Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 16, 2026, 2:07 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
200641 7.5 重要
Network
Linux - Linux Kernel の net/ipv4/tcp.c の tcp_splice_read 関数におけるサービス運用妨害 (DoS) の脆弱性 CWE-399
リソース管理の問題
CVE-2017-6214 2017-03-13 15:53 2017-02-18 Show GitHub Exploit DB Packet Storm
200642 7.8 重要
Local
Linux - Linux Kernel の ipc/shm.c の do_shmat 関数におけるゼロページをマップされる脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2017-5669 2017-03-13 15:53 2017-02-8 Show GitHub Exploit DB Packet Storm
200643 8.8 重要
Local
シスコシステムズ - Cisco UCS Director の Web ベースの GUI における権限を昇格される脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2017-3801 2017-03-13 15:49 2017-02-15 Show GitHub Exploit DB Packet Storm
200644 8.8 重要
Network
Smartlink Network Systems Ltd. - DIGISOL DG-HR1400 Wireless Router のファームウェアのアクセスポータルにおけるクロスサイトリクエストフォージェリの脆弱性 CWE-352
同一生成元ポリシー違反
CVE-2017-6127 2017-03-13 15:49 2017-02-23 Show GitHub Exploit DB Packet Storm
200645 6.7 警告
Local
VCE Company, LLC. - VCE Vision Intelligent Operations の System Library における認証情報を取得される脆弱性 CWE-310
暗号の問題
CVE-2015-4056 2017-03-13 15:48 2015-06-17 Show GitHub Exploit DB Packet Storm
200646 5.4 警告
Network
トレンドマイクロ - Trend Micro InterScan Web Security Virtual Appliance における格納型クロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2016-9316 2017-03-13 15:38 2016-11-14 Show GitHub Exploit DB Packet Storm
200647 7.8 重要
Local
トレンドマイクロ - Trend Micro InterScan Web Security Virtual Appliance における重要な情報を公開される脆弱性 CWE-200
情報漏えい
CVE-2016-9314 2017-03-13 15:38 2016-11-14 Show GitHub Exploit DB Packet Storm
200648 9.9 緊急
Network
トレンドマイクロ - Trend Micro Interscan Web Security Virtual Appliance におけるリモートでコマンドを実行される脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2016-9269 2017-03-13 15:38 2016-11-10 Show GitHub Exploit DB Packet Storm
200649 9.8 緊急
Network
デル - Dell SonicWALL Secure Remote Access サーバの Web 管理インターフェースにおけるリモートコマンドインジェクションの脆弱性 CWE-77
コマンドインジェクション
CVE-2016-9684 2017-03-13 15:37 2016-11-30 Show GitHub Exploit DB Packet Storm
200650 9.8 緊急
Network
デル - Dell SonicWALL Secure Remote Access サーバの Web 管理インターフェースにおけるリモートコマンドインジェクションの脆弱性 CWE-77
コマンドインジェクション
CVE-2016-9683 2017-03-13 15:37 2016-11-30 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 16, 2026, 4:13 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
291091 - cybozu garoon Cross-site scripting (XSS) vulnerability in the Notices portlet in Cybozu Garoon 2.x and 3.x before 3.7 SP4 allows remote authenticated users to inject arbitrary web script or HTML via unspecified ve… CWE-79
Cross-site Scripting
CVE-2014-1994 2024-11-21 11:05 2014-07-20 Show GitHub Exploit DB Packet Storm
291092 - cybozu garoon The Portlets subsystem in Cybozu Garoon 2.x and 3.x before 3.7 SP4 allows remote authenticated users to bypass intended access restrictions via unspecified vectors. CWE-264
Permissions, Privileges, and Access Controls
CVE-2014-1993 2024-11-21 11:05 2014-07-20 Show GitHub Exploit DB Packet Storm
291093 - cybozu garoon Cross-site scripting (XSS) vulnerability in the Messages functionality in Cybozu Garoon 3.1.x, 3.5.x, and 3.7.x before 3.7 SP4 allows remote authenticated users to inject arbitrary web script or HTML… CWE-79
Cross-site Scripting
CVE-2014-1992 2024-11-21 11:05 2014-07-20 Show GitHub Exploit DB Packet Storm
291094 - cybozu garoon The CGI component in Cybozu Garoon 3.1.0 through 3.7 SP3 allows remote attackers to execute arbitrary commands via unspecified vectors. CWE-78
OS Command 
CVE-2014-1987 2024-11-21 11:05 2014-07-20 Show GitHub Exploit DB Packet Storm
291095 - nextapp file_explorer Directory traversal vulnerability in the NextApp File Explorer application before 2.1.0.3 for Android allows remote attackers to overwrite or create arbitrary files via a crafted filename. CWE-22
Path Traversal
CVE-2014-1973 2024-11-21 11:05 2014-07-20 Show GitHub Exploit DB Packet Storm
291096 - microsoft windows_server_2008
windows_server_2012
windows_rt
windows_7
windows_8.1
windows_rt_8.1
windows_vista
windows_8
Windows Journal in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, and Windows RT Gold and 8.1 allows remote a… CWE-94
Code Injection
CVE-2014-1824 2024-11-21 11:05 2014-07-9 Show GitHub Exploit DB Packet Storm
291097 - cisco unified_communications_domain_manager
unified_cdm_platform_software
Cisco Unified Communications Domain Manager (CDM) in Unified CDM Platform Software before 4.4.2 has a hardcoded SSH private key, which makes it easier for remote attackers to obtain access to the sup… CWE-255
Credentials Management
CVE-2014-2198 2024-11-21 11:05 2014-07-7 Show GitHub Exploit DB Packet Storm
291098 - cisco unified_communications_domain_manager
unified_cdm_application_software
The Administration GUI in the web framework in Cisco Unified Communications Domain Manager (CDM) in Unified CDM Application Software before 8.1.4 does not properly implement access control, which all… CWE-264
Permissions, Privileges, and Access Controls
CVE-2014-2197 2024-11-21 11:05 2014-07-7 Show GitHub Exploit DB Packet Storm
291099 - intercom web_kyukincho Cross-site scripting (XSS) vulnerability in Intercom Web Kyukincho 3.x before 3.0.030 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. CWE-79
Cross-site Scripting
CVE-2014-2006 2024-11-21 11:05 2014-06-28 Show GitHub Exploit DB Packet Storm
291100 6.8 MEDIUM
Physics
sophos enterprise_console Sophos Disk Encryption (SDE) 5.x in Sophos Enterprise Console (SEC) 5.x before 5.2.2 does not enforce intended authentication requirements for a resume action from sleep mode, which allows physically… CWE-287
Improper Authentication
CVE-2014-2005 2024-11-21 11:05 2014-06-25 Show GitHub Exploit DB Packet Storm