Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 18, 2026, 6 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
200961 8.8 重要
Network
Simple Machines - Simple Machines Forum の LogInOut.php における PHP オブジェクトインジェクション攻撃を実行される脆弱性 CWE-94
コード・インジェクション
CVE-2016-5727 2017-03-9 17:39 2016-06-13 Show GitHub Exploit DB Packet Storm
200962 9.8 緊急
Network
Simple Machines - Simple Machines Forum の Packages.php における PHP オブジェクトインジェクション攻撃を実行される脆弱性 CWE-94
コード・インジェクション
CVE-2016-5726 2017-03-9 17:39 2016-06-10 Show GitHub Exploit DB Packet Storm
200963 6.1 警告
Network
html5lib - html5lib のシリアライザにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2016-9910 2017-03-9 17:34 2016-07-14 Show GitHub Exploit DB Packet Storm
200964 6.1 警告
Network
html5lib - html5lib のシリアライザにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2016-9909 2017-03-9 17:34 2016-07-14 Show GitHub Exploit DB Packet Storm
200965 8.8 重要
Network
IBM - IBM Tivoli Storage Manager for Virtual Environments におけるクロスサイトリクエストフォージェリの脆弱性 CWE-352
同一生成元ポリシー違反
CVE-2016-6033 2017-03-9 17:14 2016-12-14 Show GitHub Exploit DB Packet Storm
200966 9.8 緊急
Network
IBM - IBM Websphere MQ JMS クライアントにおける任意の Java コードを実行される脆弱性 CWE-502
信頼性のないデータのデシリアライゼーション
CVE-2016-0360 2017-03-9 17:14 2017-01-6 Show GitHub Exploit DB Packet Storm
200967 6.1 警告
Network
IBM - IBM Resilient におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2016-6062 2017-03-9 16:56 2016-11-10 Show GitHub Exploit DB Packet Storm
200968 7.5 重要
Network
IBM - IBM Security Access Manager における重要な情報を解読される脆弱性 CWE-326
不適切な暗号強度
CVE-2016-5919 2017-03-9 16:56 2016-06-29 Show GitHub Exploit DB Packet Storm
200969 7.8 重要
Local
Debian
GraphicsMagick
- GraphicsMagick の MagickCore/memory.c の AcquireMagickMemory 関数における脆弱性 CWE-119
バッファエラー
CVE-2016-8862 2017-03-9 16:51 2016-09-14 Show GitHub Exploit DB Packet Storm
200970 5.5 警告
Local
ImageMagick - ImageMagick の MagickCore/pixel-accessor.h の IsPixelMonochrome 関数におけるサービス運用妨害 (DoS) の脆弱性 CWE-125
境界外読み取り
CVE-2016-8678 2017-03-9 16:51 2016-09-14 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 19, 2026, 4:01 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
291921 - mozilla thunderbird
firefox
Mozilla Firefox before 31.0 and Thunderbird before 31.0 do not properly implement the sandbox attribute of the IFRAME element, which allows remote attackers to bypass intended restrictions on same-or… CWE-264
Permissions, Privileges, and Access Controls
CVE-2014-1552 2024-11-21 11:04 2014-07-23 Show GitHub Exploit DB Packet Storm
291922 - mozilla firefox
firefox_esr
thunderbird
Use-after-free vulnerability in the FontTableRec destructor in Mozilla Firefox before 31.0, Firefox ESR 24.x before 24.7, and Thunderbird before 24.7 on Windows allows remote attackers to execute arb… NVD-CWE-Other
CVE-2014-1551 2024-11-21 11:04 2014-07-23 Show GitHub Exploit DB Packet Storm
291923 - mozilla thunderbird
firefox
Use-after-free vulnerability in the MediaInputPort class in Mozilla Firefox before 31.0 and Thunderbird before 31.0 allows remote attackers to execute arbitrary code or cause a denial of service (hea… NVD-CWE-Other
CVE-2014-1550 2024-11-21 11:04 2014-07-23 Show GitHub Exploit DB Packet Storm
291924 - mozilla thunderbird
firefox
The mozilla::dom::AudioBufferSourceNodeEngine::CopyFromInputBuffer function in Mozilla Firefox before 31.0 and Thunderbird before 31.0 does not properly allocate Web Audio buffer memory, which allows… CWE-119
Incorrect Access of Indexable Resource ('Range Error') 
CVE-2014-1549 2024-11-21 11:04 2014-07-23 Show GitHub Exploit DB Packet Storm
291925 - mozilla thunderbird
firefox
Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 31.0 and Thunderbird before 31.0 allow remote attackers to cause a denial of service (memory corruption and applic… NVD-CWE-noinfo
CVE-2014-1548 2024-11-21 11:04 2014-07-23 Show GitHub Exploit DB Packet Storm
291926 - mozilla firefox_esr
thunderbird
firefox
Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 31.0, Firefox ESR 24.x before 24.7, and Thunderbird before 24.7 allow remote attackers to cause a denial of servic… NVD-CWE-noinfo
CVE-2014-1547 2024-11-21 11:04 2014-07-23 Show GitHub Exploit DB Packet Storm
291927 - mozilla network_security_services
firefox_esr
thunderbird
firefox
Use-after-free vulnerability in the CERT_DestroyCertificate function in libnss3.so in Mozilla Network Security Services (NSS) 3.x, as used in Firefox before 31.0, Firefox ESR 24.x before 24.7, and Th… NVD-CWE-Other
CVE-2014-1544 2024-11-21 11:04 2014-07-23 Show GitHub Exploit DB Packet Storm
291928 - bestpractical
email\
rt
\
Algorithmic complexity vulnerability in Email::Address::List before 0.02, as used in RT 4.2.0 through 4.2.2, allows remote attackers to cause a denial of service (CPU consumption) via a string withou… CWE-189
Numeric Errors
CVE-2014-1474 2024-11-21 11:04 2014-07-15 Show GitHub Exploit DB Packet Storm
291929 - microsoft windows_server_2012
windows_rt
windows_7
windows_8.1
windows_server_2008
windows_server_2003
windows_rt_8.1
windows_vista
windows_8
Double free vulnerability in the Ancillary Function Driver (AFD) in afd.sys in the kernel-mode drivers in Microsoft Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Win… CWE-415
 Double Free
CVE-2014-1767 2024-11-21 11:04 2014-07-9 Show GitHub Exploit DB Packet Storm
291930 - apple tvos Apple TV before 6.1.2 allows remote authenticated users to bypass an intended password requirement for iTunes Store purchase transactions via unspecified vectors. CWE-264
Permissions, Privileges, and Access Controls
CVE-2014-1383 2024-11-21 11:04 2014-07-1 Show GitHub Exploit DB Packet Storm