Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 14, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
200961 7.3 重要
Local 		IBM - IBM Security AppScan Enterprise エディションにおけるシステム上で任意のコードを実行される脆弱性 CWE-119
バッファエラー 		CVE-2016-6042 2017-02-22 11:56 2016-12-6 Show GitHub Exploit DB Packet Storm
200962 6.1 警告
Network 		IBM - IBM Sterling B2B Integrator Standard Edition におけるオープンリダイレクトの脆弱性 CWE-601
オープンリダイレクト 		CVE-2016-6020 2017-02-22 11:55 2016-12-21 Show GitHub Exploit DB Packet Storm
200963 5.4 警告
Network 		IBM - IBM TRIRIGA Application Platform におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2016-5980 2017-02-22 11:54 2016-10-17 Show GitHub Exploit DB Packet Storm
200964 5.5 警告
Local 		IBM - IBM BigFix Inventory におけるユーザの認証情報を読まれる脆弱性 CWE-255
証明書・パスワード管理 		CVE-2016-8967 2017-02-22 11:35 2016-10-25 Show GitHub Exploit DB Packet Storm
200965 5.4 警告
Network 		IBM - IBM WebSphere Application Server におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2016-8934 2017-02-22 11:30 2016-12-5 Show GitHub Exploit DB Packet Storm
200966 5.9 警告
Network 		IBM - IBM Integration Bus 有効な資格情報を提供せずに認証される脆弱性 CWE-255
証明書・パスワード管理 		CVE-2016-8918 2017-02-22 11:28 2016-12-2 Show GitHub Exploit DB Packet Storm
200967 5.4 警告
Network 		IBM - IBM Maximo Asset Management におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2016-6072 2017-02-22 11:27 2016-10-31 Show GitHub Exploit DB Packet Storm
200968 6.5 警告
Network 		IBM - IBM Kenexa LCMS Premier on Cloud における認証情報を読まれる脆弱性 CWE-255
証明書・パスワード管理 		CVE-2016-5950 2017-02-22 11:25 2016-06-29 Show GitHub Exploit DB Packet Storm
200969 4.3 警告
Network 		IBM - IBM Kenexa LCMS Premier on Cloud における重要なユーザデータを取得される脆弱性 CWE-254
セキュリティ機能 		CVE-2016-5949 2017-02-22 11:25 2016-10-12 Show GitHub Exploit DB Packet Storm
200970 5.4 警告
Network 		IBM - IBM Kenexa LCMS Premier on Cloud におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2016-5948 2017-02-22 11:25 2016-06-29 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 14, 2026, 4:12 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
291381 - bestpractical
email\ 		rt
\ 		Algorithmic complexity vulnerability in Email::Address::List before 0.02, as used in RT 4.2.0 through 4.2.2, allows remote attackers to cause a denial of service (CPU consumption) via a string withou… CWE-189
Numeric Errors 		CVE-2014-1474 2024-11-21 11:04 2014-07-15 Show GitHub Exploit DB Packet Storm
291382 - microsoft windows_server_2012
windows_rt
windows_7
windows_8.1
windows_server_2008
windows_server_2003
windows_rt_8.1
windows_vista
windows_8 		Double free vulnerability in the Ancillary Function Driver (AFD) in afd.sys in the kernel-mode drivers in Microsoft Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Win… CWE-415
 Double Free 		CVE-2014-1767 2024-11-21 11:04 2014-07-9 Show GitHub Exploit DB Packet Storm
291383 - apple tvos Apple TV before 6.1.2 allows remote authenticated users to bypass an intended password requirement for iTunes Store purchase transactions via unspecified vectors. CWE-264
Permissions, Privileges, and Access Controls 		CVE-2014-1383 2024-11-21 11:04 2014-07-1 Show GitHub Exploit DB Packet Storm
291384 - apple safari
tvos
iphone_os 		WebKit, as used in Apple iOS before 7.1.2, Apple Safari before 6.1.5 and 7.x before 7.0.5, and Apple TV before 6.1.2, allows remote attackers to execute arbitrary code or cause a denial of service (m… CWE-119
Incorrect Access of Indexable Resource ('Range Error')  		CVE-2014-1382 2024-11-21 11:04 2014-07-1 Show GitHub Exploit DB Packet Storm
291385 - apple mac_os_x Thunderbolt in Apple OS X before 10.9.4 does not properly restrict IOThunderBoltController API calls, which allows attackers to execute arbitrary code or cause a denial of service (out-of-bounds memo… CWE-264
Permissions, Privileges, and Access Controls 		CVE-2014-1381 2024-11-21 11:04 2014-07-1 Show GitHub Exploit DB Packet Storm
291386 - apple mac_os_x The Security - Keychain component in Apple OS X before 10.9.4 does not properly implement keystroke observers, which allows physically proximate attackers to bypass the screen-lock protection mechani… CWE-264
Permissions, Privileges, and Access Controls 		CVE-2014-1380 2024-11-21 11:04 2014-07-1 Show GitHub Exploit DB Packet Storm
291387 - apple mac_os_x Graphics Drivers in Apple OS X before 10.9.4 allows attackers to gain privileges or cause a denial of service (NULL pointer dereference and system crash) via a 32-bit executable file for a crafted ap… NVD-CWE-Other
CVE-2014-1379 2024-11-21 11:04 2014-07-1 Show GitHub Exploit DB Packet Storm
291388 - apple mac_os_x IOGraphicsFamily in Apple OS X before 10.9.4 allows local users to bypass the ASLR protection mechanism by leveraging read access to a kernel pointer in an IOKit object. CWE-264
Permissions, Privileges, and Access Controls 		CVE-2014-1378 2024-11-21 11:04 2014-07-1 Show GitHub Exploit DB Packet Storm
291389 - apple mac_os_x Array index error in IOAcceleratorFamily in Apple OS X before 10.9.4 allows attackers to execute arbitrary code via a crafted application. NVD-CWE-Other
CVE-2014-1377 2024-11-21 11:04 2014-07-1 Show GitHub Exploit DB Packet Storm
291390 - apple mac_os_x Intel Compute in Apple OS X before 10.9.4 does not properly restrict an unspecified OpenCL API call, which allows attackers to execute arbitrary code via a crafted application. CWE-264
Permissions, Privileges, and Access Controls 		CVE-2014-1376 2024-11-21 11:04 2014-07-1 Show GitHub Exploit DB Packet Storm