Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 29, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
201521 5.9 警告
Network 		日立
オラクル		 - Oracle Java SE および Java SE Embedded における Networking に関する脆弱性 CWE-200
情報漏えい 		CVE-2016-5597 2016-11-9 16:41 2016-10-18 Show GitHub Exploit DB Packet Storm
201522 9.6 緊急
Network 		日立
オラクル		 - Oracle Java SE および Java SE Embedded における Hotspot に関する脆弱性 CWE-Other
その他 		CVE-2016-5582 2016-11-9 16:41 2016-10-18 Show GitHub Exploit DB Packet Storm
201523 8.3 重要
Network 		日立
オラクル		 - Oracle Java SE および Java SE Embedded における Hotspot に関する脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2016-5573 2016-11-9 16:41 2016-10-18 Show GitHub Exploit DB Packet Storm
201524 9.6 緊急
Network 		日立
オラクル		 - Oracle Java SE における AWT に関する脆弱性 CWE-Other
その他 		CVE-2016-5568 2016-11-9 16:41 2016-10-18 Show GitHub Exploit DB Packet Storm
201525 9.6 緊急
Network 		日立
オラクル		 - Oracle Java SE における 2D に関する脆弱性 CWE-Other
その他 		CVE-2016-5556 2016-11-9 16:41 2016-10-18 Show GitHub Exploit DB Packet Storm
201526 4.3 警告
Network 		日立
オラクル		 - Oracle Java SE および Java SE Embedded における JMX に関する脆弱性 CWE-noinfo
情報不足 		CVE-2016-5554 2016-11-9 16:41 2016-10-18 Show GitHub Exploit DB Packet Storm
201527 3.1 低
Network 		日立
オラクル		 - Oracle Java SE および Java SE Embedded における Libraries に関する脆弱性 CWE-noinfo
情報不足 		CVE-2016-5542 2016-11-9 16:40 2016-10-18 Show GitHub Exploit DB Packet Storm
201528 2.6 注意 日本電気
Apache Software Foundation
オラクル		 - Apache Tomcat の AsyncContextImpl.java における重要なリクエスト情報を取得される脆弱性 CWE-200
情報漏えい 		CVE-2013-2071 2016-11-9 16:39 2013-05-9 Show GitHub Exploit DB Packet Storm
201529 8.1 重要
Network 		レッドハット
日本電気
Fedora Project
The Go Project		 - Go の net/http パッケージにおける任意のプロキシサーバに CGI アプリケーションのアウトバウンド HTTP トラフィックをリダイレクトされる脆弱性 CWE-Other
CWE-Other
CVE-2016-5386 2016-11-9 16:35 2016-07-18 Show GitHub Exploit DB Packet Storm
201530 - - Claybird
寺尾 進
日本電気
Micco
アップル
Schezo
Lunascape
pon software
フェンリル株式会社		 - Windows プログラムの DLL 読み込みに脆弱性 - - 2016-11-9 16:25 2010-08-26 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 29, 2026, 4:16 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
290431 - cisco adaptive_security_appliance_software The VPN authentication functionality in Cisco Adaptive Security Appliance (ASA) Software allows remote attackers to cause a denial of service (device reload) by sending many username-from-cert IKE re… CWE-399
 Resource Management Errors 		CVE-2013-5544 2024-11-21 10:57 2013-10-22 Show GitHub Exploit DB Packet Storm
290432 - ibm websphere_datapower_xc10_appliance
websphere_datapower_xc10_appliance_firmware 		The console on IBM WebSphere DataPower XC10 appliances 2.1.0 and 2.5.0 does not properly process logoff actions, which has unspecified impact and remote attack vectors. NVD-CWE-noinfo
CVE-2013-5446 2024-11-21 10:57 2013-10-22 Show GitHub Exploit DB Packet Storm
290433 - ibm websphere_datapower_xc10_appliance
websphere_datapower_xc10_appliance_firmware 		IBM WebSphere DataPower XC10 appliances 2.5.0 do not require authentication for all administrative actions, which allows remote attackers to cause a denial of service via unspecified vectors. CWE-264
Permissions, Privileges, and Access Controls 		CVE-2013-5428 2024-11-21 10:57 2013-10-22 Show GitHub Exploit DB Packet Storm
290434 - cisco adaptive_security_appliance_software Cisco Adaptive Security Appliance (ASA) Software 8.4 before 8.4(7.2), 8.7 before 8.7(1.8), 9.0 before 9.0(3.6), and 9.1 before 9.1(2.8) allows remote attackers to cause a denial of service (firewall-… CWE-399
 Resource Management Errors 		CVE-2013-5542 2024-11-21 10:57 2013-10-21 Show GitHub Exploit DB Packet Storm
290435 - watchguard fireware
watchguard_system_manager 		Multiple cross-site scripting (XSS) vulnerabilities in WebCenter in WatchGuard WSM and Fireware before 11.8 allow remote attackers to inject arbitrary web script or HTML via unspecified parameters. CWE-79
Cross-site Scripting 		CVE-2013-5702 2024-11-21 10:57 2013-10-19 Show GitHub Exploit DB Packet Storm
290436 - cisco unity_connection Directory traversal vulnerability in the attachment service in the Voice Message Web Service (aka VMWS or Cisco Unity Web Service) in Cisco Unity Connection allows remote authenticated users to creat… CWE-22
Path Traversal 		CVE-2013-5534 2024-11-21 10:57 2013-10-19 Show GitHub Exploit DB Packet Storm
290437 - ibm websphere_message_broker The XML4J parser in IBM WebSphere Message Broker 6.1 before 6.1.0.12, 7.0 before 7.0.0.7, and 8.0 before 8.0.0.4 and IBM Integration Bus 9.0 before 9.0.0.1 allows remote attackers to cause a denial o… CWE-399
 Resource Management Errors 		CVE-2013-5372 2024-11-21 10:57 2013-10-19 Show GitHub Exploit DB Packet Storm
290438 - ibm storwize_v7000_unified_software
storwize_v7000_unified 		Cross-site scripting (XSS) vulnerability in IBM Storwize V7000 Unified 1.3.x and 1.4.x before 1.4.2.0 allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors,… CWE-79
Cross-site Scripting 		CVE-2013-5376 2024-11-21 10:57 2013-10-17 Show GitHub Exploit DB Packet Storm
290439 - cisco identity_services_engine_software
identity_services_engine 		Cross-site scripting (XSS) vulnerability in the file-upload interface in Cisco Identity Services Engine (ISE) allows remote authenticated users to inject arbitrary web script or HTML via a crafted fi… CWE-79
Cross-site Scripting 		CVE-2013-5541 2024-11-21 10:57 2013-10-16 Show GitHub Exploit DB Packet Storm
290440 - cisco identity_services_engine_software
identity_services_engine 		The file-upload feature in Cisco Identity Services Engine (ISE) allows remote authenticated users to cause a denial of service (disk consumption and administration-interface outage) by uploading many… CWE-399
 Resource Management Errors 		CVE-2013-5540 2024-11-21 10:57 2013-10-16 Show GitHub Exploit DB Packet Storm