Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":June 14, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
201321	8.8	重要 Network	GitLab.org	-	Gitlab の偽装の機能における他のユーザとして "ログイン" される脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2016-4340	2017-02-8 18:15	2016-05-2	Show	GitHub Exploit DB Packet Storm

201322	9.8	緊急 Network	Magento, Inc.	-	Magento CE および EE における PHP オブジェクトインジェクション攻撃を実行される脆弱性	CWE-74 インジェクション	CVE-2016-4010	2017-02-8 17:23	2016-05-17	Show	GitHub Exploit DB Packet Storm

201323	9.8	緊急 Network	LibGD project	-	GD Graphics ライブラリの gdImageWebPtr 関数におけるメモリ二重解放の脆弱性	CWE-415 二重解放	CVE-2016-6912	2017-02-8 17:03	2016-08-17	Show	GitHub Exploit DB Packet Storm

201324	7.8	重要 Local	シトリックス・システムズ Xen プロジェクト	-	Xen の x86 エミュレータにおける権限を取得される脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2016-9386	2017-02-8 16:53	2016-11-22	Show	GitHub Exploit DB Packet Storm

201325	6	警告 Local	シトリックス・システムズ Xen プロジェクト	-	Xen の x86 セグメントベースの書き込みのエミュレーション機能におけるサービス運用妨害 (DoS) の脆弱性	CWE-20 不適切な入力確認	CVE-2016-9385	2017-02-8 16:53	2016-11-22	Show	GitHub Exploit DB Packet Storm

201326	8.8	重要 Local	シトリックス・システムズ Xen プロジェクト	-	Xen における任意のメモリを変更される脆弱性	CWE-20 不適切な入力確認	CVE-2016-9383	2017-02-8 16:53	2016-11-22	Show	GitHub Exploit DB Packet Storm

201327	7.8	重要 Local	シトリックス・システムズ Xen プロジェクト	-	Xen における権限を取得される脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2016-9382	2017-02-8 16:53	2016-11-22	Show	GitHub Exploit DB Packet Storm

201328	7.5	重要 Local	シトリックス・システムズ Fabrice Bellard	-	Xen の QEMU における権限を取得される脆弱性	CWE-264 CWE-362	CVE-2016-9381	2017-02-8 16:53	2016-11-22	Show	GitHub Exploit DB Packet Storm

201329	8.8	重要 Adjacent	Ubiquiti Networks	-	Ubiquiti Networks UniFi におけるデータベースを変更される脆弱性	CWE-284 不適切なアクセス制御	CVE-2016-7792	2017-02-8 16:52	2016-09-30	Show	GitHub Exploit DB Packet Storm

201330	7.5	重要 Network	jwt project	-	jwt の Encryption/Symmetric.php の verify 関数における署名を偽造される脆弱性	CWE-361 時間とステータス	CVE-2016-7037	2017-02-8 16:50	2016-09-6	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:June 14, 2026, 4:12 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
289591	7.5	HIGH Network	nodejs	node.js	Directory traversal vulnerability in the st module before 0.2.5 for Node.js allows remote attackers to read arbitrary files via a %2e%2e (encoded dot dot) in an unspecified path.	CWE-22 Path Traversal	CVE-2014-3744	2024-11-21 11:08	2017-10-24	Show	GitHub Exploit DB Packet Storm

289592	9.8	CRITICAL Network	node-printer_project	node-printer	The printDirect function in lib/printer.js in the node-printer module 0.0.1 and earlier for Node.js allows remote attackers to execute arbitrary commands via unspecified characters in the lpr command.	CWE-77 Command Injection	CVE-2014-3741	2024-11-21 11:08	2017-10-24	Show	GitHub Exploit DB Packet Storm

289593	8.8	HIGH Network	keycloak	keycloak	The org.keycloak.services.resources.SocialResource.callback method in JBoss KeyCloak before 1.0.3.Final allows remote attackers to conduct cross-site request forgery (CSRF) attacks by leveraging lack…	CWE-352 Origin Validation Error	CVE-2014-3709	2024-11-21 11:08	2017-10-18	Show	GitHub Exploit DB Packet Storm

289594	5.9	MEDIUM Network	redhat	enterprise_mrg	ovirt-engine, as used in Red Hat MRG 3, allows man-in-the-middle attackers to spoof servers by leveraging failure to verify key attributes in vdsm X.509 certificates.	CWE-295 Improper Certificate Validation	CVE-2014-3706	2024-11-21 11:08	2017-10-18	Show	GitHub Exploit DB Packet Storm

289595	5.4	MEDIUM Network	theforeman	foreman	Multiple cross-site scripting (XSS) vulnerabilities in Foreman before 1.5.2 allow remote authenticated users to inject arbitrary web script or HTML via the operating system (1) name or (2) descriptio…	CWE-79 Cross-site Scripting	CVE-2014-3531	2024-11-21 11:08	2017-10-18	Show	GitHub Exploit DB Packet Storm

289596	9.1	CRITICAL Network	redhat	edeploy	Directory traversal vulnerability in eNovance eDeploy allows remote attackers to create arbitrary directories and files and consequently cause a denial of service (resource consumption) via a .. (dot…	CWE-22 Path Traversal	CVE-2014-3702	2024-11-21 11:08	2017-10-17	Show	GitHub Exploit DB Packet Storm

289597	7.5	HIGH Network	igniterealtime	openfire	OpenFire XMPP Server before 3.10 accepts self-signed certificates, which allows remote attackers to perform unspecified spoofing attacks.	CWE-295 Improper Certificate Validation	CVE-2014-3451	2024-11-21 11:08	2017-08-19	Show	GitHub Exploit DB Packet Storm

289598	7.5	HIGH Network	opensuse encfs_project	leap opensuse encfs	The ".encfs6.xml" configuration file in encfs before 1.7.5 allows remote attackers to access sensitive data by setting "blockMACBytes" to 0 and adding 8 to "blockMACRandBytes".	CWE-200 Information Exposure	CVE-2014-3462	2024-11-21 11:08	2017-08-8	Show	GitHub Exploit DB Packet Storm

289599	8.8	HIGH Network	redhat	ansible	The user module in ansible before 1.6.6 allows remote authenticated users to execute arbitrary commands.	CWE-20 Improper Input Validation	CVE-2014-3498	2024-11-21 11:08	2017-06-9	Show	GitHub Exploit DB Packet Storm

289600	9.8	CRITICAL Network	vmware	spring_security	When using the CAS Proxy ticket authentication from Spring Security 3.1 to 3.2.4 a malicious CAS Service could trick another CAS Service into authenticating a proxy ticket that was not associated. Th…	CWE-287 Improper Authentication	CVE-2014-3527	2024-11-21 11:08	2017-05-26	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed