Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 6, 2026, 2 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
201701 6.1 警告
Network
Google
openSUSE project
- Google Chrome で使用される Blink の WebKit/Source/platform/v8_inspector/V8Debugger.cpp におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2016-5164 2016-11-18 13:59 2016-08-31 Show GitHub Exploit DB Packet Storm
201702 4.3 警告
Network
Google
openSUSE project
- Google Chrome の双方向テキストの実装におけるアドレスバーを偽装される脆弱性 CWE-Other
その他
CVE-2016-5163 2016-11-18 13:59 2016-08-31 Show GitHub Exploit DB Packet Storm
201703 6.5 警告
Network
Google
openSUSE project
- Google Chrome の extensions/browser/url_request_util.cc におけるクリックジャッキング攻撃を実行される脆弱性 CWE-Other
その他
CVE-2016-5162 2016-11-18 13:59 2016-08-31 Show GitHub Exploit DB Packet Storm
201704 8.8 重要
Network
Google
openSUSE project
- Google Chrome で使用される Blink におけるサービス運用妨害 (DoS) の脆弱性 CWE-Other
その他
CVE-2016-5161 2016-11-18 13:59 2016-08-31 Show GitHub Exploit DB Packet Storm
201705 6.5 警告
Network
Google
openSUSE project
- Google Chrome の extensions/browser/url_request_util.cc におけるクリックジャッキング攻撃を実行される脆弱性 CWE-Other
その他
CVE-2016-5160 2016-11-18 13:59 2016-08-31 Show GitHub Exploit DB Packet Storm
201706 8.8 重要
Network
Google
openSUSE project
- Google Chrome の PDFium で使用される OpenJPEG における整数オーバーフローの脆弱性 CWE-Other
その他
CVE-2016-5159 2016-11-18 13:59 2016-08-31 Show GitHub Exploit DB Packet Storm
201707 8.8 重要
Network
Google
openSUSE project
- Google Chrome の PDFium で使用される OpenJPEG の tcd.c の opj_tcd_init_tile 関数における整数オーバーフローの脆弱性 CWE-Other
その他
CVE-2016-5158 2016-11-18 13:59 2016-08-31 Show GitHub Exploit DB Packet Storm
201708 8.4 重要
Local
Google
Linux
- Linux Kernel 用の特定の QuIC Android パッチの drivers/staging/android/ashmem.c におけるアクセス制限を回避される脆弱性 CWE-20
不適切な入力確認
CVE-2016-5340 2016-11-17 18:07 2016-07-28 Show GitHub Exploit DB Packet Storm
201709 7.8 重要
Local
Google
Linux
- MSM デバイスなどの製品用 QuIC Android コントリビューションで使用される Linux Kernel の wcnss_wlan デバイスドライバにおけるヒープベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー
CVE-2016-5342 2016-11-17 18:07 2016-08-29 Show GitHub Exploit DB Packet Storm
201710 9.8 緊急
Network
Google
Linux
- MSM デバイスなどの製品用 QuIC Android コントリビューションで使用される Linux Kernel の MDSS ドライバにおける整数オーバーフローの脆弱性 CWE-Other
その他
CVE-2016-5344 2016-11-17 18:07 2016-08-23 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 6, 2026, 4:18 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
291701 - openttd openttd The HandleCrashedAircraft function in aircraft_cmd.cpp in OpenTTD 0.3.6 through 1.3.2 allows remote attackers to cause a denial of service (out-of-bounds read and crash) by crashing an aircraft outsi… CWE-119
Incorrect Access of Indexable Resource ('Range Error') 
CVE-2013-6411 2024-11-21 10:59 2013-12-15 Show GitHub Exploit DB Packet Storm
291702 - openstack
canonical
redhat
keystone
ubuntu_linux
openstack
The ec2tokens API in OpenStack Identity (Keystone) before Havana 2013.2.1 and Icehouse before icehouse-2 does not return a trust-scoped token when one is received, which allows remote trust users to … CWE-269
 Improper Privilege Management
CVE-2013-6391 2024-11-21 10:59 2013-12-15 Show GitHub Exploit DB Packet Storm
291703 - philippe_jounin tftpd32 Format string vulnerability in the client in Tftpd32 before 4.50 allows remote servers to cause a denial of service (crash) or possibly execute arbitrary code via format string specifiers in the Remo… CWE-134
Use of Externally-Controlled Format String
CVE-2013-6809 2024-11-21 10:59 2013-12-14 Show GitHub Exploit DB Packet Storm
291704 - xen xen Xen 4.2.x and 4.3.x, when using Intel VT-d and a PCI device has been assigned, does not clear the flag that suppresses IOMMU TLB flushes when unspecified errors occur, which causes the TLB entries to… CWE-264
Permissions, Privileges, and Access Controls
CVE-2013-6400 2024-11-21 10:59 2013-12-14 Show GitHub Exploit DB Packet Storm
291705 - munin-monitoring munin Munin::Master::Node in Munin before 2.0.18 allows remote attackers to cause a denial of service (abort data collection for node) via a plugin that uses "multigraph" as a multigraph service name. CWE-20
 Improper Input Validation 
CVE-2013-6359 2024-11-21 10:59 2013-12-14 Show GitHub Exploit DB Packet Storm
291706 - percona
opensuse
xtrabackup
opensuse
Percona XtraBackup before 2.1.6 uses a constant string for the initialization vector (IV), which makes it easier for local users to defeat cryptographic protection mechanisms and conduct plaintext at… CWE-310
Cryptographic Issues
CVE-2013-6394 2024-11-21 10:59 2013-12-14 Show GitHub Exploit DB Packet Storm
291707 - instantsoft instantcms SQL injection vulnerability in InstantSoft InstantCMS 1.10.3 and earlier allows remote attackers to execute arbitrary SQL commands via the orderby parameter to catalog/[id]. CWE-89
SQL Injection
CVE-2013-6839 2024-11-21 10:59 2013-12-14 Show GitHub Exploit DB Packet Storm
291708 - projectsprouts sprout The unpack_zip function in archive_unpacker.rb in the sprout gem 0.7.246 for Ruby allows context-dependent attackers to execute arbitrary commands via shell metacharacters in a (1) filename or (2) pa… CWE-94
Code Injection
CVE-2013-6421 2024-11-21 10:59 2013-12-13 Show GitHub Exploit DB Packet Storm
291709 - emc connectrix_manager The server in Brocade Network Advisor before 12.1.0, as used in EMC Connectrix Manager Converged Network Edition (CMCNE), HP B-series SAN Network Advisor, and possibly other products, allows remote a… CWE-94
Code Injection
CVE-2013-6810 2024-11-21 10:59 2013-12-13 Show GitHub Exploit DB Packet Storm
291710 - suse
opensuse
mozilla
canonical
oracle
fedoraproject
linux_enterprise_desktop
linux_enterprise_server
opensuse
linux_enterprise_software_development_kit
firefox
seamonkey
ubuntu_linux
solaris
fedora
Mozilla Firefox before 26.0 and SeaMonkey before 2.23 on Linux allow user-assisted remote attackers to read clipboard data by leveraging certain middle-click paste operations. CWE-200
Information Exposure
CVE-2013-6672 2024-11-21 10:59 2013-12-12 Show GitHub Exploit DB Packet Storm