Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 1, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
201391 5.5 警告
Local 		Fabrice Bellard
Canonical
オラクル		 - QEMU の hw/virtio/virtio.c の virtqueue_pop 関数におけるサービス運用妨害 (DoS) の脆弱性 CWE-399
リソース管理の問題 		CVE-2016-5403 2016-11-14 17:56 2016-07-20 Show GitHub Exploit DB Packet Storm
201392 8.6 重要
Network 		ISC, Inc.
日本電気
SUSE		 - ISC BIND の named におけるサービス運用妨害 (DoS) の脆弱性 CWE-20
不適切な入力確認 		CVE-2016-1286 2016-11-14 17:56 2016-03-9 Show GitHub Exploit DB Packet Storm
201393 6.8 警告
Network 		ISC, Inc.
日本電気
SUSE		 - ISC BIND の named におけるサービス運用妨害 (DoS) の脆弱性 CWE-20
不適切な入力確認 		CVE-2016-1285 2016-11-14 17:56 2016-03-9 Show GitHub Exploit DB Packet Storm
201394 10 危険 アップル
Debian
Canonical		 - libxml2 の xmlNextChar 関数におけるサービス運用妨害 (DoS) の脆弱性 CWE-119
バッファエラー 		CVE-2016-1762 2016-11-14 17:56 2016-03-21 Show GitHub Exploit DB Packet Storm
201395 7.5 重要
Network 		OpenSSL Project
オラクル		 - OpenSSL における整数オーバーフローの脆弱性 CWE-Other
その他 		CVE-2016-0797 2016-11-14 17:56 2016-03-1 Show GitHub Exploit DB Packet Storm
201396 5.9 警告
Network 		日立
OpenSSL Project
ヒューレット・パッカード・エンタープライズ
オラクル		 - SSLv2 の暗号通信を解読可能な脆弱性 (DROWN 攻撃) CWE-200
CWE-310
CVE-2016-0800 2016-11-14 17:56 2016-03-1 Show GitHub Exploit DB Packet Storm
201397 7.5 重要
Network 		Fedora Project
OpenBSD		 - OpenSSH の sshd の auth-passwd.c の auth_password 関数におけるサービス運用妨害 (DoS) の脆弱性 CWE-20
不適切な入力確認 		CVE-2016-6515 2016-11-14 16:41 2016-07-21 Show GitHub Exploit DB Packet Storm
201398 8.8 重要
Local 		NVIDIA - 複数の NVIDIA 製品の GeForce Experience におけるサービス運用妨害 (DoS) の脆弱性 CWE-119
バッファエラー 		CVE-2016-8812 2016-11-14 15:56 2016-10-19 Show GitHub Exploit DB Packet Storm
201399 7.8 重要
Local 		NVIDIA - 複数の NVIDIA 製品の GPU ディスプレイドライバにおけるアクセス権を取得される脆弱性 CWE-Other
その他 		CVE-2016-7382 2016-11-14 15:56 2016-10-19 Show GitHub Exploit DB Packet Storm
201400 7.8 重要
Local 		NVIDIA - 複数の NVIDIA 製品の GFE GameStream および NVTray プラグインにおける悪意のあるコードを実行される脆弱性 CWE-Other
その他 		CVE-2016-5852 2016-11-14 15:56 2016-08-11 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 1, 2026, 4:12 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
290891 - apple itunes
iphone_os
tvos
safari
webkit 		WebKit, as used in Apple Safari before 6.1.1 and 7.x before 7.0.1, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a craft… CWE-119
Incorrect Access of Indexable Resource ('Range Error')  		CVE-2013-5196 2024-11-21 10:57 2013-12-19 Show GitHub Exploit DB Packet Storm
290892 - apple safari
webkit
itunes 		WebKit, as used in Apple Safari before 6.1.1 and 7.x before 7.0.1, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a craft… CWE-119
Incorrect Access of Indexable Resource ('Range Error')  		CVE-2013-5195 2024-11-21 10:57 2013-12-19 Show GitHub Exploit DB Packet Storm
290893 - ibm flex_system_manager Cross-site scripting (XSS) vulnerability in the web server in IBM Flex System Manager (FSM) 1.1.0 through 1.3 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. CWE-79
Cross-site Scripting 		CVE-2013-5438 2024-11-21 10:57 2013-12-15 Show GitHub Exploit DB Packet Storm
290894 - rockmongo rockmongo Directory traversal vulnerability in RockMongo 1.1.5 and earlier allows remote attackers to read arbitrary files via a .. (dot dot) in the ROCK_LANG cookie, as demonstrated in a login.index action to… CWE-22
