Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 27, 2026, 4 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
201621	7.5	重要 Network	シスコシステムズ	-	複数の Cisco Nexus デバイス上で稼動する Cisco NX-OS におけるサービス運用妨害 (DoS) の脆弱性	CWE-399 リソース管理の問題	CVE-2015-6392	2016-10-20 15:23	2015-08-17	Show	GitHub Exploit DB Packet Storm

201622	5.5	警告 Local	systemd project SUSE レッドハット	-	systemd の manager_dispatch_notify_fd 関数におけるサービス運用妨害 (DoS) の脆弱性	CWE-20 不適切な入力確認	CVE-2016-7796	2016-10-20 11:43	2016-09-29	Show	GitHub Exploit DB Packet Storm

201623	5.5	警告 Local	systemd project Canonical	-	systemd の manager_invoke_notify_message 関数におけるサービス運用妨害 (DoS) の脆弱性	CWE-20 不適切な入力確認	CVE-2016-7795	2016-10-20 11:43	2016-09-29	Show	GitHub Exploit DB Packet Storm

201624	4.4	警告 Local	Fabrice Bellard	-	QEMU の mptsas_process_scsi_io_request 関数におけるサービス運用妨害 (DoS) の脆弱性	CWE-Other その他	CVE-2016-7423	2016-10-19 18:08	2016-09-14	Show	GitHub Exploit DB Packet Storm

201625	5.4	警告 Network	フォーティネット	-	ハードディスクを持つアプライアンスモデルの Fortinet FortiManager および FortiAnalyzer の詳細設定ページにおけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2015-7363	2016-10-19 17:49	2015-09-25	Show	GitHub Exploit DB Packet Storm

201626	7.4	重要 Network	Patrick Uiterwijk	-	flask-oidc におけるオープンリダイレクトの脆弱性	CWE-Other その他	CVE-2016-1000001	2016-10-19 17:45	2016-07-14	Show	GitHub Exploit DB Packet Storm

201627	6.1	警告 Network	pagure project	-	Pagure の RAW ファイルエンドポイントにおけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2016-1000007	2016-10-19 16:56	2016-07-4	Show	GitHub Exploit DB Packet Storm

201628	9.8	緊急 Network	Mirror Manager project	-	Mirror Manager のチェックインコードにおける任意のコードを実行される脆弱性	CWE-94 コード・インジェクション	CVE-2016-1000003	2016-10-19 16:56	2016-06-17	Show	GitHub Exploit DB Packet Storm

201629	5.3	警告 Network	Simon Ward	-	WordPress 用 MP3-jPlayer プラグインにおけるパス情報を表示される脆弱性	CWE-200 情報漏えい	CVE-2015-1000008	2016-10-19 16:56	2015-07-12	Show	GitHub Exploit DB Packet Storm

201630	6.1	警告 Network	filedownload project	-	WordPress 用 filedownload プラグインの Open Proxy における脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2015-1000004	2016-10-19 16:56	2015-07-11	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 27, 2026, 4:52 a.m.

No	CVSS	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
290571	-	ibm	spss_analytical_decision_management	Cross-site scripting (XSS) vulnerability in IBM SPSS Analytical Decision Management 6.1 before IF1, 6.2 before IF1, and 7.0 before FP1 IF6 allows remote authenticated users to inject arbitrary web sc…	CWE-79 Cross-site Scripting	CVE-2013-4048	2024-11-21 10:54	2013-09-17	Show	GitHub Exploit DB Packet Storm

290572	-	ibm	spss_analytical_decision_management	Cross-site scripting (XSS) vulnerability in IBM SPSS Analytical Decision Management 6.1 before IF1, 6.2 before IF1, and 7.0 before FP1 IF6 allows remote attackers to inject arbitrary web script or HT…	CWE-79 Cross-site Scripting	CVE-2013-4047	2024-11-21 10:54	2013-09-17	Show	GitHub Exploit DB Packet Storm

290573	-	microsoft	outlook	Double free vulnerability in Microsoft Outlook 2007 SP3 and 2010 SP1 and SP2 allows remote attackers to execute arbitrary code by including many nested S/MIME certificates in an e-mail message, aka "…	CWE-399 Resource Management Errors	CVE-2013-3870	2024-11-21 10:54	2013-09-11	Show	GitHub Exploit DB Packet Storm

290574	-	microsoft	windows_server_2008 active_directory_lightweight_directory_service windows_8 windows_7 windows_server_2012 windows_vista	Microsoft Active Directory Lightweight Directory Service (AD LDS) on Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, and Windows 8 and Active Directory Services on Windows Serve…	CWE-20 Improper Input Validation	CVE-2013-3868	2024-11-21 10:54	2013-09-11	Show	GitHub Exploit DB Packet Storm

290575	-	microsoft	windows_server_2008 windows_2003_server windows_rt windows_xp windows_8 windows_7 windows_vista windows_server_2012	win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows Server 201…	CWE-119 Incorrect Access of Indexable Resource ('Range Error')	CVE-2013-3866	2024-11-21 10:54	2013-09-11	Show	GitHub Exploit DB Packet Storm

290576	-	microsoft	windows_server_2008 windows_2003_server windows_rt windows_xp windows_8 windows_7 windows_vista windows_server_2012	win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows Server 201…	CWE-119 Incorrect Access of Indexable Resource ('Range Error')	CVE-2013-3865	2024-11-21 10:54	2013-09-11	Show	GitHub Exploit DB Packet Storm

290577	-	microsoft	windows_server_2008 windows_2003_server windows_rt windows_xp windows_8 windows_7 windows_vista windows_server_2012	win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows Server 201…	CWE-119 Incorrect Access of Indexable Resource ('Range Error')	CVE-2013-3864	2024-11-21 10:54	2013-09-11	Show	GitHub Exploit DB Packet Storm

290578	-	microsoft	windows_xp windows_server_2003	Microsoft Windows XP SP2 and SP3 and Server 2003 SP2 allow remote attackers to execute arbitrary code via a crafted OLE object in a file, aka "OLE Property Vulnerability."	CWE-119 Incorrect Access of Indexable Resource ('Range Error')	CVE-2013-3863	2024-11-21 10:54	2013-09-11	Show	GitHub Exploit DB Packet Storm

290579	-	microsoft	windows_server_2008 windows_7	Double free vulnerability in Microsoft Windows 7 and Server 2008 R2 SP1 allows local users to gain privileges via a crafted service description that is not properly handled by services.exe in the Ser…	CWE-399 Resource Management Errors	CVE-2013-3862	2024-11-21 10:54	2013-09-11	Show	GitHub Exploit DB Packet Storm

290580	-	microsoft	pinyin_ime office	Microsoft Pinyin IME 2010, when used in conjunction with Microsoft Office 2010 SP1, does not properly restrict configuration options, which allows local users to gain privileges by starting Internet …	CWE-264 Permissions, Privileges, and Access Controls	CVE-2013-3859	2024-11-21 10:54	2013-09-11	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed