Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 4, 2026, 2 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
201571 7.5 重要
Network
Debian
openSUSE project
Canonical
xmlsoft.org
- libxml2 の tree.c の xmlStringGetNodeList 関数におけるサービス運用妨害 (DoS) の脆弱性 CWE-20
不適切な入力確認
CVE-2016-3627 2016-11-17 16:31 2016-05-13 Show GitHub Exploit DB Packet Storm
201572 7.5 重要
Network
Debian
openSUSE project
Canonical
xmlsoft.org
- libxml2 の parser.c の xmlParserEntityCheck および xmlParseAttValueComplex 関数におけるサービス運用妨害 (DoS) の脆弱性 CWE-20
不適切な入力確認
CVE-2016-3705 2016-11-17 16:31 2016-05-3 Show GitHub Exploit DB Packet Storm
201573 3.8
Local
Xen プロジェクト
Fedora Project
オラクル
- Xen の arch/x86/i387.c の fpu_fxrstor 関数における他のゲストから重要なレジスタコンテンツ情報を取得される脆弱性 CWE-200
CWE-Other
CVE-2016-3159 2016-11-17 16:30 2016-03-24 Show GitHub Exploit DB Packet Storm
201574 3.8
Local
Xen プロジェクト
Fedora Project
オラクル
- Xen の arch/x86/xstate.c の xrstor 関数における他のゲストから重要なレジスタコンテンツ情報を取得される脆弱性 CWE-200
CWE-Other
CVE-2016-3158 2016-11-17 16:30 2016-03-24 Show GitHub Exploit DB Packet Storm
201575 5.5 警告 オラクル
OpenBSD
- OpenSSH の sshd の session.c における CRLF インジェクションの脆弱性 CWE-Other
その他
CVE-2016-3115 2016-11-17 16:29 2016-03-9 Show GitHub Exploit DB Packet Storm
201576 4.6 警告 Xen プロジェクト
オラクル
- Xen におけるサービス運用妨害 (DoS) の脆弱性 CWE-20
不適切な入力確認
CVE-2016-2270 2016-11-17 16:29 2016-02-17 Show GitHub Exploit DB Packet Storm
201577 4.3 警告 Debian
Canonical
xmlsoft.org
- libxml2 の HTMLparser.c の htmlParseNameComplex 関数におけるサービス運用妨害 (DoS) の脆弱性 CWE-119
バッファエラー
CVE-2016-2073 2016-11-17 16:20 2016-01-25 Show GitHub Exploit DB Packet Storm
201578 7.5 重要
Network
Linux
Canonical
オラクル
- Linux Kernel の drivers/net/ethernet/atheros/atlx/atl2.c の atl2_probe 関数におけるカーネルメモリから重要な情報を取得される脆弱性 CWE-200
情報漏えい
CVE-2016-2117 2016-11-17 16:16 2016-04-21 Show GitHub Exploit DB Packet Storm
201579 6.5 警告
Network
bzip.org - bzip2 の bzip2recover におけるサービス運用妨害 (DoS) の脆弱性 CWE-Other
その他
CVE-2016-3189 2016-11-17 16:08 2016-03-21 Show GitHub Exploit DB Packet Storm
201580 7.1 危険 ISC, Inc. - ISC DHCP にサービス運用妨害 (DoS) の脆弱性 CWE-20
不適切な入力確認
CVE-2016-2774 2016-11-17 16:07 2016-03-8 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 4, 2026, 4:17 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
289901 6.1 MEDIUM
Network
open-xchange open-xchange_appsuite Cross-site scripting (XSS) vulnerability in the backend in Open-Xchange (OX) AppSuite 7.2.x before 7.2.2-rev26 and 7.4.x before 7.4.0-rev16 allows remote attackers to inject arbitrary web script or H… CWE-79
Cross-site Scripting
CVE-2013-7485 2024-11-21 11:01 2020-01-3 Show GitHub Exploit DB Packet Storm
289902 5.9 MEDIUM
Network
ovirt-engine-sdk-python_project ovirt-engine-sdk-python ovirt-engine-sdk-python before 3.4.0.7 and 3.5.0.4 does not verify that the hostname of the remote endpoint matches the Common Name (CN) or subjectAltName as specified by its x.509 certificate in a T… CWE-295
Improper Certificate Validation 
CVE-2014-0161 2024-11-21 11:01 2020-01-3 Show GitHub Exploit DB Packet Storm
289903 5.9 MEDIUM
Network
clusterlabs fence-agents In fence-agents before 4.0.17 does not verify remote SSL certificates in the fence_cisco_ucs.py script which can potentially allow for man-in-the-middle attackers to spoof SSL servers via arbitrary S… CWE-295
Improper Certificate Validation 
CVE-2014-0104 2024-11-21 11:01 2020-01-3 Show GitHub Exploit DB Packet Storm
289904 9.8 CRITICAL
Network
docker
apache
docker
geode
An issue was found in Docker before 1.6.0. Some programs and scripts in Docker are downloaded via HTTP and then executed or used in unsafe ways. CWE-20
 Improper Input Validation 
CVE-2014-0048 2024-11-21 11:01 2020-01-3 Show GitHub Exploit DB Packet Storm
289905 5.5 MEDIUM
Local
theforeman
redhat
hammer_cli
satellite
rubygem-hammer_cli_foreman: File /etc/hammer/cli.modules.d/foreman.yml world readable CWE-522
 Insufficiently Protected Credentials
CVE-2014-0241 2024-11-21 11:01 2019-12-13 Show GitHub Exploit DB Packet Storm
289906 7.5 HIGH
Network
apache qpid-cpp qpid-cpp: ACL policies only loaded if the acl-file option specified enabling DoS by consuming all available file descriptors CWE-400
 Uncontrolled Resource Consumption
CVE-2014-0212 2024-11-21 11:01 2019-12-13 Show GitHub Exploit DB Packet Storm
289907 8.8 HIGH
Network
redhat cloudforms
cloudforms_management_engine
CFME: CSRF protection vulnerability via permissive check of the referrer header CWE-352
 Origin Validation Error
CVE-2014-0197 2024-11-21 11:01 2019-12-13 Show GitHub Exploit DB Packet Storm
289908 9.8 CRITICAL
Network
puppet
redhat
debian
marionette_collective
openshift
debian_linux
mcollective has a default password set at install CWE-798
 Use of Hard-coded Credentials
CVE-2014-0175 2024-11-21 11:01 2019-12-13 Show GitHub Exploit DB Packet Storm
289909 8.8 HIGH
Network
redhat openshift Openshift has shell command injection flaws due to unsanitized data being passed into shell commands. CWE-78
OS Command 
CVE-2014-0163 2024-11-21 11:01 2019-12-12 Show GitHub Exploit DB Packet Storm
289910 5.3 MEDIUM
Network
theforeman foreman Foreman has improper input validation which could lead to partial Denial of Service CWE-20
 Improper Input Validation 
CVE-2014-0091 2024-11-21 11:01 2019-12-12 Show GitHub Exploit DB Packet Storm