Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 15, 2026, 6 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
201301 5.5 警告
Local
openSUSE project
libgit2
SUSE
Fedora Project
- libgit2 の oid.c の git_commit_message 関数におけるサービス運用妨害 (DoS) の脆弱性 CWE-125
境界外読み取り
CVE-2016-8568 2017-02-14 13:45 2016-11-3 Show GitHub Exploit DB Packet Storm
201302 6.5 警告
Network
Inverse inc. - SOGo におけるサービス運用妨害 (DoS) の脆弱性 CWE-399
リソース管理の問題
CVE-2016-6188 2017-02-14 12:28 2016-02-17 Show GitHub Exploit DB Packet Storm
201303 6.1 警告
Network
SANADATA - SANADATA SanaCMS の index.asp におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2017-5882 2017-02-14 12:00 2017-02-4 Show GitHub Exploit DB Packet Storm
201304 5.5 警告
Local
Linux - Linux Kernel の drivers/usb/serial/kl5kusb105.c における重要な情報を取得される脆弱性 CWE-532
ログファイルからの情報漏えい
CVE-2017-5549 2017-02-14 11:31 2017-01-20 Show GitHub Exploit DB Packet Storm
201305 6.5 警告
Local
Linux - Linux Kernel の arch/x86/kvm/vmx.c におけるサービス運用妨害 (DoS) の脆弱性 CWE-399
リソース管理の問題
CVE-2017-2596 2017-02-14 11:31 2017-02-6 Show GitHub Exploit DB Packet Storm
201306 4.3 警告
Physics
Linux - Linux Kernel の fs/ext4/super.c の ext4_fill_super 関数におけるサービス運用妨害 (DoS) の脆弱性 CWE-125
境界外読み取り
CVE-2016-10208 2017-02-14 11:31 2016-12-1 Show GitHub Exploit DB Packet Storm
201307 5.5 警告
Local
OpenJPEG project
Fedora Project
- OpenJPEG の tcd.c の opj_tcd_init_tile 関数におけるサービス運用妨害 (DoS) の脆弱性 CWE-369
ゼロ除算
CVE-2016-4797 2017-02-14 11:04 2016-05-9 Show GitHub Exploit DB Packet Storm
201308 5.5 警告
Local
OpenJPEG project
Fedora Project
- OpenJPEG の common/color.c の color_cmyk_to_rgb におけるヒープベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー
CVE-2016-4796 2017-02-14 11:04 2016-05-9 Show GitHub Exploit DB Packet Storm
201309 5.5 警告
Local
OpenJPEG project - OpenJPEG の common/color.c の sycc422_t_rgb 関数におけるサービス運用妨害 (DoS) の脆弱性 CWE-125
境界外読み取り
CVE-2016-3183 2017-02-14 11:04 2016-04-30 Show GitHub Exploit DB Packet Storm
201310 7.5 重要
Network
Artifex Software
Fedora Project
- Artifex Software, Inc. の MuJS の regexp.c の js_regcomp 関数における整数オーバーフローの脆弱性 CWE-190
整数オーバーフローまたはラップアラウンド
CVE-2016-9108 2017-02-14 10:57 2016-10-31 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 15, 2026, 4:10 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
292101 - paratrooper-newrelic_project paratrooper-newrelic The paratrooper-newrelic gem 1.0.1 for Ruby allows local users to obtain the X-Api-Key value by listing the curl process. CWE-200
Information Exposure
CVE-2014-1234 2024-11-21 11:03 2014-01-10 Show GitHub Exploit DB Packet Storm
292102 - tobias_maier paratrooper-pingdom The paratrooper-pingdom gem 1.0.0 for Ruby allows local users to obtain the App-Key, username, and password values by listing the curl process. CWE-200
Information Exposure
CVE-2014-1233 2024-11-21 11:03 2014-01-10 Show GitHub Exploit DB Packet Storm
292103 - foliovision foliopress_wysiwyg Cross-site scripting (XSS) vulnerability in the Foliopress WYSIWYG plugin before 2.6.8.5 for WordPress allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. CWE-79
Cross-site Scripting
CVE-2014-1232 2024-11-21 11:03 2014-01-9 Show GitHub Exploit DB Packet Storm
292104 8.8 HIGH
Network
opensuse open_build_service In the Open Build Service (OBS) before version 2.4.6 the CSRF protection is incorrectly disabled in the web interface, allowing for requests without the user's consent. CWE-352
 Origin Validation Error
CVE-2014-0594 2024-11-21 11:02 2018-06-9 Show GitHub Exploit DB Packet Storm
292105 9.8 CRITICAL
Network
opensuse open_build_service The set_version script as shipped with obs-service-set_version is a source validator for the Open Build Service (OBS). In versions prior to 0.5.3-1.1 this script did not properly sanitize the input p… CWE-20
 Improper Input Validation 
CVE-2014-0593 2024-11-21 11:02 2018-06-9 Show GitHub Exploit DB Packet Storm
292106 5.3 MEDIUM
Local
ibm rational_focal_point IBM Rational Focal Point 6.4.0, 6.4.1, 6.5.1, 6.5.2, and 6.6.0 use a weak algorithm to hash passwords, which makes it easier for context-dependent attackers to obtain cleartext values via a brute-for… CWE-326
Inadequate Encryption Strength
CVE-2014-0841 2024-11-21 11:02 2018-04-28 Show GitHub Exploit DB Packet Storm
292107 6.5 MEDIUM
Network
ibm integrated_management_module_firmware Integrated Management Module II (IMM2) on IBM Flex System, NeXtScale, System x3xxx, and System x iDataPlex systems might allow remote authenticated users to obtain sensitive account information via v… CWE-200
Information Exposure
CVE-2014-0882 2024-11-21 11:02 2018-04-26 Show GitHub Exploit DB Packet Storm
292108 7.4 HIGH
Network
ibm integrated_management_module_firmware The TPM on Integrated Management Module II (IMM2) on IBM Flex System x222 servers with firmware 1.00 through 3.56 allows remote attackers to obtain sensitive key information or cause a denial of serv… CWE-284
Improper Access Control
CVE-2014-0881 2024-11-21 11:02 2018-04-26 Show GitHub Exploit DB Packet Storm
292109 4.1 MEDIUM
Local
ibm security_key_lifecycle_manager The installation process in IBM Security Key Lifecycle Manager 2.5 stores unencrypted credentials, which might allow local users to obtain sensitive information by leveraging root access. IBM X-Force… CWE-255
CWE-200
Credentials Management
Information Exposure
CVE-2014-0872 2024-11-21 11:02 2018-04-26 Show GitHub Exploit DB Packet Storm
292110 6.1 MEDIUM
Network
ibm power_hardware_management_console IBM Power HMC 7.1.0 through 7.8.0 and 7.3.5 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended function… CWE-79
Cross-site Scripting
CVE-2014-0883 2024-11-21 11:02 2018-04-21 Show GitHub Exploit DB Packet Storm