Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 8, 2026, 10 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
200981 7.8 重要
Local
Canonical
Apport project
- Apport の apport/ui.py における任意の Python コードを実行される脆弱性 CWE-94
コード・インジェクション
CVE-2016-9949 2016-12-28 11:47 2016-12-14 Show GitHub Exploit DB Packet Storm
200982 7.4 重要
Network
Pivotal Software, Inc. - Pivotal Cloud Foundry Elastic Runtime コンポーネントにおけるオープンリダイレクトの脆弱性 CWE-601
オープンリダイレクト
CVE-2016-6657 2016-12-28 11:47 2016-11-7 Show GitHub Exploit DB Packet Storm
200983 7.2 重要
Network
Pivotal Software, Inc. - Pivotal Greenplum におけるシステムに任意のコマンドを挿入される脆弱性 CWE-77
コマンドインジェクション
CVE-2016-6656 2016-12-28 11:47 2016-12-16 Show GitHub Exploit DB Packet Storm
200984 7 重要
Local
Percona
MariaDB Corporation Ab.
オラクル
- Oracle MySQL およびその他のデータベースの mysqld_safe における root 権限を取得される脆弱性 CWE-59
リンク解釈の問題
CVE-2016-6664 2016-12-28 11:45 2016-10-16 Show GitHub Exploit DB Packet Storm
200985 4.3 警告
Network
Google - Google Chrome の Blink におけるブラウザの UI の複数のパーツを偽造される脆弱性 CWE-20
不適切な入力確認
CVE-2016-5188 2016-12-28 11:43 2016-10-12 Show GitHub Exploit DB Packet Storm
200986 6.5 警告
Network
Google - Android 用 Google Chrome における Omnibox のコンテンツを偽造される脆弱性 CWE-20
不適切な入力確認
CVE-2016-5187 2016-12-28 11:43 2016-10-12 Show GitHub Exploit DB Packet Storm
200987 8.8 重要
Network
Google - Google Chrome の PDFium におけるサービス運用妨害 (DoS) の脆弱性 CWE-416
解放済みメモリの使用
CVE-2016-5183 2016-12-28 11:43 2016-10-12 Show GitHub Exploit DB Packet Storm
200988 9.8 緊急
Network
xrdp
Debian
- xrdp における脆弱性 CWE-255
証明書・パスワード管理
CVE-2013-1430 2016-12-28 11:43 2013-01-26 Show GitHub Exploit DB Packet Storm
200989 6.1 警告
Network
SPIP - SPIP の /ecrire/exec/info_plugin.php における反射型クロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2016-9998 2016-12-28 11:41 2016-11-30 Show GitHub Exploit DB Packet Storm
200990 6.1 警告
Network
SPIP - SPIP の /ecrire/exec/puce_statut.php における反射型クロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2016-9997 2016-12-28 11:41 2016-11-30 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 8, 2026, 4:09 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
290991 - zarafa zarafa The ValidateUserLogon function in provider/libserver/ECSession.cpp in Zarafa 7.1.8, 6.20.0, and earlier, when using certain build conditions, allows remote attackers to cause a denial of service (cra… CWE-20
 Improper Input Validation 
CVE-2014-0079 2024-11-21 11:01 2014-04-28 Show GitHub Exploit DB Packet Storm
290992 - zarafa zarafa The ValidateUserLogon function in provider/libserver/ECSession.cpp in Zarafa 5.00 before 7.1.8 beta2 allows remote attackers to cause a denial of service (crash) via vectors related to "a NULL pointe… CWE-20
 Improper Input Validation 
CVE-2014-0037 2024-11-21 11:01 2014-04-28 Show GitHub Exploit DB Packet Storm
290993 - openstack image_registry_and_delivery_service_\(glance\)
icehouse
The Sheepdog backend in OpenStack Image Registry and Delivery Service (Glance) 2013.2 before 2013.2.4 and icehouse before icehouse-rc2 allows remote authenticated users with permission to insert or m… CWE-20
 Improper Input Validation 
CVE-2014-0162 2024-11-21 11:01 2014-04-28 Show GitHub Exploit DB Packet Storm
290994 - linux
redhat
suse
opensuse
linux_kernel
enterprise_linux_server
linux_enterprise_server
evergreen
linux_enterprise_real_time_extension
enterprise_linux_desktop
suse_linux_enterprise_server
The Netlink implementation in the Linux kernel through 3.14.1 does not provide a mechanism for authorizing socket operations based on the opener of a socket, which allows local users to bypass intend… CWE-264
Permissions, Privileges, and Access Controls
CVE-2014-0181 2024-11-21 11:01 2014-04-27 Show GitHub Exploit DB Packet Storm
290995 - pocoproject poco_c\+\+_libraries The Poco::Net::X509Certificate::verify method in the NetSSL library in POCO C++ Libraries before 1.4.6p4 allows man-in-the-middle attackers to spoof SSL servers via crafted DNS PTR records that are r… CWE-310
Cryptographic Issues
CVE-2014-0350 2024-11-21 11:01 2014-04-26 Show GitHub Exploit DB Packet Storm
290996 - redhat openshift The openshift-origin-broker in Red Hat OpenShift Enterprise 2.0.5, 1.2.7, and earlier does not properly handle authentication requests from the remote-user auth plugin, which allows remote attackers … CWE-287
Improper Authentication
CVE-2014-0188 2024-11-21 11:01 2014-04-24 Show GitHub Exploit DB Packet Storm
290997 - automattic jetpack The Jetpack plugin before 1.9 before 1.9.4, 2.0.x before 2.0.9, 2.1.x before 2.1.4, 2.2.x before 2.2.7, 2.3.x before 2.3.7, 2.4.x before 2.4.4, 2.5.x before 2.5.2, 2.6.x before 2.6.3, 2.7.x before 2.… CWE-264
Permissions, Privileges, and Access Controls
CVE-2014-0173 2024-11-21 11:01 2014-04-22 Show GitHub Exploit DB Packet Storm
290998 - toshibacommerce 4690_point_of_sale_operating_system The default configuration of IBM 4690 OS, as used in Toshiba Global Commerce Solutions 4690 POS and other products, hashes passwords with the ADXCRYPT algorithm, which makes it easier for context-dep… CWE-310
Cryptographic Issues
CVE-2014-0361 2024-11-21 11:01 2014-04-22 Show GitHub Exploit DB Packet Storm
290999 - qemu
redhat
qemu
enterprise_linux
Integer overflow in the virtio_net_handle_mac function in hw/net/virtio-net.c in QEMU 2.0 and earlier allows local guest users to execute arbitrary code via a MAC addresses table update request, whic… CWE-189
Numeric Errors
CVE-2014-0150 2024-11-21 11:01 2014-04-18 Show GitHub Exploit DB Packet Storm
291000 - apache syncope Apache Syncope 1.0.0 before 1.0.9 and 1.1.0 before 1.1.7 allows remote administrators to execute arbitrary Java code via vectors related to Apache Commons JEXL expressions, "derived schema definition… CWE-94
Code Injection
CVE-2014-0111 2024-11-21 11:01 2014-04-17 Show GitHub Exploit DB Packet Storm