Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 7, 2026, 4 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
201711 5.9 警告
Network
アップル - Apple iOS および OS X の IDS - Connectivity コンポーネントにおける通話リレーのなりすまし攻撃を実行される脆弱性 CWE-20
不適切な入力確認
CVE-2016-4722 2016-11-17 18:03 2016-09-13 Show GitHub Exploit DB Packet Storm
201712 6.5 警告
Network
レッドハット
libarchive
オラクル
- libarchive の ISO パーサにおける整数オーバーフローの脆弱性 CWE-Other
その他
CVE-2016-5844 2016-11-17 17:58 2016-06-20 Show GitHub Exploit DB Packet Storm
201713 7.5 重要
Network
Squid-cache.org
Canonical
オラクル
- Squid の Esi.cc におけるメモリ二重解放の脆弱性 CWE-20
不適切な入力確認
CVE-2016-4556 2016-11-17 17:57 2016-05-6 Show GitHub Exploit DB Packet Storm
201714 7.5 重要
Network
Squid-cache.org
Canonical
オラクル
- Squid の client_side_request.cc におけるサービス運用妨害 (DoS) の脆弱性 CWE-20
不適切な入力確認
CVE-2016-4555 2016-11-17 17:57 2016-05-6 Show GitHub Exploit DB Packet Storm
201715 8.6 重要
Network
Squid-cache.org
Canonical
- Squid の mime_header.cc における同一生成元の制限を回避される脆弱性 CWE-Other
その他
CVE-2016-4554 2016-11-17 17:57 2016-05-6 Show GitHub Exploit DB Packet Storm
201716 8.6 重要
Network
Squid-cache.org
Canonical
オラクル
- Squid の client_side.cc におけるキャッシュポイズニング攻撃を実行される脆弱性 CWE-Other
その他
CVE-2016-4553 2016-11-17 17:56 2016-05-6 Show GitHub Exploit DB Packet Storm
201717 9.8 緊急
Network
Haxx
Debian
openSUSE project
- libcurl における使用される接続を制御される脆弱性 CWE-Other
その他
CVE-2016-5421 2016-11-17 17:39 2016-08-3 Show GitHub Exploit DB Packet Storm
201718 7.5 重要
Network
Haxx
Debian
openSUSE project
- cURL および libcurl における接続認証をハイジャックされる脆弱性 CWE-Other
その他
CVE-2016-5420 2016-11-17 17:38 2016-08-3 Show GitHub Exploit DB Packet Storm
201719 7.5 重要
Network
Haxx
Debian
openSUSE project
- cURL および libcurl における制限を回避される脆弱性 CWE-310
暗号の問題
CVE-2016-5419 2016-11-17 17:38 2016-08-3 Show GitHub Exploit DB Packet Storm
201720 7.8 重要
Local
libarchive - libarchive の archive_read_support_format_mtree.c の parse_device 関数におけるスタックベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー
CVE-2016-4301 2016-11-17 17:21 2016-06-10 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 7, 2026, 4:13 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
291881 - nagios nagios_xi SQL injection vulnerability in functions/prepend_adm.php in Nagios Core Config Manager in Nagios XI before 2012R2.4 allows remote attackers to execute arbitrary SQL commands via the tfPassword parame… CWE-89
SQL Injection
CVE-2013-6875 2024-11-21 10:59 2013-11-27 Show GitHub Exploit DB Packet Storm
291882 - vortexgroup light_alloy Stack-based buffer overflow in Vortex Light Alloy before 4.7.4 allows remote attackers to execute arbitrary code via a long URL in a .m3u file. CWE-119
Incorrect Access of Indexable Resource ('Range Error') 
CVE-2013-6874 2024-11-21 10:59 2013-11-27 Show GitHub Exploit DB Packet Storm
291883 - testa online_test_management_system SQL injection vulnerability in Testa Online Test Management System (OTMS) 2.0.0.2 allows remote attackers to execute arbitrary SQL commands via the test_id parameter. CWE-89
SQL Injection
CVE-2013-6873 2024-11-21 10:59 2013-11-27 Show GitHub Exploit DB Packet Storm
291884 - splunk splunk Cross-site scripting (XSS) vulnerability in Splunk Web in Splunk before 5.0.6 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. CWE-79
Cross-site Scripting
CVE-2013-6870 2024-11-21 10:59 2013-11-26 Show GitHub Exploit DB Packet Storm
291885 - jenkins-ci build_failure_analyzer Cross-site scripting (XSS) vulnerability in the Build Failure Analyzer plugin before 1.5.1 for Jenkins allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors. CWE-79
Cross-site Scripting
CVE-2013-6374 2024-11-21 10:59 2013-11-26 Show GitHub Exploit DB Packet Storm
291886 - jenkins-ci exclusion The Exclusion plugin before 0.9 for Jenkins does not properly prevent access to resource locks, which allows remote authenticated users to list and release resources via unspecified vectors. CWE-264
Permissions, Privileges, and Access Controls
CVE-2013-6373 2024-11-21 10:59 2013-11-26 Show GitHub Exploit DB Packet Storm
291887 - sap netweaver SQL injection vulnerability in the SRTT_GET_COUNT_BEFORE_KEY_RFC function in SAP NetWeaver 7.30 allows remote attackers to execute arbitrary SQL commands via unspecified vectors. CWE-89
SQL Injection
CVE-2013-6869 2024-11-21 10:59 2013-11-24 Show GitHub Exploit DB Packet Storm
291888 - sybase adaptive_server_enterprise SAP Sybase Adaptive Server Enterprise (ASE) 15.0.3 before 15.0.3 ESD#4.3, 15.5 before 15.5 ESD#5.3, and 15.7 before 15.7 SP50 or 15.7 SP100 allows local users to obtain sensitive information via unsp… CWE-200
Information Exposure
CVE-2013-6868 2024-11-21 10:59 2013-11-24 Show GitHub Exploit DB Packet Storm
291889 - sybase adaptive_server_enterprise Unspecified vulnerability in SAP Sybase Adaptive Server Enterprise (ASE) 15.7 before 15.7 SP50 or 15.7 SP100 allows remote attackers to cause a denial of service via unspecified vectors. NVD-CWE-noinfo
CVE-2013-6867 2024-11-21 10:59 2013-11-24 Show GitHub Exploit DB Packet Storm
291890 - sybase adaptive_server_enterprise SAP Sybase Adaptive Server Enterprise (ASE) before 15.0.3 ESD#4.3, 15.5 before 15.5 ESD#5.3, and 15.7 before 15.7 SP50 or 15.7 SP100 allows remote authenticated users to execute arbitrary code via un… CWE-94
Code Injection
CVE-2013-6866 2024-11-21 10:59 2013-11-24 Show GitHub Exploit DB Packet Storm