Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 20, 2026, 6 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
201871 6.1 警告
Network
シスコシステムズ - Cisco Unified Communications Manager におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2017-3802 2017-02-8 19:17 2017-01-18 Show GitHub Exploit DB Packet Storm
201872 6.1 警告
Network
シスコシステムズ - Cisco Unified Communications Manager の Web ベースの管理インターフェースにおけるクロスサイトスクリプティングフィルタを回避される脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2017-3798 2017-02-8 19:16 2017-01-18 Show GitHub Exploit DB Packet Storm
201873 5.3 警告
Network
シスコシステムズ - Cisco IOS および Cisco IOx ソフトウェアの Web ベースの管理インターフェースにおけるデバイスへの認証なしで表示される機密情報を閲覧される脆弱性 CWE-200
情報漏えい
CVE-2017-3805 2017-02-8 18:19 2017-01-18 Show GitHub Exploit DB Packet Storm
201874 4.7 警告
Adjacent
シスコシステムズ - Cisco 2960X および 3750X スイッチの Cisco IOS ソフトウェアの転送キューにおけるサービス運用妨害 (DoS) の脆弱性 CWE-399
リソース管理の問題
CVE-2017-3803 2017-02-8 18:19 2017-01-18 Show GitHub Exploit DB Packet Storm
201875 9.8 緊急
Network
Michael Wallner - pecl_http の HTTP URL 構文解析機能におけるバッファオーバーフローの脆弱性 CWE-119
バッファエラー
CVE-2016-5873 2017-02-8 18:18 2016-03-9 Show GitHub Exploit DB Packet Storm
201876 4.8 警告
Local
valve software - Valve Steam におけるファイルを変更される脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2016-5237 2017-02-8 18:17 2016-05-11 Show GitHub Exploit DB Packet Storm
201877 6.8 警告
Physics
cryptsetup project - cryptsetup パッケージ用 Debian initrd スクリプトにおけるシェルのアクセス権を取得される脆弱性 CWE-287
不適切な認証
CVE-2016-4484 2017-02-8 18:15 2016-11-17 Show GitHub Exploit DB Packet Storm
201878 8.8 重要
Network
GitLab.org - Gitlab の偽装の機能における他のユーザとして "ログイン" される脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2016-4340 2017-02-8 18:15 2016-05-2 Show GitHub Exploit DB Packet Storm
201879 9.8 緊急
Network
Magento, Inc. - Magento CE および EE における PHP オブジェクトインジェクション攻撃を実行される脆弱性 CWE-74
インジェクション
CVE-2016-4010 2017-02-8 17:23 2016-05-17 Show GitHub Exploit DB Packet Storm
201880 9.8 緊急
Network
LibGD project - GD Graphics ライブラリの gdImageWebPtr 関数におけるメモリ二重解放の脆弱性 CWE-415
二重解放
CVE-2016-6912 2017-02-8 17:03 2016-08-17 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 21, 2026, 4:01 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
289281 - ibm websphere_mq IBM WebSphere MQ 7.0.1 before 7.0.1.13, 7.1 before 7.1.0.6, 7.5 before 7.5.0.5, and 8 before 8.0.0.1 allows remote authenticated users to cause a denial of service (queue-slot exhaustion) by leveragi… CWE-399
 Resource Management Errors
CVE-2014-4771 2024-11-21 11:10 2015-02-13 Show GitHub Exploit DB Packet Storm
289282 - vmware vsphere_data_protection VMware vSphere Data Protection (VDP) 5.1, 5.5 before 5.5.9, and 5.8 before 5.8.1 and the proxy client in EMC Avamar Data Store (ADS) and Avamar Virtual Edition (AVE) 6.x and 7.0.x do not properly ver… CWE-310
Cryptographic Issues
CVE-2014-4632 2024-11-21 11:10 2015-02-1 Show GitHub Exploit DB Packet Storm
289283 - apple mac_os_x The App Store process in CommerceKit Framework in Apple OS X before 10.10.2 places Apple ID credentials in App Store logs, which allows local users to obtain sensitive information by reading a file. CWE-200
Information Exposure
CVE-2014-4499 2024-11-21 11:10 2015-01-30 Show GitHub Exploit DB Packet Storm
289284 - apple mac_os_x The CPU Software in Apple OS X before 10.10.2 allows physically proximate attackers to modify firmware during the EFI update process by inserting a Thunderbolt device with crafted code in an Option R… CWE-17
Code
CVE-2014-4498 2024-11-21 11:10 2015-01-30 Show GitHub Exploit DB Packet Storm
289285 - apple mac_os_x Integer signedness error in IOBluetoothFamily in the Bluetooth implementation in Apple OS X before 10.10 allows attackers to execute arbitrary code in a privileged context or cause a denial of servic… CWE-189
Numeric Errors
CVE-2014-4497 2024-11-21 11:10 2015-01-30 Show GitHub Exploit DB Packet Storm
289286 - apple iphone_os
tvos
The mach_port_kobject interface in the kernel in Apple iOS before 8.1.3 and Apple TV before 7.0.3 does not properly restrict kernel-address and heap-permutation information, which makes it easier for… CWE-264
Permissions, Privileges, and Access Controls
CVE-2014-4496 2024-11-21 11:10 2015-01-30 Show GitHub Exploit DB Packet Storm
289287 - apple mac_os_x
iphone_os
tvos
The kernel in Apple iOS before 8.1.3, Apple OS X before 10.10.2, and Apple TV before 7.0.3 does not enforce the read-only attribute of a shared memory segment during use of a custom cache mode, which… CWE-264
Permissions, Privileges, and Access Controls
CVE-2014-4495 2024-11-21 11:10 2015-01-30 Show GitHub Exploit DB Packet Storm
289288 - apple iphone_os Springboard in Apple iOS before 8.1.3 does not properly validate signatures when determining whether to solicit an app trust decision from the user, which allows attackers to bypass intended first-la… CWE-20
 Improper Input Validation 
CVE-2014-4494 2024-11-21 11:10 2015-01-30 Show GitHub Exploit DB Packet Storm
289289 - apple iphone_os The app-installation functionality in MobileInstallation in Apple iOS before 8.1.3 allows attackers to obtain control of the local app container by leveraging access to an enterprise distribution cer… CWE-264
Permissions, Privileges, and Access Controls
CVE-2014-4493 2024-11-21 11:10 2015-01-30 Show GitHub Exploit DB Packet Storm
289290 - apple mac_os_x
iphone_os
tvos
libnetcore in Apple iOS before 8.1.3, Apple OS X before 10.10.2, and Apple TV before 7.0.3 does not verify that certain values have the expected data type, which allows attackers to execute arbitrary… CWE-19
 Data Processing Errors
CVE-2014-4492 2024-11-21 11:10 2015-01-30 Show GitHub Exploit DB Packet Storm