Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 3, 2026, 6:08 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
201431 7.5 危険 Mozilla Foundation
オラクル
- Mozilla Firefox などの製品で使用される Network Security Services におけるサービス運用妨害 (DoS) の脆弱性 CWE-119
バッファエラー
CVE-2015-7181 2016-11-22 17:37 2015-11-3 Show GitHub Exploit DB Packet Storm
201432 9.3 危険 Mozilla Foundation
openSUSE project
オラクル
- Mozilla Firefox の BufferSubData 関数におけるバッファオーバーフローの脆弱性 CWE-119
バッファエラー
CVE-2016-1935 2016-11-22 16:50 2016-01-26 Show GitHub Exploit DB Packet Storm
201433 10 危険 Mozilla Foundation
openSUSE project
オラクル
- Mozilla Firefox のブラウザエンジンにおけるサービス運用妨害 (DoS) の脆弱性 CWE-119
バッファエラー
CVE-2016-1930 2016-11-22 16:50 2016-01-26 Show GitHub Exploit DB Packet Storm
201434 8.1 重要
Local
レッドハット
Fabrice Bellard
オラクル
- QEMU の hw/nvram/fw_cfg.c の fw_cfg_write および fw_cfg_read 関数におけるサービス運用妨害 (DoS) の脆弱性 CWE-119
バッファエラー
CVE-2016-1714 2016-11-22 16:49 2016-01-6 Show GitHub Exploit DB Packet Storm
201435 4.3 警告 SIL International
Debian
Fedora Project
Mozilla Foundation
- Mozilla Firefox で使用される Graphite の Libgraphite の FeatureMap.cpp におけるサービス運用妨害 (DoS) の脆弱性 CWE-Other
その他
CVE-2016-1523 2016-11-22 16:49 2016-02-11 Show GitHub Exploit DB Packet Storm
201436 9.3 危険 SIL International
Debian
Fedora Project
Mozilla Foundation
- Mozilla Firefox で使用される Graphite の Libgraphite の Code.cpp におけるサービス運用妨害 (DoS) の脆弱性 CWE-119
バッファエラー
CVE-2016-1522 2016-11-22 16:48 2016-02-11 Show GitHub Exploit DB Packet Storm
201437 6.8 警告 SIL International
Mozilla Foundation
- Mozilla Firefox で使用される Graphite の Libgraphite の directmachine.cpp における任意のコードを実行される脆弱性 CWE-119
バッファエラー
CVE-2016-1521 2016-11-22 16:45 2016-02-11 Show GitHub Exploit DB Packet Storm
201438 6.5 警告
Network
日本電気
OpenSSL Project
オラクル
- OpenSSL に証明書チェーンの検証不備の脆弱性 CWE-Other
その他
CVE-2015-1793 2016-11-22 16:25 2015-07-9 Show GitHub Exploit DB Packet Storm
201439 4.3 警告 MySQL AB
オラクル
- Oracle MySQL の MySQL Server における Server : Replication に関する脆弱性 CWE-noinfo
情報不足
CVE-2015-0381 2016-11-22 16:18 2015-01-20 Show GitHub Exploit DB Packet Storm
201440 8.1 重要
Network
Apache Software Foundation
オラクル
- Apache Struts2 に任意のコード実行の脆弱性 CWE-Other
その他
CVE-2016-3081 2016-11-22 16:17 2016-04-27 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 4, 2026, 4:17 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
290111 - toshibacommerce 4690_point_of_sale_operating_system The default configuration of IBM 4690 OS, as used in Toshiba Global Commerce Solutions 4690 POS and other products, hashes passwords with the ADXCRYPT algorithm, which makes it easier for context-dep… CWE-310
Cryptographic Issues
CVE-2014-0361 2024-11-21 11:01 2014-04-22 Show GitHub Exploit DB Packet Storm
290112 - qemu
redhat
qemu
enterprise_linux
Integer overflow in the virtio_net_handle_mac function in hw/net/virtio-net.c in QEMU 2.0 and earlier allows local guest users to execute arbitrary code via a MAC addresses table update request, whic… CWE-189
Numeric Errors
CVE-2014-0150 2024-11-21 11:01 2014-04-18 Show GitHub Exploit DB Packet Storm
290113 - apache syncope Apache Syncope 1.0.0 before 1.0.9 and 1.1.0 before 1.1.7 allows remote administrators to execute arbitrary Java code via vectors related to Apache Commons JEXL expressions, "derived schema definition… CWE-94
Code Injection
CVE-2014-0111 2024-11-21 11:01 2014-04-17 Show GitHub Exploit DB Packet Storm
290114 - redhat jboss_a-mq
jboss_fuse
JBoss Fuse did not enable encrypted passwords by default in its usage of Apache Zookeeper. This permitted sensitive information disclosure via logging to local users. Note: this description has been … CWE-255
Credentials Management
CVE-2014-0085 2024-11-21 11:01 2014-04-17 Show GitHub Exploit DB Packet Storm
290115 - redhat openstack PackStack in Red Hat OpenStack 4.0 does not enforce the default security groups when deployed to Neutron, which allows remote attackers to bypass intended access restrictions and make unauthorized co… CWE-264
Permissions, Privileges, and Access Controls
CVE-2014-0071 2024-11-21 11:01 2014-04-17 Show GitHub Exploit DB Packet Storm
290116 - springsource
vmware
spring_framework The Jaxb2RootElementHttpMessageConverter in Spring MVC in Spring Framework before 3.2.8 and 4.0.0 before 4.0.2 does not disable external entity resolution, which allows remote attackers to read arbit… CWE-352
 Origin Validation Error
CVE-2014-0054 2024-11-21 11:01 2014-04-17 Show GitHub Exploit DB Packet Storm
290117 - amos_benari rbovirt The rbovirt gem before 0.0.24 for Ruby uses the rest-client gem with SSL verification disabled, which allows remote attackers to conduct man-in-the-middle attacks via unspecified vectors. CWE-310
Cryptographic Issues
CVE-2014-0036 2024-11-21 11:01 2014-04-17 Show GitHub Exploit DB Packet Storm
290118 - oracle
mariadb
redhat
mysql
mariadb
enterprise_linux_desktop
enterprise_linux_server
enterprise_linux_workstation
enterprise_linux_server_tus
enterprise_linux_server_aus
enterprise_linux_eus
Unspecified vulnerability in the MySQL Server component in Oracle MySQL 5.5.35 and earlier and 5.6.15 and earlier allows remote authenticated users to affect availability via vectors related to XML. NVD-CWE-noinfo
CVE-2014-0384 2024-11-21 11:01 2014-04-16 Show GitHub Exploit DB Packet Storm
290119 - gopivotal grails-resources
grails
The default configuration of the Resources plugin 1.0.0 before 1.2.6 for Pivotal Grails 2.0.0 before 2.3.6 does not properly restrict access to files in the WEB-INF directory, which allows remote att… CWE-264
Permissions, Privileges, and Access Controls
CVE-2014-0053 2024-11-21 11:01 2014-04-16 Show GitHub Exploit DB Packet Storm
290120 - apache
oracle
xalan-java
webcenter_sites
The TransformerFactory in Apache Xalan-Java before 2.7.2 does not properly restrict access to certain properties when FEATURE_SECURE_PROCESSING is enabled, which allows remote attackers to bypass exp… CWE-264
Permissions, Privileges, and Access Controls
CVE-2014-0107 2024-11-21 11:01 2014-04-16 Show GitHub Exploit DB Packet Storm