Vulnerability Search Top

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

Vulnerability Information Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 23, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
202211	7.8	重要 Local	マイクロソフト	-	複数の Microsoft Excel 製品および Office 互換機能パックにおける任意のコードを実行される脆弱性	CWE-119 バッファエラー	CVE-2016-3359	2016-09-15 18:14	2016-09-13	Show	GitHub Exploit DB Packet Storm

202212	6.5	警告 Network	マイクロソフト	-	複数の Microsoft Office 製品の Visual Basic マクロにおける重要な情報を取得される脆弱性	CWE-200 情報漏えい	CVE-2016-0141	2016-09-15 18:14	2016-09-13	Show	GitHub Exploit DB Packet Storm

202213	3.3	低 Local	マイクロソフト	-	Microsoft Office 2013 および 2016 のクイック実行の実装における ASLR 保護メカニズムを回避される脆弱性	CWE-Other その他	CVE-2016-0137	2016-09-15 18:14	2016-09-13	Show	GitHub Exploit DB Packet Storm

202214	6.1	警告 Network	マイクロソフト	-	Microsoft Exchange Server 2016 におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2016-3379	2016-09-15 16:38	2016-09-13	Show	GitHub Exploit DB Packet Storm

202215	4.3	警告 Network	マイクロソフト	-	Microsoft Exchange Server における重要な Outlook アプリケーション情報を取得される脆弱性	CWE-200 情報漏えい	CVE-2016-0138	2016-09-15 16:38	2016-09-13	Show	GitHub Exploit DB Packet Storm

202216	3.1	低 Network	マイクロソフト	-	Microsoft Internet Explorer 11 および Microsoft Edge における重要な情報を取得される脆弱性	CWE-200 情報漏えい	CVE-2016-3325	2016-09-15 15:44	2016-09-13	Show	GitHub Exploit DB Packet Storm

202217	8.8	重要 Network	マイクロソフト	-	Microsoft Internet Explorer 9 から 11 および Microsoft Edge における任意のコードを実行される脆弱性	CWE-noinfo 情報不足	CVE-2016-3297	2016-09-15 15:44	2016-09-13	Show	GitHub Exploit DB Packet Storm

202218	7.5	重要 Network	マイクロソフト	-	Microsoft Internet Explorer および Microsoft Edge における任意のコードを実行される脆弱性	CWE-119 バッファエラー	CVE-2016-3295	2016-09-15 15:44	2016-09-13	Show	GitHub Exploit DB Packet Storm

202219	2.4	低 Network	マイクロソフト	-	Microsoft Internet Explorer 11 および Microsoft Edge における重要な情報を取得される脆弱性	CWE-200 情報漏えい	CVE-2016-3291	2016-09-15 15:44	2016-09-13	Show	GitHub Exploit DB Packet Storm

202220	7.5	重要 Network	マイクロソフト	-	Microsoft Internet Explorer 11 および Microsoft Edge における任意のコードを実行される脆弱性	CWE-noinfo 情報不足	CVE-2016-3247	2016-09-15 15:44	2016-09-13	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 23, 2026, 4:08 a.m.

No	CVSS	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
291201	-	apache	xml_security_for_c\+\+	The XML digital signature functionality (xsec/dsig/DSIGReference.cpp) in Apache Santuario XML Security for C++ (aka xml-security-c) before 1.7.1 allows context-dependent attackers to reuse signatures…	CWE-310 Cryptographic Issues	CVE-2013-2153	2024-11-21 10:51	2013-08-21	Show	GitHub Exploit DB Packet Storm

291202	-	apache	cxf	The streaming XML parser in Apache CXF 2.5.x before 2.5.10, 2.6.x before 2.6.7, and 2.7.x before 2.7.4 allows remote attackers to cause a denial of service (CPU and memory consumption) via crafted XM…	CWE-399 Resource Management Errors	CVE-2013-2160	2024-11-21 10:51	2013-08-20	Show	GitHub Exploit DB Packet Storm

291203	-	canonical opensuse perlmonks	ubuntu_linux opensuse module\	The cpansign verify functionality in the Module::Signature module before 0.72 for Perl allows attackers to bypass the signature check and execute arbitrary code via a SIGNATURE file with a "special u…	CWE-20 Improper Input Validation	CVE-2013-2145	2024-11-21 10:51	2013-08-20	Show	GitHub Exploit DB Packet Storm

291204	-	apache	cloudstack	Multiple cross-site scripting (XSS) vulnerabilities in Apache CloudStack before 4.1.1 allow remote attackers to inject arbitrary web script or HTML via the (1) Physical network name to the Zone wizar…	CWE-79 Cross-site Scripting	CVE-2013-2136	2024-11-21 10:51	2013-08-20	Show	GitHub Exploit DB Packet Storm

291205	-	debian canonical redhat haproxy	debian_linux ubuntu_linux enterprise_linux_load_balancer haproxy	HAProxy 1.4 before 1.4.24 and 1.5 before 1.5-dev19, when configured to use hdr_ip or other "hdr_*" functions with a negative occurrence count, allows remote attackers to cause a denial of service (ne…	CWE-20 CWE-284 Improper Input Validation Improper Access Control	CVE-2013-2175	2024-11-21 10:51	2013-08-19	Show	GitHub Exploit DB Packet Storm

291206	-	canonical	ubuntu_linux	Race condition in the post-installation script (mysql-server-5.5.postinst) for MySQL Server 5.5 for Debian GNU/Linux and Ubuntu Linux creates a configuration file with world-readable permissions befo…	CWE-362 Race Condition	CVE-2013-2162	2024-11-21 10:51	2013-08-19	Show	GitHub Exploit DB Packet Storm

291207	-	mongodb canonical opensuse	mongodb ubuntu_linux opensuse	bson/_cbsonmodule.c in the mongo-python-driver (aka. pymongo) before 2.5.2, as used in MongoDB, allows context-dependent attackers to cause a denial of service (NULL pointer dereference and crash) vi…	NVD-CWE-Other	CVE-2013-2132	2024-11-21 10:51	2013-08-16	Show	GitHub Exploit DB Packet Storm

291208	-	apache	ofbiz	Apache Open For Business Project (aka OFBiz) 10.04.01 through 10.04.05, 11.04.01 through 11.04.02, and 12.04.01 allows remote attackers to execute arbitrary Unified Expression Language (UEL) function…	CWE-20 Improper Input Validation	CVE-2013-2250	2024-11-21 10:51	2013-08-16	Show	GitHub Exploit DB Packet Storm

291209	-	apache	ofbiz	Cross-site scripting (XSS) vulnerability in the "View Log" screen in the Webtools application in Apache Open For Business Project (aka OFBiz) 10.04.01 through 10.04.05, 11.04.01 through 11.04.02, and…	CWE-79 Cross-site Scripting	CVE-2013-2137	2024-11-21 10:51	2013-08-16	Show	GitHub Exploit DB Packet Storm

291210	-	libraw	libraw	Buffer overflow in the exposure correction code in LibRaw before 0.15.1 allows context-dependent attackers to cause a denial of service (crash) and possibly execute arbitrary code via unspecified vec…	CWE-119 Incorrect Access of Indexable Resource ('Range Error')	CVE-2013-2127	2024-11-21 10:51	2013-08-15	Show	GitHub Exploit DB Packet Storm