Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 10, 2026, 10 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
201561 5.8 警告
Network
VMware - VMware vSphere Client における任意のファイルを読まれる脆弱性 CWE-611
XML 外部エンティティ参照の不適切な制限
CVE-2016-7458 2017-01-10 17:40 2016-11-22 Show GitHub Exploit DB Packet Storm
201562 9.8 緊急
Network
VMware - VMware vSphere Data Protection におけるログインアクセス権を取得される脆弱性 CWE-255
証明書・パスワード管理
CVE-2016-7456 2017-01-10 17:40 2016-12-20 Show GitHub Exploit DB Packet Storm
201563 7.8 重要
Local
VMware - Mac OS X 上で稼動する VMware Tools のグラフィックアクセラレーション機能における権限を取得される脆弱性 CWE-476
NULL ポインタデリファレンス
CVE-2016-7080 2017-01-10 17:40 2016-09-13 Show GitHub Exploit DB Packet Storm
201564 7.8 重要
Local
VMware - Mac OS X 上で稼動する VMware Tools のグラフィックアクセラレーション機能における権限を取得される脆弱性 CWE-476
NULL ポインタデリファレンス
CVE-2016-7079 2017-01-10 17:40 2016-09-13 Show GitHub Exploit DB Packet Storm
201565 5.5 警告
Local
VMware - Mac OS X 上で稼動する VMware Tools におけるカーネルメモリのアドレスを特定される脆弱性 CWE-200
CWE-254
CVE-2016-5328 2017-01-10 17:40 2016-10-25 Show GitHub Exploit DB Packet Storm
201566 6.5 警告
Local
Fabrice Bellard - 'chardev' バックエンドサポートでビルドされた Quick Emulator におけるサービス運用妨害 (DoS) の脆弱性 CWE-416
解放済みメモリの使用
CVE-2016-9923 2017-01-10 17:32 2016-10-24 Show GitHub Exploit DB Packet Storm
201567 6.5 警告
Local
Fabrice Bellard - Cirrus CLGD 54xx VGA Emulator サポートでビルドされた Quick Emulator におけるサービス運用妨害 (DoS) の脆弱性 CWE-369
ゼロ除算
CVE-2016-9921 2017-01-10 17:32 2016-12-5 Show GitHub Exploit DB Packet Storm
201568 6.5 警告
Local
Fabrice Bellard - Virtio GPU デバイスのエミュレータサポートでビルドされた Quick Emulator におけるサービス運用妨害 (DoS) の脆弱性 CWE-400
リソースの枯渇
CVE-2016-9912 2017-01-10 17:32 2016-11-28 Show GitHub Exploit DB Packet Storm
201569 6.5 警告
Local
Fabrice Bellard - USB EHCI Emulation サポートでビルドされた Quick Emulator におけるサービス運用妨害 (DoS) の脆弱性 CWE-400
リソースの枯渇
CVE-2016-9911 2017-01-10 17:32 2016-11-10 Show GitHub Exploit DB Packet Storm
201570 3.3
Local
Fabrice Bellard - Virtio GPU デバイスのエミュレータサポートでビルドされた Quick Emulator における情報漏えいの脆弱性 CWE-200
情報漏えい
CVE-2016-9908 2017-01-10 17:32 2016-11-1 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 10, 2026, 5 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
291661 5.4 MEDIUM
Network
emberjs ember.js Ember.js 1.0.x before 1.0.1, 1.1.x before 1.1.3, 1.2.x before 1.2.1, 1.3.x before 1.3.1, and 1.4.x before 1.4.0-beta.2 allows remote attackers to conduct cross-site scripting (XSS) attacks by leverag… CWE-79
Cross-site Scripting
CVE-2014-0013 2024-11-21 11:01 2018-02-16 Show GitHub Exploit DB Packet Storm
291662 8.8 HIGH
Network
redhat cloudforms_management_engine The check_privileges method in vmdb/app/controllers/application_controller.rb in ManageIQ, as used in Red Hat CloudForms Management Engine (CFME), allows remote authenticated users to bypass authoriz… CWE-264
Permissions, Privileges, and Access Controls
CVE-2014-0087 2024-11-21 11:01 2018-01-12 Show GitHub Exploit DB Packet Storm
291663 9.8 CRITICAL
Network
hawt
redhat
hawtio
jboss_fuse
The admin terminal in Hawt.io does not require authentication, which allows remote attackers to execute arbitrary commands via the k parameter. CWE-287
Improper Authentication
CVE-2014-0121 2024-11-21 11:01 2017-12-30 Show GitHub Exploit DB Packet Storm
291664 8.8 HIGH
Network
hawt
redhat
hawtio
jboss_fuse
Cross-site request forgery (CSRF) vulnerability in the admin terminal in Hawt.io allows remote attackers to hijack the authentication of arbitrary users for requests that run commands on the Karaf se… CWE-352
 Origin Validation Error
CVE-2014-0120 2024-11-21 11:01 2017-12-30 Show GitHub Exploit DB Packet Storm
291665 5.5 MEDIUM
Local
apache karaf Apache Karaf before 4.0.10 enables a shutdown port on the loopback interface, which allows local users to cause a denial of service (shutdown) by sending a shutdown command to all listening high port… CWE-20
 Improper Input Validation 
CVE-2014-0219 2024-11-21 11:01 2017-11-16 Show GitHub Exploit DB Packet Storm
291666 9.8 CRITICAL
Network
apache cordova_in-app-browser
cordova
The CDVInAppBrowser class in the Apache Cordova In-App-Browser standalone plugin (org.apache.cordova.inappbrowser) before 0.3.2 for iOS and the In-App-Browser plugin for iOS from Cordova 2.6.0 throug… CWE-264
Permissions, Privileges, and Access Controls
CVE-2014-0073 2024-11-21 11:01 2017-10-31 Show GitHub Exploit DB Packet Storm
291667 7.5 HIGH
Network
apache cordova_file_transfer
cordova
ios/CDVFileTransfer.m in the Apache Cordova File-Transfer standalone plugin (org.apache.cordova.file-transfer) before 0.4.2 for iOS and the File-Transfer plugin for iOS from Cordova 2.4.0 through 2.9… CWE-20
 Improper Input Validation 
CVE-2014-0072 2024-11-21 11:01 2017-10-31 Show GitHub Exploit DB Packet Storm
291668 7.5 HIGH
Network
apache storm Directory traversal vulnerability in the log viewer in Apache Storm 0.9.0.1 allows remote attackers to read arbitrary files via a .. (dot dot) in the file parameter to log. CWE-22
Path Traversal
CVE-2014-0115 2024-11-21 11:01 2017-10-31 Show GitHub Exploit DB Packet Storm
291669 5.4 MEDIUM
Network
theforeman foreman Cross-site scripting (XSS) vulnerability in the search auto-completion functionality in Foreman before 1.4.4 allows remote authenticated users to inject arbitrary web script or HTML via a crafted key… CWE-79
Cross-site Scripting
CVE-2014-0208 2024-11-21 11:01 2017-10-17 Show GitHub Exploit DB Packet Storm
291670 6.1 MEDIUM
Network
redhat subscription_asset_manager Multiple cross-site scripting (XSS) vulnerabilities in the SAM web application in Red Hat katello-headpin allow remote attackers to inject arbitrary web script or HTML via unspecified parameters. CWE-79
Cross-site Scripting
CVE-2014-0029 2024-11-21 11:01 2017-10-16 Show GitHub Exploit DB Packet Storm