Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":June 19, 2026, 12:01 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
201001	7.5	重要 Network	OmniMetrix, LLC	-	OmniMetrix OmniView Web アプリケーションにおけるアカウント認証情報が漏えいする脆弱性	CWE-200 情報漏えい	CVE-2016-5786	2017-03-8 19:02	2016-12-15	Show	GitHub Exploit DB Packet Storm

201002	9.8	緊急 Network	Lynxspring	-	Lynxspring JENEsys BAS Bridge におけるアプリケーションのデータベースにおいて認証情報の保護に十分なセーフガードが欠落している脆弱性	CWE-255 証明書・パスワード管理	CVE-2016-8378	2017-03-8 18:51	2016-11-15	Show	GitHub Exploit DB Packet Storm

201003	8.8	重要 Network	Lynxspring	-	Lynxspring JENEsys BAS Bridge におけるクロスサイトリクエストフォージェリの脆弱性	CWE-352 同一生成元ポリシー違反	CVE-2016-8369	2017-03-8 18:51	2016-11-15	Show	GitHub Exploit DB Packet Storm

201004	8.6	重要 Network	Lynxspring	-	Lynxspring JENEsys BAS Bridge における認証なしでシステム内に侵入される脆弱性	CWE-798 ハードコードされた認証情報の使用	CVE-2016-8361	2017-03-8 18:51	2016-11-15	Show	GitHub Exploit DB Packet Storm

201005	7.1	重要 Network	Lynxspring	-	Lynxspring JENEsys BAS Bridge における読み取り専用アクセスでアプリケーション内にて任意の変更を許可される脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2016-8357	2017-03-8 18:51	2016-11-15	Show	GitHub Exploit DB Packet Storm

201006	6.1	警告 Network	Moxa Inc.	-	複数の Moxa NPort 製品におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2016-9371	2017-03-8 18:37	2016-12-1	Show	GitHub Exploit DB Packet Storm

201007	9.8	緊急 Network	Moxa Inc.	-	複数の Moxa NPort 製品のファームウェアにおけるリモートでコードを実行される脆弱性	CWE-287 不適切な認証	CVE-2016-9369	2017-03-8 18:37	2016-12-1	Show	GitHub Exploit DB Packet Storm

201008	7.5	重要 Network	Moxa Inc.	-	複数の Moxa NPort 製品におけるサービス運用妨害 (DoS) の脆弱性	CWE-400 リソースの枯渇	CVE-2016-9367	2017-03-8 18:37	2016-12-1	Show	GitHub Exploit DB Packet Storm

201009	9.8	緊急 Network	Moxa Inc.	-	複数の Moxa NPort 製品における認証を回避される脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2016-9366	2017-03-8 18:37	2016-12-1	Show	GitHub Exploit DB Packet Storm

201010	8.8	重要 Network	Moxa Inc.	-	複数の Moxa NPort 製品におけるクロスサイトリクエストフォージェリの脆弱性	CWE-352 同一生成元ポリシー違反	CVE-2016-9365	2017-03-8 18:37	2016-12-1	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:June 19, 2026, 4:01 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
292021	-		linux redhat debian oracle suse	linux_kernel enterprise_linux_eus debian_linux linux linux_enterprise_desktop linux_enterprise_server linux_enterprise_real_time_extension linux_enterprise_high_availability_exte…	The raw_cmd_copyout function in drivers/block/floppy.c in the Linux kernel through 3.14.3 does not properly restrict access to certain pointers during processing of an FDRAWCMD ioctl call, which allo…	CWE-200 Information Exposure	CVE-2014-1738	2024-11-21 11:04	2014-05-12	Show	GitHub Exploit DB Packet Storm

