Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 15, 2026, 2 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
202131 7.2 重要
Network 		MetalGenix - GeniXCMS の inc/lib/Control/Backend/posts.control.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2017-5346 2017-01-24 14:36 2017-01-15 Show GitHub Exploit DB Packet Storm
202132 8.8 重要
Network 		MetalGenix - GeniXCMS の inc/lib/Control/Ajax/tags-ajax.control.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2017-5345 2017-01-24 14:36 2017-01-9 Show GitHub Exploit DB Packet Storm
202133 9.8 緊急
Network 		LibTIFF - LibTIFF の tools/tiffcp におけるヒープバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2017-5225 2017-01-24 14:24 2017-01-12 Show GitHub Exploit DB Packet Storm
202134 9.8 緊急
Network 		The PHP Group - PHP における任意のコードを実行される脆弱性 CWE-416
解放済みメモリの使用 		CVE-2016-7479 2017-01-24 14:23 2016-09-15 Show GitHub Exploit DB Packet Storm
202135 7.5 重要
Network 		サムスン - Samsung Note デバイスのソフトウェアにおけるシステムクラッシュを引き起こされる脆弱性 CWE-400
リソースの枯渇 		CVE-2017-5351 2017-01-24 13:54 2017-01-12 Show GitHub Exploit DB Packet Storm
202136 7.5 重要
Network 		サムスン - Samsung Note デバイスのソフトウェアにおける systemUI のクラッシュを引き起こされる脆弱性 CWE-388
エラー処理 		CVE-2017-5350 2017-01-24 13:54 2017-01-12 Show GitHub Exploit DB Packet Storm
202137 9.8 緊急
Network 		British Columbia Institute of Technology - CodeIgniter の system/libraries/Email.php における任意のコードを実行される脆弱性 CWE-74
インジェクション 		CVE-2016-10131 2017-01-24 13:53 2016-12-27 Show GitHub Exploit DB Packet Storm
202138 5.3 警告
Local 		Google - Telephony における権限昇格の脆弱性 CWE-284
不適切なアクセス制御 		CVE-2016-6771 2017-01-24 11:11 2016-12-5 Show GitHub Exploit DB Packet Storm
202139 5.5 警告
Local 		Google - メディアサーバにおけるサービス運用妨害 (DoS) の脆弱性 CWE-399
リソース管理の問題 		CVE-2016-6767 2017-01-24 11:11 2016-12-5 Show GitHub Exploit DB Packet Storm
202140 7 重要
Local 		Linux - MediaTek ドライバにおける権限を昇格される脆弱性 CWE-284
不適切なアクセス制御 		CVE-2016-6785 2017-01-24 10:09 2016-12-5 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 15, 2026, 4:10 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
292401 - cisco ips_sensor_software Cisco IPS Software 7.1 before 7.1(8)E4 and 7.2 before 7.2(2)E4 allows remote attackers to cause a denial of service (Analysis Engine process outage) via a flood of jumbo frames, aka Bug ID CSCuh94944. CWE-20
 Improper Input Validation  		CVE-2014-0720 2024-11-21 11:02 2014-02-23 Show GitHub Exploit DB Packet Storm
292402 - cisco ips_sensor_software The control-plane access-list implementation in Cisco IPS Software before 7.1(8p2)E4 and 7.2 before 7.2(2)E4 allows remote attackers to cause a denial of service (MainApp process outage) via crafted … CWE-264
Permissions, Privileges, and Access Controls 		CVE-2014-0719 2024-11-21 11:02 2014-02-23 Show GitHub Exploit DB Packet Storm
292403 - cisco ips_sensor_software The produce-verbose-alert feature in Cisco IPS Software 7.1 before 7.1(8)E4 and 7.2 before 7.2(2)E4 allows remote attackers to cause a denial of service (Analysis Engine process outage) via fragmente… CWE-20
 Improper Input Validation  		CVE-2014-0718 2024-11-21 11:02 2014-02-23 Show GitHub Exploit DB Packet Storm
292404 - cisco firewall_services_module_software Race condition in the cut-through proxy feature in Cisco Firewall Services Module (FWSM) Software 3.x before 3.2(28) and 4.x before 4.1(15) allows remote attackers to cause a denial of service (devic… CWE-362
Race Condition 		CVE-2014-0710 2024-11-21 11:02 2014-02-23 Show GitHub Exploit DB Packet Storm
292405 - cisco ucs_director Cisco UCS Director (formerly Cloupia) before 4.0.0.3 has a hardcoded password for the root account, which makes it easier for remote attackers to obtain administrative access via an SSH session to th… CWE-255
Credentials Management 		CVE-2014-0709 2024-11-21 11:02 2014-02-23 Show GitHub Exploit DB Packet Storm
292406 - adobe flash_player
adobe_air_sdk
adobe_air 		Adobe Flash Player before 11.7.700.269 and 11.8.x through 12.0.x before 12.0.0.70 on Windows and Mac OS X and before 11.2.202.341 on Linux, Adobe AIR before 4.0.0.1628 on Android, Adobe AIR SDK befor… CWE-264
Permissions, Privileges, and Access Controls 		CVE-2014-0499 2024-11-21 11:02 2014-02-21 Show GitHub Exploit DB Packet Storm
292407 - adobe flash_player
adobe_air_sdk
adobe_air 		Stack-based buffer overflow in Adobe Flash Player before 11.7.700.269 and 11.8.x through 12.0.x before 12.0.0.70 on Windows and Mac OS X and before 11.2.202.341 on Linux, Adobe AIR before 4.0.0.1628 … CWE-119
Incorrect Access of Indexable Resource ('Range Error')  		CVE-2014-0498 2024-11-21 11:02 2014-02-21 Show GitHub Exploit DB Packet Storm
292408 - cisco unified_communications_manager The Enterprise License Manager (ELM) component in Cisco Unified Communications Manager (Unified CM) 10.0(1) and earlier does not properly enforce authentication requirements, which allows remote atta… CWE-287
Improper Authentication 		CVE-2014-0733 2024-11-21 11:02 2014-02-21 Show GitHub Exploit DB Packet Storm
292409 - cisco unified_communications_manager Cross-site request forgery (CSRF) vulnerability in the Call Detail Records Analysis and Reporting (CAR) page in Cisco Unified Communications Manager (Unified CM) 10.0(1) and earlier allows remote att… CWE-352
 Origin Validation Error 		CVE-2014-0736 2024-11-21 11:02 2014-02-20 Show GitHub Exploit DB Packet Storm
292410 - cisco unified_communications_manager Cross-site scripting (XSS) vulnerability in the IP Manager Assistant (IPMA) interface in Cisco Unified Communications Manager (Unified CM) 10.0(1) and earlier allows remote attackers to inject arbitr… CWE-79
Cross-site Scripting 		CVE-2014-0735 2024-11-21 11:02 2014-02-20 Show GitHub Exploit DB Packet Storm