Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 20, 2026, 6 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
201601 5.6 警告
Network
SaltStack - Salt における設定された認証サービスを回避される脆弱性 CWE-287
不適切な認証
CVE-2016-3176 2017-02-16 16:53 2016-03-15 Show GitHub Exploit DB Packet Storm
201602 7.5 重要
Network
Ruby-lang.org - OpenSSL gem for Ruby における暗号保護メカニズムを回避される脆弱性 CWE-310
暗号の問題
CVE-2016-7798 2017-02-16 16:49 2016-09-20 Show GitHub Exploit DB Packet Storm
201603 9.8 緊急
Network
サムスン - Android 用 Samsung Exynos fimg2d ドライバにおける NULL ポインタデリファレンスを引き起こされる脆弱性 CWE-476
NULL ポインタデリファレンス
CVE-2016-6604 2017-02-16 15:41 2016-08-5 Show GitHub Exploit DB Packet Storm
201604 5.5 警告
Local
Dropbox - Dropbox lepton の lepton/jpgcoder.cc の write_ujpg 関数におけるサービス運用妨害 (DoS) の脆弱性 CWE-125
境界外読み取り
CVE-2016-6238 2017-02-16 15:25 2016-07-17 Show GitHub Exploit DB Packet Storm
201605 5.5 警告
Local
Dropbox - Dropbox lepton の lepton/jpgcoder.cc の build_huffcodes 関数におけるサービス運用妨害 (DoS) の脆弱性 CWE-787
境界外書き込み
CVE-2016-6237 2017-02-16 15:25 2016-07-17 Show GitHub Exploit DB Packet Storm
201606 5.5 警告
Local
Dropbox - Dropbox lepton の lepton/jpgcoder.cc の setup_imginfo_jpg 関数におけるサービス運用妨害 (DoS) の脆弱性 CWE-125
境界外読み取り
CVE-2016-6236 2017-02-16 15:25 2016-07-17 Show GitHub Exploit DB Packet Storm
201607 5.5 警告
Local
Dropbox - Dropbox lepton の lepton/jpgcoder.cc の setup_imginfo_jpg 関数におけるサービス運用妨害 (DoS) の脆弱性 CWE-399
リソース管理の問題
CVE-2016-6235 2017-02-16 15:25 2016-07-17 Show GitHub Exploit DB Packet Storm
201608 5.5 警告
Local
Dropbox - Dropbox lepton の lepton/jpgcoder.cc の process_file 関数におけるサービス運用妨害 (DoS) の脆弱性 CWE-20
不適切な入力確認
CVE-2016-6234 2017-02-16 15:25 2016-07-17 Show GitHub Exploit DB Packet Storm
201609 9.8 緊急
Network
The WebM Project
Fedora Project
- libwebp における整数オーバーフローの脆弱性 CWE-190
整数オーバーフローまたはラップアラウンド
CVE-2016-9085 2017-02-16 14:46 2016-10-10 Show GitHub Exploit DB Packet Storm
201610 5.5 警告
Local
cairographics.org - cairo の write_png 関数における整数オーバーフローの脆弱性 CWE-190
整数オーバーフローまたはラップアラウンド
CVE-2016-9082 2017-02-16 14:46 2016-10-20 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 21, 2026, 4:01 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
289151 - freelinking_for_case_tracker_project
freelinking_project
freelinking_for_case_tracker
freelinking
The freelinking module for Drupal, as used in the Freelinking for Case Tracker module, does not properly check access permissions for (1) nodes or (2) users, which allows remote attackers to obtain s… CWE-264
Permissions, Privileges, and Access Controls
CVE-2014-5179 2024-11-21 11:11 2014-08-7 Show GitHub Exploit DB Packet Storm
289152 - efssoft easy_file_sharing_web_server Multiple cross-site scripting (XSS) vulnerabilities in Easy File Sharing (EFS) Web Server 6.8 allow remote authenticated users to inject arbitrary web script or HTML via the content parameter when (1… CWE-79
Cross-site Scripting
CVE-2014-5178 2024-11-21 11:11 2014-08-7 Show GitHub Exploit DB Packet Storm
289153 - status2k status2k admin/options/logs.php in Status2k allows remote authenticated administrators to execute arbitrary commands via shell metacharacters in the Location field in Add Logs in the Admin Panel. CWE-94
Code Injection
CVE-2014-5090 2024-11-21 11:11 2014-08-7 Show GitHub Exploit DB Packet Storm
289154 - status2k status2k SQL injection vulnerability in admin/options/logs.php in Status2k allows remote authenticated administrators to execute arbitrary SQL commands via the log parameter. CWE-89
SQL Injection
CVE-2014-5089 2024-11-21 11:11 2014-08-7 Show GitHub Exploit DB Packet Storm
289155 - status2k status2k Cross-site scripting (XSS) vulnerability in Status2k allows remote attackers to inject arbitrary web script or HTML via the username to login.php. CWE-79
Cross-site Scripting
CVE-2014-5088 2024-11-21 11:11 2014-08-7 Show GitHub Exploit DB Packet Storm
289156 - sphider sphider Multiple SQL injection vulnerabilities in admin/admin.php in Sphider 1.3.6 and earlier, Sphider Pro, and Sphider-plus allow remote attackers to execute arbitrary SQL commands via the (1) site_id or (… CWE-89
SQL Injection
CVE-2014-5082 2024-11-21 11:11 2014-08-7 Show GitHub Exploit DB Packet Storm
289157 - redhat
opensuse
enterprise_linux
opensuse
enterprise_virtualization
libvirt
libvirt 1.0.0 through 1.2.x before 1.2.5, when fine grained access control is enabled, allows local users to read arbitrary files via a crafted XML document containing an XML external entity declarat… CWE-20
 Improper Input Validation 
CVE-2014-5177 2024-11-21 11:11 2014-08-4 Show GitHub Exploit DB Packet Storm
289158 - wireshark wireshark The dissect_ber_constrained_bitstring function in epan/dissectors/packet-ber.c in the ASN.1 BER dissector in Wireshark 1.10.x before 1.10.9 does not properly validate padding values, which allows rem… CWE-119
Incorrect Access of Indexable Resource ('Range Error') 
CVE-2014-5165 2024-11-21 11:11 2014-08-1 Show GitHub Exploit DB Packet Storm
289159 - wireshark wireshark The rlc_decode_li function in epan/dissectors/packet-rlc.c in the RLC dissector in Wireshark 1.10.x before 1.10.9 initializes a certain structure member only after this member is used, which allows r… CWE-119
Incorrect Access of Indexable Resource ('Range Error') 
CVE-2014-5164 2024-11-21 11:11 2014-08-1 Show GitHub Exploit DB Packet Storm
289160 - wireshark wireshark The APN decode functionality in (1) epan/dissectors/packet-gtp.c and (2) epan/dissectors/packet-gsm_a_gm.c in the GTP and GSM Management dissectors in Wireshark 1.10.x before 1.10.9 does not complete… CWE-119
Incorrect Access of Indexable Resource ('Range Error') 
CVE-2014-5163 2024-11-21 11:11 2014-08-1 Show GitHub Exploit DB Packet Storm