292022	-		linux oracle debian suse redhat	linux_kernel linux debian_linux linux_enterprise_desktop linux_enterprise_server linux_enterprise_real_time_extension linux_enterprise_high_availability_extension enterprise_linu…	The raw_cmd_copyin function in drivers/block/floppy.c in the Linux kernel through 3.14.3 does not properly handle error conditions during processing of an FDRAWCMD ioctl call, which allows local user…	CWE-754 Improper Check for Unusual or Exceptional Conditions	CVE-2014-1737	2024-11-21 11:04	2014-05-12	Show	GitHub Exploit DB Packet Storm

292023	-		zabbix fedoraproject	zabbix fedora	The Frontend in Zabbix before 1.8.20rc2, 2.0.x before 2.0.11rc2, and 2.2.x before 2.2.2rc1 allows remote "Zabbix Admin" users to modify the media of arbitrary users via unspecified vectors.	NVD-CWE-noinfo	CVE-2014-1685	2024-11-21 11:04	2014-05-8	Show	GitHub Exploit DB Packet Storm

292024	-		zabbix fedoraproject	zabbix fedora	The API in Zabbix before 1.8.20rc1, 2.0.x before 2.0.11rc1, and 2.2.x before 2.2.2rc1 allows remote authenticated users to spoof arbitrary users via the user name in a user.login request.	CWE-287 Improper Authentication	CVE-2014-1682	2024-11-21 11:04	2014-05-8	Show	GitHub Exploit DB Packet Storm

292025	-		google	chrome	Integer overflow in api.cc in Google V8, as used in Google Chrome before 34.0.1847.131 on Windows and OS X and before 34.0.1847.132 on Linux, allows remote attackers to cause a denial of service or p…	CWE-190 Integer Overflow or Wraparound	CVE-2014-1736	2024-11-21 11:04	2014-05-6	Show	GitHub Exploit DB Packet Storm

292026	-		coreftp	core_ftp	Core FTP Server 1.2 before build 515 allows remote authenticated users to obtain sensitive information (password for the previous user) via a USER command with a specific length, possibly related to …	CWE-119 Incorrect Access of Indexable Resource ('Range Error')	CVE-2014-1443	2024-11-21 11:04	2014-05-2	Show	GitHub Exploit DB Packet Storm

292027	-		coreftp	core_ftp	Directory traversal vulnerability in Core FTP Server 1.2 before build 515 allows remote authenticated users to determine the existence of arbitrary files via a /../ sequence in an XCRC command.	CWE-22 Path Traversal	CVE-2014-1442	2024-11-21 11:04	2014-05-2	Show	GitHub Exploit DB Packet Storm

292028	-		coreftp	core_ftp	Core FTP Server 1.2 before build 515 allows remote attackers to cause a denial of service (reachable assertion and crash) via an AUTH SSL command with malformed data, as demonstrated by pressing the …	CWE-362 Race Condition	CVE-2014-1441	2024-11-21 11:04	2014-05-2	Show	GitHub Exploit DB Packet Storm

292029	9.8	CRITICAL Network	mozilla fedoraproject canonical debian redhat opensuse suse	thunderbird firefox firefox_esr seamonkey fedora ubuntu_linux debian_linux enterprise_linux_server enterprise_linux_server_eus enterprise_linux_workstation enterprise_li…	Use-after-free vulnerability in the nsHostResolver::ConditionallyRefreshRecord function in libxul.so in Mozilla Firefox before 29.0, Firefox ESR 24.x before 24.5, Thunderbird before 24.5, and SeaMonk…	CWE-416 Use After Free	CVE-2014-1532	2024-11-21 11:04	2014-04-30	Show	GitHub Exploit DB Packet Storm

292030	-		canonical opensuse_project opensuse oracle mozilla fedoraproject	ubuntu_linux opensuse solaris firefox seamonkey fedora	The sse2_composite_src_x888_8888 function in Pixman, as used in Cairo in Mozilla Firefox 28.0 and SeaMonkey 2.25 on Windows, allows remote attackers to execute arbitrary code or cause a denial of ser…	CWE-119 Incorrect Access of Indexable Resource ('Range Error')	CVE-2014-1528	2024-11-21 11:04	2014-04-30	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed