Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 4, 2026, 4 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
201371 7.8 重要
Local
Google - Android の Qualcomm bus ドライバにおける権限昇格の脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2016-3904 2016-11-29 13:48 2016-11-7 Show GitHub Exploit DB Packet Storm
201372 10 緊急
Network
General Electric Company - General Electric Bently Nevada 3500/22M の USB およびシリアルポートバージョンにおける特権的アクセス権を取得される脆弱性 CWE-Other
その他
CVE-2016-5788 2016-11-29 11:28 2016-10-6 Show GitHub Exploit DB Packet Storm
201373 2.5
Local
IBM - Windows 上で稼動する IBM Sterling Connect:Direct におけるサービス運用妨害 (DoS) の脆弱性 CWE-noinfo
情報不足
CVE-2016-5992 2016-11-28 16:58 2016-09-15 Show GitHub Exploit DB Packet Storm
201374 4.5 警告
Local
IBM - Windows 上で稼動する IBM Sterling Connect:Direct における権限を取得される脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2016-5991 2016-11-28 16:57 2016-09-15 Show GitHub Exploit DB Packet Storm
201375 5.4 警告
Network
IBM - IBM FileNet Workplace XT および FileNet Workplace におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2016-5981 2016-11-28 16:57 2016-10-7 Show GitHub Exploit DB Packet Storm
201376 5.3 警告
Network
IBM - IBM Tealeaf Customer Experience のリプレイサーバにおける SSRF 攻撃を実行される脆弱性 CWE-Other
その他
CVE-2016-5968 2016-11-28 16:57 2016-09-12 Show GitHub Exploit DB Packet Storm
201377 5.5 警告
Local
IBM - IBM Rational Asset Analyzer のインストールコンポーネントにおける WAS 管理者パスワードを取得される脆弱性 CWE-Other
その他
CVE-2016-5967 2016-11-28 16:57 2016-09-14 Show GitHub Exploit DB Packet Storm
201378 5.4 警告
Network
IBM - IBM Rational DOORS Next Generation におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2016-5955 2016-11-28 16:57 2016-09-19 Show GitHub Exploit DB Packet Storm
201379 9.1 緊急
Network
IBM - IBM Security Access Manager for Web および Security Access Manager における任意のコマンドを実行される脆弱性 CWE-78
OSコマンド・インジェクション
CVE-2016-3028 2016-11-28 16:57 2016-09-21 Show GitHub Exploit DB Packet Storm
201380 8.1 重要
Network
IBM - IBM Security Access Manager for Mobile および Security Access Manager におけるアクセス権を取得される脆弱性 CWE-Other
その他
CVE-2016-3025 2016-11-28 16:57 2016-09-21 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 4, 2026, 4:17 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
290171 - moodle moodle The identity-reporting implementations in mod/forum/renderer.php and mod/quiz/override_form.php in Moodle through 2.3.11, 2.4.x before 2.4.9, 2.5.x before 2.5.5, and 2.6.x before 2.6.2 do not properl… CWE-264
Permissions, Privileges, and Access Controls
CVE-2014-0124 2024-11-21 11:01 2014-03-24 Show GitHub Exploit DB Packet Storm
290172 - moodle moodle mod/chat/chat_ajax.php in Moodle through 2.3.11, 2.4.x before 2.4.9, 2.5.x before 2.5.5, and 2.6.x before 2.6.2 does not properly check for the mod/chat:chat capability during chat sessions, which al… CWE-264
Permissions, Privileges, and Access Controls
CVE-2014-0122 2024-11-21 11:01 2014-03-24 Show GitHub Exploit DB Packet Storm
290173 - moodle moodle The wiki subsystem in Moodle through 2.3.11, 2.4.x before 2.4.9, 2.5.x before 2.5.5, and 2.6.x before 2.6.2 does not properly restrict (1) view and (2) edit access, which allows remote authenticated … CWE-264
Permissions, Privileges, and Access Controls
CVE-2014-0123 2024-11-21 11:01 2014-03-24 Show GitHub Exploit DB Packet Storm
290174 - apache camel The XSLT component in Apache Camel 2.11.x before 2.11.4, 2.12.x before 2.12.3, and possibly earlier versions allows remote attackers to execute arbitrary Java methods via a crafted message. CWE-264
Permissions, Privileges, and Access Controls
CVE-2014-0003 2024-11-21 11:01 2014-03-21 Show GitHub Exploit DB Packet Storm
290175 - apache camel The XSLT component in Apache Camel before 2.11.4 and 2.12.x before 2.12.3 allows remote attackers to read arbitrary files and possibly have other unspecified impact via an XML document containing an … CWE-264
Permissions, Privileges, and Access Controls
CVE-2014-0002 2024-11-21 11:01 2014-03-21 Show GitHub Exploit DB Packet Storm
290176 - fedoraproject 389_directory_server The SASL authentication functionality in 389 Directory Server before 1.2.11.26 allows remote authenticated users to connect as an arbitrary user and gain privileges via the authzid parameter in a SAS… CWE-287
Improper Authentication
CVE-2014-0132 2024-11-21 11:01 2014-03-19 Show GitHub Exploit DB Packet Storm
290177 - redhat cloudforms
cloudforms_3.0_management_engine
The x_button method in the ServiceController (vmdb/app/controllers/service_controller.rb) in Red Hat CloudForms 3.0 Management Engine 5.2 allows remote attackers to execute arbitrary methods via unsp… CWE-94
Code Injection
CVE-2014-0057 2024-11-21 11:01 2014-03-19 Show GitHub Exploit DB Packet Storm
290178 - apache
oracle
canonical
http_server
secure_global_desktop
ubuntu_linux
The log_cookie function in mod_log_config.c in the mod_log_config module in the Apache HTTP Server before 2.4.8 allows remote attackers to cause a denial of service (segmentation fault and daemon cra… NVD-CWE-noinfo
CVE-2014-0098 2024-11-21 11:01 2014-03-18 Show GitHub Exploit DB Packet Storm
290179 - webmin webmin Cross-site scripting (XSS) vulnerability in view.cgi in Webmin before 1.680 allows remote attackers to inject arbitrary web script or HTML via the search parameter. CWE-79
Cross-site Scripting
CVE-2014-0339 2024-11-21 11:01 2014-03-16 Show GitHub Exploit DB Packet Storm
290180 - watchguard fireware Multiple cross-site scripting (XSS) vulnerabilities in the firewall policy management pages in WatchGuard Fireware XTM before 11.8.3 allow remote attackers to inject arbitrary web script or HTML via … CWE-79
Cross-site Scripting
CVE-2014-0338 2024-11-21 11:01 2014-03-16 Show GitHub Exploit DB Packet Storm