Vulnerability Search Top

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

Vulnerability Information Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 19, 2026, noon

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
202131	7.5	重要 Network	マイクロソフト	-	Microsoft Internet Explorer 11 における任意のコードを実行される脆弱性	CWE-119 バッファエラー	CVE-2016-3288	2016-08-15 16:55	2016-08-9	Show	GitHub Exploit DB Packet Storm

202132	7.8	重要 Local	マイクロソフト	-	複数の Microsoft Windows 製品のカーネルモードドライバにおける権限昇格の脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2016-3311	2016-08-15 16:51	2016-08-9	Show	GitHub Exploit DB Packet Storm

202133	7.8	重要 Local	マイクロソフト	-	複数の Microsoft Windows 製品のカーネルモードドライバにおける権限昇格の脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2016-3310	2016-08-15 16:51	2016-08-9	Show	GitHub Exploit DB Packet Storm

202134	7.8	重要 Local	マイクロソフト	-	複数の Microsoft Windows 製品のカーネルモードドライバにおける権限昇格の脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2016-3309	2016-08-15 16:51	2016-08-9	Show	GitHub Exploit DB Packet Storm

202135	7.8	重要 Local	マイクロソフト	-	複数の Microsoft Windows 製品のカーネルモードドライバにおける権限昇格の脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2016-3308	2016-08-15 16:51	2016-08-9	Show	GitHub Exploit DB Packet Storm

202136	7.8	重要 Local	マイクロソフト	-	複数の Microsoft 製品の Windows フォントライブラリにおける任意のコードを実行される脆弱性	CWE-20 不適切な入力確認	CVE-2016-3304	2016-08-15 16:51	2016-08-9	Show	GitHub Exploit DB Packet Storm

202137	7.8	重要 Local	マイクロソフト	-	複数の Microsoft 製品の Windows フォントライブラリにおける任意のコードを実行される脆弱性	CWE-20 不適切な入力確認	CVE-2016-3303	2016-08-15 16:51	2016-08-9	Show	GitHub Exploit DB Packet Storm

202138	7.8	重要 Local	マイクロソフト	-	複数の Microsoft 製品の Windows フォントライブラリにおける任意のコードを実行される脆弱性	CWE-20 不適切な入力確認	CVE-2016-3301	2016-08-15 16:51	2016-08-9	Show	GitHub Exploit DB Packet Storm

202139	7.8	重要 Local	マイクロソフト	-	複数の Microsoft Office 製品における任意のコードを実行される脆弱性	CWE-119 バッファエラー	CVE-2016-3318	2016-08-15 16:49	2016-08-9	Show	GitHub Exploit DB Packet Storm

202140	7.8	重要 Local	マイクロソフト	-	Microsoft Office 2010 および複数の Word 製品における任意のコードを実行される脆弱性	CWE-119 バッファエラー	CVE-2016-3317	2016-08-15 16:49	2016-08-9	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 19, 2026, 4:16 a.m.

No	CVSS	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
290541	-	apache	xml_security_for_c\+\+	Apache Santuario XML Security for C++ (aka xml-security-c) before 1.7.1 does not properly validate length values, which allows remote attackers to cause a denial of service or bypass the CVE-2009-021…	CWE-20 Improper Input Validation	CVE-2013-2155	2024-11-21 10:51	2013-08-21	Show	GitHub Exploit DB Packet Storm

290542	-	apache	xml_security_for_c\+\+	Stack-based buffer overflow in the XML Signature Reference functionality (xsec/dsig/DSIGReference.cpp) in Apache Santuario XML Security for C++ (aka xml-security-c) before 1.7.1 allows context-depend…	CWE-119 Incorrect Access of Indexable Resource ('Range Error')	CVE-2013-2154	2024-11-21 10:51	2013-08-21	Show	GitHub Exploit DB Packet Storm

290543	-	apache	xml_security_for_c\+\+	The XML digital signature functionality (xsec/dsig/DSIGReference.cpp) in Apache Santuario XML Security for C++ (aka xml-security-c) before 1.7.1 allows context-dependent attackers to reuse signatures…	CWE-310 Cryptographic Issues	CVE-2013-2153	2024-11-21 10:51	2013-08-21	Show	GitHub Exploit DB Packet Storm

290544	-	apache	cxf	The streaming XML parser in Apache CXF 2.5.x before 2.5.10, 2.6.x before 2.6.7, and 2.7.x before 2.7.4 allows remote attackers to cause a denial of service (CPU and memory consumption) via crafted XM…	CWE-399 Resource Management Errors	CVE-2013-2160	2024-11-21 10:51	2013-08-20	Show	GitHub Exploit DB Packet Storm

290545	-	canonical opensuse perlmonks	ubuntu_linux opensuse module\	The cpansign verify functionality in the Module::Signature module before 0.72 for Perl allows attackers to bypass the signature check and execute arbitrary code via a SIGNATURE file with a "special u…	CWE-20 Improper Input Validation	CVE-2013-2145	2024-11-21 10:51	2013-08-20	Show	GitHub Exploit DB Packet Storm

290546	-	apache	cloudstack	Multiple cross-site scripting (XSS) vulnerabilities in Apache CloudStack before 4.1.1 allow remote attackers to inject arbitrary web script or HTML via the (1) Physical network name to the Zone wizar…	CWE-79 Cross-site Scripting	CVE-2013-2136	2024-11-21 10:51	2013-08-20	Show	GitHub Exploit DB Packet Storm

290547	-	debian canonical redhat haproxy	debian_linux ubuntu_linux enterprise_linux_load_balancer haproxy	HAProxy 1.4 before 1.4.24 and 1.5 before 1.5-dev19, when configured to use hdr_ip or other "hdr_*" functions with a negative occurrence count, allows remote attackers to cause a denial of service (ne…	CWE-20 CWE-284 Improper Input Validation Improper Access Control	CVE-2013-2175	2024-11-21 10:51	2013-08-19	Show	GitHub Exploit DB Packet Storm

290548	-	canonical	ubuntu_linux	Race condition in the post-installation script (mysql-server-5.5.postinst) for MySQL Server 5.5 for Debian GNU/Linux and Ubuntu Linux creates a configuration file with world-readable permissions befo…	CWE-362 Race Condition	CVE-2013-2162	2024-11-21 10:51	2013-08-19	Show	GitHub Exploit DB Packet Storm

290549	-	mongodb canonical opensuse	mongodb ubuntu_linux opensuse	bson/_cbsonmodule.c in the mongo-python-driver (aka. pymongo) before 2.5.2, as used in MongoDB, allows context-dependent attackers to cause a denial of service (NULL pointer dereference and crash) vi…	NVD-CWE-Other	CVE-2013-2132	2024-11-21 10:51	2013-08-16	Show	GitHub Exploit DB Packet Storm

290550	-	apache	ofbiz	Apache Open For Business Project (aka OFBiz) 10.04.01 through 10.04.05, 11.04.01 through 11.04.02, and 12.04.01 allows remote attackers to execute arbitrary Unified Expression Language (UEL) function…	CWE-20 Improper Input Validation	CVE-2013-2250	2024-11-21 10:51	2013-08-16	Show	GitHub Exploit DB Packet Storm