Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 24, 2026, 12:02 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
200401 8.8 重要
Network 		MediaWiki - MediaWiki の includes/User.php の User::matchEditToken 関数における編集トークンを推測される脆弱性 CWE-352
同一生成元ポリシー違反 		CVE-2015-8624 2017-04-20 17:35 2015-11-21 Show GitHub Exploit DB Packet Storm
200402 8.8 重要
Network 		MediaWiki - MediaWiki の includes/User.php の User::matchEditToken 関数における編集トークンを推測される脆弱性 CWE-352
同一生成元ポリシー違反 		CVE-2015-8623 2017-04-20 17:35 2015-11-21 Show GitHub Exploit DB Packet Storm
200403 6.1 警告
Network 		MediaWiki - MediaWiki におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2015-8622 2017-04-20 17:35 2015-11-10 Show GitHub Exploit DB Packet Storm
200404 5.5 警告
Local 		MiniUPnP Project - MiniSSDPd の minissdpd.c の processRequest 関数におけるサービス運用妨害 (DoS) の脆弱性 CWE-388
エラー処理 		CVE-2016-3179 2017-04-20 17:06 2016-03-4 Show GitHub Exploit DB Packet Storm
200405 5.5 警告
Local 		MiniUPnP Project - MiniSSDPd の minissdpd.c の processRequest 関数におけるサービス運用妨害 (DoS) の脆弱性 CWE-125
境界外読み取り 		CVE-2016-3178 2017-04-20 17:06 2016-03-2 Show GitHub Exploit DB Packet Storm
200406 7.8 重要
Local 		マカフィー - Intel Security McAfee Application Control における権限を昇格される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2016-8009 2017-04-20 17:03 2016-11-22 Show GitHub Exploit DB Packet Storm
200407 8.8 重要
Local 		マカフィー - McAfee Security Scan Plus における Windows 7 および Windows 10 の権限を昇格される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2016-8008 2017-04-20 17:03 2016-11-14 Show GitHub Exploit DB Packet Storm
200408 8.8 重要
Network 		SolarWinds - SolarWinds LEM のバナー編集機能における任意のコードを実行される脆弱性 CWE-284
不適切なアクセス制御 		CVE-2017-5199 2017-04-20 16:54 2017-03-23 Show GitHub Exploit DB Packet Storm
200409 9.8 緊急
Network 		Huawei - Huawei AR3200 ルータのソフトウェアにおけるサービス運用妨害 (DoS) の脆弱性 CWE-20
不適切な入力確認 		CVE-2016-6206 2017-04-20 16:52 2016-07-13 Show GitHub Exploit DB Packet Storm
200410 10 緊急
Network 		Fabrice Bellard - Gentoo QEMU パッケージにおける競合状態に関する脆弱性 CWE-362
競合状態 		CVE-2015-8556 2017-04-20 16:50 2015-12-17 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 24, 2026, 4 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
291341 - lightwitch
prosody 		metronome
prosody 		plugins/mod_compression.lua in (1) Prosody before 0.9.4 and (2) Lightwitch Metronome through 3.4 negotiates stream compression while a session is unauthenticated, which allows remote attackers to cau… CWE-20
 Improper Input Validation  		CVE-2014-2744 2024-11-21 11:06 2014-04-11 Show GitHub Exploit DB Packet Storm
291342 - lightwitch metronome plugins/mod_compression.lua in Lightwitch Metronome through 3.4 does not properly restrict the processing of compressed XML elements, which allows remote attackers to cause a denial of service (resou… CWE-264
Permissions, Privileges, and Access Controls 		CVE-2014-2743 2024-11-21 11:06 2014-04-11 Show GitHub Exploit DB Packet Storm
291343 - isode m-link Isode M-Link before 16.0v7 does not properly restrict the processing of compressed XML elements, which allows remote attackers to cause a denial of service (resource consumption) via a crafted XMPP s… CWE-264
Permissions, Privileges, and Access Controls 		CVE-2014-2742 2024-11-21 11:06 2014-04-11 Show GitHub Exploit DB Packet Storm
291344 - igniterealtime openfire nio/XMLLightweightParser.java in Ignite Realtime Openfire before 3.9.2 does not properly restrict the processing of compressed XML elements, which allows remote attackers to cause a denial of service… CWE-264
Permissions, Privileges, and Access Controls 		CVE-2014-2741 2024-11-21 11:06 2014-04-11 Show GitHub Exploit DB Packet Storm
291345 - sap business_object_processing_framework_for_abap SAP Business Object Processing Framework (BOPF) for ABAP has hardcoded credentials, which makes it easier for remote attackers to obtain access via unspecified vectors. CWE-255
Credentials Management 		CVE-2014-2752 2024-11-21 11:06 2014-04-11 Show GitHub Exploit DB Packet Storm
291346 - sap print_and_output_management SAP Print and Output Management has hardcoded credentials, which makes it easier for remote attackers to obtain access via unspecified vectors. CWE-255
Credentials Management 		CVE-2014-2751 2024-11-21 11:06 2014-04-11 Show GitHub Exploit DB Packet Storm
291347 - sap hana The HANA ICM process in SAP HANA allows remote attackers to obtain the platform version, host name, instance number, and possibly other sensitive information via a malformed HTTP GET request. CWE-200
Information Exposure 		CVE-2014-2749 2024-11-21 11:06 2014-04-11 Show GitHub Exploit DB Packet Storm
291348 - sap enhancement_package The Security Audit Log facility in SAP Enhancement Package (EHP) 6 for SAP ERP 6.0 allows remote attackers to modify or delete arbitrary log classes via unspecified vectors. NOTE: some of these deta… CWE-264
Permissions, Privileges, and Access Controls 		CVE-2014-2748 2024-11-21 11:06 2014-04-11 Show GitHub Exploit DB Packet Storm
291349 - cacti cacti Multiple SQL injection vulnerabilities in graph_xport.php in Cacti 0.8.7g, 0.8.8b, and earlier allow remote attackers to execute arbitrary SQL commands via the (1) graph_start, (2) graph_end, (3) gra… CWE-89
SQL Injection 		CVE-2014-2708 2024-11-21 11:06 2014-04-11 Show GitHub Exploit DB Packet Storm
291350 - linux-pam linux-pam Multiple directory traversal vulnerabilities in pam_timestamp.c in the pam_timestamp module for Linux-PAM (aka pam) 1.1.8 allow local users to create arbitrary files or possibly bypass authentication… CWE-22
Path Traversal 		CVE-2014-2583 2024-11-21 11:06 2014-04-11 Show GitHub Exploit DB Packet Storm