Vulnerability Search Top

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

Vulnerability Information Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":June 5, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
201761	5.5	警告 Local	Linux	-	Linux Kernel の drivers/tty/tty_ldisc.c の tty_set_termios_ldisc 関数における重要な情報を取得される脆弱性	CWE-200 情報漏えい	CVE-2015-8964	2016-11-17 14:41	2015-11-28	Show	GitHub Exploit DB Packet Storm

201762	7	重要 Local	Linux	-	Linux Kernel の kernel/events/core.c における権限を取得される脆弱性	CWE-362 CWE-Other	CVE-2015-8963	2016-11-17 14:41	2015-12-15	Show	GitHub Exploit DB Packet Storm

201763	5	警告 Local	Linux	-	Linux Kernel の net/netfilter/nfnetlink.c の nfnetlink_rcv_batch 関数におけるカーネルメモリから重要な情報を取得される脆弱性	CWE-200 CWE-Other	CVE-2016-7917	2016-11-17 14:31	2016-02-3	Show	GitHub Exploit DB Packet Storm

201764	5.5	警告 Local	Linux	-	Linux Kernel の fs/proc/base.c の environ_read 関数におけるカーネルメモリから重要な情報を取得される脆弱性	CWE-362 競合状態	CVE-2016-7916	2016-11-17 14:31	2016-05-11	Show	GitHub Exploit DB Packet Storm

201765	5.5	警告 Local	Linux	-	Linux Kernel の drivers/hid/hid-core.c の ahid_input_field 関数におけるカーネルメモリから重要な情報を取得される脆弱性	CWE-Other その他	CVE-2016-7915	2016-11-17 14:31	2016-01-19	Show	GitHub Exploit DB Packet Storm

201766	5.5	警告 Local	Linux	-	Linux Kernel の lib/assoc_array.c の assoc_array_insert_into_terminal_node 関数におけるカーネルメモリから重要な情報を取得される脆弱性	CWE-Other その他	CVE-2016-7914	2016-11-17 14:31	2016-05-4	Show	GitHub Exploit DB Packet Storm

201767	7.8	重要 Local	Linux	-	Linux Kernel の drivers/media/tuners/tuner-xc2028.c の xc2028_set_config 関数における権限を取得される脆弱性	CWE-Other その他	CVE-2016-7913	2016-11-17 14:31	2016-01-28	Show	GitHub Exploit DB Packet Storm

201768	7.8	重要 Local	Linux	-	Linux Kernel の drivers/usb/gadget/function/f_fs.c の ffs_user_copy_worker 関数における権限を取得される脆弱性	CWE-Other その他	CVE-2016-7912	2016-11-17 14:31	2016-05-4	Show	GitHub Exploit DB Packet Storm

201769	7.8	重要 Local	Linux	-	Linux Kernel の block/ioprio.c の get_task_ioprio 関数における権限を取得される脆弱性	CWE-362 CWE-Other	CVE-2016-7911	2016-11-17 14:31	2016-08-10	Show	GitHub Exploit DB Packet Storm

201770	7.3	重要 Local	Linux	-	Linux Kernel の drivers/scsi/sg.c の sg_common_write 関数におけるメモリ二重解放の脆弱性	CWE-Other その他	CVE-2015-8962	2016-11-17 14:31	2015-10-31	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:June 5, 2026, 4:11 a.m.

No	CVSS	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
291671	-	f5	big-ip_access_policy_manager	Cross-site scripting (XSS) vulnerability in the access policy logout page (logout.inc) in F5 BIG-IP APM 10.1.0 through 10.2.4 and 11.1.0 through 11.3.0 allows remote attackers to inject arbitrary web…	CWE-79 Cross-site Scripting	CVE-2013-5976	2024-11-21 10:58	2013-10-2	Show	GitHub Exploit DB Packet Storm

291672	-	f5	big-ip_access_policy_manager	The access policy logon page (logon.inc) in F5 BIG-IP APM 11.1.0 through 11.2.1 allows remote attackers to conduct clickjacking attacks via unspecified vectors.	CWE-264 Permissions, Privileges, and Access Controls	CVE-2013-5975	2024-11-21 10:58	2013-10-2	Show	GitHub Exploit DB Packet Storm

291673	-	david_king canonical	vino ubuntu_linux	The vino_server_client_data_pending function in vino-server.c in GNOME Vino 2.26.1, 2.32.1, 3.7.3, and earlier, and 3.8 when encryption is disabled, does not properly clear client data when an error …	CWE-20 Improper Input Validation	CVE-2013-5745	2024-11-21 10:58	2013-10-2	Show	GitHub Exploit DB Packet Storm

291674	-	metaclassy	byword	The Metaclassy Byword app 2.x before 2.1 for iOS does not require confirmation of Replace file actions, which allows remote attackers to overwrite arbitrary files via the name and text parameters in …	CWE-264 Permissions, Privileges, and Access Controls	CVE-2013-5725	2024-11-21 10:58	2013-10-1	Show	GitHub Exploit DB Packet Storm

291675	-	cdsincdesign	simple_dropbox_upload_form	Unrestricted file upload vulnerability in multi.php in Simple Dropbox Upload plugin before 1.8.8.1 for WordPress allows remote attackers to execute arbitrary code by uploading a file with an executab…	NVD-CWE-Other	CVE-2013-5963	2024-11-21 10:58	2013-10-1	Show	GitHub Exploit DB Packet Storm

291676	-	envato	complete_gallery_manager_plugin	Unrestricted file upload vulnerability in frames/upload-images.php in the Complete Gallery Manager plugin before 3.3.4 rev40279 for WordPress allows remote attackers to execute arbitrary code by uplo…	NVD-CWE-Other	CVE-2013-5962	2024-11-21 10:58	2013-10-1	Show	GitHub Exploit DB Packet Storm

291677	-	danny_morris	lazy_seo	Unrestricted file upload vulnerability in lazyseo.php in the Lazy SEO plugin 1.1.9 for WordPress allows remote attackers to execute arbitrary PHP code by uploading a PHP file, then accessing it via a…	NVD-CWE-Other	CVE-2013-5961	2024-11-21 10:58	2013-10-1	Show	GitHub Exploit DB Packet Storm

291678	-	adcisolutions	node_view_permissions	The Node View Permissions module 7.x-1.x before 7.x-1.2 for Drupal does not properly implement the hook_query_alter function, which might allow remote attackers to obtain sensitive information by rea…	CWE-264 Permissions, Privileges, and Access Controls	CVE-2013-5965	2024-11-21 10:58	2013-10-1	Show	GitHub Exploit DB Packet Storm

291679	-	joachim_noreiko	flag_module	Cross-site scripting (XSS) vulnerability in the administration page in the Flag module 7.x-3.x before 7.x-3.1 for Drupal allows remote authenticated users with the "Administer flags" permission to in…	CWE-79 Cross-site Scripting	CVE-2013-5964	2024-11-21 10:58	2013-10-1	Show	GitHub Exploit DB Packet Storm

291680	-	owasp	enterprise_security_api	The authenticated-encryption feature in the symmetric-encryption implementation in the OWASP Enterprise Security API (ESAPI) for Java 2.x before 2.1.0.1 does not properly resist tampering with serial…	CWE-310 Cryptographic Issues	CVE-2013-5960	2024-11-21 10:58	2013-10-1	Show	GitHub Exploit DB Packet Storm