Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 4, 2026, 4 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
201881 7.5 重要
Network
Exponent CMS project - Exponent CMS の Pixidou Image Editor におけるサイト上の任意のフォルダにファイルをアップロードされる脆弱性 CWE-Other
その他
CVE-2016-7452 2016-11-7 18:10 2016-09-15 Show GitHub Exploit DB Packet Storm
201882 9.8 緊急
Network
Exponent CMS project - Exponent CMS におけるスクリプトファイルをアップロードされる脆弱性 CWE-Other
その他
CVE-2016-7095 2016-11-7 18:10 2016-08-28 Show GitHub Exploit DB Packet Storm
201883 6.5 警告
Network
GitLab.org - GitLab の "import/export project" 機能における GitLab サービスアカウントにアクセス可能なすべてのファイルの内容を取得される脆弱性 CWE-200
情報漏えい
CVE-2016-9086 2016-11-7 15:49 2016-11-2 Show GitHub Exploit DB Packet Storm
201884 9.8 緊急
Network
Square, Inc. - git-fastclone における任意のコマンドを実行される脆弱性 CWE-Other
その他
CVE-2015-8969 2016-11-7 14:55 2015-12-17 Show GitHub Exploit DB Packet Storm
201885 8.8 重要
Network
Square, Inc. - git-fastclone における任意のシェルコマンドを実行される脆弱性 CWE-Other
その他
CVE-2015-8968 2016-11-7 14:55 2015-12-12 Show GitHub Exploit DB Packet Storm
201886 9.8 緊急
Network
SAP - SAP ASE における権限昇格の脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2016-7402 2016-11-7 14:34 2016-09-13 Show GitHub Exploit DB Packet Storm
201887 5.4 警告
Network
IBM - IBM Financial Transaction Manager の Web UI におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2016-5920 2016-11-7 14:21 2016-08-19 Show GitHub Exploit DB Packet Storm
201888 5.7 警告
Network
IBM - IBM Financial Transaction Manager の Payments Director におけるクリックジャッキング攻撃を実行される脆弱性 CWE-Other
その他
CVE-2016-3060 2016-11-7 14:21 2016-08-19 Show GitHub Exploit DB Packet Storm
201889 9.8 緊急
Network
アドビシステムズ - Adobe Flash Player における任意のコードを実行される脆弱性 CWE-Other
その他
CVE-2016-7855 2016-11-7 14:02 2016-10-26 Show GitHub Exploit DB Packet Storm
201890 9.8 緊急
Network
Google
サムスン
- Samsung Galaxy デバイスの libomacp.so における整数オーバーフローの脆弱性 CWE-Other
その他
CVE-2016-7990 2016-11-7 12:06 2016-06-21 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 5, 2026, 4:11 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
289971 - cisco secure_access_control_system The portal interface in Cisco Secure Access Control System (ACS) does not properly manage sessions, which allows remote authenticated users to hijack sessions and gain privileges via unspecified vect… CWE-264
Permissions, Privileges, and Access Controls
CVE-2014-0678 2024-11-21 11:02 2014-01-26 Show GitHub Exploit DB Packet Storm
289972 - cisco video_surveillance_indoor_fixed_dome_ip_hd_camera Multiple cross-site scripting (XSS) vulnerabilities in the web interface on Cisco Video Surveillance 5000 HD IP Dome cameras allow remote attackers to inject arbitrary web script or HTML via a crafte… CWE-79
Cross-site Scripting
CVE-2014-0673 2024-11-21 11:02 2014-01-26 Show GitHub Exploit DB Packet Storm
289973 - gapless_player simzip Directory traversal vulnerability in the Gapless Player SimZip (aka Simple Zip Viewer) application before 1.2.1 for Android allows remote attackers to overwrite or create arbitrary files via a crafte… CWE-22
Path Traversal
CVE-2014-0809 2024-11-21 11:02 2014-01-25 Show GitHub Exploit DB Packet Storm
289974 - cisco video_surveillance_operations_manager Cisco Video Surveillance Operations Manager (VSOM) does not require authentication for MySQL database connections, which allows remote attackers to obtain sensitive information, modify data, or cause… CWE-287
Improper Authentication
CVE-2014-0674 2024-11-21 11:02 2014-01-24 Show GitHub Exploit DB Packet Storm
289975 - adobe digital_editions Adobe Digital Editions 2.0.1 allows attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via unspecified vectors. CWE-119
Incorrect Access of Indexable Resource ('Range Error') 
CVE-2014-0494 2024-11-21 11:02 2014-01-24 Show GitHub Exploit DB Packet Storm
289976 - cisco telepresence_video_communication_server The Expressway component in Cisco TelePresence Video Communication Server (VCS) uses the same default X.509 certificate across different customers' installations, which makes it easier for remote att… CWE-255
Credentials Management
CVE-2014-0675 2024-11-21 11:02 2014-01-23 Show GitHub Exploit DB Packet Storm
289977 - lockon ec-cube Authorization bypass through user-controlled key issue exists in EC-CUBE 2.11.0 through 2.12.2 and EC-Orange systems deployed before June 29th, 2015. If this vulnerability is exploited, a user of the… NVD-CWE-noinfo
CVE-2014-0808 2024-11-21 11:02 2014-01-23 Show GitHub Exploit DB Packet Storm
289978 - lockon ec-cube data/class/pages/shopping/LC_Page_Shopping_Deliv.php in LOCKON EC-CUBE 2.4.4 and earlier, and 2.11.0 through 2.12.2, allows remote attackers to modify data via unspecified vectors. NVD-CWE-noinfo
CVE-2014-0807 2024-11-21 11:02 2014-01-23 Show GitHub Exploit DB Packet Storm
289979 - fenrir-inc sleipnir_mobile The Sleipnir Mobile application 2.12.1 and earlier and Sleipnir Mobile Black Edition application 2.12.1 and earlier for Android provide Geolocation API data without verifying user consent, which allo… CWE-200
Information Exposure
CVE-2014-0806 2024-11-21 11:02 2014-01-23 Show GitHub Exploit DB Packet Storm
289980 - cisco nx-os The Label Distribution Protocol (LDP) functionality in Cisco NX-OS allows remote attackers to cause a denial of service (temporary LDP session outage) via LDP discovery traffic containing malformed H… CWE-20
 Improper Input Validation 
CVE-2014-0677 2024-11-21 11:02 2014-01-23 Show GitHub Exploit DB Packet Storm