Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":June 25, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
201881	3.3	低 Local	Moxa Inc.	-	複数の Moxa NPort 製品におけるパスワードを平文で表示される脆弱性	CWE-255 証明書・パスワード管理	CVE-2016-9348	2017-03-8 18:37	2016-12-1	Show	GitHub Exploit DB Packet Storm

201882	7.8	重要 Local	Moxa Inc.	-	Moxa DACenter アプリケーションにおける脆弱性	CWE-284 不適切なアクセス制御	CVE-2016-9356	2017-03-8 17:27	2016-12-13	Show	GitHub Exploit DB Packet Storm

201883	5.5	警告 Local	Moxa Inc.	-	Moxa DACenter におけるプログラムをクラッシュされる脆弱性	CWE-399 リソース管理の問題	CVE-2016-9354	2017-03-8 17:27	2016-12-13	Show	GitHub Exploit DB Packet Storm

201884	7.2	重要 Network	Moxa Inc.	-	Moxa SoftCMS アプリケーションにおける SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2016-9333	2017-03-8 17:02	2016-11-17	Show	GitHub Exploit DB Packet Storm

201885	7.5	重要 Network	Moxa Inc.	-	Moxa SoftCMS の Web サーバにおけるサービス運用妨害 (DoS) の脆弱性	CWE-399 リソース管理の問題	CVE-2016-9332	2017-03-8 17:02	2016-11-17	Show	GitHub Exploit DB Packet Storm

201886	8.1	重要 Network	Moxa Inc.	-	Moxa SoftCMS におけるメモリ領域を変更される脆弱性	CWE-415 二重解放	CVE-2016-8360	2017-03-8 17:02	2016-11-17	Show	GitHub Exploit DB Packet Storm

201887	7.8	重要 Local	アドバンテック株式会社	-	Advantech SUSIAccess Server における管理者アカウントのパスワードを悪用される脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2016-9353	2017-03-8 16:44	2016-12-1	Show	GitHub Exploit DB Packet Storm

201888	7	重要 Local	アドバンテック株式会社	-	Advantech SUSIAccess Server におけるディレクトリトラバーサルの脆弱性	CWE-22 パス・トラバーサル	CVE-2016-9351	2017-03-8 16:44	2016-12-1	Show	GitHub Exploit DB Packet Storm

201889	7.5	重要 Network	アドバンテック株式会社	-	Advantech SUSIAccess Server における情報を公開される脆弱性	CWE-200 情報漏えい	CVE-2016-9349	2017-03-8 16:44	2016-12-1	Show	GitHub Exploit DB Packet Storm

201890	9.8	緊急 Network	アドバンテック株式会社	-	Advantech WebAccess における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2017-5154	2017-03-8 15:41	2017-01-12	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:June 25, 2026, 4:04 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
293161	6.1	MEDIUM Network	redhat	satellite	Cross-site scripting (XSS) vulnerability in Red Hat Satellite 6.0.3.	CWE-79 Cross-site Scripting	CVE-2014-0141	2024-11-21 11:01	2017-08-29	Show	GitHub Exploit DB Packet Storm

293162	5.5	MEDIUM Local	qemu	qemu	The qcow2_open function in the (block/qcow2.c) in QEMU before 1.7.2 and 2.x before 2.0.0 allows local users to cause a denial of service (NULL pointer dereference) via a crafted image which causes an…	CWE-476 NULL Pointer Dereference	CVE-2014-0146	2024-11-21 11:01	2017-08-11	Show	GitHub Exploit DB Packet Storm

293163	7.8	HIGH Local	qemu	qemu	Multiple buffer overflows in QEMU before 1.7.2 and 2.x before 2.0.0, allow local users to cause a denial of service (crash) or possibly execute arbitrary code via a large (1) L1 table in the qcow2_sn…	CWE-119 Incorrect Access of Indexable Resource ('Range Error')	CVE-2014-0145	2024-11-21 11:01	2017-08-11	Show	GitHub Exploit DB Packet Storm

293164	5.5	MEDIUM Local	qemu	qemu	QEMU, possibly before 2.0.0, allows local users to cause a denial of service (divide-by-zero error and crash) via a zero value in the (1) tracks field to the seek_to_sector function in block/parallel…	CWE-369 Divide By Zero	CVE-2014-0142	2024-11-21 11:01	2017-08-11	Show	GitHub Exploit DB Packet Storm

293165	7.0	HIGH Local	redhat qemu	enterprise_linux qemu	Multiple integer overflows in the block drivers in QEMU, possibly before 2.0.0, allow local users to cause a denial of service (crash) via a crafted catalog size in (1) the parallels_open function in…	CWE-190 Integer Overflow or Wraparound	CVE-2014-0143	2024-11-21 11:01	2017-08-11	Show	GitHub Exploit DB Packet Storm

293166	8.8	HIGH Network	pivotal_software vmware	spring_framework	When processing user provided XML documents, the Spring Framework 4.0.0 to 4.0.4, 3.0.0 to 3.2.8, and possibly earlier unsupported versions did not disable by default the resolution of URI references…	CWE-611 XXE	CVE-2014-0225	2024-11-21 11:01	2017-05-26	Show	GitHub Exploit DB Packet Storm

293167	7.3	HIGH Network	vmware	spring_security	The ActiveDirectoryLdapAuthenticator in Spring Security 3.2.0 to 3.2.1 and 3.1.0 to 3.1.5 does not check the password length. If the directory allows anonymous binds then it may incorrectly authentic…	CWE-287 Improper Authentication	CVE-2014-0097	2024-11-21 11:01	2017-05-26	Show	GitHub Exploit DB Packet Storm

293168	7.5	HIGH Network	aescrypt_project	aescrypt	The aescrypt gem 1.0.0 for Ruby does not randomize the CBC IV for use with the AESCrypt.encrypt and AESCrypt.decrypt functions, which allows attackers to defeat cryptographic protection mechanisms vi…	CWE-330 Use of Insufficiently Random Values	CVE-2013-7463	2024-11-21 11:01	2017-04-20	Show	GitHub Exploit DB Packet Storm

293169	7.5	HIGH Network	pulpproject	pulp	Pulp before 2.3.0 uses the same the same certificate authority key and certificate for all installations.	CWE-295 Improper Certificate Validation	CVE-2013-7450	2024-11-21 11:01	2017-04-4	Show	GitHub Exploit DB Packet Storm

293170	6.5	MEDIUM Network	cloudera apache	cdh hadoop	Apache Hadoop 0.23.x before 0.23.11 and 2.x before 2.4.1, as used in Cloudera CDH 5.0.x before 5.0.2, do not check authorization for the (1) refreshNamenodes, (2) deleteBlockPool, and (3) shutdownDat…	CWE-264 Permissions, Privileges, and Access Controls	CVE-2014-0229	2024-11-21 11:01	2017-03-24	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed