Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 24, 2026, 4 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
201811 7.5 重要
Network
openSUSE project
GNOME Project
Canonical
- gdk-pixbuf の io-ico.c の OneLine32 関数におけるサービス運用妨害 (DoS) の脆弱性 CWE-Other
その他
CVE-2016-6352 2016-10-6 11:45 2016-08-3 Show GitHub Exploit DB Packet Storm
201812 5.5 警告
Local
Fedora Project
MongoDB Inc.
- MongoDB のクライアントにおける重要な情報を取得される脆弱性 CWE-200
情報漏えい
CVE-2016-6494 2016-10-6 11:40 2016-09-6 Show GitHub Exploit DB Packet Storm
201813 5.9 警告
Network
レッドハット - Red Hat JBoss Enterprise Application Platform におけるサービス運用妨害 (DoS) の脆弱性 CWE-399
リソース管理の問題
CVE-2016-7046 2016-10-6 11:31 2016-09-15 Show GitHub Exploit DB Packet Storm
201814 3.3
Local
レッドハット - Red Hat Enterprise Virtualization Engine の ovirt-engine-provisiondb ユーティリティにおける重要なデータベースプロビジョニング情報を取得される脆弱性 CWE-Other
その他
CVE-2016-5432 2016-10-6 11:31 2016-09-28 Show GitHub Exploit DB Packet Storm
201815 5.4 警告
Network
レッドハット - Red Hat JBoss BPM Suite の Business Process Editor におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2016-5398 2016-10-6 11:31 2016-09-28 Show GitHub Exploit DB Packet Storm
201816 9.1 緊急
Network
Apache Software Foundation - Apache Derby の SqlXmlUtil コードにおける XML 外部エンティティの脆弱性 CWE-399
CWE-Other
CVE-2015-1832 2016-10-6 11:29 2015-08-30 Show GitHub Exploit DB Packet Storm
201817 7.5 重要
Network
FreeRDP Project - FreeRDP におけるサービス運用妨害 (DoS) の脆弱性 CWE-Other
その他
CVE-2013-4119 2016-10-6 11:22 2013-07-2 Show GitHub Exploit DB Packet Storm
201818 7.5 重要
Network
openSUSE project
FreeRDP Project
- FreeRDP におけるサービス運用妨害 (DoS) の脆弱性 CWE-Other
その他
CVE-2013-4118 2016-10-6 11:22 2013-03-5 Show GitHub Exploit DB Packet Storm
201819 9.8 緊急
Network
Apache Software Foundation - Apache MyFaces Trinidad の CoreResponseStateManager におけるデシリアライゼーション攻撃を実行される脆弱性 CWE-Other
その他
CVE-2016-5019 2016-10-6 11:19 2016-09-29 Show GitHub Exploit DB Packet Storm
201820 9.8 緊急
Network
Apache Software Foundation - Apache Struts 2 における脆弱性 CWE-noinfo
情報不足
CVE-2016-4436 2016-10-6 11:02 2016-09-13 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 24, 2026, 4:05 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
290601 - gwos groundwork_monitor Multiple cross-site request forgery (CSRF) vulnerabilities in the Noma component in GroundWork Monitor Enterprise 6.7.0 allow remote attackers to hijack the authentication of unspecified victims for … CWE-352
 Origin Validation Error
CVE-2013-3513 2024-11-21 10:53 2013-05-8 Show GitHub Exploit DB Packet Storm
290602 - gwos groundwork_monitor The Cacti component in GroundWork Monitor Enterprise 6.7.0 does not properly perform authorization checks, which allows remote authenticated users to read or modify configuration settings via unspeci… CWE-20
 Improper Input Validation 
CVE-2013-3512 2024-11-21 10:53 2013-05-8 Show GitHub Exploit DB Packet Storm
290603 - gwos groundwork_monitor Open redirect vulnerability in the NeDi component in GroundWork Monitor Enterprise 6.7.0 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via unspecified … CWE-20
 Improper Input Validation 
CVE-2013-3511 2024-11-21 10:53 2013-05-8 Show GitHub Exploit DB Packet Storm
290604 - gwos groundwork_monitor Multiple SQL injection vulnerabilities in GroundWork Monitor Enterprise 6.7.0 allow remote authenticated users to execute arbitrary SQL commands via (1) nedi/html/System-Export.php, (2) nedi/html/Dev… CWE-89
SQL Injection
CVE-2013-3510 2024-11-21 10:53 2013-05-8 Show GitHub Exploit DB Packet Storm
290605 - gwos groundwork_monitor html/System-NeDi.php in the NeDi component in GroundWork Monitor Enterprise 6.7.0 allows remote authenticated users to execute arbitrary commands via shell metacharacters in the scan functionality in… CWE-264
Permissions, Privileges, and Access Controls
CVE-2013-3509 2024-11-21 10:53 2013-05-8 Show GitHub Exploit DB Packet Storm
290606 - gwos groundwork_monitor html/System-Files.php in the System File Overview feature in the NeDi component in GroundWork Monitor Enterprise 6.7.0 allows remote authenticated users to execute arbitrary commands via vectors invo… CWE-94
Code Injection
CVE-2013-3508 2024-11-21 10:53 2013-05-8 Show GitHub Exploit DB Packet Storm
290607 - gwos groundwork_monitor The NeDi component in GroundWork Monitor Enterprise 6.7.0 allows remote authenticated users to obtain sensitive information via a direct request for (1) a configuration file, (2) a database dump, or … CWE-200
Information Exposure
CVE-2013-3507 2024-11-21 10:53 2013-05-8 Show GitHub Exploit DB Packet Storm
290608 - gwos groundwork_monitor cgi-bin/performance/perfchart.cgi in the Performance component in GroundWork Monitor Enterprise 6.7.0 does not properly restrict XML content, which allows remote attackers to execute arbitrary comman… CWE-264
Permissions, Privileges, and Access Controls
CVE-2013-3506 2024-11-21 10:53 2013-05-8 Show GitHub Exploit DB Packet Storm
290609 - gwos groundwork_monitor The Nagios-App component in GroundWork Monitor Enterprise 6.7.0 allows remote authenticated users to bypass intended access restrictions via a direct request for a (1) log file or (2) configuration f… CWE-255
Credentials Management
CVE-2013-3505 2024-11-21 10:53 2013-05-8 Show GitHub Exploit DB Packet Storm
290610 - gwos groundwork_monitor Directory traversal vulnerability in monarch.cgi in the MONARCH component in GroundWork Monitor Enterprise 6.7.0 allows remote authenticated users to overwrite arbitrary files by leveraging access to… CWE-22
Path Traversal
CVE-2013-3504 2024-11-21 10:53 2013-05-8 Show GitHub Exploit DB Packet Storm