Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 12, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
201351 7.5 重要
Network 		SAP - SAP Adaptive Server Enterprise の OData サーバにおけるサービス運用妨害 (DoS) の脆弱性 CWE-20
不適切な入力確認 		CVE-2017-5371 2017-02-7 15:51 2017-01-13 Show GitHub Exploit DB Packet Storm
201352 6.1 警告
Network 		DELL EMC (旧 EMC Corporation) - EMC RSA Security Analytics における反射型クロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2016-8215 2017-02-7 14:49 2016-09-13 Show GitHub Exploit DB Packet Storm
201353 6.7 警告
Local 		DELL EMC (旧 EMC Corporation) - EMC Avamar Data Store および Avamar Virtual Edition における Avamar サーバを侵害される脆弱性 CWE-275
パーミッションの問題 		CVE-2016-8214 2017-02-7 14:48 2016-09-13 Show GitHub Exploit DB Packet Storm
201354 9.8 緊急
Network 		Zoho Corporation - ZOHO WebNMS Framework における認証を回避される脆弱性 CWE-20
不適切な入力確認 		CVE-2016-6603 2017-02-7 14:23 2016-07-4 Show GitHub Exploit DB Packet Storm
201355 9.8 緊急
Network 		Zoho Corporation - ZOHO WebNMS Framework における平文のパスワードを取得される脆弱性 CWE-327
不完全、または危険な暗号アルゴリズムの使用 		CVE-2016-6602 2017-02-7 14:23 2016-07-4 Show GitHub Exploit DB Packet Storm
201356 7.5 重要
Network 		Zoho Corporation - ZOHO WebNMS Framework のファイルダウンロード機能におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2016-6601 2017-02-7 14:23 2016-07-4 Show GitHub Exploit DB Packet Storm
201357 9.8 緊急
Network 		Zoho Corporation - ZOHO WebNMS Framework のファイルアップロード機能におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2016-6600 2017-02-7 14:23 2016-07-4 Show GitHub Exploit DB Packet Storm
201358 9.8 緊急
Network 		Michael Davis - python-jose における脆弱性 CWE-361
時間とステータス 		CVE-2016-7036 2017-02-7 14:20 2016-09-5 Show GitHub Exploit DB Packet Storm
201359 9.8 緊急
Network 		The GIFLIB project - GIFLIB の gifcolor.c における脆弱性 CWE-415
CWE-416
CVE-2016-3177 2017-02-7 14:19 2016-03-15 Show GitHub Exploit DB Packet Storm
201360 6.5 警告
Network 		moment project - Node.js 用 moment パッケージの duration 関数におけるサービス運用妨害 (DoS) の脆弱性 CWE-399
リソース管理の問題 		CVE-2016-4055 2017-02-7 13:38 2016-01-27 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 12, 2026, 4:20 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
291661 - sophos sophos_anti-virus
scanning_engine 		Sophos Anti-Virus engine (SAVi) before 3.50.1, as used in VDL 4.97G 9.7.x before 9.7.9, 10.0.x before 10.0.11, and 10.3.x before 10.3.1 does not set an ACL for certain global and session objects, whi… CWE-264
Permissions, Privileges, and Access Controls 		CVE-2014-1213 2024-11-21 11:03 2014-02-11 Show GitHub Exploit DB Packet Storm
291662 - tableausoftware tableau_server SQL injection vulnerability in Tableau Server 8.0.x before 8.0.7 and 8.1.x before 8.1.2 allows remote authenticated users to execute arbitrary SQL commands via unspecified vectors. NOTE: this can be… CWE-89
SQL Injection 		CVE-2014-1204 2024-11-21 11:03 2014-02-1 Show GitHub Exploit DB Packet Storm
291663 - eviware
smartbear 		soapui The WSDL/WADL import functionality in SoapUI before 4.6.4 allows remote attackers to execute arbitrary Java code via a crafted request parameter in a WSDL file. CWE-94
Code Injection 		CVE-2014-1202 2024-11-21 11:03 2014-01-25 Show GitHub Exploit DB Packet Storm
291664 - apple pages
mac_os_x
iphone_os 		Double free vulnerability in Apple Pages 2.x before 2.1 and 5.x before 5.1 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted Microsoft W… CWE-415
 Double Free 		CVE-2014-1252 2024-11-21 11:03 2014-01-25 Show GitHub Exploit DB Packet Storm
291665 - apple itunes Apple iTunes before 11.1.4 uses HTTP for the iTunes Tutorials window, which allows man-in-the-middle attackers to spoof content by gaining control over the client-server data stream. CWE-310
Cryptographic Issues 		CVE-2014-1242 2024-11-21 11:03 2014-01-24 Show GitHub Exploit DB Packet Storm
291666 - opensuse
lightdm_gtk\+_greeter_project 		opensuse
lightdm_gtk\+_greeter 		The start_authentication function in lightdm-gtk-greeter.c in LightDM GTK+ Greeter before 1.7.1 does not properly handle the return value from the lightdm_greeter_get_authentication_user function, wh… NVD-CWE-Other
CVE-2014-0979 2024-11-21 11:03 2014-01-23 Show GitHub Exploit DB Packet Storm
291667 - vmware vcloud_director Cross-site request forgery (CSRF) vulnerability in VMware vCloud Director 5.1.x before 5.1.3 allows remote attackers to hijack the authentication of arbitrary users for requests that trigger a logout. CWE-352
 Origin Validation Error 		CVE-2014-1211 2024-11-21 11:03 2014-01-18 Show GitHub Exploit DB Packet Storm
291668 - vmware esxi
workstation
fusion
player
esx 		VMware Workstation 9.x before 9.0.1, VMware Player 5.x before 5.0.1, VMware Fusion 5.x before 5.0.1, VMware ESXi 4.0 through 5.1, and VMware ESX 4.0 and 4.1 allow guest OS users to cause a denial of … NVD-CWE-Other
CVE-2014-1208 2024-11-21 11:03 2014-01-18 Show GitHub Exploit DB Packet Storm
291669 - vmware esxi
esx 		VMware ESXi 4.0 through 5.1 and ESX 4.0 and 4.1 allow remote attackers to cause a denial of service (NULL pointer dereference) by intercepting and modifying Network File Copy (NFC) traffic. NVD-CWE-Other
CVE-2014-1207 2024-11-21 11:03 2014-01-18 Show GitHub Exploit DB Packet Storm
291670 - openwebanalytics open_web_analytics SQL injection vulnerability in the password reset page in Open Web Analytics (OWA) before 1.5.5 allows remote attackers to execute arbitrary SQL commands via the owa_email_address parameter in a base… CWE-89
SQL Injection 		CVE-2014-1206 2024-11-21 11:03 2014-01-16 Show GitHub Exploit DB Packet Storm