Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 22, 2026, 6:01 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
200061 9.8 緊急
Network
GNU Project
openSUSE project
- GnuTLS の read_attribute 関数におけるヒープベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー
CVE-2017-5337 2017-04-20 16:42 2017-01-4 Show GitHub Exploit DB Packet Storm
200062 9.8 緊急
Network
GNU Project
openSUSE project
- GnuTLS の lib/opencdk/pubkey.c の cdk_pk_get_keyid 関数におけるスタックベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー
CVE-2017-5336 2017-04-20 16:42 2017-01-4 Show GitHub Exploit DB Packet Storm
200063 7.5 重要
Network
GNU Project
openSUSE project
- GnuTLS の lib/opencdk/read-packet.c のストリーム読み取り機能におけるサービス運用妨害 (DoS) の脆弱性 CWE-125
境界外読み取り
CVE-2017-5335 2017-04-20 16:42 2017-01-4 Show GitHub Exploit DB Packet Storm
200064 9.8 緊急
Network
GNU Project
openSUSE project
- GnuTLS の gnutls_x509_ext_import_proxy 関数におけるメモリ二重解放の脆弱性 CWE-415
二重解放
CVE-2017-5334 2017-04-20 16:42 2017-02-4 Show GitHub Exploit DB Packet Storm
200065 7.5 重要
Network
Debian
PySAML2 project
- PySAML2 における XML 外部エンティティの脆弱性 CWE-611
XML 外部エンティティ参照の不適切な制限
CVE-2016-10149 2017-04-20 16:35 2016-11-3 Show GitHub Exploit DB Packet Storm
200066 9.8 緊急
Network
libgit2 - libgit2 の Git Smart Protocol サポートの transports/smart_pkt.c の git_pkt_parse_line 関数におけるバッファオーバーフローの脆弱性 CWE-119
バッファエラー
CVE-2016-10128 2017-04-20 16:24 2016-11-15 Show GitHub Exploit DB Packet Storm
200067 7.5 重要
Network
GNU Project - GNU Binutils の GNU linker (ld) におけるバッファエラーの脆弱性 CWE-119
バッファエラー
CVE-2017-7227 2017-04-20 15:37 2017-04-13 Show GitHub Exploit DB Packet Storm
200068 9.1 緊急
Network
GNU Project - GNU Binutils の Binary File Descriptor ライブラリの pe_ILF_object_p 関数におけるバッファエラーの脆弱性 CWE-119
バッファエラー
CVE-2017-7226 2017-04-20 15:37 2017-04-13 Show GitHub Exploit DB Packet Storm
200069 7.5 重要
Network
GNU Project - GNU Binutils の addr2line の find_nearest_line 関数における NULL ポインタデリファレンスに関する脆弱性 CWE-476
NULL ポインタデリファレンス
CVE-2017-7225 2017-04-20 15:37 2017-04-13 Show GitHub Exploit DB Packet Storm
200070 5.5 警告
Local
GNU Project - GNU Binutils の objdump の find_nearest_line 関数における境界外書き込みに関する脆弱性 CWE-787
境界外書き込み
CVE-2017-7224 2017-04-20 15:37 2017-04-13 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 23, 2026, 4 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
291001 - zend zendopenid
zend_framework
The GenericConsumer class in the Consumer component in ZendOpenId before 2.0.2 and the Zend_OpenId_Consumer class in Zend Framework 1 before 1.12.4 does not verify that the openid_op_endpoint value i… CWE-264
Permissions, Privileges, and Access Controls
CVE-2014-2684 2024-11-21 11:06 2014-11-16 Show GitHub Exploit DB Packet Storm
291002 - zend zendrest
zend_framework
zendservice_slideshare
zendservice_api
zendservice_audioscrobbler
zendservice_amazon
zendservice_technorati
zendservice_windowsazure
zendopenid
zend…
Zend Framework 1 (ZF1) before 1.12.4, Zend Framework 2 before 2.1.6 and 2.2.x before 2.2.6, ZendOpenId, ZendRest, ZendService_AudioScrobbler, ZendService_Nirvanix, ZendService_SlideShare, ZendService… CWE-17
Code
CVE-2014-2683 2024-11-21 11:06 2014-11-16 Show GitHub Exploit DB Packet Storm
