Vulnerability Search Top

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

Vulnerability Information Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":June 2, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
201561	9.8	緊急 Network	マイクロフォーカス株式会社	-	Micro Focus Rumba の send.exe および receive.exe コンポーネントにおけるスタックベースのバッファオーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2016-9176	2016-11-8 17:27	2016-10-31	Show	GitHub Exploit DB Packet Storm

201562	8.8	重要 Network	Exponent CMS project	-	Exponent CMS の framework/modules/core/controllers/expRatingController.php における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2016-9242	2016-11-8 17:23	2016-11-4	Show	GitHub Exploit DB Packet Storm

201563	7.5	重要 Network	Exponent CMS project	-	Exponent CMS の /framework/modules/core/controllers/expHTMLEditorController.php における SQL インジェクションの脆弱性	CWE-200 CWE-89	CVE-2016-9184	2016-11-8 17:23	2016-11-3	Show	GitHub Exploit DB Packet Storm

201564	7.5	重要 Network	Exponent CMS project	-	Exponent CMS の /framework/modules/ecommerce/controllers/orderController.php における情報公開の脆弱性	CWE-200 情報漏えい	CVE-2016-9183	2016-11-8 17:23	2016-11-3	Show	GitHub Exploit DB Packet Storm

201565	7.5	重要 Network	Exponent CMS project	-	Exponent CMS におけるパーミッションチェックを回避される脆弱性	CWE-Other その他	CVE-2016-9182	2016-11-8 17:23	2016-11-3	Show	GitHub Exploit DB Packet Storm

201566	8.1	重要 Network	Joomla!	-	Joomla! の Users コンポーネントの controllers/user.php の UsersModelRegistration クラスにおけるユーザアカウントを作成される脆弱性	CWE-20 不適切な入力確認	CVE-2016-8870	2016-11-8 16:46	2016-10-25	Show	GitHub Exploit DB Packet Storm

201567	9.8	緊急 Network	Joomla!	-	Joomla! の Users コンポーネントの controllers/user.php の UsersModelRegistration クラスにおける権限を取得される脆弱性	CWE-20 不適切な入力確認	CVE-2016-8869	2016-11-8 16:46	2016-10-25	Show	GitHub Exploit DB Packet Storm

201568	7.5	重要 Network	シスコシステムズ	-	Data Processing Card 2 を伴う Cisco ASR 5000 シリーズルータの StarOS における加入者セッションの一部を切断される脆弱性	CWE-399 リソース管理の問題	CVE-2016-6455	2016-11-8 14:13	2016-11-2	Show	GitHub Exploit DB Packet Storm

201569	6.5	警告 Network	シスコシステムズ	-	Cisco Hosted Collaboration Mediation Fulfillment の Web インターフェースにおけるクロスサイトリクエストフォージェリの脆弱性	CWE-352 同一生成元ポリシー違反	CVE-2016-6454	2016-11-8 14:13	2016-10-26	Show	GitHub Exploit DB Packet Storm

201570	7.3	重要 Network	シスコシステムズ	-	Cisco Identity Services Engine の Web フレームワークのコードにおける SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2016-6453	2016-11-8 14:13	2016-10-26	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:June 3, 2026, 4:18 a.m.

No	CVSS	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
290001	-	apple todd_miller	mac_os_x sudo	Sudo 1.6.9 before 1.8.5, when env_reset is disabled, does not properly check environment variables for the env_delete restriction, which allows local users with sudo permissions to bypass intended co…	CWE-20 Improper Input Validation	CVE-2014-0106	2024-11-21 11:01	2014-03-12	Show	GitHub Exploit DB Packet Storm

290002	-	freedesktop canonical	udisks ubuntu_linux	Stack-based buffer overflow in udisks before 1.0.5 and 2.x before 2.1.3 allows local users to cause a denial of service (crash) and possibly execute arbitrary code via a long mount point.	CWE-119 Incorrect Access of Indexable Resource ('Range Error')	CVE-2014-0004	2024-11-21 11:01	2014-03-12	Show	GitHub Exploit DB Packet Storm

290003	-	linux	linux_kernel	The keyring_detect_cycle_iterator function in security/keys/keyring.c in the Linux kernel through 3.13.6 does not properly determine whether keyrings are identical, which allows local users to cause …	CWE-310 Cryptographic Issues	CVE-2014-0102	2024-11-21 11:01	2014-03-11	Show	GitHub Exploit DB Packet Storm

290004	-	linux	linux_kernel	Race condition in the inet_frag_intern function in net/ipv4/inet_fragment.c in the Linux kernel through 3.13.6 allows remote attackers to cause a denial of service (use-after-free error) or possibly …	CWE-362 CWE-416 Race Condition Use After Free	CVE-2014-0100	2024-11-21 11:01	2014-03-11	Show	GitHub Exploit DB Packet Storm

290005	-	linux redhat canonical f5	linux_kernel enterprise_linux_server_aus enterprise_linux_server_tus enterprise_linux_desktop enterprise_linux_server enterprise_linux_workstation enterprise_linux_eus ubuntu_lin…	The sctp_sf_do_5_1D_ce function in net/sctp/sm_statefuns.c in the Linux kernel through 3.13.6 does not validate certain auth_enable and auth_capable fields before making an sctp_sf_authenticate call,…	CWE-476 NULL Pointer Dereference	CVE-2014-0101	2024-11-21 11:01	2014-03-11	Show	GitHub Exploit DB Packet Storm

290006	-	linux	linux_kernel	Buffer overflow in the complete_emulated_mmio function in arch/x86/kvm/x86.c in the Linux kernel before 3.13.6 allows guest OS users to execute arbitrary code on the host OS by leveraging a loop that…	CWE-120 Classic Buffer Overflow	CVE-2014-0049	2024-11-21 11:01	2014-03-11	Show	GitHub Exploit DB Packet Storm

290007	-	apache	struts	The ParametersInterceptor in Apache Struts before 2.3.16.2 allows remote attackers to "manipulate" the ClassLoader via the class parameter, which is passed to the getClass method.	NVD-CWE-noinfo	CVE-2014-0094	2024-11-21 11:01	2014-03-11	Show	GitHub Exploit DB Packet Storm

290008	-	gnu	gnutls	lib/x509/verify.c in GnuTLS before 3.1.22 and 3.2.x before 3.2.12 does not properly handle unspecified errors when verifying X.509 certificates from SSL servers, which allows man-in-the-middle attack…	CWE-310 Cryptographic Issues	CVE-2014-0092	2024-11-21 11:01	2014-03-7	Show	GitHub Exploit DB Packet Storm

290009	-	serena	dimensions_cm	Cross-site request forgery (CSRF) vulnerability in the web client in Serena Dimensions CM 12.2 build 7.199.0 allows remote attackers to hijack the authentication of administrators for requests that u…	CWE-352 Origin Validation Error	CVE-2014-0336	2024-11-21 11:01	2014-03-6	Show	GitHub Exploit DB Packet Storm

290010	-	serena	dimensions_cm	Multiple cross-site scripting (XSS) vulnerabilities in the web client in Serena Dimensions CM 12.2 build 7.199.0 allow remote attackers to inject arbitrary web script or HTML via the (1) DB_CONN, (2)…	CWE-79 Cross-site Scripting	CVE-2014-0335	2024-11-21 11:01	2014-03-6	Show	GitHub Exploit DB Packet Storm