Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 9, 2026, 6 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
200981 7.1 重要
Network
WordPress.org - WordPress の wp-admin/includes/ajax-actions.php の wp_ajax_update_plugin 関数におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル
CVE-2016-6896 2017-02-1 10:37 2016-08-20 Show GitHub Exploit DB Packet Storm
200982 4.3 警告
Network
WordPress.org - WordPress の wp-admin/includes/ajax-actions.php の wp_ajax_update_plugin 関数における読み取りアクセス制限を回避される脆弱性 CWE-254
CWE-284
CVE-2016-10148 2017-02-1 10:37 2016-07-27 Show GitHub Exploit DB Packet Storm
200983 4 警告
Local
Info-ZIP - Info-Zip UnZip の zipinfo.c の zi_short 関数におけるバッファオーバーフローの脆弱性 CWE-119
バッファエラー
CVE-2016-9844 2017-01-31 18:23 2016-12-2 Show GitHub Exploit DB Packet Storm
200984 5.5 警告
Local
Linux - Linux Kernel の crypto/mcryptd.c におけるサービス運用妨害 (DoS) の脆弱性 CWE-476
NULL ポインタデリファレンス
CVE-2016-10147 2017-01-31 18:16 2016-12-15 Show GitHub Exploit DB Packet Storm
200985 7.5 重要
Network
Artifex Software - Artifex Software MuJS におけるサービス運用妨害 (DoS) の脆弱性 CWE-125
境界外読み取り
CVE-2016-9109 2017-01-31 18:06 2016-09-20 Show GitHub Exploit DB Packet Storm
200986 7.5 重要
Network
Artifex Software - Artifex Software MuJS の jsfunction.c の Fp_toString 関数におけるヒープベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー
CVE-2016-7564 2017-01-31 18:06 2016-09-20 Show GitHub Exploit DB Packet Storm
200987 7.5 重要
Network
Artifex Software - Artifex Software MuJS の chartorune 関数におけるサービス運用妨害 (DoS) の脆弱性 CWE-125
境界外読み取り
CVE-2016-7563 2017-01-31 18:06 2016-09-20 Show GitHub Exploit DB Packet Storm
200988 8.1 重要
Network
CA Technologies - CA Service Desk Manager および CA Service Desk Management の RESTful Web サービスにおけるタスク情報を読まれる脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2016-10086 2017-01-31 18:02 2016-12-30 Show GitHub Exploit DB Packet Storm
200989 9.1 緊急
Network
Libical project - Libical におけるサービス運用妨害 (DoS) の脆弱性 CWE-416
解放済みメモリの使用
CVE-2016-9584 2017-01-31 17:53 2016-12-15 Show GitHub Exploit DB Packet Storm
200990 7.5 重要
Network
Belledonne Communications - Bzrtp ライブラリにおけるなりすまし攻撃を実行される脆弱性 CWE-254
セキュリティ機能
CVE-2016-6271 2017-01-31 17:50 2016-04-1 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 9, 2026, 4:16 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
290681 - ibm lotus_domino
lotus_notes
IBM Notes and Domino 8.5.x before 8.5.3 FP6 IF3 and 9.x before 9.0.1 FP1 on 32-bit Linux platforms use incorrect gcc options, which makes it easier for remote attackers to execute arbitrary code by l… CWE-200
Information Exposure
CVE-2014-0892 2024-11-21 11:02 2014-04-24 Show GitHub Exploit DB Packet Storm
290682 - canonical
djangoproject
ubuntu_linux
django
The (1) FilePathField, (2) GenericIPAddressField, and (3) IPAddressField model field classes in Django before 1.4.11, 1.5.x before 1.5.6, 1.6.x before 1.6.3, and 1.7.x before 1.7 beta 2 do not proper… CWE-399
 Resource Management Errors
CVE-2014-0474 2024-11-21 11:02 2014-04-24 Show GitHub Exploit DB Packet Storm
290683 - djangoproject
canonical
django
ubuntu_linux
The caching framework in Django before 1.4.11, 1.5.x before 1.5.6, 1.6.x before 1.6.3, and 1.7.x before 1.7 beta 2 reuses a cached CSRF token for all anonymous users, which allows remote attackers to… CWE-264
Permissions, Privileges, and Access Controls
CVE-2014-0473 2024-11-21 11:02 2014-04-24 Show GitHub Exploit DB Packet Storm
290684 - djangoproject
canonical
django
ubuntu_linux
The django.core.urlresolvers.reverse function in Django before 1.4.11, 1.5.x before 1.5.6, 1.6.x before 1.6.3, and 1.7.x before 1.7 beta 2 allows remote attackers to import and execute arbitrary Pyth… CWE-94
Code Injection
CVE-2014-0472 2024-11-21 11:02 2014-04-24 Show GitHub Exploit DB Packet Storm
290685 - progea movicon The TCPUploader module in Progea Movicon 11.4 before 11.4.1150 allows remote attackers to obtain potentially sensitive version information via network traffic to TCP port 10651. CWE-200
Information Exposure
CVE-2014-0778 2024-11-21 11:02 2014-04-20 Show GitHub Exploit DB Packet Storm
290686 - emc cloud_tiering_appliance_software
cloud_tiering_appliance
file_management_appliance_software
file_management_appliance
EMC Cloud Tiering Appliance (CTA) 9.x through 10 SP1 and File Management Appliance (FMA) 7.x store DES password hashes for the root, super, and admin accounts, which makes it easier for context-depen… CWE-255
Credentials Management
CVE-2014-0645 2024-11-21 11:02 2014-04-17 Show GitHub Exploit DB Packet Storm
290687 - emc cloud_tiering_appliance_software
cloud_tiering_appliance
EMC Cloud Tiering Appliance (CTA) 10 through SP1 allows remote attackers to read arbitrary files via an api/login request containing an XML external entity declaration in conjunction with an entity r… CWE-200
Information Exposure
CVE-2014-0644 2024-11-21 11:02 2014-04-17 Show GitHub Exploit DB Packet Storm
290688 - oracle fusion_middleware Unspecified vulnerability in the Oracle OpenSSO component in Oracle Fusion Middleware 8.0 Update 2 Patch 5 allows remote authenticated users to affect integrity via unknown vectors related to Admin C… NVD-CWE-noinfo
CVE-2014-0465 2024-11-21 11:02 2014-04-16 Show GitHub Exploit DB Packet Storm
290689 - oracle jdk
jre
Unspecified vulnerability in Oracle Java SE 8 allows remote attackers to affect confidentiality via unknown vectors related to Scripting, a different vulnerability than CVE-2014-0463. NVD-CWE-noinfo
CVE-2014-0464 2024-11-21 11:02 2014-04-16 Show GitHub Exploit DB Packet Storm
290690 - oracle jdk
jre
Unspecified vulnerability in Oracle Java SE 8 allows remote attackers to affect confidentiality via unknown vectors related to Scripting, a different vulnerability than CVE-2014-0464. NVD-CWE-noinfo
CVE-2014-0463 2024-11-21 11:02 2014-04-16 Show GitHub Exploit DB Packet Storm