Vulnerability Search Top

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

Vulnerability Information Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 22, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
202211	7.8	重要 Local	マイクロソフト	-	複数の Microsoft Excel 製品および Office 互換機能パックにおける任意のコードを実行される脆弱性	CWE-119 バッファエラー	CVE-2016-3359	2016-09-15 18:14	2016-09-13	Show	GitHub Exploit DB Packet Storm

202212	6.5	警告 Network	マイクロソフト	-	複数の Microsoft Office 製品の Visual Basic マクロにおける重要な情報を取得される脆弱性	CWE-200 情報漏えい	CVE-2016-0141	2016-09-15 18:14	2016-09-13	Show	GitHub Exploit DB Packet Storm

202213	3.3	低 Local	マイクロソフト	-	Microsoft Office 2013 および 2016 のクイック実行の実装における ASLR 保護メカニズムを回避される脆弱性	CWE-Other その他	CVE-2016-0137	2016-09-15 18:14	2016-09-13	Show	GitHub Exploit DB Packet Storm

202214	6.1	警告 Network	マイクロソフト	-	Microsoft Exchange Server 2016 におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2016-3379	2016-09-15 16:38	2016-09-13	Show	GitHub Exploit DB Packet Storm

202215	4.3	警告 Network	マイクロソフト	-	Microsoft Exchange Server における重要な Outlook アプリケーション情報を取得される脆弱性	CWE-200 情報漏えい	CVE-2016-0138	2016-09-15 16:38	2016-09-13	Show	GitHub Exploit DB Packet Storm

202216	3.1	低 Network	マイクロソフト	-	Microsoft Internet Explorer 11 および Microsoft Edge における重要な情報を取得される脆弱性	CWE-200 情報漏えい	CVE-2016-3325	2016-09-15 15:44	2016-09-13	Show	GitHub Exploit DB Packet Storm

202217	8.8	重要 Network	マイクロソフト	-	Microsoft Internet Explorer 9 から 11 および Microsoft Edge における任意のコードを実行される脆弱性	CWE-noinfo 情報不足	CVE-2016-3297	2016-09-15 15:44	2016-09-13	Show	GitHub Exploit DB Packet Storm

202218	7.5	重要 Network	マイクロソフト	-	Microsoft Internet Explorer および Microsoft Edge における任意のコードを実行される脆弱性	CWE-119 バッファエラー	CVE-2016-3295	2016-09-15 15:44	2016-09-13	Show	GitHub Exploit DB Packet Storm

202219	2.4	低 Network	マイクロソフト	-	Microsoft Internet Explorer 11 および Microsoft Edge における重要な情報を取得される脆弱性	CWE-200 情報漏えい	CVE-2016-3291	2016-09-15 15:44	2016-09-13	Show	GitHub Exploit DB Packet Storm

202220	7.5	重要 Network	マイクロソフト	-	Microsoft Internet Explorer 11 および Microsoft Edge における任意のコードを実行される脆弱性	CWE-noinfo 情報不足	CVE-2016-3247	2016-09-15 15:44	2016-09-13	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 23, 2026, 4:08 a.m.

No	CVSS	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
290271	-	corel	pdf_fusion	Untrusted search path vulnerability in Corel PDF Fusion 1.11 allows local users to gain privileges via a Trojan horse wintab32.dll file in the current working directory, as demonstrated by a director…	NVD-CWE-Other	CVE-2013-3248	2024-11-21 10:53	2013-10-4	Show	GitHub Exploit DB Packet Storm

290272	-	baramundi	management_suite	Baramundi Management Suite 7.5 through 8.9 uses cleartext for (1) client-server communication and (2) data storage, which allows remote attackers to obtain sensitive information by sniffing the netwo…	CWE-310 Cryptographic Issues	CVE-2013-3593	2024-11-21 10:53	2013-10-3	Show	GitHub Exploit DB Packet Storm

