Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 22, 2026, 6:01 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
200531 7.5 重要
Network
pcre.org - PCRE の pcre_jit_compile.c の compile_bracket_matchingpath 関数におけるサービス運用妨害 (DoS) の脆弱性 CWE-125
境界外読み取り
CVE-2017-6004 2017-04-5 17:54 2017-02-7 Show GitHub Exploit DB Packet Storm
200532 7.2 重要
Local
Sielco Sistemi - Sielco Sistemi Winlog Lite および Winlog Pro SCADA ソフトウェアにおける DLL ハイジャックの脆弱性 CWE-427
制御されていない検索パスの要素
CVE-2017-5161 2017-04-5 17:29 2017-02-7 Show GitHub Exploit DB Packet Storm
200533 7.5 重要
Network
VCE Company, LLC. - VCE Vision Intelligent Operations の "Plug-in for VMware vCenter" における管理ユーザのパスワードを取得される脆弱性 CWE-200
情報漏えい
CVE-2015-4057 2017-04-5 17:24 2015-06-17 Show GitHub Exploit DB Packet Storm
200534 9.8 緊急
Network
iBall - iBall Baton 150M iB-WRA150N デバイスにおける認証を回避される脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2017-6558 2017-04-5 16:59 2017-03-7 Show GitHub Exploit DB Packet Storm
200535 8.8 重要
Network
Novell - Windows XP/Vista/Win7 用 Novell iPrint Client の iPrint Web ブラウザの ActiveX プラグインにおけるコードを実行される脆弱性 CWE-119
バッファエラー
CVE-2010-4314 2017-04-5 16:54 2010-08-19 Show GitHub Exploit DB Packet Storm
200536 8.8 重要
Network
Embedthis Software, LLC - Foscam などのホワイトラベルの IP カメラモデルで使用されるカスタムビルドの GoAhead Web サーバにおけるコマンドインジェクションの脆弱性 CWE-77
コマンドインジェクション
CVE-2017-5675 2017-04-5 16:47 2017-01-31 Show GitHub Exploit DB Packet Storm
200537 5.9 警告
Network
MikroTik - MikroTik RouterOS の L2TP クライアントにおける暗号化されていない送信データを閲覧される脆弱性 CWE-254
セキュリティ機能
CVE-2017-6297 2017-04-5 16:45 2017-02-24 Show GitHub Exploit DB Packet Storm
200538 3.7
Network
W3C - 複数の Web ブラウザに実装されている W3C High Resolution Time API における AnC 攻撃を実行される脆弱性 CWE-361
時間とステータス
CVE-2017-5928 2017-04-5 16:44 2017-02-27 Show GitHub Exploit DB Packet Storm
200539 7.5 重要
Network
cygnux.org - sysPass の inc/SP/Core/Crypt.class における脆弱性 CWE-326
不適切な暗号強度
CVE-2017-5999 2017-04-5 16:43 2017-03-1 Show GitHub Exploit DB Packet Storm
200540 8.1 重要
Network
Dahua Technology Co., Ltd - Dahua DHI-HCVR7216A-S3 デバイスにおけるログインアクセス権を取得される脆弱性 CWE-284
不適切なアクセス制御
CVE-2017-6343 2017-04-5 16:42 2017-02-24 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 22, 2026, 4 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
290251 - redhat
jenkins
openshift
jenkins
Jenkins before 1.583 and LTS before 1.565.3 does not properly prevent downloading of plugins, which allows remote authenticated users with the Overall/READ permission to obtain sensitive information … CWE-200
Information Exposure
CVE-2014-3667 2024-11-21 11:08 2014-10-17 Show GitHub Exploit DB Packet Storm
290252 - redhat
jenkins
openshift
jenkins
Jenkins before 1.583 and LTS before 1.565.3 allows remote attackers to execute arbitrary code via a crafted packet to the CLI channel. CWE-94
Code Injection
CVE-2014-3666 2024-11-21 11:08 2014-10-17 Show GitHub Exploit DB Packet Storm
290253 - jenkins
redhat
jenkins
openshift
Jenkins before 1.583 and LTS before 1.565.3 allows remote authenticated users with the Job/CONFIGURE permission to bypass intended restrictions and create or destroy arbitrary jobs via unspecified ve… CWE-264
Permissions, Privileges, and Access Controls
CVE-2014-3663 2024-11-21 11:08 2014-10-17 Show GitHub Exploit DB Packet Storm
290254 - jenkins
redhat
jenkins
openshift
Jenkins before 1.583 and LTS before 1.565.3 allows remote attackers to enumerate user names via vectors related to login attempts. CWE-200
Information Exposure
CVE-2014-3662 2024-11-21 11:08 2014-10-17 Show GitHub Exploit DB Packet Storm
290255 - redhat
jenkins
openshift
jenkins
Jenkins before 1.583 and LTS before 1.565.3 allows remote attackers to cause a denial of service (thread consumption) via vectors related to a CLI handshake. CWE-399
 Resource Management Errors
CVE-2014-3661 2024-11-21 11:08 2014-10-17 Show GitHub Exploit DB Packet Storm
290256 - drupal
debian
drupal
debian_linux
The expandArguments function in the database abstraction API in Drupal core 7.x before 7.32 does not properly construct prepared statements, which allows remote attackers to conduct SQL injection att… CWE-89
SQL Injection
CVE-2014-3704 2024-11-21 11:08 2014-10-16 Show GitHub Exploit DB Packet Storm
290257 - w1.fi
debian
canonical
hostapd
wpa_supplicant
debian_linux
ubuntu_linux
wpa_supplicant and hostapd 0.7.2 through 2.2, when running with certain configurations and using wpa_cli or hostapd_cli with action scripts, allows remote attackers to execute arbitrary commands via … CWE-20
 Improper Input Validation 
CVE-2014-3686 2024-11-21 11:08 2014-10-16 Show GitHub Exploit DB Packet Storm
290258 - redhat
jenkins
openshift
jenkins
Cross-site scripting (XSS) vulnerability in Jenkins before 1.583 and LTS before 1.565.3 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. CWE-79
Cross-site Scripting
CVE-2014-3681 2024-11-21 11:08 2014-10-15 Show GitHub Exploit DB Packet Storm
290259 - jenkins
redhat
jenkins
openshift
Directory traversal vulnerability in Jenkins before 1.583 and LTS before 1.565.3 allows remote authenticated users with the Overall/READ permission to read arbitrary files via unspecified vectors. CWE-22
Path Traversal
CVE-2014-3664 2024-11-21 11:08 2014-10-15 Show GitHub Exploit DB Packet Storm
290260 - scientificlinux luci Eval injection vulnerability in luci 0.26.0 allows remote authenticated users with certain permissions to execute arbitrary Python code via a crafted cluster configuration. CWE-94
Code Injection
CVE-2014-3593 2024-11-21 11:08 2014-10-15 Show GitHub Exploit DB Packet Storm