Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":June 14, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
201351	7.5	重要 Network	SAP	-	SAP Adaptive Server Enterprise の OData サーバにおけるサービス運用妨害 (DoS) の脆弱性	CWE-20 不適切な入力確認	CVE-2017-5371	2017-02-7 15:51	2017-01-13	Show	GitHub Exploit DB Packet Storm

201352	6.1	警告 Network	DELL EMC (旧 EMC Corporation)	-	EMC RSA Security Analytics における反射型クロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2016-8215	2017-02-7 14:49	2016-09-13	Show	GitHub Exploit DB Packet Storm

201353	6.7	警告 Local	DELL EMC (旧 EMC Corporation)	-	EMC Avamar Data Store および Avamar Virtual Edition における Avamar サーバを侵害される脆弱性	CWE-275 パーミッションの問題	CVE-2016-8214	2017-02-7 14:48	2016-09-13	Show	GitHub Exploit DB Packet Storm

201354	9.8	緊急 Network	Zoho Corporation	-	ZOHO WebNMS Framework における認証を回避される脆弱性	CWE-20 不適切な入力確認	CVE-2016-6603	2017-02-7 14:23	2016-07-4	Show	GitHub Exploit DB Packet Storm

201355	9.8	緊急 Network	Zoho Corporation	-	ZOHO WebNMS Framework における平文のパスワードを取得される脆弱性	CWE-327 不完全、または危険な暗号アルゴリズムの使用	CVE-2016-6602	2017-02-7 14:23	2016-07-4	Show	GitHub Exploit DB Packet Storm

201356	7.5	重要 Network	Zoho Corporation	-	ZOHO WebNMS Framework のファイルダウンロード機能におけるディレクトリトラバーサルの脆弱性	CWE-22 パス・トラバーサル	CVE-2016-6601	2017-02-7 14:23	2016-07-4	Show	GitHub Exploit DB Packet Storm

201357	9.8	緊急 Network	Zoho Corporation	-	ZOHO WebNMS Framework のファイルアップロード機能におけるディレクトリトラバーサルの脆弱性	CWE-22 パス・トラバーサル	CVE-2016-6600	2017-02-7 14:23	2016-07-4	Show	GitHub Exploit DB Packet Storm

201358	9.8	緊急 Network	Michael Davis	-	python-jose における脆弱性	CWE-361 時間とステータス	CVE-2016-7036	2017-02-7 14:20	2016-09-5	Show	GitHub Exploit DB Packet Storm

201359	9.8	緊急 Network	The GIFLIB project	-	GIFLIB の gifcolor.c における脆弱性	CWE-415 CWE-416	CVE-2016-3177	2017-02-7 14:19	2016-03-15	Show	GitHub Exploit DB Packet Storm

201360	6.5	警告 Network	moment project	-	Node.js 用 moment パッケージの duration 関数におけるサービス運用妨害 (DoS) の脆弱性	CWE-399 リソース管理の問題	CVE-2016-4055	2017-02-7 13:38	2016-01-27	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:June 14, 2026, 4:12 a.m.

No	CVSS	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
289701	-	redhat	enterprise_virtualization_manager	The oVirt Engine backend module, as used in Red Hat Enterprise Virtualization Manager before 3.4.2, uses an "insecure DocumentBuilderFactory," which allows remote attackers to read arbitrary files or…	CWE-20 Improper Input Validation	CVE-2014-3573	2024-11-21 11:08	2014-10-18	Show	GitHub Exploit DB Packet Storm

289702	-	jenkins redhat	jenkins openshift	Jenkins before 1.583 and LTS before 1.565.3 allows remote authenticated users with the Job/READ permission to obtain the default value for the password field of a parameterized job by reading the DOM.	CWE-200 Information Exposure	CVE-2014-3680	2024-11-21 11:08	2014-10-17	Show	GitHub Exploit DB Packet Storm

289703	-	jenkins-ci	monitoring_plugin	The Monitoring plugin before 1.53.0 for Jenkins allows remote attackers to obtain sensitive information by accessing unspecified pages.	NVD-CWE-noinfo	CVE-2014-3679	2024-11-21 11:08	2014-10-17	Show	GitHub Exploit DB Packet Storm

289704	-	redhat jenkins	openshift jenkins	Jenkins before 1.583 and LTS before 1.565.3 does not properly prevent downloading of plugins, which allows remote authenticated users with the Overall/READ permission to obtain sensitive information …	CWE-200 Information Exposure	CVE-2014-3667	2024-11-21 11:08	2014-10-17	Show	GitHub Exploit DB Packet Storm

289705	-	redhat jenkins	openshift jenkins	Jenkins before 1.583 and LTS before 1.565.3 allows remote attackers to execute arbitrary code via a crafted packet to the CLI channel.	CWE-94 Code Injection	CVE-2014-3666	2024-11-21 11:08	2014-10-17	Show	GitHub Exploit DB Packet Storm

289706	-	jenkins redhat	jenkins openshift	Jenkins before 1.583 and LTS before 1.565.3 allows remote authenticated users with the Job/CONFIGURE permission to bypass intended restrictions and create or destroy arbitrary jobs via unspecified ve…	CWE-264 Permissions, Privileges, and Access Controls	CVE-2014-3663	2024-11-21 11:08	2014-10-17	Show	GitHub Exploit DB Packet Storm

289707	-	jenkins redhat	jenkins openshift	Jenkins before 1.583 and LTS before 1.565.3 allows remote attackers to enumerate user names via vectors related to login attempts.	CWE-200 Information Exposure	CVE-2014-3662	2024-11-21 11:08	2014-10-17	Show	GitHub Exploit DB Packet Storm

289708	-	redhat jenkins	openshift jenkins	Jenkins before 1.583 and LTS before 1.565.3 allows remote attackers to cause a denial of service (thread consumption) via vectors related to a CLI handshake.	CWE-399 Resource Management Errors	CVE-2014-3661	2024-11-21 11:08	2014-10-17	Show	GitHub Exploit DB Packet Storm

289709	-	drupal debian	drupal debian_linux	The expandArguments function in the database abstraction API in Drupal core 7.x before 7.32 does not properly construct prepared statements, which allows remote attackers to conduct SQL injection att…	CWE-89 SQL Injection	CVE-2014-3704	2024-11-21 11:08	2014-10-16	Show	GitHub Exploit DB Packet Storm

289710	-	w1.fi debian canonical	hostapd wpa_supplicant debian_linux ubuntu_linux	wpa_supplicant and hostapd 0.7.2 through 2.2, when running with certain configurations and using wpa_cli or hostapd_cli with action scripts, allows remote attackers to execute arbitrary commands via …	CWE-20 Improper Input Validation	CVE-2014-3686	2024-11-21 11:08	2014-10-16	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed