Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 30, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
201521 5.9 警告
Network 		日立
オラクル		 - Oracle Java SE および Java SE Embedded における Networking に関する脆弱性 CWE-200
情報漏えい 		CVE-2016-5597 2016-11-9 16:41 2016-10-18 Show GitHub Exploit DB Packet Storm
201522 9.6 緊急
Network 		日立
オラクル		 - Oracle Java SE および Java SE Embedded における Hotspot に関する脆弱性 CWE-Other
その他 		CVE-2016-5582 2016-11-9 16:41 2016-10-18 Show GitHub Exploit DB Packet Storm
201523 8.3 重要
Network 		日立
オラクル		 - Oracle Java SE および Java SE Embedded における Hotspot に関する脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2016-5573 2016-11-9 16:41 2016-10-18 Show GitHub Exploit DB Packet Storm
201524 9.6 緊急
Network 		日立
オラクル		 - Oracle Java SE における AWT に関する脆弱性 CWE-Other
その他 		CVE-2016-5568 2016-11-9 16:41 2016-10-18 Show GitHub Exploit DB Packet Storm
201525 9.6 緊急
Network 		日立
オラクル		 - Oracle Java SE における 2D に関する脆弱性 CWE-Other
その他 		CVE-2016-5556 2016-11-9 16:41 2016-10-18 Show GitHub Exploit DB Packet Storm
201526 4.3 警告
Network 		日立
オラクル		 - Oracle Java SE および Java SE Embedded における JMX に関する脆弱性 CWE-noinfo
情報不足 		CVE-2016-5554 2016-11-9 16:41 2016-10-18 Show GitHub Exploit DB Packet Storm
201527 3.1 低
Network 		日立
オラクル		 - Oracle Java SE および Java SE Embedded における Libraries に関する脆弱性 CWE-noinfo
情報不足 		CVE-2016-5542 2016-11-9 16:40 2016-10-18 Show GitHub Exploit DB Packet Storm
201528 2.6 注意 日本電気
Apache Software Foundation
オラクル		 - Apache Tomcat の AsyncContextImpl.java における重要なリクエスト情報を取得される脆弱性 CWE-200
情報漏えい 		CVE-2013-2071 2016-11-9 16:39 2013-05-9 Show GitHub Exploit DB Packet Storm
201529 8.1 重要
Network 		レッドハット
日本電気
Fedora Project
The Go Project		 - Go の net/http パッケージにおける任意のプロキシサーバに CGI アプリケーションのアウトバウンド HTTP トラフィックをリダイレクトされる脆弱性 CWE-Other
CWE-Other
CVE-2016-5386 2016-11-9 16:35 2016-07-18 Show GitHub Exploit DB Packet Storm
201530 - - Claybird
寺尾 進
日本電気
Micco
アップル
Schezo
Lunascape
pon software
フェンリル株式会社		 - Windows プログラムの DLL 読み込みに脆弱性 - - 2016-11-9 16:25 2010-08-26 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 30, 2026, 4:16 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
290951 - linux linux_kernel arch/arm/kvm/arm.c in the Linux kernel before 3.10 on the ARM platform, when KVM is used, allows host OS users to cause a denial of service (NULL pointer dereference, OOPS, and host OS crash) or poss… CWE-399
 Resource Management Errors 		CVE-2013-5634 2024-11-21 10:57 2013-09-25 Show GitHub Exploit DB Packet Storm
290952 - ibm rational_clearcase The RemoteClient component in IBM Rational ClearCase 8.0.0.03 through 8.0.0.07, and 8.0.1, uses world-writable permissions for the rcleartool script, which allows local users to gain privileges by ap… CWE-264
Permissions, Privileges, and Access Controls 		CVE-2013-5373 2024-11-21 10:57 2013-09-25 Show GitHub Exploit DB Packet Storm
290953 - open-xchange open-xchange_appsuite The (1) REST and (2) memcache interfaces in the Hazelcast cluster API in Open-Xchange AppSuite 7.0.x before 7.0.2-rev15 and 7.2.x before 7.2.2-rev16 do not require authentication, which allows remote… CWE-287
Improper Authentication 		CVE-2013-5200 2024-11-21 10:57 2013-09-25 Show GitHub Exploit DB Packet Storm
290954 - good good_for_enterprise Cross-site scripting (XSS) vulnerability in the Good for Enterprise app before 2.2.4.1659 for iOS allows remote attackers to inject arbitrary web script or HTML via an HTML e-mail message. CWE-79
Cross-site Scripting 		CVE-2013-5118 2024-11-21 10:57 2013-09-25 Show GitHub Exploit DB Packet Storm
290955 - esri arcgis_server The mobile-upload feature in Esri ArcGIS for Server 10.1 through 10.2 allows remote authenticated users to upload .exe files by leveraging (1) publisher or (2) administrator privileges. NVD-CWE-noinfo
CVE-2013-5221 2024-11-21 10:57 2013-09-24 Show GitHub Exploit DB Packet Storm
290956 - freebsd freebsd The nullfs implementation in sys/fs/nullfs/null_vnops.c in the kernel in FreeBSD 8.3 through 9.2 allows local users with certain permissions to bypass access restrictions via a hardlink in a nullfs i… CWE-264
Permissions, Privileges, and Access Controls 		CVE-2013-5710 2024-11-21 10:57 2013-09-24 Show GitHub Exploit DB Packet Storm
290957 - freebsd freebsd The sendfile system-call implementation in sys/kern/uipc_syscalls.c in the kernel in FreeBSD 9.2-RC1 and 9.2-RC2 does not properly pad transmissions, which allows local users to obtain sensitive info… CWE-200
Information Exposure 		CVE-2013-5666 2024-11-21 10:57 2013-09-24 Show GitHub Exploit DB Packet Storm
290958 - synacor zimbra_collaboration_suite Zimbra Collaboration Suite (ZCS) 6.0.16 and earlier allows man-in-the-middle attackers to obtain access by sniffing the network and replaying the ZM_AUTH_TOKEN token. CWE-287
Improper Authentication 		CVE-2013-5119 2024-11-21 10:57 2013-09-24 Show GitHub Exploit DB Packet Storm
290959 - freebsd freebsd The (1) IPv6 and (2) ATM ioctl request handlers in the kernel in FreeBSD 8.3 through 9.2-STABLE do not validate SIOCSIFADDR, SIOCSIFBRDADDR, SIOCSIFDSTADDR, and SIOCSIFNETMASK requests, which allows … CWE-264
Permissions, Privileges, and Access Controls 		CVE-2013-5691 2024-11-21 10:57 2013-09-23 Show GitHub Exploit DB Packet Storm
290960 - cisco mediasense The web interface in Cisco MediaSense does not properly protect the client-server communication channel, which allows remote attackers to obtain sensitive query string or cookie information via unspe… CWE-264
Permissions, Privileges, and Access Controls 		CVE-2013-5502 2024-11-21 10:57 2013-09-23 Show GitHub Exploit DB Packet Storm