Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 12, 2026, 6 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
201691 5.9 警告
Network
JCraft, Inc. - Windows 上で稼動する JCraft JSch におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル
CVE-2016-5725 2017-01-31 14:01 2016-08-30 Show GitHub Exploit DB Packet Storm
201692 8.8 重要
Local
Firejail project - Firejail におけるサンドボックス外で任意のコマンドを実行される脆弱性 CWE-284
不適切なアクセス制御
CVE-2016-9016 2017-01-31 13:54 2016-10-25 Show GitHub Exploit DB Packet Storm
201693 9.8 緊急
Network
Sociomantic Labs - sociomantic-tsunami git-hub における任意のコードを実行される脆弱性 CWE-284
不適切なアクセス制御
CVE-2016-7794 2017-01-31 13:50 2016-09-7 Show GitHub Exploit DB Packet Storm
201694 8.8 重要
Network
Sociomantic Labs - sociomantic-tsunami git-hub における任意のコードを実行される脆弱性 CWE-284
不適切なアクセス制御
CVE-2016-7793 2017-01-31 13:50 2016-09-7 Show GitHub Exploit DB Packet Storm
201695 4 警告
Local
Info-ZIP - Info-Zip UnZip の list.c の list_files 関数におけるバッファオーバーフローの脆弱性 CWE-119
バッファエラー
CVE-2014-9913 2017-01-31 13:36 2014-11-3 Show GitHub Exploit DB Packet Storm
201696 6.1 警告
Network
BlackBerry - BlackBerry の WatchDox サーバコンポーネントの Appliance-X および vApp における反射型クロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2017-3890 2017-01-31 12:23 2017-01-10 Show GitHub Exploit DB Packet Storm
201697 9.8 緊急
Network
Intelliants - Subrion CMS の includes/classes/ia.core.users.php における PHP オブジェクトインジェクション攻撃を実行される脆弱性 CWE-94
コード・インジェクション
CVE-2017-5543 2017-01-31 11:33 2017-01-17 Show GitHub Exploit DB Packet Storm
201698 6.1 警告
Network
Symphony CMS - Symphony CMS の template/usererror.missing_extension.php におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2017-5542 2017-01-31 11:31 2017-01-18 Show GitHub Exploit DB Packet Storm
201699 5.3 警告
Network
Symphony CMS - Symphony CMS の template/usererror.missing_extension.php におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル
CVE-2017-5541 2017-01-31 11:31 2017-01-18 Show GitHub Exploit DB Packet Storm
201700 7.5 重要
Network
Viprinet Europe GmbH - Viprinet Multichannel VPN Router 300 のハードウェア VPN クライアントにおける反射攻撃を実行される脆弱性 CWE-20
不適切な入力確認
CVE-2014-9755 2017-01-31 11:28 2014-01-30 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 12, 2026, 4:20 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
292261 - cobham ailor_6110_mini-c_gmdss
sailor_6006_message_terminal
sailor_6222_vhf
sailor_6300_mf_\/_hf
The thraneLINK protocol implementation on Cobham devices does not verify firmware signatures, which allows attackers to execute arbitrary code by leveraging physical access or terminal access to send… NVD-CWE-Other
CVE-2014-0328 2024-11-21 11:01 2014-08-15 Show GitHub Exploit DB Packet Storm
292262 - microsoft windows_server_2008
windows_rt
windows_8.1
windows_7
windows_rt_8.1
windows_vista
windows_8
windows_server_2012
windows_server_2003
win32k.sys in the kernel-mode drivers in Microsoft Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and … CWE-264
Permissions, Privileges, and Access Controls
CVE-2014-0318 2024-11-21 11:01 2014-08-13 Show GitHub Exploit DB Packet Storm
292263 - microsoft windows_server_2008
windows_server_2012
windows_rt
windows_8.1
windows_7
windows_rt_8.1
windows_8
Memory leak in the Local RPC (LRPC) server implementation in Microsoft Windows 7 SP1, Windows Server 2008 R2 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, and Windows RT Gold and 8.1 … CWE-399
 Resource Management Errors
CVE-2014-0316 2024-11-21 11:01 2014-08-13 Show GitHub Exploit DB Packet Storm
292264 - redhat
opensuse
libvirt
enterprise_linux
opensuse
enterprise_virtualization
libvirt 0.7.5 through 1.2.x before 1.2.5 allows local users to cause a denial of service (read block and hang) via a crafted XML document containing an XML external entity declaration in conjunction … CWE-20
 Improper Input Validation 
CVE-2014-0179 2024-11-21 11:01 2014-08-4 Show GitHub Exploit DB Packet Storm
292265 - zarafa
fedoraproject
zarafa
webapp
fedora
WebAccess in Zarafa before 7.1.10 and WebApp before 1.6 stores credentials in cleartext, which allows local Apache users to obtain sensitive information by reading the PHP session files. CWE-310
Cryptographic Issues
CVE-2014-0103 2024-11-21 11:01 2014-07-29 Show GitHub Exploit DB Packet Storm
292266 - apache http_server The mod_cgid module in the Apache HTTP Server before 2.4.10 does not have a timeout mechanism, which allows remote attackers to cause a denial of service (process hang) via a request to a CGI script … CWE-399
 Resource Management Errors
CVE-2014-0231 2024-11-21 11:01 2014-07-20 Show GitHub Exploit DB Packet Storm
292267 - apache
debian
redhat
oracle
http_server
debian_linux
jboss_enterprise_application_platform
secure_global_desktop
enterprise_manager_ops_center
Race condition in the mod_status module in the Apache HTTP Server before 2.4.10 allows remote attackers to cause a denial of service (heap-based buffer overflow), or possibly obtain sensitive credent… CWE-362
Race Condition
CVE-2014-0226 2024-11-21 11:01 2014-07-20 Show GitHub Exploit DB Packet Storm
292268 - apache
debian
redhat
http_server
debian_linux
jboss_enterprise_application_platform
The deflate_in_filter function in mod_deflate.c in the mod_deflate module in the Apache HTTP Server before 2.4.10, when request body decompression is enabled, allows remote attackers to cause a denia… CWE-400
 Uncontrolled Resource Consumption
CVE-2014-0118 2024-11-21 11:01 2014-07-20 Show GitHub Exploit DB Packet Storm
292269 - apache
apple
http_server
mac_os_x
The mod_proxy module in the Apache HTTP Server 2.4.x before 2.4.10, when a reverse proxy is enabled, allows remote attackers to cause a denial of service (child-process crash) via a crafted HTTP Conn… CWE-20
 Improper Input Validation 
CVE-2014-0117 2024-11-21 11:01 2014-07-20 Show GitHub Exploit DB Packet Storm
292270 - redhat enterprise_mrg Cumin (aka MRG Management Console), as used in Red Hat Enterprise MRG 2.5, does not include the HTTPOnly flag in a Set-Cookie header for the session cookie, which makes it easier for remote attackers… CWE-200
Information Exposure
CVE-2014-0174 2024-11-21 11:01 2014-07-11 Show GitHub Exploit DB Packet Storm