Vulnerability Search Top

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

Vulnerability Information Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 30, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
201721	6	警告 Local	Fabrice Bellard Canonical	-	QEMU の 53C9X Fast SCSI Controller サポートの hw/scsi/esp.c の get_cmd 関数におけるサービス運用妨害 (DoS) の脆弱性	CWE-119 バッファエラー	CVE-2016-4441	2016-10-28 16:25	2016-05-19	Show	GitHub Exploit DB Packet Storm

201722	8.2	重要 Local	Fabrice Bellard Canonical	-	QEMU の 53C9X Fast SCSI Controller サポートの hw/scsi/esp.c の esp_reg_write 関数におけるサービス運用妨害 (DoS) の脆弱性	CWE-119 バッファエラー	CVE-2016-4439	2016-10-28 16:25	2016-05-19	Show	GitHub Exploit DB Packet Storm

201723	5.3	警告 Network	nov (jose-php project)	-	jose-php の JWE.php の JOSE_JWE クラスの RSA 1.5 アルゴリズムの実装における平文データを取得される脆弱性	CWE-200 CWE-310	CVE-2016-5430	2016-10-28 14:55	2016-08-31	Show	GitHub Exploit DB Packet Storm

201724	3.7	低 Network	nov (jose-php project)	-	jose-php における重要な情報を取得される脆弱性	CWE-200 情報漏えい	CVE-2016-5429	2016-10-28 14:55	2016-08-30	Show	GitHub Exploit DB Packet Storm

201725	3.1	低 Network	オラクル	-	Oracle Fusion Middleware の Oracle Data Integrator における Code Generation Engine に関する脆弱性	CWE-200 情報漏えい	CVE-2016-5618	2016-10-28 14:20	2016-10-18	Show	GitHub Exploit DB Packet Storm

201726	6.1	警告 Network	オラクル	-	Oracle Financial Services Applications の Oracle FLEXCUBE Universal Banking における INFRA に関する脆弱性	CWE-Other その他	CVE-2016-5622	2016-10-28 14:20	2016-10-18	Show	GitHub Exploit DB Packet Storm

201727	4.3	警告 Network	オラクル	-	Oracle Financial Services Applications の Oracle FLEXCUBE Universal Banking における INFRA に関する脆弱性	CWE-200 CWE-Other	CVE-2016-5621	2016-10-28 14:20	2016-10-18	Show	GitHub Exploit DB Packet Storm

201728	5.4	警告 Network	オラクル	-	Oracle Financial Services Applications の Oracle FLEXCUBE Universal Banking における INFRA に関する脆弱性	CWE-Other その他	CVE-2016-5620	2016-10-28 14:20	2016-10-18	Show	GitHub Exploit DB Packet Storm

201729	8.1	重要 Network	オラクル	-	Oracle Financial Services Applications の Oracle FLEXCUBE Universal Banking における INFRA に関する脆弱性	CWE-Other その他	CVE-2016-5619	2016-10-28 14:20	2016-10-18	Show	GitHub Exploit DB Packet Storm

201730	8.8	重要 Network	オラクル	-	Oracle Financial Services Applications の Oracle FLEXCUBE Universal Banking における INFRA に関する脆弱性	CWE-Other その他	CVE-2016-5607	2016-10-28 14:20	2016-10-18	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 30, 2026, 4:16 a.m.

No	CVSS	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
290111	-	linux	linux_kernel	The aac_compat_ioctl function in drivers/scsi/aacraid/linit.c in the Linux kernel before 3.11.8 does not require the CAP_SYS_RAWIO capability, which allows local users to bypass intended access restr…	CWE-264 Permissions, Privileges, and Access Controls	CVE-2013-6383	2024-11-21 10:59	2013-11-27	Show	GitHub Exploit DB Packet Storm

290112	-	linux	linux_kernel	Multiple buffer underflows in the XFS implementation in the Linux kernel through 3.12.1 allow local users to cause a denial of service (memory corruption) or possibly have unspecified other impact by…	CWE-119 Incorrect Access of Indexable Resource ('Range Error')	CVE-2013-6382	2024-11-21 10:59	2013-11-27	Show	GitHub Exploit DB Packet Storm

290113	-	linux	linux_kernel	Buffer overflow in the qeth_snmp_command function in drivers/s390/net/qeth_core_main.c in the Linux kernel through 3.12.1 allows local users to cause a denial of service or possibly have unspecified …	CWE-119 Incorrect Access of Indexable Resource ('Range Error')	CVE-2013-6381	2024-11-21 10:59	2013-11-27	Show	GitHub Exploit DB Packet Storm

290114	-	linux	linux_kernel	The aac_send_raw_srb function in drivers/scsi/aacraid/commctrl.c in the Linux kernel through 3.12.1 does not properly validate a certain size value, which allows local users to cause a denial of serv…	CWE-20 Improper Input Validation	CVE-2013-6380	2024-11-21 10:59	2013-11-27	Show	GitHub Exploit DB Packet Storm

290115	-	linux	linux_kernel	The lbs_debugfs_write function in drivers/net/wireless/libertas/debugfs.c in the Linux kernel through 3.12.1 allows local users to cause a denial of service (OOPS) by leveraging root privileges for a…	CWE-189 Numeric Errors	CVE-2013-6378	2024-11-21 10:59	2013-11-27	Show	GitHub Exploit DB Packet Storm

290116	-	nagios	nagios_xi	SQL injection vulnerability in functions/prepend_adm.php in Nagios Core Config Manager in Nagios XI before 2012R2.4 allows remote attackers to execute arbitrary SQL commands via the tfPassword parame…	CWE-89 SQL Injection	CVE-2013-6875	2024-11-21 10:59	2013-11-27	Show	GitHub Exploit DB Packet Storm

290117	-	vortexgroup	light_alloy	Stack-based buffer overflow in Vortex Light Alloy before 4.7.4 allows remote attackers to execute arbitrary code via a long URL in a .m3u file.	CWE-119 Incorrect Access of Indexable Resource ('Range Error')	CVE-2013-6874	2024-11-21 10:59	2013-11-27	Show	GitHub Exploit DB Packet Storm

290118	-	testa	online_test_management_system	SQL injection vulnerability in Testa Online Test Management System (OTMS) 2.0.0.2 allows remote attackers to execute arbitrary SQL commands via the test_id parameter.	CWE-89 SQL Injection	CVE-2013-6873	2024-11-21 10:59	2013-11-27	Show	GitHub Exploit DB Packet Storm

290119	-	splunk	splunk	Cross-site scripting (XSS) vulnerability in Splunk Web in Splunk before 5.0.6 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.	CWE-79 Cross-site Scripting	CVE-2013-6870	2024-11-21 10:59	2013-11-26	Show	GitHub Exploit DB Packet Storm

290120	-	jenkins-ci	build_failure_analyzer	Cross-site scripting (XSS) vulnerability in the Build Failure Analyzer plugin before 1.5.1 for Jenkins allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors.	CWE-79 Cross-site Scripting	CVE-2013-6374	2024-11-21 10:59	2013-11-26	Show	GitHub Exploit DB Packet Storm