291003 - zend zendrest
zend_framework
zendservice_slideshare
zendservice_api
zendservice_audioscrobbler
zendservice_amazon
zendservice_technorati
zendservice_windowsazure
zendopenid
zend…
Zend Framework 1 (ZF1) before 1.12.4, Zend Framework 2 before 2.1.6 and 2.2.x before 2.2.6, ZendOpenId, ZendRest, ZendService_AudioScrobbler, ZendService_Nirvanix, ZendService_SlideShare, ZendService… CWE-19
 Data Processing Errors
CVE-2014-2682 2024-11-21 11:06 2014-11-16 Show GitHub Exploit DB Packet Storm
291004 - zend zendrest
zend_framework
zendservice_slideshare
zendservice_api
zendservice_audioscrobbler
zendservice_amazon
zendservice_technorati
zendservice_windowsazure
zendopenid
zend…
Zend Framework 1 (ZF1) before 1.12.4, Zend Framework 2 before 2.1.6 and 2.2.x before 2.2.6, ZendOpenId, ZendRest, ZendService_AudioScrobbler, ZendService_Nirvanix, ZendService_SlideShare, ZendService… CWE-19
 Data Processing Errors
CVE-2014-2681 2024-11-21 11:06 2014-11-16 Show GitHub Exploit DB Packet Storm
291005 - accuenergy axm-net
acuvim_ii
The AXN-NET Ethernet module accessory 3.04 for the Accuenergy Acuvim II allows remote attackers to discover passwords and modify settings via vectors involving JavaScript. CWE-200
Information Exposure
CVE-2014-2374 2024-11-21 11:06 2014-11-5 Show GitHub Exploit DB Packet Storm
291006 - accuenergy axm-net
acuvim_ii
The web server on the AXN-NET Ethernet module accessory 3.04 for the Accuenergy Acuvim II allows remote attackers to bypass authentication and modify settings via a direct request to an unspecified U… CWE-287
Improper Authentication
CVE-2014-2373 2024-11-21 11:06 2014-11-5 Show GitHub Exploit DB Packet Storm
291007 - t-mobile
asus
tm-ac1900
rt_series_firmware
ASUS RT-AC68U, RT-AC66R, RT-AC66U, RT-AC56R, RT-AC56U, RT-N66R, RT-N66U, RT-N56R, RT-N56U, and possibly other RT-series routers before firmware 3.0.0.4.376.x do not verify the integrity of firmware (… CWE-345
 Insufficient Verification of Data Authenticity
CVE-2014-2718 2024-11-21 11:06 2014-11-5 Show GitHub Exploit DB Packet Storm
291008 - fortinet fortimanager
fortianalyzer_firmware
Multiple cross-site scripting (XSS) vulnerabilities in the Web User Interface in Fortinet FortiManager before 5.0.7 and FortiAnalyzer before 5.0.7 allow remote attackers to inject arbitrary web scrip… CWE-79
Cross-site Scripting
CVE-2014-2336 2024-11-21 11:06 2014-10-31 Show GitHub Exploit DB Packet Storm
291009 - fortinet fortianalyzer_firmware Multiple cross-site scripting (XSS) vulnerabilities in the Web User Interface in Fortinet FortiManager before 5.0.7 allow remote attackers to inject arbitrary web script or HTML via unspecified vecto… CWE-79
Cross-site Scripting
CVE-2014-2335 2024-11-21 11:06 2014-10-31 Show GitHub Exploit DB Packet Storm
291010 - fortinet fortianalyzer_firmware Multiple cross-site scripting (XSS) vulnerabilities in the Web User Interface in Fortinet FortiAnalyzer before 5.0.7 allow remote attackers to inject arbitrary web script or HTML via unspecified vect… CWE-79
Cross-site Scripting
CVE-2014-2334 2024-11-21 11:06 2014-10-31 Show GitHub Exploit DB Packet Storm