Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 6, 2026, noon

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
201091 9.6 緊急
Network 		マイクロソフト - Microsoft Office 2016 における任意のコードを実行される脆弱性 CWE-119
バッファエラー 		CVE-2016-7277 2016-12-21 17:41 2016-12-13 Show GitHub Exploit DB Packet Storm
201092 5.5 警告
Local 		マイクロソフト - 複数の Microsoft Office 製品におけるプロセスメモリから重要な情報を取得される脆弱性 CWE-125
境界外読み取り 		CVE-2016-7276 2016-12-21 17:41 2016-12-13 Show GitHub Exploit DB Packet Storm
201093 7.8 重要
Local 		マイクロソフト - 複数の Microsoft Office 製品における権限昇格の脆弱性 CWE-19
CWE-264
CVE-2016-7275 2016-12-21 17:41 2016-12-13 Show GitHub Exploit DB Packet Storm
201094 6.5 警告
Network 		マイクロソフト - 複数の Microsoft Windows および Office 製品の GDI コンポーネントにおける重要な情報を取得される脆弱性 CWE-200
情報漏えい 		CVE-2016-7257 2016-12-21 17:27 2016-12-13 Show GitHub Exploit DB Packet Storm
201095 8.8 重要
Network 		マイクロソフト - Microsoft Windows 10 および Windows Server 2016 の Graphics コンポーネントにおける任意のコードを実行される脆弱性 CWE-19
データ処理 		CVE-2016-7273 2016-12-21 17:24 2016-12-13 Show GitHub Exploit DB Packet Storm
201096 7.5 重要
Network 		マイクロソフト - Microsoft Internet Explorer 11 および Microsoft Edge のスクリプトエンジンにおける任意のコードを実行される脆弱性 CWE-119
バッファエラー 		CVE-2016-7287 2016-12-21 17:21 2016-12-13 Show GitHub Exploit DB Packet Storm
201097 4.3 警告
Network 		マイクロソフト - Microsoft Internet Explorer 10 および 11 におけるプロセスメモリから重要な情報を取得される脆弱性 CWE-200
情報漏えい 		CVE-2016-7284 2016-12-21 17:21 2016-12-13 Show GitHub Exploit DB Packet Storm
201098 8.8 重要
Network 		マイクロソフト - Microsoft Internet Explorer 9 から 11 における任意のコードを実行される脆弱性 CWE-119
バッファエラー 		CVE-2016-7283 2016-12-21 17:21 2016-12-13 Show GitHub Exploit DB Packet Storm
201099 6.1 警告
Network 		マイクロソフト - Microsoft Internet Explorer 9 から 11 および Microsoft Edge におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2016-7282 2016-12-21 17:21 2016-12-13 Show GitHub Exploit DB Packet Storm
201100 5.3 警告
Network 		マイクロソフト - Microsoft Internet Explorer 10 から 11 および Microsoft Edge の Web ワーカーの実装における同一生成元ポリシーを回避される脆弱性 CWE-254
セキュリティ機能 		CVE-2016-7281 2016-12-21 17:21 2016-12-13 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 6, 2026, 4:18 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
290871 - igniterealtime smack The ServerTrustManager component in the Ignite Realtime Smack XMPP API before 4.0.0-rc1 does not verify basicConstraints and nameConstraints in X.509 certificate chains from SSL servers, which allows… CWE-295
Improper Certificate Validation  		CVE-2014-0363 2024-11-21 11:01 2014-04-30 Show GitHub Exploit DB Packet Storm
290872 - apache commons_beanutils
struts 		Apache Commons BeanUtils, as distributed in lib/commons-beanutils-1.8.0.jar in Apache Struts 1.x through 1.3.10 and in other products requiring commons-beanutils through 1.9.2, does not suppress the … CWE-20
 Improper Input Validation  		CVE-2014-0114 2024-11-21 11:01 2014-04-30 Show GitHub Exploit DB Packet Storm
290873 - f5 nginx The SPDY implementation in the ngx_http_spdy_module module in nginx 1.5.10 before 1.5.11, when running on a 32-bit platform, allows remote attackers to execute arbitrary code via a crafted request. CWE-119
Incorrect Access of Indexable Resource ('Range Error')  		CVE-2014-0088 2024-11-21 11:01 2014-04-29 Show GitHub Exploit DB Packet Storm
290874 - apache struts CookieInterceptor in Apache Struts before 2.3.20, when a wildcard cookiesName value is used, does not properly restrict access to the getClass method, which allows remote attackers to "manipulate" th… CWE-264
Permissions, Privileges, and Access Controls 		CVE-2014-0113 2024-11-21 11:01 2014-04-29 Show GitHub Exploit DB Packet Storm
290875 - apache struts ParametersInterceptor in Apache Struts before 2.3.20 does not properly restrict access to the getClass method, which allows remote attackers to "manipulate" the ClassLoader and execute arbitrary code… CWE-264
Permissions, Privileges, and Access Controls 		CVE-2014-0112 2024-11-21 11:01 2014-04-29 Show GitHub Exploit DB Packet Storm
290876 - openstack
canonical
opensuse 		neutron
ubuntu_linux
opensuse 		The openvswitch-agent process in OpenStack Neutron 2013.1 before 2013.2.4 and 2014.1 before 2014.1.1 allows remote authenticated users to bypass security group restrictions via an invalid CIDR in a s… CWE-264
Permissions, Privileges, and Access Controls 		CVE-2014-0187 2024-11-21 11:01 2014-04-28 Show GitHub Exploit DB Packet Storm
290877 - zarafa zarafa The ValidateUserLogon function in provider/libserver/ECSession.cpp in Zarafa 7.1.8, 6.20.0, and earlier, when using certain build conditions, allows remote attackers to cause a denial of service (cra… CWE-20
 Improper Input Validation  		CVE-2014-0079 2024-11-21 11:01 2014-04-28 Show GitHub Exploit DB Packet Storm
290878 - zarafa zarafa The ValidateUserLogon function in provider/libserver/ECSession.cpp in Zarafa 5.00 before 7.1.8 beta2 allows remote attackers to cause a denial of service (crash) via vectors related to "a NULL pointe… CWE-20
 Improper Input Validation  		CVE-2014-0037 2024-11-21 11:01 2014-04-28 Show GitHub Exploit DB Packet Storm
290879 - openstack image_registry_and_delivery_service_\(glance\)
icehouse 		The Sheepdog backend in OpenStack Image Registry and Delivery Service (Glance) 2013.2 before 2013.2.4 and icehouse before icehouse-rc2 allows remote authenticated users with permission to insert or m… CWE-20
 Improper Input Validation  		CVE-2014-0162 2024-11-21 11:01 2014-04-28 Show GitHub Exploit DB Packet Storm
290880 - linux
redhat
suse
opensuse 		linux_kernel
enterprise_linux_server
linux_enterprise_server
evergreen
linux_enterprise_real_time_extension
enterprise_linux_desktop
suse_linux_enterprise_server 		The Netlink implementation in the Linux kernel through 3.14.1 does not provide a mechanism for authorizing socket operations based on the opener of a socket, which allows local users to bypass intend… CWE-264
Permissions, Privileges, and Access Controls 		CVE-2014-0181 2024-11-21 11:01 2014-04-27 Show GitHub Exploit DB Packet Storm