Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 21, 2026, 2 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
200991 7.5 危険 日本電気
日立
NTP Project		 - NTP の ntpd におけるスタックベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2014-9295 2017-03-9 15:28 2014-11-3 Show GitHub Exploit DB Packet Storm
200992 5 警告 日本電気
日立
NTP Project		 - NTP の ntpd の config_auth 機能における暗号保護メカニズムを破られる脆弱性 CWE-Other
その他 		CVE-2014-9293 2017-03-9 15:28 2014-11-3 Show GitHub Exploit DB Packet Storm
200993 7.5 重要
Network 		ISC, Inc.
日本電気		 - ISC BIND 9 にサービス運用妨害 (DoS) の脆弱性 CWE-20
不適切な入力確認 		CVE-2016-2776 2017-03-9 15:27 2016-09-27 Show GitHub Exploit DB Packet Storm
200994 6.1 警告
Network 		Adcon Telemetry - Adcon Telemetry A850 Telemetry Gateway Base Station の Web インターフェースにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2016-2274 2017-03-9 13:56 2016-12-8 Show GitHub Exploit DB Packet Storm
200995 8.8 重要
Network 		FATEK Automation Corporation - Fatek Automation PM Designer V3 および FV Designer におけるクラッシュを引き起こされる脆弱性 CWE-119
バッファエラー 		CVE-2016-5796 2017-03-9 13:50 2016-10-13 Show GitHub Exploit DB Packet Storm
200996 7.5 重要
Network 		FATEK Automation Corporation - Fatek Automation PM Designer V3 および FV Designer におけるスタックベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2016-5798 2017-03-9 13:50 2016-10-13 Show GitHub Exploit DB Packet Storm
200997 9.8 緊急
Network 		libxpm project - libXpm における整数オーバーフローの脆弱性 CWE-119
CWE-190
CWE-787
CVE-2016-10164 2017-03-9 11:29 2016-12-12 Show GitHub Exploit DB Packet Storm
200998 5.9 警告
Network 		ChatSecure
Zom		 - ChatSecure および Zom の複数の XMPP クライアントの "XEP-0280: Message Carbons" の実装における連絡先を含むユーザになりすまされる脆弱性 CWE-20
CWE-346
CVE-2017-5590 2017-03-8 19:10 2017-01-24 Show GitHub Exploit DB Packet Storm
200999 6.1 警告
Network 		Visonic - Visonic PowerLink2 におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2016-5811 2017-03-8 19:06 2016-12-13 Show GitHub Exploit DB Packet Storm
201000 9.8 緊急
Network 		OmniMetrix, LLC - OmniMetrix OmniView Web アプリケーションにおけるアクセス権を取得される脆弱性 CWE-284
不適切なアクセス制御 		CVE-2016-5801 2017-03-8 19:02 2016-12-15 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 21, 2026, 4:01 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
292131 - suse
oracle
opensuse_project
opensuse
mozilla 		linux_enterprise_desktop
linux_enterprise_server
linux_enterprise_software_development_kit
solaris
opensuse
seamonkey
firefox 		The crypto.generateCRMFRequest method in Mozilla Firefox before 28.0 and SeaMonkey before 2.25 does not properly validate a certain key type, which allows remote attackers to cause a denial of servic… CWE-347
 Improper Verification of Cryptographic Signature 		CVE-2014-1498 2024-11-21 11:04 2014-03-19 Show GitHub Exploit DB Packet Storm
292132 5.5 MEDIUM
Local 		mozilla
suse 		seamonkey
firefox_esr
firefox
thunderbird
suse_linux_enterprise_software_development_kit
suse_linux_enterprise_server
suse_linux_enterprise_desktop 		Mozilla Firefox before 28.0, Firefox ESR 24.x before 24.4, Thunderbird before 24.4, and SeaMonkey before 2.25 might allow local users to gain privileges by modifying the extracted Mar contents during… CWE-269
 Improper Privilege Management 		CVE-2014-1496 2024-11-21 11:04 2014-03-19 Show GitHub Exploit DB Packet Storm
292133 - mozilla
