Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 6, 2026, 6 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
201721 7.8 重要
Local
libarchive
レッドハット
- libarchive の archive_read_support_format_7zip.c の read_SubStreamsInfo 関数における整数オーバーフローの脆弱性 CWE-Other
その他
CVE-2016-4300 2016-11-17 17:21 2016-06-20 Show GitHub Exploit DB Packet Storm
201722 7.8 重要
Local
libarchive
レッドハット
- libarchive の archive_read_support_format_rar.c の parse_codes 関数におけるヒープベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー
CVE-2016-4302 2016-11-17 17:20 2015-06-20 Show GitHub Exploit DB Packet Storm
201723 9.8 緊急
Network
マイクロソフト
アドビシステムズ
Google
- Adobe Flash Player における任意のコードを実行される脆弱性 CWE-Other
その他
CVE-2016-4174 2016-11-17 17:03 2016-07-12 Show GitHub Exploit DB Packet Storm
201724 5.9 警告
Network
Debian
Wireshark
- Wireshark の H.225 ディセクタの epan/dissectors/packet-h225.c におけるサービス運用妨害 (DoS) の脆弱性 CWE-119
バッファエラー
CVE-2016-7176 2016-11-17 16:58 2016-09-8 Show GitHub Exploit DB Packet Storm
201725 8.1 重要
Network
Squid-cache.org
Canonical
オラクル
- Squid におけるバッファオーバーフローの脆弱性 CWE-119
バッファエラー
CVE-2016-4054 2016-11-17 16:55 2016-04-20 Show GitHub Exploit DB Packet Storm
201726 3.7
Network
Squid-cache.org
Canonical
オラクル
- Squid における重要なスタックレイアウト情報を取得される脆弱性 CWE-119
バッファエラー
CVE-2016-4053 2016-11-17 16:55 2016-04-20 Show GitHub Exploit DB Packet Storm
201727 8.8 重要
Network
Squid-cache.org
Canonical
オラクル
- Squid の cachemgr.cgi におけるバッファオーバーフローの脆弱性 CWE-119
バッファエラー
CVE-2016-4051 2016-11-17 16:54 2016-04-20 Show GitHub Exploit DB Packet Storm
201728 7.5 重要
Network
レッドハット
libarchive
オラクル
- libarchive のサンドボックスコードにおける任意のファイルに書き込まれる脆弱性 CWE-20
CWE-Other
CVE-2016-5418 2016-11-17 16:51 2016-09-12 Show GitHub Exploit DB Packet Storm
201729 7.8 重要
Local
Linux
SUSE
Canonical
オラクル
- Linux Kernel の netfilter サブシステムの compat IPT_SO_SET_REPLACE setsockopt の実装における権限を取得される脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2016-4997 2016-11-17 16:46 2016-06-24 Show GitHub Exploit DB Packet Storm
201730 5.9 警告
Network
Wireshark
オラクル
- Wireshark の NCP ディセクタの epan/dissectors/packet-ncp2222.inc におけるスタックベースのバッファオーバーフローの脆弱性 CWE-20
不適切な入力確認
CVE-2016-4085 2016-11-17 16:45 2016-04-22 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 7, 2026, 4:13 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
291421 - recommend_to_a_friend_project recommend_to_a_friend Cross-site scripting (XSS) vulnerability in inc/raf_form.php in the Recommend to a friend plugin 2.0.2 for WordPress allows remote attackers to inject arbitrary web script or HTML via the current_url… CWE-79
Cross-site Scripting
CVE-2013-7276 2024-11-21 11:00 2014-01-9 Show GitHub Exploit DB Packet Storm
291422 - mybb mybb Cross-site scripting (XSS) vulnerability in misc.php in MyBB (aka MyBulletinBoard) before 1.6.12 allows remote attackers to inject arbitrary web script or HTML via the editor parameter in a smilie li… CWE-79
Cross-site Scripting
CVE-2013-7275 2024-11-21 11:00 2014-01-9 Show GitHub Exploit DB Packet Storm
291423 - wallpaperscript wallpaperscript Cross-site scripting (XSS) vulnerability in Wallpaper Script 3.5.0082 allows remote authenticated users to inject arbitrary web script or HTML via the title field in a wallpaper file upload. CWE-79
Cross-site Scripting
CVE-2013-7274 2024-11-21 11:00 2014-01-9 Show GitHub Exploit DB Packet Storm
291424 - 7mediaws edutrac Directory traversal vulnerability in 7 Media Web Solutions eduTrac before 1.1.2 allows remote attackers to read arbitrary files via a .. (dot dot) in the showmask parameter to installer/overview.php. CWE-22
Path Traversal
CVE-2013-7097 2024-11-21 11:00 2014-01-9 Show GitHub Exploit DB Packet Storm
291425 - linux linux_kernel The x25_recvmsg function in net/x25/af_x25.c in the Linux kernel before 3.12.4 updates a certain length value without ensuring that an associated data structure has been initialized, which allows loc… CWE-20
 Improper Input Validation 
CVE-2013-7271 2024-11-21 11:00 2014-01-7 Show GitHub Exploit DB Packet Storm
291426 - linux linux_kernel The packet_recvmsg function in net/packet/af_packet.c in the Linux kernel before 3.12.4 updates a certain length value before ensuring that an associated data structure has been initialized, which al… CWE-20
 Improper Input Validation 
CVE-2013-7270 2024-11-21 11:00 2014-01-7 Show GitHub Exploit DB Packet Storm
291427 - linux linux_kernel The nr_recvmsg function in net/netrom/af_netrom.c in the Linux kernel before 3.12.4 updates a certain length value without ensuring that an associated data structure has been initialized, which allow… CWE-20
 Improper Input Validation 
CVE-2013-7269 2024-11-21 11:00 2014-01-7 Show GitHub Exploit DB Packet Storm
291428 - linux linux_kernel The ipx_recvmsg function in net/ipx/af_ipx.c in the Linux kernel before 3.12.4 updates a certain length value without ensuring that an associated data structure has been initialized, which allows loc… CWE-20
 Improper Input Validation 
CVE-2013-7268 2024-11-21 11:00 2014-01-7 Show GitHub Exploit DB Packet Storm
291429 - linux linux_kernel The atalk_recvmsg function in net/appletalk/ddp.c in the Linux kernel before 3.12.4 updates a certain length value without ensuring that an associated data structure has been initialized, which allow… CWE-20
 Improper Input Validation 
CVE-2013-7267 2024-11-21 11:00 2014-01-7 Show GitHub Exploit DB Packet Storm
291430 - linux linux_kernel The mISDN_sock_recvmsg function in drivers/isdn/mISDN/socket.c in the Linux kernel before 3.12.4 does not ensure that a certain length value is consistent with the size of an associated data structur… CWE-20
 Improper Input Validation 
CVE-2013-7266 2024-11-21 11:00 2014-01-7 Show GitHub Exploit DB Packet Storm