Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 10, 2026, 2 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
201501 5.5 警告
Local 		Fabrice Bellard - e1000 NIC エミュレーションサポートでビルドされた QEMU におけるサービス運用妨害 (DoS) の脆弱性 CWE-399
リソース管理の問題 		CVE-2016-1981 2017-01-12 15:33 2016-01-19 Show GitHub Exploit DB Packet Storm
201502 5.5 警告
Local 		Fabrice Bellard - 32-bit Windows ゲストサポート用に TPR 最適化でビルドされた QEMU におけるサービス運用妨害 (DoS) の脆弱性 CWE-476
NULL ポインタデリファレンス 		CVE-2016-1922 2017-01-12 15:33 2016-01-15 Show GitHub Exploit DB Packet Storm
201503 5.5 警告
Local 		Fabrice Bellard - QEMU の exec.c の cpu_physical_memory_write_rom_internal 関数におけるサービス運用妨害 (DoS) の脆弱性 CWE-20
不適切な入力確認 		CVE-2015-8818 2017-01-12 15:33 2015-07-6 Show GitHub Exploit DB Packet Storm
201504 5.5 警告
Local 		Fabrice Bellard - 'address_space_translate' を使用するようにビルドされた QEMU におけるサービス運用妨害 (DoS) の脆弱性 CWE-125
CWE-787
CVE-2015-8817 2017-01-12 15:33 2015-03-18 Show GitHub Exploit DB Packet Storm
201505 5.5 警告
Local 		Fabrice Bellard - VMWARE VMXNET3 準仮想化 NIC エミュレータサポートでビルドされた QEMU におけるサービス運用妨害 (DoS) の脆弱性 CWE-284
不適切なアクセス制御 		CVE-2015-8745 2017-01-12 15:33 2015-10-12 Show GitHub Exploit DB Packet Storm
201506 5.5 警告
Local 		Fabrice Bellard - VMWARE VMXNET3 準仮想化 NIC エミュレータサポートでビルドされた QEMU におけるサービス運用妨害 (DoS) の脆弱性 CWE-20
不適切な入力確認 		CVE-2015-8744 2017-01-12 15:33 2015-10-12 Show GitHub Exploit DB Packet Storm
201507 7.1 重要
Local 		Fabrice Bellard - NE2000 デバイスエミュレーションサポートでビルドされた QEMU におけるQEMU メモリのバイトをリークされる脆弱性 CWE-125
CWE-787
CVE-2015-8743 2017-01-12 15:33 2015-09-21 Show GitHub Exploit DB Packet Storm
201508 6.5 警告
Local 		Fabrice Bellard - Rocker スイッチエミュレーションサポートでビルドされた QEMU におけるサービス運用妨害 (DoS) の脆弱性 CWE-189
数値処理の問題 		CVE-2015-8701 2017-01-12 15:33 2015-12-28 Show GitHub Exploit DB Packet Storm
201509 6.5 警告
Local 		Fabrice Bellard - QEMU の hw/9pfs/9p-proxy.c におけるサービス運用妨害 (DoS) の脆弱性 CWE-400
リソースの枯渇 		CVE-2016-9916 2017-01-12 15:26 2016-11-16 Show GitHub Exploit DB Packet Storm
201510 6.5 警告
Local 		Fabrice Bellard - QEMU の hw/9pfs/9p-handle.c におけるサービス運用妨害 (DoS) の脆弱性 CWE-400
リソースの枯渇 		CVE-2016-9915 2017-01-12 15:26 2016-11-16 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 10, 2026, 5 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
291671 9.8 CRITICAL
Network 		apache roller The XML-RPC protocol support in Apache Roller before 5.0.3 allows attackers to conduct XML External Entity (XXE) attacks via unspecified vectors. CWE-611
XXE 		CVE-2014-0030 2024-11-21 11:01 2017-10-10 Show GitHub Exploit DB Packet Storm
291672 7.8 HIGH
Local 		docker docker Docker before 1.5 allows local users to have unspecified impact via vectors involving unsafe /tmp usage. NVD-CWE-noinfo
CVE-2014-0047 2024-11-21 11:01 2017-10-7 Show GitHub Exploit DB Packet Storm
291673 5.3 MEDIUM
Network 		apache wicket In Apache Wicket 1.5.10 or 6.13.0, by issuing requests to special urls handled by Wicket, it is possible to check for the existence of particular classes in the classpath and thus check whether a thi… CWE-200
Information Exposure 		CVE-2014-0043 2024-11-21 11:01 2017-10-3 Show GitHub Exploit DB Packet Storm
291674 6.1 MEDIUM
Network 		redhat satellite Cross-site scripting (XSS) vulnerability in Red Hat Satellite 6.0.3. CWE-79
Cross-site Scripting 		CVE-2014-0141 2024-11-21 11:01 2017-08-29 Show GitHub Exploit DB Packet Storm
291675 5.5 MEDIUM
Local 		qemu qemu The qcow2_open function in the (block/qcow2.c) in QEMU before 1.7.2 and 2.x before 2.0.0 allows local users to cause a denial of service (NULL pointer dereference) via a crafted image which causes an… CWE-476
 NULL Pointer Dereference 		CVE-2014-0146 2024-11-21 11:01 2017-08-11 Show GitHub Exploit DB Packet Storm
291676 7.8 HIGH
Local 		qemu qemu Multiple buffer overflows in QEMU before 1.7.2 and 2.x before 2.0.0, allow local users to cause a denial of service (crash) or possibly execute arbitrary code via a large (1) L1 table in the qcow2_sn… CWE-119
Incorrect Access of Indexable Resource ('Range Error')  		CVE-2014-0145 2024-11-21 11:01 2017-08-11 Show GitHub Exploit DB Packet Storm
291677 5.5 MEDIUM
Local 		qemu qemu QEMU, possibly before 2.0.0, allows local users to cause a denial of service (divide-by-zero error and crash) via a zero value in the (1) tracks field to the seek_to_sector function in block/parallel… CWE-369
 Divide By Zero 		CVE-2014-0142 2024-11-21 11:01 2017-08-11 Show GitHub Exploit DB Packet Storm
291678 7.0 HIGH
Local 		redhat
qemu 		enterprise_linux
qemu 		Multiple integer overflows in the block drivers in QEMU, possibly before 2.0.0, allow local users to cause a denial of service (crash) via a crafted catalog size in (1) the parallels_open function in… CWE-190
 Integer Overflow or Wraparound 		CVE-2014-0143 2024-11-21 11:01 2017-08-11 Show GitHub Exploit DB Packet Storm
291679 8.8 HIGH
Network 		pivotal_software
vmware 		spring_framework When processing user provided XML documents, the Spring Framework 4.0.0 to 4.0.4, 3.0.0 to 3.2.8, and possibly earlier unsupported versions did not disable by default the resolution of URI references… CWE-611
XXE 		CVE-2014-0225 2024-11-21 11:01 2017-05-26 Show GitHub Exploit DB Packet Storm
291680 7.3 HIGH
Network 		vmware spring_security The ActiveDirectoryLdapAuthenticator in Spring Security 3.2.0 to 3.2.1 and 3.1.0 to 3.1.5 does not check the password length. If the directory allows anonymous binds then it may incorrectly authentic… CWE-287
Improper Authentication 		CVE-2014-0097 2024-11-21 11:01 2017-05-26 Show GitHub Exploit DB Packet Storm