Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 18, 2026, 6 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
202251 9.8 緊急
Network
Google - Android のメディアサーバの ih264d デコーダにおける任意のコードを実行される脆弱性 CWE-119
バッファエラー
CVE-2016-3820 2016-08-9 16:55 2016-08-1 Show GitHub Exploit DB Packet Storm
202252 9.8 緊急
Network
Google - Android のメディアサーバの libstagefright の codecs/on2/h264dec/source/h264bsd_dpb.c における整数オーバーフローの脆弱性 CWE-119
バッファエラー
CVE-2016-3819 2016-08-9 16:55 2016-08-1 Show GitHub Exploit DB Packet Storm
202253 7.8 重要
Local
Google - 複数の Nexus デバイス上で稼動する Android の Qualcomm GPU ドライバにおける権限を取得される脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2016-2504 2016-08-9 16:55 2016-08-1 Show GitHub Exploit DB Packet Storm
202254 7.5 重要
Network
SAP - SAP HANA DB におけるサービス運用妨害 (DoS) の脆弱性 CWE-20
不適切な入力確認
CVE-2016-6148 2016-08-9 16:49 2016-01-12 Show GitHub Exploit DB Packet Storm
202255 8.1 重要
Network
SAP - SAP HANA の SQL インターフェースにおける認証を回避される脆弱性 CWE-Other
その他
CVE-2016-6144 2016-08-9 16:49 2016-01-25 Show GitHub Exploit DB Packet Storm
202256 9.8 緊急
Network
SAP - SAP TREX の不特定のインターフェースにおける SIDadm 権限で任意の OS コマンドを実行される脆弱性 CWE-78
OSコマンド・インジェクション
CVE-2016-6147 2016-08-9 16:22 2016-02-10 Show GitHub Exploit DB Packet Storm
202257 9.8 緊急
Network
SAP - SAP TREX における任意のファイルに書き込まれる脆弱性 CWE-Other
その他
CVE-2016-6140 2016-08-9 16:22 2016-07-20 Show GitHub Exploit DB Packet Storm
202258 9.8 緊急
Network
SAP - SAP TREX における任意のファイルを読まれる脆弱性 CWE-noinfo
情報不足
CVE-2016-6139 2016-08-9 16:22 2016-07-20 Show GitHub Exploit DB Packet Storm
202259 9.8 緊急
Network
SAP - SAP TREX におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル
CVE-2016-6138 2016-08-9 16:22 2016-07-20 Show GitHub Exploit DB Packet Storm
202260 6.8 警告
Network
IBM - IBM FileNet Workplace におけるオープンリダイレクトの脆弱性 CWE-Other
その他
CVE-2016-5878 2016-08-9 15:08 2016-07-29 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 18, 2026, 4:12 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
290451 - openstack
opensuse
havana
opensuse
grizzly
folsom
XML injection vulnerability in account/utils.py in OpenStack Swift Folsom, Grizzly, and Havana allows attackers to trigger invalid or spoofed Swift responses via an account name. CWE-94
Code Injection
CVE-2013-2161 2024-11-21 10:51 2013-08-21 Show GitHub Exploit DB Packet Storm
290452 - openstack keystone OpenStack Keystone Folsom, Grizzly before 2013.1.3, and Havana, when using LDAP with Anonymous binding, allows remote attackers to bypass authentication via an empty password. CWE-287
Improper Authentication
CVE-2013-2157 2024-11-21 10:51 2013-08-21 Show GitHub Exploit DB Packet Storm
290453 - apache xml_security_for_c\+\+ Heap-based buffer overflow in the Exclusive Canonicalization functionality (xsec/canon/XSECC14n20010315.cpp) in Apache Santuario XML Security for C++ (aka xml-security-c) before 1.7.1 allows remote a… CWE-119
Incorrect Access of Indexable Resource ('Range Error') 
CVE-2013-2156 2024-11-21 10:51 2013-08-21 Show GitHub Exploit DB Packet Storm
290454 - apache xml_security_for_c\+\+ Apache Santuario XML Security for C++ (aka xml-security-c) before 1.7.1 does not properly validate length values, which allows remote attackers to cause a denial of service or bypass the CVE-2009-021… CWE-20
 Improper Input Validation 
CVE-2013-2155 2024-11-21 10:51 2013-08-21 Show GitHub Exploit DB Packet Storm
290455 - apache xml_security_for_c\+\+ Stack-based buffer overflow in the XML Signature Reference functionality (xsec/dsig/DSIGReference.cpp) in Apache Santuario XML Security for C++ (aka xml-security-c) before 1.7.1 allows context-depend… CWE-119
Incorrect Access of Indexable Resource ('Range Error') 
CVE-2013-2154 2024-11-21 10:51 2013-08-21 Show GitHub Exploit DB Packet Storm
290456 - apache xml_security_for_c\+\+ The XML digital signature functionality (xsec/dsig/DSIGReference.cpp) in Apache Santuario XML Security for C++ (aka xml-security-c) before 1.7.1 allows context-dependent attackers to reuse signatures… CWE-310
Cryptographic Issues
CVE-2013-2153 2024-11-21 10:51 2013-08-21 Show GitHub Exploit DB Packet Storm
290457 - apache cxf The streaming XML parser in Apache CXF 2.5.x before 2.5.10, 2.6.x before 2.6.7, and 2.7.x before 2.7.4 allows remote attackers to cause a denial of service (CPU and memory consumption) via crafted XM… CWE-399
 Resource Management Errors
CVE-2013-2160 2024-11-21 10:51 2013-08-20 Show GitHub Exploit DB Packet Storm
290458 - canonical
opensuse
perlmonks
ubuntu_linux
opensuse
module\
The cpansign verify functionality in the Module::Signature module before 0.72 for Perl allows attackers to bypass the signature check and execute arbitrary code via a SIGNATURE file with a "special u… CWE-20
 Improper Input Validation 
CVE-2013-2145 2024-11-21 10:51 2013-08-20 Show GitHub Exploit DB Packet Storm
290459 - apache cloudstack Multiple cross-site scripting (XSS) vulnerabilities in Apache CloudStack before 4.1.1 allow remote attackers to inject arbitrary web script or HTML via the (1) Physical network name to the Zone wizar… CWE-79
Cross-site Scripting
CVE-2013-2136 2024-11-21 10:51 2013-08-20 Show GitHub Exploit DB Packet Storm
290460 - debian
canonical
redhat
haproxy
debian_linux
ubuntu_linux
enterprise_linux_load_balancer
haproxy
HAProxy 1.4 before 1.4.24 and 1.5 before 1.5-dev19, when configured to use hdr_ip or other "hdr_*" functions with a negative occurrence count, allows remote attackers to cause a denial of service (ne… CWE-20
CWE-284
 Improper Input Validation 
Improper Access Control
CVE-2013-2175 2024-11-21 10:51 2013-08-19 Show GitHub Exploit DB Packet Storm