Vulnerability Search Top

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

Vulnerability Information Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 23, 2026, 2 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
202241	5.4	警告 Network	IBM	-	IBM Rational Team Concert および Rational Collaborative Lifecycle Management におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2016-0331	2016-09-14 17:58	2016-09-5	Show	GitHub Exploit DB Packet Storm

202242	5.5	警告 Local	Google	-	Android の Telephony におけるサービス運用妨害 (DoS) の脆弱性	CWE-Other その他	CVE-2016-3898	2016-09-14 17:51	2016-09-6	Show	GitHub Exploit DB Packet Storm

202243	5.5	警告 Local	Google	-	Android の Wi-Fi の net/wifi/WifiEnterpriseConfig.java の WifiEnterpriseConfig クラスにおける重要な情報を取得される脆弱性	CWE-200 情報漏えい	CVE-2016-3897	2016-09-14 17:51	2016-09-6	Show	GitHub Exploit DB Packet Storm

202244	5.5	警告 Local	Google	-	Android の AOSP Mail における重要な EmailAccountCacheProvider 情報を取得される脆弱性	CWE-200 情報漏えい	CVE-2016-3896	2016-09-14 17:51	2016-09-6	Show	GitHub Exploit DB Packet Storm

202245	5.5	警告 Local	Google	-	Android のメディアサーバの libs/ui/Region.cpp の Region::unflatten 関数における整数オーバーフローの脆弱性	CWE-200 CWE-Other	CVE-2016-3895	2016-09-14 17:41	2016-09-6	Show	GitHub Exploit DB Packet Storm

202246	5.5	警告 Local	Google	-	Nexus 6 デバイス上で稼動する Android の Qualcomm DMA コンポーネントにおける重要な情報を取得される脆弱性	CWE-200 情報漏えい	CVE-2016-3894	2016-09-14 17:41	2016-09-6	Show	GitHub Exploit DB Packet Storm

202247	5.5	警告 Local	Google	-	Nexus 6P デバイス上で稼動する Android の Qualcomm の音声コーデックにおける重要な情報を取得される脆弱性	CWE-200 情報漏えい	CVE-2016-3893	2016-09-14 17:41	2016-09-6	Show	GitHub Exploit DB Packet Storm

202248	5.5	警告 Local	Google	-	複数の Nexus デバイス上で稼動する Android の Qualcomm SPMI ドライバにおける重要な情報を取得される脆弱性	CWE-200 情報漏えい	CVE-2016-3892	2016-09-14 17:41	2016-09-6	Show	GitHub Exploit DB Packet Storm

202249	7	重要 Local	Google	-	Android の adb/sockets.cpp の Java Debug Wire Protocol の実装における権限を取得される脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2016-3890	2016-09-14 17:41	2016-09-6	Show	GitHub Exploit DB Packet Storm

202250	5.5	警告 Local	Google	-	Android の Telephony の internal/telephony/SMSDispatcher.java におけるプレミアム SMS の支払い確認ダイアログを偽装される脆弱性	CWE-Other その他	CVE-2016-3883	2016-09-14 17:41	2016-09-6	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 23, 2026, 4:08 a.m.

No	CVSS	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
290121	-	lockon	ec-cube	LOCKON EC-CUBE 2.11.2 through 2.12.4 allows remote attackers to conduct unspecified PHP code-injection attacks via a crafted string, related to data/class/SC_CheckError.php and data/class/SC_FormPara…	CWE-94 Code Injection	CVE-2013-3651	2024-11-21 10:54	2013-07-1	Show	GitHub Exploit DB Packet Storm

290122	-	lockon	ec-cube	Directory traversal vulnerability in the lfCheckFileName function in data/class/pages/LC_Page_ResizeImage.php in LOCKON EC-CUBE before 2.12.5 allows remote attackers to read arbitrary image files via…	CWE-22 Path Traversal	CVE-2013-3650	2024-11-21 10:54	2013-07-1	Show	GitHub Exploit DB Packet Storm

290123	-	ds3	authentication_server	ServerAdmin/ErrorViewer.jsp in DS3 Authentication Server allow remote attackers to inject arbitrary error-page text via the message parameter.	CWE-20 Improper Input Validation	CVE-2013-4098	2024-11-21 10:54	2013-06-29	Show	GitHub Exploit DB Packet Storm

290124	-	ds3	authentication_server	ServerAdmin/TestDRConnection.jsp in DS3 Authentication Server allows remote attackers to obtain sensitive information via a direct request, which reveals the installation path in a -REG-E-OPEN error …	CWE-22 Path Traversal	CVE-2013-4097	2024-11-21 10:54	2013-06-29	Show	GitHub Exploit DB Packet Storm

290125	-	ds3	authentication_server	ServerAdmin/TestTelnetConnection.jsp in DS3 Authentication Server allows remote authenticated users to execute arbitrary commands via shell metacharacters in the HOST_NAME field.	CWE-20 Improper Input Validation	CVE-2013-4096	2024-11-21 10:54	2013-06-29	Show	GitHub Exploit DB Packet Storm

290126	-	imperva	securesphere	plain/actionsets.html in the SecureSphere Operations Manager (SOM) Management Server in Imperva SecureSphere 9.0.0.5 allows remote authenticated users to execute arbitrary commands via a task with a …	CWE-20 Improper Input Validation	CVE-2013-4095	2024-11-21 10:54	2013-06-29	Show	GitHub Exploit DB Packet Storm

290127	-	imperva	securesphere	The Key Management feature in the SecureSphere Operations Manager (SOM) Management Server in Imperva SecureSphere 9.0.0.5 allows remote authenticated users to upload executable files via the (1) priv…	CWE-20 Improper Input Validation	CVE-2013-4094	2024-11-21 10:54	2013-06-29	Show	GitHub Exploit DB Packet Storm

290128	-	imperva	securesphere	The SecureSphere Operations Manager (SOM) Management Server in Imperva SecureSphere 9.0.0.5 allows remote attackers to obtain sensitive information via (1) a direct request to dwr/call/plaincall/Asyn…	CWE-22 Path Traversal	CVE-2013-4093	2024-11-21 10:54	2013-06-29	Show	GitHub Exploit DB Packet Storm

290129	-	imperva	securesphere	The SecureSphere Operations Manager (SOM) Management Server in Imperva SecureSphere 9.0.0.5 allows context-dependent attackers to obtain sensitive information by leveraging the presence of (1) a sess…	CWE-255 Credentials Management	CVE-2013-4092	2024-11-21 10:54	2013-06-29	Show	GitHub Exploit DB Packet Storm

290130	-	imperva	securesphere	The SecureSphere Operations Manager (SOM) Management Server in Imperva SecureSphere 9.0.0.5 does not have an off autocomplete attribute for the password (aka j_password) field on the secsphLogin.jsp …	CWE-255 Credentials Management	CVE-2013-4091	2024-11-21 10:54	2013-06-29	Show	GitHub Exploit DB Packet Storm