Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 4, 2026, 10 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
201411 8.8 重要
Network
シーメンス - 複数の Siemens SIMATIC 製品の統合 Web サーバにおけるクロスサイトリクエストフォージェリの脆弱性 CWE-352
同一生成元ポリシー違反
CVE-2016-8673 2016-11-24 17:46 2016-11-21 Show GitHub Exploit DB Packet Storm
201412 5.3 警告
Network
シーメンス - 複数の Siemens SIMATIC 製品の統合 Web サーバにおける Cookie をキャプチャされる脆弱性 CWE-200
情報漏えい
CVE-2016-8672 2016-11-24 17:46 2016-11-21 Show GitHub Exploit DB Packet Storm
201413 5.3 警告
Network
シーメンス - Siemens SIMATIC CP 1543-1 におけるサービス運用妨害 (DoS) の脆弱性 CWE-20
不適切な入力確認
CVE-2016-8562 2016-11-24 17:46 2016-11-18 Show GitHub Exploit DB Packet Storm
201414 6.6 警告
Network
シーメンス - Siemens SIMATIC CP 1543-1 における権限を取得される脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2016-8561 2016-11-24 17:46 2016-11-18 Show GitHub Exploit DB Packet Storm
201415 8.6 重要
Local
The HDF Group - HDF5 のライブラリにおける初期化時にループのインデックスを配列の境界外にポイントされる脆弱性 CWE-119
バッファエラー
CVE-2016-4333 2016-11-24 17:44 2016-11-15 Show GitHub Exploit DB Packet Storm
201416 8.6 重要
Local
The HDF Group - HDF5 のライブラリにおけるコンテキスト配下で任意のコードを実行される脆弱性 CWE-20
不適切な入力確認
CVE-2016-4332 2016-11-24 17:44 2016-11-15 Show GitHub Exploit DB Packet Storm
201417 8.6 重要
Local
The HDF Group - HDF5 のライブラリにおける任意のコードを実行される脆弱性 CWE-Other
その他
CVE-2016-4331 2016-11-24 17:43 2016-11-15 Show GitHub Exploit DB Packet Storm
201418 8.6 重要
Local
The HDF Group - HDF5 のライブラリにおけるヒープベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー
CVE-2016-4330 2016-11-24 17:43 2016-11-15 Show GitHub Exploit DB Packet Storm
201419 6.1 警告
Network
シスコシステムズ - Cisco Unified Communication Manager の ccmivr ページにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2016-6472 2016-11-24 16:53 2016-11-16 Show GitHub Exploit DB Packet Storm
201420 5.3 警告
Network
シスコシステムズ - Cisco E メール セキュリティ アプライアンス用 AsyncOS の電子メールフィルタリング機能における設定された AMP フィルタを回避される脆弱性 CWE-20
不適切な入力確認
CVE-2016-6463 2016-11-24 16:53 2016-11-16 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 4, 2026, 4:17 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
290121 - openstack compute
icehouse
The Nova EC2 API security group implementation in OpenStack Compute (Nova) 2013.1 before 2013.2.4 and icehouse before icehouse-rc2 does not enforce RBAC policies for (1) add_rules, (2) remove_rules, … CWE-264
Permissions, Privileges, and Access Controls
CVE-2014-0167 2024-11-21 11:01 2014-04-15 Show GitHub Exploit DB Packet Storm
290122 - openstack
opensuse
horizon
opensuse
Cross-site scripting (XSS) vulnerability in the Horizon Orchestration dashboard in OpenStack Dashboard (aka Horizon) 2013.2 before 2013.2.4 and icehouse before icehouse-rc2 allows remote attackers to… CWE-79
Cross-site Scripting
CVE-2014-0157 2024-11-21 11:01 2014-04-15 Show GitHub Exploit DB Packet Storm
290123 - haxx curl
libcurl
cURL and libcurl 7.1 before 7.36.0, when using the OpenSSL, axtls, qsossl or gskit libraries for TLS, recognize a wildcard IP address in the subject's Common Name (CN) field of an X.509 certificate, … CWE-310
Cryptographic Issues
CVE-2014-0139 2024-11-21 11:01 2014-04-15 Show GitHub Exploit DB Packet Storm
290124 - haxx
debian
curl
libcurl
debian_linux
The default configuration in cURL and libcurl 7.10.6 before 7.36.0 re-uses (1) SCP, (2) SFTP, (3) POP3, (4) POP3S, (5) IMAP, (6) IMAPS, (7) SMTP, (8) SMTPS, (9) LDAP, and (10) LDAPS connections, whic… CWE-287
Improper Authentication
CVE-2014-0138 2024-11-21 11:01 2014-04-15 Show GitHub Exploit DB Packet Storm
290125 - openstack python-keystoneclient The auth_token middleware in the OpenStack Python client library for Keystone (aka python-keystoneclient) before 0.7.0 does not properly retrieve user tokens from memcache, which allows remote authen… CWE-255
Credentials Management
CVE-2014-0105 2024-11-21 11:01 2014-04-15 Show GitHub Exploit DB Packet Storm
290126 - xangati xangati_software_release
xangati_xnr
Xangati XSR before 11 and XNR before 7 allows remote attackers to execute arbitrary commands via shell metacharacters in a gui_input_test.pl params parameter to servlet/Installer. CWE-78
OS Command 
CVE-2014-0359 2024-11-21 11:01 2014-04-15 Show GitHub Exploit DB Packet Storm
290127 - xangati xangati_software_release
xangati_xnr
Multiple directory traversal vulnerabilities in Xangati XSR before 11 and XNR before 7 allow remote attackers to read arbitrary files via a .. (dot dot) in (1) the file parameter in a getUpgradeStatu… CWE-22
Path Traversal
CVE-2014-0358 2024-11-21 11:01 2014-04-15 Show GitHub Exploit DB Packet Storm
290128 - amtelco misecuremessages Amtelco miSecureMessages allows remote attackers to read the messages of arbitrary users via an XML request containing a valid license key and a modified contactID value, as demonstrated by a request… CWE-287
Improper Authentication
CVE-2014-0357 2024-11-21 11:01 2014-04-15 Show GitHub Exploit DB Packet Storm
290129 - zyxel n300_netusb_nbg-419n_firmware
n300_netusb_nbg-419n
The ZyXEL Wireless N300 NetUSB NBG-419N router with firmware 1.00(BFQ.6)C0 allows remote attackers to execute arbitrary code via shell metacharacters in input to the (1) detectWeather, (2) set_langua… CWE-78
OS Command 
CVE-2014-0356 2024-11-21 11:01 2014-04-15 Show GitHub Exploit DB Packet Storm
290130 - zyxel n300_netusb_nbg-419n_firmware
n300_netusb_nbg-419n
Multiple stack-based buffer overflows on the ZyXEL Wireless N300 NetUSB NBG-419N router with firmware 1.00(BFQ.6)C0 allow man-in-the-middle attackers to execute arbitrary code via (1) a long temp att… CWE-119
Incorrect Access of Indexable Resource ('Range Error') 
CVE-2014-0355 2024-11-21 11:01 2014-04-15 Show GitHub Exploit DB Packet Storm