Path Traversal 		CVE-2013-5107 2024-11-21 10:57 2013-12-15 Show GitHub Exploit DB Packet Storm
290895 - sonarsource jenkins_plugin The Jenkins Plugin for SonarQube 3.7 and earlier allows remote authenticated users to obtain sensitive information (cleartext passwords) by reading the value in the sonar.sonarPassword parameter from… CWE-310
Cryptographic Issues 		CVE-2013-5676 2024-11-21 10:57 2013-12-14 Show GitHub Exploit DB Packet Storm
290896 - suse
opensuse
mozilla
canonical
fedoraproject
oracle 		linux_enterprise_desktop
linux_enterprise_server
linux_enterprise_software_development_kit
opensuse
firefox
seamonkey
ubuntu_linux
fedora
solaris 		Multiple integer overflows in the binary-search implementation in SpiderMonkey in Mozilla Firefox before 26.0 and SeaMonkey before 2.23 might allow remote attackers to cause a denial of service (out-… CWE-190
 Integer Overflow or Wraparound 		CVE-2013-5619 2024-11-21 10:57 2013-12-12 Show GitHub Exploit DB Packet Storm
290897 9.8 CRITICAL
Network 		mozilla
fedoraproject
opensuse
suse
canonical
redhat 		firefox_esr
firefox
thunderbird
seamonkey
fedora
opensuse
suse_linux_enterprise_software_development_kit
suse_linux_enterprise_desktop
suse_linux_enterprise_server
ubuntu_l… 		Use-after-free vulnerability in the nsNodeUtils::LastRelease function in the table-editing user interface in the editor component in Mozilla Firefox before 26.0, Firefox ESR 24.x before 24.2, Thunder… CWE-416
 Use After Free 		CVE-2013-5618 2024-11-21 10:57 2013-12-12 Show GitHub Exploit DB Packet Storm
290898 9.8 CRITICAL
Network 		mozilla
fedoraproject
opensuse
suse
redhat
canonical 		firefox_esr
firefox
thunderbird
seamonkey
fedora
opensuse
suse_linux_enterprise_software_development_kit
suse_linux_enterprise_desktop
suse_linux_enterprise_server
enterpri… 		Use-after-free vulnerability in the nsEventListenerManager::HandleEventSubType function in Mozilla Firefox before 26.0, Firefox ESR 24.x before 24.2, Thunderbird before 24.2, and SeaMonkey before 2.2… CWE-416
 Use After Free 		CVE-2013-5616 2024-11-21 10:57 2013-12-12 Show GitHub Exploit DB Packet Storm
290899 9.8 CRITICAL
Network 		mozilla
canonical
opensuse
suse
fedoraproject 		firefox_esr
firefox
thunderbird
seamonkey
ubuntu_linux
opensuse
suse_linux_enterprise_software_development_kit
suse_linux_enterprise_desktop
suse_linux_enterprise_server
fe… 		The JavaScript implementation in Mozilla Firefox before 26.0, Firefox ESR 24.x before 24.2, Thunderbird before 24.2, and SeaMonkey before 2.23 does not properly enforce certain typeset restrictions o… NVD-CWE-noinfo
CVE-2013-5615 2024-11-21 10:57 2013-12-12 Show GitHub Exploit DB Packet Storm
290900 - oracle
fedoraproject
canonical
suse
opensuse_project
opensuse
mozilla 		solaris
fedora
ubuntu_linux
linux_enterprise_desktop
linux_enterprise_server
linux_enterprise_software_development_kit
opensuse
firefox 		Mozilla Firefox before 26.0 does not properly remove the Application Installation doorhanger, which makes it easier for remote attackers to spoof a Web App installation site by controlling the timing… NVD-CWE-noinfo
CVE-2013-5611 2024-11-21 10:57 2013-12-12 Show GitHub Exploit DB Packet Storm