Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 8, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
201061 8.1 重要
Network 		D-Link Systems, Inc. - D-Link DGS-1100 デバイスの Rev.B ファームウェアにおけるデバイスになりすまされる脆弱性 CWE-798
ハードコードされた認証情報の使用 		CVE-2016-10125 2017-01-23 16:48 2016-08-24 Show GitHub Exploit DB Packet Storm
201062 8.8 重要
Network 		アップル - Apple GarageBand および Logic Pro X の脆弱性に対するアップデート CWE-119
バッファエラー 		CVE-2017-2372 2017-01-23 16:35 2017-01-19 Show GitHub Exploit DB Packet Storm
201063 5.9 警告
Network 		インテル - Intel Ethernet Controller X710/XL710 の不揮発性メモリのイメージにおけるサービス運用妨害 (DoS) の脆弱性 CWE-20
不適切な入力確認 		CVE-2016-8106 2017-01-23 16:33 2016-09-9 Show GitHub Exploit DB Packet Storm
201064 7.5 重要
Network 		Python Software Foundation - Python HPACK ライブラリを使用してビルドされた HTTP/2 の実装におけるサービス運用妨害 (DoS) の脆弱性 CWE-399
リソース管理の問題 		CVE-2016-6581 2017-01-23 16:12 2016-08-4 Show GitHub Exploit DB Packet Storm
201065 7.5 重要
Network 		Python Software Foundation - Python priority ライブラリを使用してビルドされた HTTP/2 の実装における CPU 資源の高い消費状態を引き起こされる脆弱性 CWE-399
リソース管理の問題 		CVE-2016-6580 2017-01-23 16:12 2016-08-4 Show GitHub Exploit DB Packet Storm
201066 9.8 緊急
Network 		eClinicalWorks - eClinicalWorks Population Health におけるセッションの固定化の脆弱性 CWE-284
CWE-384
CVE-2015-4594 2017-01-23 16:00 2015-06-16 Show GitHub Exploit DB Packet Storm
201067 7.5 重要
Network 		The Chicken Team - CHICKEN の "http-client" egg におけるすべての HTTP リクエストをプロキシ経由にされる脆弱性 CWE-19
データ処理 		CVE-2016-6287 2017-01-23 15:33 2016-07-21 Show GitHub Exploit DB Packet Storm
201068 7.5 重要
Network 		The Chicken Team - CHICKEN の "spiffy-cgi-handlers" egg の CGI プログラムにおける攻撃者が指定した HTTP プロキシサーバの使用を強制される脆弱性 CWE-19
データ処理 		CVE-2016-6286 2017-01-23 15:33 2016-07-21 Show GitHub Exploit DB Packet Storm
201069 9.8 緊急
Network 		Pivotal Software, Inc. - Pivotal GemFire for PCF の gfsh エンドポイントにおけるサービス運用妨害 (DoS) の脆弱性 CWE-200
CWE-254
CVE-2016-9885 2017-01-23 14:54 2016-12-6 Show GitHub Exploit DB Packet Storm
201070 7.5 重要
Network 		Pivotal Software, Inc.
IBM		 - Pivotal Spring Security におけるセキュリティ制約を回避される脆弱性 CWE-417
チャネルおよびパスのエラー 		CVE-2016-9879 2017-01-23 14:54 2016-12-28 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 9, 2026, 4:16 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
290291 7.8 HIGH
Local 		s3dvt_project s3dvt The pipe_init_terminal function in main.c in s3dvt allows local users to gain privileges by leveraging setuid permissions and usage of bash 4.3 and earlier. NOTE: This vulnerability exists because o… CWE-264
Permissions, Privileges, and Access Controls 		CVE-2014-1226 2024-11-21 11:03 2018-04-7 Show GitHub Exploit DB Packet Storm
290292 7.8 HIGH
Local 		coreftp core_ftp Multiple buffer overflows in Core FTP Server before 1.2 build 508 allow local users to gain privileges via vectors related to reading data from config.dat and Windows Registry. CWE-119
Incorrect Access of Indexable Resource ('Range Error')  		CVE-2014-1215 2024-11-21 11:03 2018-03-21 Show GitHub Exploit DB Packet Storm
290293 9.8 CRITICAL
Network 		zsh_project zsh In utils.c in zsh before 5.0.6, there is a buffer overflow when scanning very long directory paths for symbolic links. CWE-119
Incorrect Access of Indexable Resource ('Range Error')  		CVE-2014-10072 2024-11-21 11:03 2018-02-28 Show GitHub Exploit DB Packet Storm
290294 9.8 CRITICAL
Network 		zsh
canonical 		zsh
ubuntu_linux 		In exec.c in zsh before 5.0.7, there is a buffer overflow for very long fds in the ">& fd" syntax. CWE-119
Incorrect Access of Indexable Resource ('Range Error')  		CVE-2014-10071 2024-11-21 11:03 2018-02-28 Show GitHub Exploit DB Packet Storm
290295 7.8 HIGH
Local 		zsh_project zsh zsh before 5.0.7 allows evaluation of the initial values of integer variables imported from the environment (instead of treating them as literal numbers). That could allow local privilege escalation,… CWE-264
Permissions, Privileges, and Access Controls 		CVE-2014-10070 2024-11-21 11:03 2018-02-28 Show GitHub Exploit DB Packet Storm
290296 7.5 HIGH
Network 		hitrontech cve-30360_firmware Hitron CVE-30360 devices use a 578A958E3DD933FC DES key that is shared across different customers' installations, which makes it easier for attackers to obtain sensitive information by decrypting a b… CWE-310
Cryptographic Issues 		CVE-2014-10069 2024-11-21 11:03 2018-01-8 Show GitHub Exploit DB Packet Storm
290297 9.8 CRITICAL
Network 		eyou eyou The get_login_ip_config_file function in Eyou Mail System before 3.6 allows remote attackers to execute arbitrary commands via shell metacharacters in the domain parameter to admin/domain/ip_login_se… CWE-77
Command Injection 		CVE-2014-1203 2024-11-21 11:03 2017-10-24 Show GitHub Exploit DB Packet Storm
290298 7.5 HIGH
Network 		google android WiFiMonitor in Android 4.4.4 as used in the Nexus 5 and 4, Android 4.2.2 as used in the LG D806, Android 4.2.2 as used in the Samsung SM-T310, Android 4.1.2 as used in the Motorola RAZR HD, and poten… CWE-19
 Data Processing Errors 		CVE-2014-0997 2024-11-21 11:03 2017-09-26 Show GitHub Exploit DB Packet Storm
290299 7.8 HIGH
Local 		graphviz graphviz Stack-based buffer overflow in the "yyerror" function in Graphviz 2.34.0 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted file. NOTE: … CWE-119
Incorrect Access of Indexable Resource ('Range Error')  		CVE-2014-1235 2024-11-21 11:03 2017-08-8 Show GitHub Exploit DB Packet Storm
290300 - sendio sendio Sendio before 7.2.4 includes the session identifier in URLs in emails, which allows remote attackers to obtain sensitive information and hijack sessions by reading the jsessionid parameter in the Ref… CWE-200
Information Exposure 		CVE-2014-0999 2024-11-21 11:03 2015-06-2 Show GitHub Exploit DB Packet Storm