Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 23, 2026, 6 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
200131 5.5 警告
Local
JasPer Project
Fedora Project
- JasPer の libjasper/bmp/bmp_dec.c の bmp_getdata 関数におけるサービス運用妨害 (DoS) の脆弱性 CWE-476
NULL ポインタデリファレンス
CVE-2016-8884 2017-04-26 14:46 2016-10-20 Show GitHub Exploit DB Packet Storm
200132 6.5 警告
Network
NetIQ - NetIQ IDM ServiceNow Driver における情報漏えいに関する脆弱性 CWE-200
情報漏えい
CVE-2016-1603 2017-04-26 14:41 2016-07-5 Show GitHub Exploit DB Packet Storm
200133 4.3 警告
Network
Plone Foundation - Plone におけるサンドボックス保護メカニズムを回避される脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2017-5524 2017-04-26 14:19 2017-01-17 Show GitHub Exploit DB Packet Storm
200134 9.8 緊急
Network
サムスン - Exynos AP チップセットを伴う Samsung デバイスのソフトウェアの GPU ドライバの arm/t7xx/r5p0/mali_kbase_core_linux.c における脆弱性 CWE-125
境界外読み取り
CVE-2017-5538 2017-04-26 14:11 2017-01-19 Show GitHub Exploit DB Packet Storm
200135 7.8 重要
Local
APNG Disassembler project - APNGDis におけるバッファオーバーフローの脆弱性 CWE-119
バッファエラー
CVE-2017-6191 2017-04-26 12:27 2017-03-14 Show GitHub Exploit DB Packet Storm
200136 9.8 緊急
Network
kankunit - Konke Smart Plug における機器の管理権を取得される脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2014-7279 2017-04-26 12:27 2014-10-29 Show GitHub Exploit DB Packet Storm
200137 8.8 重要
Network
Nuxeo - Nuxeo Platform のファイルインポート機能におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル
CVE-2017-5869 2017-04-26 11:59 2017-03-24 Show GitHub Exploit DB Packet Storm
200138 5.5 警告
Local
Apache Software Foundation - Apache POI におけるサービス運用妨害 (DoS) の脆弱性 CWE-399
リソース管理の問題
CVE-2017-5644 2017-04-26 11:59 2017-03-20 Show GitHub Exploit DB Packet Storm
200139 8.8 重要
Network
Firebird Project - Firebird の UDF サブシステムにおけるコードを実行される脆弱性 CWE-284
不適切なアクセス制御
CVE-2017-6369 2017-04-26 11:59 2017-02-1 Show GitHub Exploit DB Packet Storm
200140 8.8 重要
Network
AlienVault
NfSen
- 複数の AlienVault 製品 および NfSen における特権付きコンテキスト内で任意のコードを実行される脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2017-6971 2017-04-26 10:48 2017-01-24 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 23, 2026, 4 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
290671 - ibm emptoris_spend_analysis Cross-site scripting (XSS) vulnerability in IBM Emptoris Spend Analysis 9.5.x before 9.5.0.4, 10.0.1.x before 10.0.1.3, and 10.0.2.x before 10.0.2.4 allows remote authenticated users to inject arbitr… CWE-79
Cross-site Scripting
CVE-2014-3035 2024-11-21 11:07 2014-08-26 Show GitHub Exploit DB Packet Storm
290672 - ibm emptoris_contract_management Cross-site scripting (XSS) vulnerability in IBM Emptoris Contract Management 9.5.x before 9.5.0.6 iFix 10, 10.0.0.x before 10.0.0.1 iFix 10, 10.0.1.x before 10.0.1.4, and 10.0.2.x before 10.0.2.2 iFi… CWE-79
Cross-site Scripting
CVE-2014-3034 2024-11-21 11:07 2014-08-26 Show GitHub Exploit DB Packet Storm
290673 - cisco ios_xr
asr_9000_rsp440_router
asr_9001
asr_9006
asr_9010
asr_9904
asr_9912
asr_9922
Cisco IOS XR 4.3(.2) and earlier on ASR 9000 devices does not properly perform NetFlow sampling of packets with multicast destination MAC addresses, which allows remote attackers to cause a denial of… CWE-20
 Improper Input Validation 
CVE-2014-3335 2024-11-21 11:07 2014-08-26 Show GitHub Exploit DB Packet Storm
290674 - ibm emptoris_spend_analysis
emptoris_sourcing_portfolio
emptoris_contract_management
Cross-site request forgery (CSRF) vulnerability in IBM Emptoris Contract Management 9.5.x before 9.5.0.6 iFix 10, 10.0.0.x before 10.0.0.1 iFix 10, 10.0.1.x before 10.0.1.4, and 10.0.2.x before 10.0.… CWE-352
 Origin Validation Error
CVE-2014-3040 2024-11-21 11:07 2014-08-26 Show GitHub Exploit DB Packet Storm
290675 - ibm emptoris_sourcing_portfolio Cross-site scripting (XSS) vulnerability in IBM Emptoris Sourcing Portfolio 9.5.x before 9.5.1.3, 10.0.0.x before 10.0.0.1, 10.0.1.x before 10.0.1.3, and 10.0.2.x before 10.0.2.4 allows remote authen… CWE-79
Cross-site Scripting
CVE-2014-3033 2024-11-21 11:07 2014-08-26 Show GitHub Exploit DB Packet Storm
290676 - ibm rational_directory_server
rational_directory_administrator
The RDS Java Client library in IBM Rational Directory Server (RDS) 5.1.1.x before 5.1.1.2 iFix004 and 5.2.x before 5.2.1 iFix003, and Rational Directory Administrator (RDA) 6.0 before iFix002, includ… CWE-310
Cryptographic Issues
CVE-2014-3089 2024-11-21 11:07 2014-08-22 Show GitHub Exploit DB Packet Storm
290677 - ibm websphere_application_server IBM WebSphere Application Server (WAS) 7.0.x before 7.0.0.35, 8.0.x before 8.0.0.10, and 8.5.x before 8.5.5.3 does not properly restrict resource access, which allows remote attackers to obtain sensi… CWE-264
Permissions, Privileges, and Access Controls
CVE-2014-3083 2024-11-21 11:07 2014-08-22 Show GitHub Exploit DB Packet Storm
290678 - ibm websphere_application_server The addFileRegistryAccount Virtual Member Manager (VMM) SPI Admin Task in IBM WebSphere Application Server (WAS) 8.0.x before 8.0.0.10 and 8.5.x before 8.5.5.3 does not properly create accounts, whic… CWE-264
Permissions, Privileges, and Access Controls
CVE-2014-3070 2024-11-21 11:07 2014-08-22 Show GitHub Exploit DB Packet Storm
290679 - ibm websphere_application_server IBM WebSphere Application Server (WAS) 7.0.x before 7.0.0.33, 8.0.x before 8.0.0.9, and 8.5.x before 8.5.5.3 allows remote attackers to obtain sensitive information via a crafted URL that triggers an… CWE-200
Information Exposure
CVE-2014-3022 2024-11-21 11:07 2014-08-22 Show GitHub Exploit DB Packet Storm
290680 - cisco webex_meetmenow Directory traversal vulnerability in an unspecified PHP script in the server in Cisco WebEx MeetMeNow allows remote authenticated users to read arbitrary files via a crafted request, aka Bug ID CSCuo… CWE-22
Path Traversal
CVE-2014-3340 2024-11-21 11:07 2014-08-20 Show GitHub Exploit DB Packet Storm