Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 20, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
201941 9.8 緊急
Network 		Exponent CMS project - Exponent CMS における任意のコードを実行される脆弱性 CWE-94
コード・インジェクション 		CVE-2016-2242 2017-02-6 17:43 2016-01-23 Show GitHub Exploit DB Packet Storm
201942 9.8 緊急
Network 		LHa for UNIX project - LHA の header.c における整数アンダーフローの脆弱性 CWE-191
整数アンダーフロー 		CVE-2016-1925 2017-02-6 17:41 2016-01-16 Show GitHub Exploit DB Packet Storm
201943 7.5 重要
Network 		OneLogin, Inc. - Ruby-saml における XML 署名ラッピング攻撃を実行される脆弱性 CWE-91
ブラインド XPath インジェクション 		CVE-2016-5697 2017-02-6 17:41 2016-06-24 Show GitHub Exploit DB Packet Storm
201944 8.8 重要
Network 		Snort.org - Snort における任意のコードを実行される脆弱性 CWE-426
信頼性のない検索パス 		CVE-2016-1417 2017-02-6 17:40 2016-09-29 Show GitHub Exploit DB Packet Storm
201945 8.8 重要
Network 		elfden - WordPress 用 eShop プラグインの eshop-orders.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2016-0769 2017-02-6 17:34 2016-02-2 Show GitHub Exploit DB Packet Storm
201946 6.1 警告
Network 		elfden - WordPress 用 eShop プラグインの eshop-orders.php におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2016-0765 2017-02-6 17:33 2016-02-2 Show GitHub Exploit DB Packet Storm
201947 7.8 重要
Local 		Debian
Terminology project		 - Terminology における任意のコマンドを実行される脆弱性 CWE-77
コマンドインジェクション 		CVE-2015-8971 2017-02-6 17:32 2015-08-17 Show GitHub Exploit DB Packet Storm
201948 7.8 重要
Local 		マイクロソフト - Microsoft Skype における任意のコードを実行される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2016-5720 2017-02-6 17:04 2016-09-27 Show GitHub Exploit DB Packet Storm
201949 8.4 重要
Local 		ownCloud - ownCloud Desktop における任意のコードを実行される脆弱性 CWE-94
コード・インジェクション 		CVE-2016-7102 2017-02-6 16:24 2016-08-17 Show GitHub Exploit DB Packet Storm
201950 5.9 警告
Network 		ownCloud - ownCloud サーバにおける任意の画像をダウンロードされる脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2016-5876 2017-02-6 16:24 2016-07-13 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 21, 2026, 4:01 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
289281 - ibm websphere_mq IBM WebSphere MQ 7.0.1 before 7.0.1.13, 7.1 before 7.1.0.6, 7.5 before 7.5.0.5, and 8 before 8.0.0.1 allows remote authenticated users to cause a denial of service (queue-slot exhaustion) by leveragi… CWE-399
 Resource Management Errors 		CVE-2014-4771 2024-11-21 11:10 2015-02-13 Show GitHub Exploit DB Packet Storm
289282 - vmware vsphere_data_protection VMware vSphere Data Protection (VDP) 5.1, 5.5 before 5.5.9, and 5.8 before 5.8.1 and the proxy client in EMC Avamar Data Store (ADS) and Avamar Virtual Edition (AVE) 6.x and 7.0.x do not properly ver… CWE-310
Cryptographic Issues 		CVE-2014-4632 2024-11-21 11:10 2015-02-1 Show GitHub Exploit DB Packet Storm
289283 - apple mac_os_x The App Store process in CommerceKit Framework in Apple OS X before 10.10.2 places Apple ID credentials in App Store logs, which allows local users to obtain sensitive information by reading a file. CWE-200
Information Exposure 		CVE-2014-4499 2024-11-21 11:10 2015-01-30 Show GitHub Exploit DB Packet Storm
289284 - apple mac_os_x The CPU Software in Apple OS X before 10.10.2 allows physically proximate attackers to modify firmware during the EFI update process by inserting a Thunderbolt device with crafted code in an Option R… CWE-17
Code 		CVE-2014-4498 2024-11-21 11:10 2015-01-30 Show GitHub Exploit DB Packet Storm
289285 - apple mac_os_x Integer signedness error in IOBluetoothFamily in the Bluetooth implementation in Apple OS X before 10.10 allows attackers to execute arbitrary code in a privileged context or cause a denial of servic… CWE-189
Numeric Errors 		CVE-2014-4497 2024-11-21 11:10 2015-01-30 Show GitHub Exploit DB Packet Storm
289286 - apple iphone_os
tvos 		The mach_port_kobject interface in the kernel in Apple iOS before 8.1.3 and Apple TV before 7.0.3 does not properly restrict kernel-address and heap-permutation information, which makes it easier for… CWE-264
Permissions, Privileges, and Access Controls 		CVE-2014-4496 2024-11-21 11:10 2015-01-30 Show GitHub Exploit DB Packet Storm
289287 - apple mac_os_x
iphone_os
tvos 		The kernel in Apple iOS before 8.1.3, Apple OS X before 10.10.2, and Apple TV before 7.0.3 does not enforce the read-only attribute of a shared memory segment during use of a custom cache mode, which… CWE-264
Permissions, Privileges, and Access Controls 		CVE-2014-4495 2024-11-21 11:10 2015-01-30 Show GitHub Exploit DB Packet Storm
289288 - apple iphone_os Springboard in Apple iOS before 8.1.3 does not properly validate signatures when determining whether to solicit an app trust decision from the user, which allows attackers to bypass intended first-la… CWE-20
 Improper Input Validation  		CVE-2014-4494 2024-11-21 11:10 2015-01-30 Show GitHub Exploit DB Packet Storm
289289 - apple iphone_os The app-installation functionality in MobileInstallation in Apple iOS before 8.1.3 allows attackers to obtain control of the local app container by leveraging access to an enterprise distribution cer… CWE-264
Permissions, Privileges, and Access Controls 		CVE-2014-4493 2024-11-21 11:10 2015-01-30 Show GitHub Exploit DB Packet Storm
289290 - apple mac_os_x
iphone_os
tvos 		libnetcore in Apple iOS before 8.1.3, Apple OS X before 10.10.2, and Apple TV before 7.0.3 does not verify that certain values have the expected data type, which allows attackers to execute arbitrary… CWE-19
 Data Processing Errors 		CVE-2014-4492 2024-11-21 11:10 2015-01-30 Show GitHub Exploit DB Packet Storm