Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 10, 2026, 2 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
201651 9.8 緊急
Network 		dotCMS - dotCMS の REST API における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2016-2355 2017-01-4 10:33 2016-04-12 Show GitHub Exploit DB Packet Storm
201652 6.5 警告
Network 		Canonical
Apport project		 - Apport の悪意のある Apport クラッシュファイルの "RespawnCommand" または "ProcCmdline" フィールドにおける restart コマンドを実行される脆弱性 CWE-284
不適切なアクセス制御 		CVE-2016-9951 2016-12-28 11:59 2016-12-14 Show GitHub Exploit DB Packet Storm
201653 7.8 重要
Local 		NVIDIA - NVIDIA の Windows GPU ディスプレイドライバの DxgDdiEscape 用カーネルモードレイヤのハンドラにおけるサービス運用妨害 (DoS) の脆弱性 CWE-119
バッファエラー 		CVE-2016-8825 2016-12-28 11:58 2016-12-14 Show GitHub Exploit DB Packet Storm
201654 7.8 重要
Local 		NVIDIA - NVIDIA の Windows GPU ディスプレイドライバの DxgDdiEscape 用カーネルモードレイヤのハンドラにおける特権ユーザ専用のレジストリの一部に書き込まれる脆弱性 CWE-284
不適切なアクセス制御 		CVE-2016-8824 2016-12-28 11:58 2016-12-14 Show GitHub Exploit DB Packet Storm
201655 7.8 重要
Local 		NVIDIA - NVIDIA の Windows GPU ディスプレイドライバの DxgDdiEscape 用カーネルモードレイヤのハンドラにおけるサービス運用妨害 (DoS) の脆弱性 CWE-119
バッファエラー 		CVE-2016-8823 2016-12-28 11:58 2016-12-14 Show GitHub Exploit DB Packet Storm
201656 7.8 重要
Local 		NVIDIA - NVIDIA の Windows GPU ディスプレイドライバの DxgDdiEscape 用カーネルモードレイヤのハンドラにおける任意の物理メモリにアクセスされる脆弱性 CWE-284
不適切なアクセス制御 		CVE-2016-8821 2016-12-28 11:58 2016-12-14 Show GitHub Exploit DB Packet Storm
201657 7.8 重要
Local 		Canonical
Apport project		 - Apport のクラッシュファイルの "Package" および "SourcePackage" フィールドにおけるパストラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2016-9950 2016-12-28 11:47 2016-12-14 Show GitHub Exploit DB Packet Storm
201658 7.8 重要
Local 		Canonical
Apport project		 - Apport の apport/ui.py における任意の Python コードを実行される脆弱性 CWE-94
コード・インジェクション 		CVE-2016-9949 2016-12-28 11:47 2016-12-14 Show GitHub Exploit DB Packet Storm
201659 7.4 重要
Network 		Pivotal Software, Inc. - Pivotal Cloud Foundry Elastic Runtime コンポーネントにおけるオープンリダイレクトの脆弱性 CWE-601
オープンリダイレクト 		CVE-2016-6657 2016-12-28 11:47 2016-11-7 Show GitHub Exploit DB Packet Storm
201660 7.2 重要
Network 		Pivotal Software, Inc. - Pivotal Greenplum におけるシステムに任意のコマンドを挿入される脆弱性 CWE-77
コマンドインジェクション 		CVE-2016-6656 2016-12-28 11:47 2016-12-16 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 10, 2026, 5 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
291941 - rubyonrails
opensuse_project
opensuse
redhat 		ruby_on_rails
rails
opensuse
enterprise_linux
cloudforms 		Multiple cross-site scripting (XSS) vulnerabilities in actionview/lib/action_view/helpers/number_helper.rb in Ruby on Rails before 3.2.17, 4.0.x before 4.0.3, and 4.1.x before 4.1.0.beta2 allow remot… CWE-79
Cross-site Scripting 		CVE-2014-0081 2024-11-21 11:01 2014-02-21 Show GitHub Exploit DB Packet Storm
291942 - rubyonrails rails SQL injection vulnerability in activerecord/lib/active_record/connection_adapters/postgresql/cast.rb in Active Record in Ruby on Rails 4.0.x before 4.0.3, and 4.1.0.beta1, when PostgreSQL is used, al… CWE-89
SQL Injection 		CVE-2014-0080 2024-11-21 11:01 2014-02-21 Show GitHub Exploit DB Packet Storm
291943 - sonicwall global_management_system
analyzer 		Cross-site scripting (XSS) vulnerability in mainPage in Dell SonicWALL GMS before 7.1 SP2, SonicWALL Analyzer before 7.1 SP2, and SonicWALL UMA E5000 before 7.1 SP2 might allow remote attackers to in… CWE-79
Cross-site Scripting 		CVE-2014-0332 2024-11-21 11:01 2014-02-15 Show GitHub Exploit DB Packet Storm
291944 - apache subversion The get_resource function in repos.c in the mod_dav_svn module in Apache Subversion before 1.7.15 and 1.8.x before 1.8.6, when SVNListParentPath is enabled, allows remote attackers to cause a denial … CWE-20
 Improper Input Validation  		CVE-2014-0032 2024-11-21 11:01 2014-02-15 Show GitHub Exploit DB Packet Storm
291945 - redhat jboss_enterprise_application_platform
jboss_wildfly_application_server 		Red Hat JBoss Enterprise Application Platform (JBEAP) 6.2.0 and JBoss WildFly Application Server, when run under a security manager, do not properly restrict access to the Modular Service Container (… CWE-264
Permissions, Privileges, and Access Controls 		CVE-2014-0018 2024-11-21 11:01 2014-02-15 Show GitHub Exploit DB Packet Storm
291946 - microsoft .net_framework VsaVb7rt.dll in Microsoft .NET Framework 2.0 SP2 and 3.5.1 does not implement the ASLR protection mechanism, which makes it easier for remote attackers to execute arbitrary code via a crafted web sit… CWE-264
Permissions, Privileges, and Access Controls 		CVE-2014-0295 2024-11-21 11:01 2014-02-12 Show GitHub Exploit DB Packet Storm
291947 - microsoft microsoft_forefront_protection_2010 Microsoft Forefront Protection 2010 for Exchange Server does not properly parse e-mail content, which might allow remote attackers to execute arbitrary code via a crafted message, aka "RCE Vulnerabil… CWE-94
Code Injection 		CVE-2014-0294 2024-11-21 11:01 2014-02-12 Show GitHub Exploit DB Packet Storm
291948 - microsoft internet_explorer Microsoft Internet Explorer 9 through 11 allows remote attackers to read content from a different (1) domain or (2) zone via a crafted web site, aka "Internet Explorer Cross-domain Information Disclo… CWE-200
Information Exposure 		CVE-2014-0293 2024-11-21 11:01 2014-02-12 Show GitHub Exploit DB Packet Storm
291949 - microsoft internet_explorer Microsoft Internet Explorer 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Internet Explorer Memory Corruption Vuln… CWE-119
Incorrect Access of Indexable Resource ('Range Error')  		CVE-2014-0290 2024-11-21 11:01 2014-02-12 Show GitHub Exploit DB Packet Storm
291950 - microsoft internet_explorer Microsoft Internet Explorer 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Internet Explorer Memory Corruption Vuln… CWE-119
Incorrect Access of Indexable Resource ('Range Error')  		CVE-2014-0289 2024-11-21 11:01 2014-02-12 Show GitHub Exploit DB Packet Storm