290273	-	sony ovislink	snc_dh280 snc_dh140t snc_dh140 snc_dh180 snc_ch240 snc_ch180 snc_ch280 snc_dh240 snc_dh240t snc_ch140 airlive_wl2600cam	Cross-site request forgery (CSRF) vulnerability in the command/user.cgi in Sony SNC CH140, SNC CH180, SNC CH240, SNC CH280, SNC DH140, SNC DH140T, SNC DH180, SNC DH240, SNC DH240T, SNC DH280, and pos…	CWE-352 Origin Validation Error	CVE-2013-3539	2024-11-21 10:53	2013-10-2	Show	GitHub Exploit DB Packet Storm

290274	-	emc	vplex_geo vplex_metro vplex_local geosynchrony	EMC VPLEX before VPLEX GeoSynchrony 5.2 SP1 uses cleartext for storage of the LDAP/AD bind password, which allows local users to obtain sensitive information by reading the management-server configur…	CWE-255 Credentials Management	CVE-2013-3278	2024-11-21 10:53	2013-10-1	Show	GitHub Exploit DB Packet Storm

290275	-	cisco	video_surveillance_operations_manager	The administrative web interface in Cisco Video Surveillance Operations Manager does not properly perform authentication, which allows remote attackers to watch video feeds via a crafted URL, aka Bug…	CWE-287 Improper Authentication	CVE-2013-3417	2024-11-21 10:53	2013-10-1	Show	GitHub Exploit DB Packet Storm

290276	-	knowledgeview	knowledgeview_editorial_and_management_application	Cross-site scripting (XSS) vulnerability in the KnowledgeView Editorial and Management application allows remote attackers to inject arbitrary web script or HTML via the username parameter.	CWE-79 Cross-site Scripting	CVE-2013-3616	2024-11-21 10:53	2013-09-24	Show	GitHub Exploit DB Packet Storm

290277	-	dell	idrac6_firmware idrac6_monolithic idrac7_firmware idrac7	Cross-site scripting (XSS) vulnerability in the login page in the Administrative Web Interface on Dell iDRAC6 monolithic devices with firmware before 1.96 and iDRAC7 devices with firmware before 1.46…	CWE-79 Cross-site Scripting	CVE-2013-3589	2024-11-21 10:53	2013-09-24	Show	GitHub Exploit DB Packet Storm

290278	-	cisco	prime_central_for_hosted_collaboration_solution_assurance	The web framework in Cisco Prime Central for Hosted Collaboration Solution (HCS) Assurance before 9.1.1 does not properly determine the existence of an authenticated session, which allows remote atta…	CWE-287 Improper Authentication	CVE-2013-3473	2024-11-21 10:53	2013-09-21	Show	GitHub Exploit DB Packet Storm

290279	-	dahuasecurity	dvr2104h dvr0404hd-a dvr1604hd-l dvr2104hc dvr5216a dvr5104he dvr3204lf-al dvr5204a dvr3204hf-s dvr0404hd-s dvr0804 dvr5104h dvr5804 dvr2116h dvr2404lf-al	Dahua DVR appliances use a password-hash algorithm with a short hash length, which makes it easier for context-dependent attackers to discover cleartext passwords via a brute-force attack.	CWE-255 Credentials Management	CVE-2013-3615	2024-11-21 10:53	2013-09-17	Show	GitHub Exploit DB Packet Storm

290280	-	dahuasecurity	dvr2104h dvr0404hd-a dvr1604hd-l dvr2104hc dvr5216a dvr5104he dvr3204lf-al dvr5204a dvr3204hf-s dvr0404hd-s dvr0804 dvr5104h dvr5804 dvr2116h dvr2404lf-al	Dahua DVR appliances do not properly restrict UPnP requests, which makes it easier for remote attackers to obtain access via vectors involving a replay attack against the TELNET port.	CWE-287 Improper Authentication	CVE-2013-3613	2024-11-21 10:53	2013-09-17	Show	GitHub Exploit DB Packet Storm