Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 4, 2026, 4 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
201301 7.8 重要
Local 		Linux - Linux Kernel の security/keys/big_key.c におけるサービス運用妨害 (DoS) の脆弱性 - CVE-2016-9313 2016-11-30 16:04 2016-11-10 Show GitHub Exploit DB Packet Storm
201302 7.8 重要
Local 		Linux - Linux Kernel の arch/x86/include/asm/uaccess.h における non-SMEP プラットフォーム上で root アクセス権を取得される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2016-9644 2016-11-30 15:49 2016-11-1 Show GitHub Exploit DB Packet Storm
201303 9.8 緊急
Network 		Linux - Linux Kernel の net/sctp/sm_statefuns.c の sctp_sf_ootb 関数におけるサービス運用妨害 (DoS) の脆弱性 CWE-Other
その他 		CVE-2016-9555 2016-11-30 15:49 2016-11-15 Show GitHub Exploit DB Packet Storm
201304 5.5 警告
Local 		Linux - Linux Kernel の cgroup オフラインの実装におけるサービス運用妨害 (DoS) の脆弱性 CWE-20
CWE-399
CVE-2016-9191 2016-11-30 15:49 2016-11-7 Show GitHub Exploit DB Packet Storm
201305 5.5 警告
Local 		Linux - Linux Kernel の arch/x86/include/asm/uaccess.h の __get_user_asm_ex マクロにおけるカーネルスタックメモリから重要な情報を取得される脆弱性 CWE-200
情報漏えい 		CVE-2016-9178 2016-11-30 15:49 2016-09-24 Show GitHub Exploit DB Packet Storm
201306 7.8 重要
Local 		Linux - Linux Kernel の drivers/vfio/pci/vfio_pci_intrs.c におけるサービス運用妨害 (DoS) の脆弱性 CWE-Other
その他 		CVE-2016-9084 2016-11-30 15:49 2016-10-13 Show GitHub Exploit DB Packet Storm
201307 7.8 重要
Local 		Linux - Linux Kernel の drivers/vfio/pci/vfio_pci.c における整数オーバーフローのチェックを回避される脆弱性 CWE-119
CWE-Other
CVE-2016-9083 2016-11-30 15:49 2016-10-13 Show GitHub Exploit DB Packet Storm
201308 6.8 警告
Physics 		Linux - Linux Kernel の drivers/firewire/net.c における任意のコードを実行される脆弱性 CWE-119
CWE-Other
CVE-2016-8633 2016-11-30 15:49 2016-11-10 Show GitHub Exploit DB Packet Storm
201309 7.8 重要
Local 		Linux - Linux Kernel の net/tipc/msg.c の tipc_msg_build 関数における権限を取得される脆弱性 CWE-119
CWE-264
CVE-2016-8632 2016-11-30 15:49 2016-10-18 Show GitHub Exploit DB Packet Storm
201310 5.5 警告
Local 		Linux - Linux Kernel の arch/x86/kvm/emulate.c の x86_decode_insn 関数におけサービス運用妨害 (DoS) の脆弱性 CWE-Other
その他 		CVE-2016-8630 2016-11-30 15:49 2016-11-10 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 4, 2026, 4:17 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
290601 - cisco unified_communications_manager The disaster recovery system (DRS) component in Cisco Unified Communications Manager (UCM) 9.1(1) and earlier allows remote authenticated users to obtain sensitive device information by reading "extr… CWE-200
Information Exposure 		CVE-2013-6978 2024-11-21 11:00 2013-12-21 Show GitHub Exploit DB Packet Storm
290602 - efrontlearning efront Multiple cross-site scripting (XSS) vulnerabilities in www/administrator.php in eFront 3.6.14 (build 18012) allow remote authenticated administrators to inject arbitrary web script or HTML via the (1… CWE-79
Cross-site Scripting 		CVE-2013-7194 2024-11-21 11:00 2013-12-21 Show GitHub Exploit DB Packet Storm
290603 - etoshop c2c_forward_auction_creator Multiple SQL injection vulnerabilities in C2C Forward Auction Creator 2.0 allow remote attackers to execute arbitrary SQL commands via the (1) pa parameter to auction/asp/list.asp, or the (2) UserID … CWE-89
SQL Injection 		CVE-2013-7193 2024-11-21 11:00 2013-12-21 Show GitHub Exploit DB Packet Storm
290604 - etoshop dynamic_biz_website_builder_quickweb Multiple SQL injection vulnerabilities in Dynamic Biz Website Builder (QuickWeb) allow remote attackers to execute arbitrary SQL commands via the (1) id parameter to apps/news-events/newdetail.asp, o… CWE-89
SQL Injection 		CVE-2013-7192 2024-11-21 11:00 2013-12-21 Show GitHub Exploit DB Packet Storm
290605 - tenmiles helpdesk_pilot Cross-site scripting (XSS) vulnerability in Tenmiles Helpdesk Pilot allows remote attackers to inject arbitrary web script or HTML via the PATH_INFO to the default URI for a ticket. CWE-79
Cross-site Scripting 		CVE-2013-7191 2024-11-21 11:00 2013-12-21 Show GitHub Exploit DB Packet Storm
290606 - typo3 flow Cross-site scripting (XSS) vulnerability in the errorAction method in the ActionController base class in TYPO3 Flow (formerly FLOW3) 1.1.x before 1.1.1 and 2.0.x before 2.0.1 allows remote attackers … CWE-79
Cross-site Scripting 		CVE-2013-7082 2024-11-21 11:00 2013-12-21 Show GitHub Exploit DB Packet Storm
290607 - typo3 typo3 Cross-site scripting (XSS) vulnerability in the Backend User Administration Module in TYPO3 6.0.x before 6.0.12 and 6.1.x before 6.1.7 allows remote attackers to inject arbitrary web script or HTML v… CWE-79
Cross-site Scripting 		CVE-2013-7077 2024-11-21 11:00 2013-12-21 Show GitHub Exploit DB Packet Storm
290608 - typo3 typo3 Cross-site scripting (XSS) vulnerability in Extension Manager in TYPO3 4.5.x before 4.5.32 and 4.7.x before 4.7.17 allows remote attackers to inject arbitrary web script or HTML via unspecified vecto… CWE-79
Cross-site Scripting 		CVE-2013-7076 2024-11-21 11:00 2013-12-21 Show GitHub Exploit DB Packet Storm
290609 - typo3 typo3 Multiple cross-site scripting (XSS) vulnerabilities in Content Editing Wizards in TYPO3 4.5.x before 4.5.32, 4.7.x before 4.7.17, 6.0.x before 6.0.12, 6.1.x before 6.1.7, and the development versions… CWE-79
Cross-site Scripting 		CVE-2013-7074 2024-11-21 11:00 2013-12-21 Show GitHub Exploit DB Packet Storm
290610 - livezilla livezilla Cross-site scripting (XSS) vulnerability in mobile/php/translation/index.php in LiveZilla before 5.1.1.0 allows remote attackers to inject arbitrary web script or HTML via the g_language parameter. CWE-79
Cross-site Scripting 		CVE-2013-7002 2024-11-21 11:00 2013-12-21 Show GitHub Exploit DB Packet Storm