Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 5, 2026, 6 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
202131 4.3 警告
Network
Yandex - デスクトップ用 Yandex Browser の同期フォームにおけるクロスサイトリクエストフォージェリの脆弱性 CWE-352
同一生成元ポリシー違反
CVE-2016-8504 2016-11-1 15:50 2016-10-26 Show GitHub Exploit DB Packet Storm
202132 7.3 重要
Network
Yandex - デスクトップ用 Yandex Browser の Yandex Protect のアンチフィッシング警告におけるパスワードを取得される脆弱性 CWE-Other
その他
CVE-2016-8503 2016-11-1 15:50 2016-10-26 Show GitHub Exploit DB Packet Storm
202133 7.3 重要
Network
Yandex - デスクトップ用 Yandex Browser の Yandex Protect のアンチフィッシング警告におけるパスワードを取得される脆弱性 CWE-Other
その他
CVE-2016-8502 2016-11-1 15:50 2016-10-26 Show GitHub Exploit DB Packet Storm
202134 5.3 警告
Network
Yandex - Yandex Browser における WiFi のセキュリティを回避される脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2016-8501 2016-11-1 15:50 2016-10-26 Show GitHub Exploit DB Packet Storm
202135 5.4 警告
Network
Novell - Novell NetIQ IDM の Identity Applications におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2016-1598 2016-10-31 18:04 2016-06-23 Show GitHub Exploit DB Packet Storm
202136 6.1 警告
Network
Novell - Novell Identity Manager の NetIQ Designer におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2016-1592 2016-10-31 18:04 2016-01-24 Show GitHub Exploit DB Packet Storm
202137 6.1 警告
Network
Novell - Novell Identity Manager の NetIQ Designer におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2015-0787 2016-10-31 18:04 2015-01-7 Show GitHub Exploit DB Packet Storm
202138 8.8 重要
Network
マイクロフォーカス株式会社 - Micro Focus Rumba FTP クライアントにおけるバッファオーバーフローの脆弱性 CWE-119
バッファエラー
CVE-2016-5764 2016-10-31 17:46 2016-10-19 Show GitHub Exploit DB Packet Storm
202139 7.5 重要
Network
fedorahosted.org - TGCaptcha2 における反射攻撃を実行される脆弱性 CWE-Other
その他
CVE-2016-1000032 2016-10-31 17:32 2016-03-9 Show GitHub Exploit DB Packet Storm
202140 7.2 重要
Network
Huge-IT - Joomla! 用 Huge-IT Slider におけるクロスサイトスクリプティングの脆弱性 CWE-89
SQLインジェクション
CVE-2016-1000122 2016-10-31 17:09 2016-07-22 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 6, 2026, 4:18 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
292031 - oracle jre
jdk
Unspecified vulnerability in Oracle Java SE 7u45 and Java SE Embedded 7u45, and OpenJDK 7, allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related t… NVD-CWE-noinfo
CVE-2013-5893 2024-11-21 10:58 2014-01-16 Show GitHub Exploit DB Packet Storm
292032 - oracle vm_virtualbox Unspecified vulnerability in the Oracle VM VirtualBox component in Oracle Virtualization VirtualBox prior to 3.2.20, 4.0.22, 4.1.30, 4.2.22, and 4.3.6 allows local users to affect confidentiality, in… NVD-CWE-noinfo
CVE-2013-5892 2024-11-21 10:58 2014-01-16 Show GitHub Exploit DB Packet Storm
292033 - oracle
mariadb
canonical
debian
redhat
mysql
mariadb
ubuntu_linux
debian_linux
enterprise_linux_server
enterprise_linux_workstation
enterprise_linux_desktop
Unspecified vulnerability in the MySQL Server component in Oracle MySQL 5.5.33 and earlier and 5.6.13 and earlier allows remote authenticated users to affect availability via unknown vectors related … NVD-CWE-noinfo
CVE-2013-5891 2024-11-21 10:58 2014-01-16 Show GitHub Exploit DB Packet Storm
292034 - codeaurora
qualcomm
android-msm
quic_mobile_station_modem_kernel
Multiple array index errors in drivers/media/video/msm/server/msm_cam_server.c in the MSM camera driver for the Linux kernel 3.x, as used in Qualcomm Innovation Center (QuIC) Android contributions fo… CWE-20
 Improper Input Validation 
CVE-2013-6123 2024-11-21 10:58 2014-01-14 Show GitHub Exploit DB Packet Storm
292035 - atmail atmail Multiple cross-site request forgery (CSRF) vulnerabilities in Atmail Webmail Server before 7.2 allow remote attackers to hijack the authentication of administrators for requests that (1) add user acc… CWE-352
 Origin Validation Error
CVE-2013-6028 2024-11-21 10:58 2014-01-13 Show GitHub Exploit DB Packet Storm
292036 - atmail atmail Cross-site scripting (XSS) vulnerability in Atmail Webmail Server before 7.2 allows remote attackers to inject arbitrary web script or HTML via the body of an e-mail message, as demonstrated by the S… CWE-79
Cross-site Scripting
CVE-2013-6017 2024-11-21 10:58 2014-01-13 Show GitHub Exploit DB Packet Storm
292037 - hp storage_data_protector Unspecified vulnerability in HP Storage Data Protector 6.2X allows remote attackers to execute arbitrary code or cause a denial of service via unknown vectors, aka ZDI-CAN-2008. NVD-CWE-noinfo
CVE-2013-6195 2024-11-21 10:58 2014-01-4 Show GitHub Exploit DB Packet Storm
292038 - hp storage_data_protector Unspecified vulnerability in HP Storage Data Protector 6.2X allows remote attackers to execute arbitrary code or cause a denial of service via unknown vectors, aka ZDI-CAN-1905. NVD-CWE-noinfo
CVE-2013-6194 2024-11-21 10:58 2014-01-4 Show GitHub Exploit DB Packet Storm
292039 - hp service_manager_web_tier
service_manager_web_client
service_manager
Cross-site scripting (XSS) vulnerability in HP Service Manager WebTier and Windows Client 9.20 and 9.21 before 9.21.661 p8 allows remote attackers to inject arbitrary web script or HTML via unspecifi… CWE-79
Cross-site Scripting
CVE-2013-6198 2024-11-21 10:58 2013-12-29 Show GitHub Exploit DB Packet Storm
292040 - hp service_manager_web_tier
service_manager_web_client
service_manager
Unspecified vulnerability in HP Service Manager WebTier and Windows Client 9.20 and 9.21 before 9.21.661 p8 allows remote authenticated users to execute arbitrary code via unknown vectors. NVD-CWE-noinfo
CVE-2013-6197 2024-11-21 10:58 2013-12-29 Show GitHub Exploit DB Packet Storm