Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 20, 2026, 6 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
200761 7.5 重要
Network
PEAR - PEAR Base System のインストーラのダウンロードユーティリティクラスの PECL におけるファイルを上書きされる脆弱性 CWE-254
セキュリティ機能
CVE-2017-5630 2017-03-15 17:49 2017-01-26 Show GitHub Exploit DB Packet Storm
200762 5.9 警告
Network
Square, Inc. - OkHttp における証明書ピン留めを回避される脆弱性 CWE-295
不正な証明書検証
CVE-2016-2402 2017-03-15 17:34 2016-02-11 Show GitHub Exploit DB Packet Storm
200763 7.5 重要
Network
minitar - RubyGems minitar および archive-tar-minitar におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル
CVE-2016-10173 2017-03-15 17:15 2016-11-14 Show GitHub Exploit DB Packet Storm
200764 7.5 重要
Network
SAP - Windows 上で稼動する SAP GUI の SAPlpd におけるサービス運用妨害 (DoS) の脆弱性 CWE-20
不適切な入力確認
CVE-2016-10079 2017-03-15 17:09 2016-12-28 Show GitHub Exploit DB Packet Storm
200765 5.5 警告
Local
pacman project - pacman で使用される libalpm におけるサービス運用妨害 (DoS) の脆弱性 CWE-125
CWE-399
CVE-2016-5434 2017-03-15 16:57 2016-06-6 Show GitHub Exploit DB Packet Storm
200766 5.5 警告
Local
zziplib project - zziplib の seeko.c におけるサービス運用妨害 (DoS) の脆弱性 CWE-476
NULL ポインタデリファレンス
CVE-2017-5981 2017-03-15 16:56 2017-02-9 Show GitHub Exploit DB Packet Storm
200767 5.5 警告
Local
zziplib project - zziplib の memdisk.c の zzip_mem_entry_new 関数におけるサービス運用妨害 (DoS) の脆弱性 CWE-476
NULL ポインタデリファレンス
CVE-2017-5980 2017-03-15 16:56 2017-02-9 Show GitHub Exploit DB Packet Storm
200768 5.5 警告
Local
zziplib project - zziplib の fseeko.c の prescan_entry 関数におけるサービス運用妨害 (DoS) の脆弱性 CWE-476
NULL ポインタデリファレンス
CVE-2017-5979 2017-03-15 16:56 2017-02-9 Show GitHub Exploit DB Packet Storm
200769 5.5 警告
Local
zziplib project - zziplib の memdisk.c の zzip_mem_entry_extra_block 関数におけるヒープベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー
CVE-2017-5976 2017-03-15 16:56 2017-02-9 Show GitHub Exploit DB Packet Storm
200770 5.5 警告
Local
zziplib project - zziplib の fetch.c の __zzip_get64 関数におけるヒープベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー
CVE-2017-5975 2017-03-15 16:56 2017-02-9 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 20, 2026, 4:01 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
291221 - papercut papercut_mf Unspecified vulnerability in the print release functionality in PaperCut MF before 14.1 (Build 26983) has unknown impact and remote vectors, related to embedded MFPs. NVD-CWE-noinfo
CVE-2014-2657 2024-11-21 11:06 2014-04-28 Show GitHub Exploit DB Packet Storm
291222 - dompdf dompdf dompdf.php in dompdf before 0.6.1, when DOMPDF_ENABLE_PHP is enabled, allows context-dependent attackers to bypass chroot protections and read arbitrary files via a PHP protocol and wrappers in the i… CWE-200
Information Exposure
CVE-2014-2383 2024-11-21 11:06 2014-04-28 Show GitHub Exploit DB Packet Storm
291223 - net-snmp net-snmp The perl_trapd_handler function in perl/TrapReceiver/TrapReceiver.xs in Net-SNMP 5.7.3.pre3 and earlier, when using certain Perl versions, allows remote attackers to cause a denial of service (snmptr… CWE-20
 Improper Input Validation 
CVE-2014-2285 2024-11-21 11:06 2014-04-28 Show GitHub Exploit DB Packet Storm
291224 - xcloner xcloner Multiple cross-site request forgery (CSRF) vulnerabilities in XCloner Standalone 3.5 and earlier allow remote attackers to hijack the authentication of administrators for requests that (1) change the… CWE-352
 Origin Validation Error
CVE-2014-2579 2024-11-21 11:06 2014-04-26 Show GitHub Exploit DB Packet Storm
291225 - ektron ektron_content_management_system Cross-site scripting (XSS) vulnerability in content.aspx in Ektron CMS 8.7 before 8.7.0.055 allows remote authenticated users to inject arbitrary web script or HTML via the category0 parameter, which… CWE-79
Cross-site Scripting
CVE-2014-2729 2024-11-21 11:06 2014-04-25 Show GitHub Exploit DB Packet Storm
291226 - ruby-lang ruby The openssl extension in Ruby 2.x does not properly maintain the state of process memory after a file is reopened, which allows remote attackers to spoof signatures within the context of a Ruby scrip… CWE-399
 Resource Management Errors
CVE-2014-2734 2024-11-21 11:06 2014-04-25 Show GitHub Exploit DB Packet Storm
291227 - hp integrated_lights-out_2_firmware The server in HP Integrated Lights-Out 2 (aka iLO 2) 2.23 and earlier allows remote attackers to cause a denial of service via crafted HTTPS traffic, as demonstrated by traffic from a CVE-2014-0160 v… NVD-CWE-noinfo
CVE-2014-2601 2024-11-21 11:06 2014-04-25 Show GitHub Exploit DB Packet Storm
291228 - modx modx_revolution Multiple SQL injection vulnerabilities in MODX Revolution before 2.2.14 allow remote attackers to execute arbitrary SQL commands via the (1) session ID (PHPSESSID) to index.php or remote authenticate… CWE-89
SQL Injection
CVE-2014-2736 2024-11-21 11:06 2014-04-24 Show GitHub Exploit DB Packet Storm
291229 - open-xchange open-xchange_appsuite Cross-site scripting (XSS) vulnerability in Open-Xchange AppSuite 7.4.1 before 7.4.1-rev11 and 7.4.2 before 7.4.2-rev13 allows remote attackers to inject arbitrary web script or HTML via a Drive file… CWE-79
Cross-site Scripting
CVE-2014-2393 2024-11-21 11:06 2014-04-24 Show GitHub Exploit DB Packet Storm
291230 - open-xchange open-xchange_appsuite The E-Mail autoconfiguration feature in Open-Xchange AppSuite before 7.2.2-rev20, 7.4.1 before 7.4.1-rev11, and 7.4.2 before 7.4.2-rev13 places a password in a GET request, which allows remote attack… CWE-200
Information Exposure
CVE-2014-2392 2024-11-21 11:06 2014-04-24 Show GitHub Exploit DB Packet Storm