick Emulator) does not properly limit the buffer descriptor count when transmitting packets, which allows local guest OS administrators t… CWE-835
 Loop with Unreachable Exit Condition ('Infinite Loop')
CVE-2016-7908 2024-11-21 11:58 2016-10-6 Show GitHub Exploit DB Packet Storm
265040 4.4 MEDIUM
Local
qemu qemu The imx_fec_do_tx function in hw/net/imx_fec.c in QEMU (aka Quick Emulator) does not properly limit the buffer descriptor count when transmitting packets, which allows local guest OS administrators t… CWE-20
CWE-399
 Improper Input Validation 
 Resource Management Errors
CVE-2016-7907 2024-11-21 11:58 2016-10-6 Show GitHub Exploit DB Packet Storm