suse
oracle
opensuse_project
opensuse 		seamonkey
linux_enterprise_desktop
linux_enterprise_server
linux_enterprise_software_development_kit
solaris
opensuse
firefox 		Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 28.0 and SeaMonkey before 2.25 allow remote attackers to cause a denial of service (memory corruption and applicat… NVD-CWE-noinfo
CVE-2014-1494 2024-11-21 11:04 2014-03-19 Show GitHub Exploit DB Packet Storm
292134 8.8 HIGH
Network 		mozilla
debian
opensuse
suse
canonical
redhat 		seamonkey
firefox_esr
firefox
thunderbird
debian_linux
opensuse
suse_linux_enterprise_software_development_kit
suse_linux_enterprise_desktop
suse_linux_enterprise_server
ub… 		The mozilla::WaveReader::DecodeAudioData function in Mozilla Firefox before 28.0, Firefox ESR 24.x before 24.4, Thunderbird before 24.4, and SeaMonkey before 2.25 allows remote attackers to obtain se… CWE-125
Out-of-bounds Read 		CVE-2014-1497 2024-11-21 11:04 2014-03-19 Show GitHub Exploit DB Packet Storm
292135 9.8 CRITICAL
Network 		mozilla
canonical
debian
redhat
opensuse
suse 		seamonkey
firefox_esr
firefox
thunderbird
ubuntu_linux
debian_linux
enterprise_linux_server
enterprise_linux_server_eus
enterprise_linux_workstation
enterprise_linux_server… 		Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 28.0, Firefox ESR 24.x before 24.4, Thunderbird before 24.4, and SeaMonkey before 2.25 allow remote attackers to c… CWE-119
Incorrect Access of Indexable Resource ('Range Error')  		CVE-2014-1493 2024-11-21 11:04 2014-03-19 Show GitHub Exploit DB Packet Storm
292136 - mantisbt
debian 		mantisbt
debian_linux 		SQL injection vulnerability in the mci_file_get function in api/soap/mc_file_api.php in MantisBT before 1.2.16 allows remote attackers to execute arbitrary SQL commands via a crafted envelope tag in … CWE-89
SQL Injection 		CVE-2014-1608 2024-11-21 11:04 2014-03-19 Show GitHub Exploit DB Packet Storm
292137 - google chrome Directory traversal vulnerability in Google Chrome before 33.0.1750.152 on OS X and Linux and before 33.0.1750.154 on Windows has unspecified impact and attack vectors. CWE-22
Path Traversal 		CVE-2014-1715 2024-11-21 11:04 2014-03-16 Show GitHub Exploit DB Packet Storm
292138 - google chrome The ScopedClipboardWriter::WritePickledData function in ui/base/clipboard/scoped_clipboard_writer.cc in Google Chrome before 33.0.1750.152 on OS X and Linux and before 33.0.1750.154 on Windows does n… CWE-20
 Improper Input Validation  		CVE-2014-1714 2024-11-21 11:04 2014-03-16 Show GitHub Exploit DB Packet Storm
292139 - google chrome Use-after-free vulnerability in the AttributeSetter function in bindings/templates/attributes.cpp in the bindings in Blink, as used in Google Chrome before 33.0.1750.152 on OS X and Linux and before … CWE-416
 Use After Free 		CVE-2014-1713 2024-11-21 11:04 2014-03-16 Show GitHub Exploit DB Packet Storm
292140 - google chrome_os The GPU driver in the kernel in Google Chrome OS before 33.0.1750.152 allows remote attackers to cause a denial of service (out-of-bounds write) or possibly have unspecified other impact via unknown … CWE-119
Incorrect Access of Indexable Resource ('Range Error')  		CVE-2014-1711 2024-11-21 11:04 2014-03-16 Show GitHub Exploit DB Packet Storm