Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":June 12, 2026, 12:01 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
200831	3.3	低 Local	IBM	-	IBM Integration Bus および WebSphere Message Broker における特定のファイルを操作される脆弱性	CWE-275 パーミッションの問題	CVE-2016-0394	2017-02-16 11:59	2016-11-28	Show	GitHub Exploit DB Packet Storm

200832	7.5	重要 Network	Debian cryptopp project	-	Crypto++ の ASN.1 BER デコーディングルーチンにおけるメモリブロックをゼロにされる脆弱性	CWE-20 不適切な入力確認	CVE-2016-9939	2017-02-15 17:39	2016-12-28	Show	GitHub Exploit DB Packet Storm

200833	7.5	重要 Network	cryptopp project	-	Crypto++ における不正なポインタを解放される脆弱性	CWE-399 リソース管理の問題	CVE-2016-7544	2017-02-15 17:39	2016-10-11	Show	GitHub Exploit DB Packet Storm

200834	5.4	警告 Network	IBM	-	IBM Jazz Reporting Service におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2016-6039	2017-02-15 17:36	2016-12-7	Show	GitHub Exploit DB Packet Storm

200835	5.4	警告 Network	IBM	-	IBM Jazz Foundation におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2016-6030	2017-02-15 17:36	2016-12-16	Show	GitHub Exploit DB Packet Storm

200836	4.3	警告 Network	IBM	-	IBM Jazz テクノロジーベース製品における表示権限を持たない作業項目のタイトルを閲覧される脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2016-6028	2017-02-15 17:36	2016-12-16	Show	GitHub Exploit DB Packet Storm

200837	5.4	警告 Network	IBM	-	IBM Jazz Reporting Service における HTML インジェクションの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2016-5897	2017-02-15 17:36	2016-12-7	Show	GitHub Exploit DB Packet Storm

200838	5.4	警告 Network	IBM	-	IBM Jazz Foundation におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2016-6061	2017-02-15 16:59	2016-12-16	Show	GitHub Exploit DB Packet Storm

200839	5.4	警告 Network	IBM	-	IBM Jazz Foundation におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2016-6054	2017-02-15 16:59	2016-12-6	Show	GitHub Exploit DB Packet Storm

200840	5.4	警告 Network	IBM	-	IBM Jazz Reporting Service におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2016-6047	2017-02-15 16:59	2016-12-6	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:June 12, 2026, 4:20 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
291061	-		linux oracle debian suse redhat	linux_kernel linux debian_linux linux_enterprise_desktop linux_enterprise_server linux_enterprise_real_time_extension linux_enterprise_high_availability_extension enterprise_linu…	The raw_cmd_copyin function in drivers/block/floppy.c in the Linux kernel through 3.14.3 does not properly handle error conditions during processing of an FDRAWCMD ioctl call, which allows local user…	CWE-754 Improper Check for Unusual or Exceptional Conditions	CVE-2014-1737	2024-11-21 11:04	2014-05-12	Show	GitHub Exploit DB Packet Storm

291062	-		zabbix fedoraproject	zabbix fedora	The Frontend in Zabbix before 1.8.20rc2, 2.0.x before 2.0.11rc2, and 2.2.x before 2.2.2rc1 allows remote "Zabbix Admin" users to modify the media of arbitrary users via unspecified vectors.	NVD-CWE-noinfo	CVE-2014-1685	2024-11-21 11:04	2014-05-8	Show	GitHub Exploit DB Packet Storm

291063	-		zabbix fedoraproject	zabbix fedora	The API in Zabbix before 1.8.20rc1, 2.0.x before 2.0.11rc1, and 2.2.x before 2.2.2rc1 allows remote authenticated users to spoof arbitrary users via the user name in a user.login request.	CWE-287 Improper Authentication	CVE-2014-1682	2024-11-21 11:04	2014-05-8	Show	GitHub Exploit DB Packet Storm

291064	-		google	chrome	Integer overflow in api.cc in Google V8, as used in Google Chrome before 34.0.1847.131 on Windows and OS X and before 34.0.1847.132 on Linux, allows remote attackers to cause a denial of service or p…	CWE-190 Integer Overflow or Wraparound	CVE-2014-1736	2024-11-21 11:04	2014-05-6	Show	GitHub Exploit DB Packet Storm

291065	-		coreftp	core_ftp	Core FTP Server 1.2 before build 515 allows remote authenticated users to obtain sensitive information (password for the previous user) via a USER command with a specific length, possibly related to …	CWE-119 Incorrect Access of Indexable Resource ('Range Error')	CVE-2014-1443	2024-11-21 11:04	2014-05-2	Show	GitHub Exploit DB Packet Storm

291066	-		coreftp	core_ftp	Directory traversal vulnerability in Core FTP Server 1.2 before build 515 allows remote authenticated users to determine the existence of arbitrary files via a /../ sequence in an XCRC command.	CWE-22 Path Traversal	CVE-2014-1442	2024-11-21 11:04	2014-05-2	Show	GitHub Exploit DB Packet Storm

291067	-		coreftp	core_ftp	Core FTP Server 1.2 before build 515 allows remote attackers to cause a denial of service (reachable assertion and crash) via an AUTH SSL command with malformed data, as demonstrated by pressing the …	CWE-362 Race Condition	CVE-2014-1441	2024-11-21 11:04	2014-05-2	Show	GitHub Exploit DB Packet Storm

291068	9.8	CRITICAL Network	mozilla fedoraproject canonical debian redhat opensuse suse	thunderbird firefox firefox_esr seamonkey fedora ubuntu_linux debian_linux enterprise_linux_server enterprise_linux_server_eus enterprise_linux_workstation enterprise_li…	Use-after-free vulnerability in the nsHostResolver::ConditionallyRefreshRecord function in libxul.so in Mozilla Firefox before 29.0, Firefox ESR 24.x before 24.5, Thunderbird before 24.5, and SeaMonk…	CWE-416 Use After Free	CVE-2014-1532	2024-11-21 11:04	2014-04-30	Show	GitHub Exploit DB Packet Storm

291069	-		canonical opensuse_project opensuse oracle mozilla fedoraproject	ubuntu_linux opensuse solaris firefox seamonkey fedora	The sse2_composite_src_x888_8888 function in Pixman, as used in Cairo in Mozilla Firefox 28.0 and SeaMonkey 2.25 on Windows, allows remote attackers to execute arbitrary code or cause a denial of ser…	CWE-119 Incorrect Access of Indexable Resource ('Range Error')	CVE-2014-1528	2024-11-21 11:04	2014-04-30	Show	GitHub Exploit DB Packet Storm

291070	-		fedoraproject mozilla oracle	fedora firefox solaris	Mozilla Firefox before 29.0 on Android allows remote attackers to spoof the address bar via crafted JavaScript code that uses DOM events to prevent the reemergence of the actual address bar after scr…	NVD-CWE-noinfo	CVE-2014-1527	2024-11-21 11:04	2014-04-30	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed