Vulnerability Search Top

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

Vulnerability Information Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":June 13, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
201331	9.1	緊急 Network	Doorkeeper project	-	Ruby 用 Doorkeeper gem における反射攻撃を実行される脆弱性	CWE-254 セキュリティ機能	CVE-2016-6582	2017-02-8 16:49	2016-08-19	Show	GitHub Exploit DB Packet Storm

201332	6.1	警告 Network	Infoblox	-	Infoblox Network Automation NetMRI における CRLF インジェクションの脆弱性	CWE-93 CRLF インジェクション	CVE-2016-6484	2017-02-8 16:48	2016-09-6	Show	GitHub Exploit DB Packet Storm

201333	7.5	重要 Network	FFmpeg	-	FFmpeg の libavcodec/exr.c の decode_block 関数におけるヒープベースのバッファオーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2016-6920	2017-02-8 16:46	2016-08-25	Show	GitHub Exploit DB Packet Storm

201334	9.8	緊急 Network	FFmpeg	-	FFmpeg の libavformat/mov.c の mov_build_index 関数における整数オーバーフローの脆弱性	CWE-190 整数オーバーフローまたはラップアラウンド	CVE-2016-6164	2017-02-8 16:46	2016-06-28	Show	GitHub Exploit DB Packet Storm

201335	7.8	重要 Local	TrueCrypt Foundation IDRIX	-	TrueCrypt および VeraCrypt などの製品のインストーラにおける管理者権限で任意のコードを実行される脆弱性	CWE-426 信頼性のない検索パス	CVE-2016-1281	2017-02-8 16:06	2016-01-8	Show	GitHub Exploit DB Packet Storm

201336	9.8	緊急 Network	GNU Project	-	GNU Chess の frontend/move.cc の ValidateMove 関数におけるスタックベースのバッファオーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2015-8972	2017-02-8 15:24	2015-10-29	Show	GitHub Exploit DB Packet Storm

201337	7.5	重要 Network	Atlassian	-	複数の Atlassian Hipchat 製品における HipChat インスタンスの通信用の秘密鍵を取得される脆弱性	CWE-200 情報漏えい	CVE-2016-6668	2017-02-8 15:04	2016-09-21	Show	GitHub Exploit DB Packet Storm

201338	8.8	重要 Network	Arista Networks, Inc.	-	Arista CloudVision Portal における内部構成メカニズムへのアクセス権を取得される脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2016-9012	2017-02-8 12:21	2016-12-1	Show	GitHub Exploit DB Packet Storm

201339	9.8	緊急 Network	Joomla!	-	Joomla! におけるユーザ名などのアサイメントをリセットされる脆弱性	CWE-255 証明書・パスワード管理	CVE-2016-9081	2017-02-8 12:11	2016-10-25	Show	GitHub Exploit DB Packet Storm

201340	5.5	警告 Local	GNU Project	-	bash の popd における制限されたシェルを回避される脆弱性	CWE-416 解放済みメモリの使用	CVE-2016-9401	2017-02-8 11:25	2016-11-17	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:June 13, 2026, 4:20 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
290731	7.8	HIGH Local	suphp	suphp	suPHP before 0.7.2 source-highlighting feature allows security bypass which could lead to arbitrary code execution	CWE-287 Improper Authentication	CVE-2014-1867	2024-11-21 11:05	2019-12-13	Show	GitHub Exploit DB Packet Storm

290732	6.1	MEDIUM Network	posh_project	posh	Multiple cross-site scripting (XSS) vulnerabilities in POSH (aka Posh portal or Portaneo) 3.0 through 3.2.1 allow remote attackers to inject arbitrary web script or HTML via the (1) error parameter t…	CWE-79 Cross-site Scripting	CVE-2014-2214	2024-11-21 11:05	2019-11-23	Show	GitHub Exploit DB Packet Storm

290733	6.1	MEDIUM Network	posh_project	posh	Open redirect vulnerability in the password reset functionality in POSH 3.0 through 3.2.1 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a URL in th…	CWE-601 Open Redirect	CVE-2014-2213	2024-11-21 11:05	2019-11-23	Show	GitHub Exploit DB Packet Storm

290734	5.5	MEDIUM Local	rply_project	rply	python-rply before 0.7.4 insecurely creates temporary files.	CWE-59 Link Following	CVE-2014-1938	2024-11-21 11:05	2019-11-22	Show	GitHub Exploit DB Packet Storm

290735	7.5	HIGH Network	gamera_project	gamera	Gamera before 3.4.1 insecurely creates temporary files.	CWE-20 Improper Input Validation	CVE-2014-1937	2024-11-21 11:05	2019-11-22	Show	GitHub Exploit DB Packet Storm

290736	7.5	HIGH Network	rc_project debian	rc debian_linux	rc before 1.7.1-5 insecurely creates temporary files.	CWE-20 Improper Input Validation	CVE-2014-1936	2024-11-21 11:05	2019-11-22	Show	GitHub Exploit DB Packet Storm

290737	5.3	MEDIUM Network	9base_project debian	9base debian_linux	9base 1:6-6 and 1:6-7 insecurely creates temporary files which results in predictable filenames.	CWE-20 Improper Input Validation	CVE-2014-1935	2024-11-21 11:05	2019-11-22	Show	GitHub Exploit DB Packet Storm

290738	5.5	MEDIUM Local	x_file_explorer_project debian	x_file_explorer debian_linux	X File Explorer (aka xfe) might allow local users to bypass intended access restrictions and gain access to arbitrary files by leveraging failure to use directory masks when creating files on Samba a…	CWE-264 Permissions, Privileges, and Access Controls	CVE-2014-2079	2024-11-21 11:05	2018-07-16	Show	GitHub Exploit DB Packet Storm

290739	7.8	HIGH Local	enlightenment	enlightenment	Enlightenment before 0.17.6 might allow local users to gain privileges via vectors involving the gdb method.	CWE-264 Permissions, Privileges, and Access Controls	CVE-2014-1846	2024-11-21 11:05	2018-04-28	Show	GitHub Exploit DB Packet Storm

290740	7.8	HIGH Local	enlightenment	enlightenment	An unspecified setuid root helper in Enlightenment before 0.17.6 allows local users to gain privileges by leveraging failure to properly sanitize the environment.	CWE-264 Permissions, Privileges, and Access Controls	CVE-2014-1845	2024-11-21 11:05	2018-04-28	Show	GitHub Exploit DB Packet Storm