Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 7, 2026, 6 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
201741 7.5 重要
Network
Debian
openSUSE project
Canonical
xmlsoft.org
- libxml2 の tree.c の xmlStringGetNodeList 関数におけるサービス運用妨害 (DoS) の脆弱性 CWE-20
不適切な入力確認
CVE-2016-3627 2016-11-17 16:31 2016-05-13 Show GitHub Exploit DB Packet Storm
201742 7.5 重要
Network
Debian
openSUSE project
Canonical
xmlsoft.org
- libxml2 の parser.c の xmlParserEntityCheck および xmlParseAttValueComplex 関数におけるサービス運用妨害 (DoS) の脆弱性 CWE-20
不適切な入力確認
CVE-2016-3705 2016-11-17 16:31 2016-05-3 Show GitHub Exploit DB Packet Storm
201743 3.8
Local
Xen プロジェクト
Fedora Project
オラクル
- Xen の arch/x86/i387.c の fpu_fxrstor 関数における他のゲストから重要なレジスタコンテンツ情報を取得される脆弱性 CWE-200
CWE-Other
CVE-2016-3159 2016-11-17 16:30 2016-03-24 Show GitHub Exploit DB Packet Storm
201744 3.8
Local
Xen プロジェクト
Fedora Project
オラクル
- Xen の arch/x86/xstate.c の xrstor 関数における他のゲストから重要なレジスタコンテンツ情報を取得される脆弱性 CWE-200
CWE-Other
CVE-2016-3158 2016-11-17 16:30 2016-03-24 Show GitHub Exploit DB Packet Storm
201745 5.5 警告 オラクル
OpenBSD
- OpenSSH の sshd の session.c における CRLF インジェクションの脆弱性 CWE-Other
その他
CVE-2016-3115 2016-11-17 16:29 2016-03-9 Show GitHub Exploit DB Packet Storm
201746 4.6 警告 Xen プロジェクト
オラクル
- Xen におけるサービス運用妨害 (DoS) の脆弱性 CWE-20
不適切な入力確認
CVE-2016-2270 2016-11-17 16:29 2016-02-17 Show GitHub Exploit DB Packet Storm
201747 4.3 警告 Debian
Canonical
xmlsoft.org
- libxml2 の HTMLparser.c の htmlParseNameComplex 関数におけるサービス運用妨害 (DoS) の脆弱性 CWE-119
バッファエラー
CVE-2016-2073 2016-11-17 16:20 2016-01-25 Show GitHub Exploit DB Packet Storm
201748 7.5 重要
Network
Linux
Canonical
オラクル
- Linux Kernel の drivers/net/ethernet/atheros/atlx/atl2.c の atl2_probe 関数におけるカーネルメモリから重要な情報を取得される脆弱性 CWE-200
情報漏えい
CVE-2016-2117 2016-11-17 16:16 2016-04-21 Show GitHub Exploit DB Packet Storm
201749 6.5 警告
Network
bzip.org - bzip2 の bzip2recover におけるサービス運用妨害 (DoS) の脆弱性 CWE-Other
その他
CVE-2016-3189 2016-11-17 16:08 2016-03-21 Show GitHub Exploit DB Packet Storm
201750 7.1 危険 ISC, Inc. - ISC DHCP にサービス運用妨害 (DoS) の脆弱性 CWE-20
不適切な入力確認
CVE-2016-2774 2016-11-17 16:07 2016-03-8 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 7, 2026, 4:13 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
291981 8.8 HIGH
Network
eng spagobi SpagoBI before 4.1 has Privilege Escalation via an error in the AdapterHTTP script CWE-269
 Improper Privilege Management
CVE-2013-6231 2024-11-21 10:58 2020-01-10 Show GitHub Exploit DB Packet Storm
291982 6.1 MEDIUM
Network
open-xchange open-xchange_appsuite Cross-site scripting (XSS) vulnerability in the frontend in Open-Xchange (OX) AppSuite 6.22.3 before 6.22.3-rev5 and 6.22.4 before 6.22.4-rev12 allows remote attackers to inject arbitrary web script … CWE-79
Cross-site Scripting
CVE-2013-6242 2024-11-21 10:58 2020-01-3 Show GitHub Exploit DB Packet Storm
291983 6.1 MEDIUM
Network
cart66 cart66_lite_plugin Multiple cross-site scripting (XSS) vulnerabilities in products.php in the Cart66 Lite plugin before 1.5.1.15 for WordPress allow remote attackers to inject arbitrary web script or HTML via the (1) P… CWE-79
Cross-site Scripting
CVE-2013-5978 2024-11-21 10:58 2019-12-12 Show GitHub Exploit DB Packet Storm
291984 9.8 CRITICAL
Network
zabbix zabbix Multiple SQL injection vulnerabilities in Zabbix 1.8.x before 1.8.18rc1, 2.0.x before 2.0.9rc1, and 2.1.x before 2.1.7. CWE-89
SQL Injection
CVE-2013-5743 2024-11-21 10:58 2019-12-12 Show GitHub Exploit DB Packet Storm
291985 6.1 MEDIUM
Network
exis-ti exis_contexis Cross-site scripting (XSS) vulnerability in the photo gallery model in Exis Contexis before 2.0 allows remote attackers to inject arbitrary web script or HTML via the image parameter in a detail acti… CWE-79
Cross-site Scripting
CVE-2013-6239 2024-11-21 10:58 2019-11-23 Show GitHub Exploit DB Packet Storm
291986 8.0 HIGH
Network
eng spagobi Unrestricted file upload vulnerability in the Worksheet designer in SpagoBI before 4.1 allows remote authenticated users to execute arbitrary code by uploading a file with an executable extension, th… CWE-434
 Unrestricted Upload of File with Dangerous Type 
CVE-2013-6234 2024-11-21 10:58 2019-11-23 Show GitHub Exploit DB Packet Storm
291987 6.5 MEDIUM
Network
horde
debian
groupware
debian_linux
Multiple CSRF issues in Horde Groupware Webmail Edition 5.1.2 and earlier in basic.php. CWE-352
 Origin Validation Error
CVE-2013-6275 2024-11-21 10:58 2019-11-6 Show GitHub Exploit DB Packet Storm
291988 7.8 HIGH
Local
google android The NotificationBroadcastReceiver class in the com.android.phone process in Google Android 4.1.1 through 4.4.2 allows attackers to bypass intended access restrictions and consequently make phone call… CWE-284
Improper Access Control
CVE-2013-6272 2024-11-21 10:58 2018-05-3 Show GitHub Exploit DB Packet Storm
291989 7.8 HIGH
Local
apt-listbugs_project
debian
apt-listbugs
debian_linux
apt-listbugs before 0.1.10 creates temporary files insecurely, which allows attackers to have unspecified impact via unknown vectors. CWE-20
 Improper Input Validation 
CVE-2013-6049 2024-11-21 10:58 2017-10-21 Show GitHub Exploit DB Packet Storm
291990 - open-xchange open-xchange_appsuite The Birthday widget in the backend in Open-Xchange (OX) AppSuite 7.2.x before 7.2.2-rev25 and 7.4.x before 7.4.0-rev14, in certain user-id sharing scenarios, does not properly construct a SQL stateme… CWE-200
Information Exposure
CVE-2013-6241 2024-11-21 10:58 2014-12-28 Show GitHub Exploit DB Packet Storm