Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 25, 2026, 10:01 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
200751 6.5 警告
Network 		アップル - 複数の Apple 製品で使用される WebKit における同一生成元ポリシーを回避される脆弱性 CWE-284
不適切なアクセス制御 		CVE-2017-2367 2017-04-12 13:50 2017-03-27 Show GitHub Exploit DB Packet Storm
200752 7.5 重要
Network 		WordPress.org - WordPress の REST API の wp-includes/rest-api/endpoints/class-wp-rest-posts-controller.php における任意のページを変更される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2017-1001000 2017-04-12 13:44 2017-01-26 Show GitHub Exploit DB Packet Storm
200753 9.8 緊急
Network 		Debian
libevent_project		 - libevent の evdns.c の name_parse 関数における脆弱性 CWE-125
境界外読み取り 		CVE-2016-10195 2017-04-12 10:39 2016-07-4 Show GitHub Exploit DB Packet Storm
200754 7.5 重要
Network 		Debian
libevent_project		 - libevent の evdns.c 内の search_make_new 関数におけるサービス運用妨害 (DoS) の脆弱性 CWE-125
境界外読み取り 		CVE-2016-10197 2017-04-11 19:52 2016-07-4 Show GitHub Exploit DB Packet Storm
200755 7.5 重要
Network 		Debian
libevent_project		 - libevent の evutil.c 内の evutil_parse_sockaddr_port 関数におけるスタックベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2016-10196 2017-04-11 19:51 2016-07-4 Show GitHub Exploit DB Packet Storm
200756 6.5 警告
Local 		virglrenderer project - virglrenderer の vrend_decode.c 内の vrend_renderer_context_create_internal 関数におけるサービス運用妨害 (DoS) の脆弱性 CWE-399
リソース管理の問題 		CVE-2016-10163 2017-04-11 19:51 2016-12-27 Show GitHub Exploit DB Packet Storm
200757 7.8 重要
Local 		68k.org - audiofile の FileHandle.cpp の readValue 関数におけるヒープベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2017-6828 2017-04-11 19:50 2017-02-20 Show GitHub Exploit DB Packet Storm
200758 7.8 重要
Local 		68k.org - audiofile の MSADPCM.cpp の MSADPCM::initializeCoefficients 関数におけるヒープベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2017-6827 2017-04-11 19:50 2017-02-20 Show GitHub Exploit DB Packet Storm
200759 9.8 緊急
Network 		AlienVault - AlienVault OSSIM および USM の session.inc のログチェック機能におけるサービス運用妨害 (DoS) の脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2016-7955 2017-04-11 19:40 2016-09-9 Show GitHub Exploit DB Packet Storm
200760 5.4 警告
Network 		Fabrice Bellard - QEMU の hw/usb/hcd-ohci.c の ohci_service_ed_list 関数におけるサービス運用妨害 (DoS) の脆弱性 CWE-20
不適切な入力確認 		CVE-2017-6505 2017-04-11 19:32 2017-02-21 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 25, 2026, 4:04 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
289581 - linux linux_kernel Integer overflow in the LZ4 algorithm implementation, as used in Yann Collet LZ4 before r118 and in the lz4_uncompress function in lib/lz4/lz4_decompress.c in the Linux kernel before 3.15.2, on 32-bi… CWE-20
 Improper Input Validation  		CVE-2014-4611 2024-11-21 11:10 2014-07-3 Show GitHub Exploit DB Packet Storm
289582 - linux
suse
opensuse
canonical 		linux_kernel
linux_enterprise_real_time_extension
opensuse
linux_enterprise_server
ubuntu_linux 		Multiple integer overflows in the lzo1x_decompress_safe function in lib/lzo/lzo1x_decompress_safe.c in the LZO decompressor in the Linux kernel before 3.15.2 allow context-dependent attackers to caus… CWE-190
 Integer Overflow or Wraparound 		CVE-2014-4608 2024-11-21 11:10 2014-07-3 Show GitHub Exploit DB Packet Storm
289583 - piwigo piwigo Multiple cross-site request forgery (CSRF) vulnerabilities in Piwigo before 2.6.2 allow remote attackers to hijack the authentication of administrators for requests that use the (1) pwg.groups.addUse… CWE-352
 Origin Validation Error 		CVE-2014-4614 2024-11-21 11:10 2014-07-3 Show GitHub Exploit DB Packet Storm
289584 - zeenshare_project zeenshare Cross-site scripting (XSS) vulnerability in redirect_to_zeenshare.php in the ZeenShare plugin 1.0.1 and earlier for WordPress allows remote attackers to inject arbitrary web script or HTML via the zs… CWE-79
Cross-site Scripting 		CVE-2014-4606 2024-11-21 11:10 2014-07-3 Show GitHub Exploit DB Packet Storm
289585 - wp_social_invitations_project wp_social_invitations Cross-site scripting (XSS) vulnerability in test.php in the WP Social Invitations plugin before 1.4.4.3 for WordPress allows remote attackers to inject arbitrary web script or HTML via the xhrurl par… CWE-79
Cross-site Scripting 		CVE-2014-4597 2024-11-21 11:10 2014-07-3 Show GitHub Exploit DB Packet Storm
289586 - wp_picasa_image_project wp_picasa_image Cross-site scripting (XSS) vulnerability in picasa_upload.php in the WP-Picasa-Image plugin 1.0 and earlier for WordPress allows remote attackers to inject arbitrary web script or HTML via the post_i… CWE-79
Cross-site Scripting 		CVE-2014-4591 2024-11-21 11:10 2014-07-3 Show GitHub Exploit DB Packet Storm
289587 - wpcb_project wpcb Cross-site scripting (XSS) vulnerability in facture.php in the WPCB plugin 2.4.8 and earlier for WordPress allows remote attackers to inject arbitrary web script or HTML via the id parameter. CWE-79
Cross-site Scripting 		CVE-2014-4581 2024-11-21 11:10 2014-07-3 Show GitHub Exploit DB Packet Storm
289588 - vn-calendar_project vn-calendar Multiple cross-site scripting (XSS) vulnerabilities in vncal.js.php in the VN-Calendar plugin 1.0 and earlier for WordPress allow remote attackers to inject arbitrary web script or HTML via the (1) f… CWE-79
Cross-site Scripting 		CVE-2014-4571 2024-11-21 11:10 2014-07-3 Show GitHub Exploit DB Packet Storm
289589 - verification_code_for_comments_project verification_code_for_comments Multiple cross-site scripting (XSS) vulnerabilities in vcc.js.php in the Verification Code for Comments plugin 2.1.0 and earlier for WordPress allow remote attackers to inject arbitrary web script or… CWE-79
Cross-site Scripting 		CVE-2014-4565 2024-11-21 11:10 2014-07-3 Show GitHub Exploit DB Packet Storm
289590 - url_cloak_\&_encrypt_project url_cloak_\&_encrypt Cross-site scripting (XSS) vulnerability in go.php in the URL Cloak & Encrypt (url-cloak-encrypt) plugin 2.0 and earlier for WordPress allows remote attackers to inject arbitrary web script or HTML v… CWE-79
Cross-site Scripting 		CVE-2014-4563 2024-11-21 11:10 2014-07-3 Show GitHub Exploit DB Packet Storm