Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 16, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
200871 7.5 重要
Network 		libarchive
openSUSE project		 - libarchive の tar/util.c の safe_fprintf 関数におけるスタックベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2016-8687 2017-03-6 17:30 2016-08-22 Show GitHub Exploit DB Packet Storm
200872 5.5 警告
Local 		Libav - Libav の aac_parser.c の aac_sync 関数におけるスタックベースのバッファオーバーフローの脆弱性 CWE-125
境界外読み取り 		CVE-2016-7393 2017-03-6 17:05 2016-08-20 Show GitHub Exploit DB Packet Storm
200873 5.5 警告
Local 		Libav - Libav の aacsbr.c の sbr_make_f_master 関数におけるサービス運用妨害 (DoS) の脆弱性 CWE-369
ゼロ除算 		CVE-2016-7499 2017-03-6 17:01 2016-09-21 Show GitHub Exploit DB Packet Storm
200874 5.5 警告
Local 		Libav - Libav の get_bits.h の get_vlc2 関数におけるサービス運用妨害 (DoS) の脆弱性 CWE-476
NULL ポインタデリファレンス 		CVE-2016-8676 2017-03-6 16:55 2016-10-15 Show GitHub Exploit DB Packet Storm
200875 5.5 警告
Local 		Libav - Libav の get_bits.h の get_vlc2 関数におけるサービス運用妨害 (DoS) の脆弱性 CWE-476
NULL ポインタデリファレンス 		CVE-2016-8675 2017-03-6 16:55 2016-10-15 Show GitHub Exploit DB Packet Storm
200876 5.5 警告
Local 		Libav - Libav の rnd_template.c の ff_put_pixels8_xy2_mmx 関数におけるサービス運用妨害 (DoS) の脆弱性 CWE-476
NULL ポインタデリファレンス 		CVE-2016-7477 2017-03-6 16:55 2016-09-20 Show GitHub Exploit DB Packet Storm
200877 7.8 重要
Local 		Debian
openSUSE project
GraphicsMagick		 - GraphicsMagick の magick/memory.c の MagickMalloc 関数における脆弱性 CWE-119
バッファエラー 		CVE-2016-8684 2017-03-6 16:50 2016-09-10 Show GitHub Exploit DB Packet Storm
200878 7.8 重要
Local 		Debian
openSUSE project
GraphicsMagick		 - GraphicsMagick の coders/pcx.c の ReadPCXImage 関数における脆弱性 CWE-119
バッファエラー 		CVE-2016-8683 2017-03-6 16:50 2016-09-10 Show GitHub Exploit DB Packet Storm
200879 7.5 重要
Network 		Debian
openSUSE project
GraphicsMagick		 - GraphicsMagick の coders/sct.c の ReadSCTImage 関数におけるサービス運用妨害 (DoS) の脆弱性 CWE-125
境界外読み取り 		CVE-2016-8682 2017-03-6 16:50 2016-09-10 Show GitHub Exploit DB Packet Storm
200880 6.1 警告
Network 		WSO2 - WSO2 SOA Enablement Server for Java におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2016-4327 2017-03-6 16:32 2016-04-8 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 16, 2026, 4:13 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
290471 - unitrends enterprise_backup Unitrends Enterprise Backup 7.3.0 allows remote authenticated users to execute arbitrary commands via shell metacharacters in the comm parameter to recoveryconsole/bpl/snmpd.php. CWE-78
OS Command  		CVE-2014-3008 2024-11-21 11:07 2014-04-28 Show GitHub Exploit DB Packet Storm
290472 - xen xen The vgic_distr_mmio_write function in the virtual guest interrupt controller (GIC) distributor (arch/arm/vgic.c) in Xen 4.4.x, when running on an ARM system, allows local guest users to cause a denia… CWE-20
 Improper Input Validation  		CVE-2014-2986 2024-11-21 11:07 2014-04-28 Show GitHub Exploit DB Packet Storm
290473 - gnustep base Tools/gdomap.c in gdomap in GNUstep Base 1.24.6 and earlier, when run in daemon mode, does not properly handle the file descriptor for the logger, which allows remote attackers to cause a denial of s… CWE-20
 Improper Input Validation  		CVE-2014-2980 2024-11-21 11:07 2014-04-28 Show GitHub Exploit DB Packet Storm
290474 - westerndigital arkeia_virtual_appliance_firmware Directory traversal vulnerability in opt/arkeia/wui/htdocs/index.php in the WD Arkeia virtual appliance (AVA) with firmware before 10.2.9 allows remote attackers to read arbitrary files and execute a… CWE-22
Path Traversal 		CVE-2014-2846 2024-11-21 11:07 2014-04-28 Show GitHub Exploit DB Packet Storm
290475 - pythonware
python 		python_imaging_library
pillow 		Python Image Library (PIL) 1.1.7 and earlier and Pillow 2.3 might allow remote attackers to execute arbitrary commands via shell metacharacters in unspecified vectors related to CVE-2014-1932, possib… CWE-78
OS Command  		CVE-2014-3007 2024-11-21 11:07 2014-04-28 Show GitHub Exploit DB Packet Storm
290476 - acunetix web_vulnerability_scanner Stack-based buffer overflow in Acunetix Web Vulnerability Scanner (WVS) 8 build 20120704 allows remote attackers to execute arbitrary code via an HTML file containing an IMG element with a long URL (… CWE-119
Incorrect Access of Indexable Resource ('Range Error')  		CVE-2014-2994 2024-11-21 11:07 2014-04-27 Show GitHub Exploit DB Packet Storm
290477 - linux linux_kernel Off-by-one error in the bpf_jit_compile function in arch/x86/net/bpf_jit_comp.c in the Linux kernel before 3.1.8, when BPF JIT is enabled, allows local users to cause a denial of service (system cras… CWE-189
Numeric Errors 		CVE-2014-2889 2024-11-21 11:07 2014-04-27 Show GitHub Exploit DB Packet Storm
290478 - birebin birebin.com_app The Birebin.com application for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted c… CWE-310
Cryptographic Issues 		CVE-2014-2993 2024-11-21 11:07 2014-04-26 Show GitHub Exploit DB Packet Storm
290479 - misli misli.com_app The Misli.com application for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted cer… CWE-310
Cryptographic Issues 		CVE-2014-2992 2024-11-21 11:07 2014-04-26 Show GitHub Exploit DB Packet Storm
290480 - xcloner xcloner XCloner Standalone 3.5 and earlier, when enable_db_backup and sql_mem are enabled, allows remote authenticated administrators to execute arbitrary commands via shell metacharacters in the dbbackup_co… CWE-94
Code Injection 		CVE-2014-2996 2024-11-21 11:07 2014-04-26 Show GitHub Exploit DB Packet Storm