Vulnerability Search Top

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

Vulnerability Information Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 23, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
202241	5.4	警告 Network	IBM	-	IBM Rational Team Concert および Rational Collaborative Lifecycle Management におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2016-0331	2016-09-14 17:58	2016-09-5	Show	GitHub Exploit DB Packet Storm

202242	5.5	警告 Local	Google	-	Android の Telephony におけるサービス運用妨害 (DoS) の脆弱性	CWE-Other その他	CVE-2016-3898	2016-09-14 17:51	2016-09-6	Show	GitHub Exploit DB Packet Storm

202243	5.5	警告 Local	Google	-	Android の Wi-Fi の net/wifi/WifiEnterpriseConfig.java の WifiEnterpriseConfig クラスにおける重要な情報を取得される脆弱性	CWE-200 情報漏えい	CVE-2016-3897	2016-09-14 17:51	2016-09-6	Show	GitHub Exploit DB Packet Storm

202244	5.5	警告 Local	Google	-	Android の AOSP Mail における重要な EmailAccountCacheProvider 情報を取得される脆弱性	CWE-200 情報漏えい	CVE-2016-3896	2016-09-14 17:51	2016-09-6	Show	GitHub Exploit DB Packet Storm

202245	5.5	警告 Local	Google	-	Android のメディアサーバの libs/ui/Region.cpp の Region::unflatten 関数における整数オーバーフローの脆弱性	CWE-200 CWE-Other	CVE-2016-3895	2016-09-14 17:41	2016-09-6	Show	GitHub Exploit DB Packet Storm

202246	5.5	警告 Local	Google	-	Nexus 6 デバイス上で稼動する Android の Qualcomm DMA コンポーネントにおける重要な情報を取得される脆弱性	CWE-200 情報漏えい	CVE-2016-3894	2016-09-14 17:41	2016-09-6	Show	GitHub Exploit DB Packet Storm

202247	5.5	警告 Local	Google	-	Nexus 6P デバイス上で稼動する Android の Qualcomm の音声コーデックにおける重要な情報を取得される脆弱性	CWE-200 情報漏えい	CVE-2016-3893	2016-09-14 17:41	2016-09-6	Show	GitHub Exploit DB Packet Storm

202248	5.5	警告 Local	Google	-	複数の Nexus デバイス上で稼動する Android の Qualcomm SPMI ドライバにおける重要な情報を取得される脆弱性	CWE-200 情報漏えい	CVE-2016-3892	2016-09-14 17:41	2016-09-6	Show	GitHub Exploit DB Packet Storm

202249	7	重要 Local	Google	-	Android の adb/sockets.cpp の Java Debug Wire Protocol の実装における権限を取得される脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2016-3890	2016-09-14 17:41	2016-09-6	Show	GitHub Exploit DB Packet Storm

202250	5.5	警告 Local	Google	-	Android の Telephony の internal/telephony/SMSDispatcher.java におけるプレミアム SMS の支払い確認ダイアログを偽装される脆弱性	CWE-Other その他	CVE-2016-3883	2016-09-14 17:41	2016-09-6	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 23, 2026, 4:08 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
290211	6.1	MEDIUM Network	actiontec	mi424wr-gen3i_firmware	Unspecified Cross-site scripting (XSS) vulnerability in the Verizon FIOS Actiontec MI424WR-GEN3I router.	CWE-79 Cross-site Scripting	CVE-2013-3097	2024-11-21 10:53	2019-11-14	Show	GitHub Exploit DB Packet Storm

290212	9.8	CRITICAL Network	trendnet	tew-691gr_firmware tew-692gr_firmware	Undocumented TELNET service in TRENDnet TEW-691GR and TEW-692GR when a web page named backdoor contains an HTML parameter of password and a value of j78G¬DFdg_24Mhw3.	CWE-287 Improper Authentication	CVE-2013-3367	2024-11-21 10:53	2019-11-14	Show	GitHub Exploit DB Packet Storm

290213	6.5	MEDIUM Network	netgear	wnr3500u_firmware wnr3500l_firmware	NETGEAR WNR3500U and WNR3500L routers uses form tokens abased solely on router's current date and time, which allows attackers to guess the CSRF tokens.	CWE-352 Origin Validation Error	CVE-2013-3516	2024-11-21 10:53	2019-11-14	Show	GitHub Exploit DB Packet Storm

290214	5.4	MEDIUM Network	netgear	wnr3500u_firmware wnr3500l_firmware	Cross-site scripting (XSS) vulnerability in NETGEAR WNR3500U and WNR3500L.	CWE-79 Cross-site Scripting	CVE-2013-3517	2024-11-21 10:53	2019-11-14	Show	GitHub Exploit DB Packet Storm

290215	7.8	HIGH Local	nitropdf	nitro_reader nitro_pro	Nitro Pro 7.5.0.22 and earlier and Nitro Reader 2.5.0.36 and earlier allow remote attackers to execute arbitrary code via a crafted PDF file.	CWE-119 Incorrect Access of Indexable Resource ('Range Error')	CVE-2013-3553	2024-11-21 10:53	2018-02-9	Show	GitHub Exploit DB Packet Storm

290216	7.8	HIGH Local	nitropdf	nitro_reader nitro_pro	Nitro Pro 7.5.0.29 and earlier and Nitro Reader 2.5.0.45 and earlier allow remote attackers to execute arbitrary code via a crafted PDF file.	CWE-119 Incorrect Access of Indexable Resource ('Range Error')	CVE-2013-3552	2024-11-21 10:53	2018-02-9	Show	GitHub Exploit DB Packet Storm

290217	-		exponentcms	exponent_cms	Directory traversal vulnerability in install/popup.php in Exponent CMS before 2.2.0 RC1 allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the page parameter.	CWE-22 Path Traversal	CVE-2013-3295	2024-11-21 10:53	2014-12-30	Show	GitHub Exploit DB Packet Storm

290218	-		dell	equallogic_ps4000_firmware	Directory traversal vulnerability in Dell EqualLogic PS4000 with firmware 6.0 allows remote attackers to read arbitrary files via a .. (dot dot) in the default URI.	CWE-22 Path Traversal	CVE-2013-3304	2024-11-21 10:53	2014-10-30	Show	GitHub Exploit DB Packet Storm

290219	-		zemanta	related_posts	Cross-site request forgery (CSRF) vulnerability in the WordPress Related Posts plugin before 2.6.2 for WordPress allows remote attackers to hijack the authentication of users for requests that change…	CWE-352 Origin Validation Error	CVE-2013-3476	2024-11-21 10:53	2014-06-3	Show	GitHub Exploit DB Packet Storm

290220	-		bufferapp	digg_digg	Cross-site request forgery (CSRF) vulnerability in he Digg Digg plugin before 5.3.5 for WordPress allows remote attackers to hijack the authentication of users for requests that modify settings via u…	CWE-352 Origin Validation Error	CVE-2013-3258	2024-11-21 10:53	2014-06-3	Show	GitHub Exploit DB Packet Storm