Vulnerability Search Top

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

Vulnerability Information Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 26, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
202271	5.3	警告 Network	トレイン・ジャパン株式会社	-	Trane Tracer SC の Web サーバにおける重要な設定ファイルを読まれる脆弱性	CWE-200 情報漏えい	CVE-2016-0870	2016-09-26 11:32	2016-09-15	Show	GitHub Exploit DB Packet Storm

202272	9.8	緊急 Network	ICU project	-	International Components for Unicode の common/locid.cpp の Locale クラスにおけるスタックベースのバッファオーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2016-7415	2016-09-26 09:39	2016-09-13	Show	GitHub Exploit DB Packet Storm

202273	5.5	警告 Local	SUSE libarchive Canonical	-	libarchive の archive_read_support_format_rar.c の copy_from_lzss_window 関数におけるサービス運用妨害 (DoS) の脆弱性	CWE-Other その他	CVE-2015-8934	2016-09-23 16:33	2015-06-20	Show	GitHub Exploit DB Packet Storm

202274	5.5	警告 Local	SUSE libarchive Canonical	-	libarchive の archive_read_support_format_tar.c の archive_read_format_tar_skip 関数における整数オーバーフローの脆弱性	CWE-Other その他	CVE-2015-8933	2016-09-23 16:33	2015-08-9	Show	GitHub Exploit DB Packet Storm

202275	5.5	警告 Local	SUSE libarchive Debian Canonical	-	libarchive の archive_read_support_filter_compress.c の compress_bidder_init 関数におけるサービス運用妨害 (DoS) の脆弱性	CWE-20 不適切な入力確認	CVE-2015-8932	2016-09-23 16:33	2015-08-9	Show	GitHub Exploit DB Packet Storm

202276	7.8	重要 Local	SUSE libarchive Debian Canonical	-	libarchive の archive_read_support_format_mtree.c の get_time_t_max および get_time_t_min 関数における整数オーバーフローの脆弱性	CWE-Other その他	CVE-2015-8931	2016-09-23 16:33	2015-05-17	Show	GitHub Exploit DB Packet Storm

202277	7.5	重要 Network	SUSE libarchive Canonical	-	libarchive の bsdtar におけるサービス運用妨害 (DoS) の脆弱性	CWE-20 不適切な入力確認	CVE-2015-8930	2016-09-23 16:33	2015-04-12	Show	GitHub Exploit DB Packet Storm

202278	5.5	警告 Local	libarchive SUSE	-	libarchive の archive_read_extract2.c の __archive_read_get_extract 関数におけるサービス運用妨害 (DoS) の脆弱性	CWE-119 バッファエラー	CVE-2015-8929	2016-09-23 16:33	2015-04-12	Show	GitHub Exploit DB Packet Storm

202279	5.5	警告 Local	SUSE libarchive Canonical	-	libarchive の archive_read_support_format_mtree.c の process_add_entry 関数におけるサービス運用妨害 (DoS) の脆弱性	CWE-Other その他	CVE-2015-8928	2016-09-23 16:33	2015-05-22	Show	GitHub Exploit DB Packet Storm

202280	5.5	警告 Local	libarchive	-	libarchive の archive_read_support_format_zip.c の trad_enc_decrypt_update 関数におけるサービス運用妨害 (DoS) の脆弱性	CWE-Other その他	CVE-2015-8927	2016-09-23 16:33	2015-04-12	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 26, 2026, 4:05 a.m.

No	CVSS	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
291611	-	openvpn opensuse	openvpn openvpn_access_server opensuse	The openvpn_decrypt function in crypto.c in OpenVPN 2.3.0 and earlier, when running in UDP mode, allows remote attackers to obtain sensitive information via a timing attack involving an HMAC comparis…	CWE-200 Information Exposure	CVE-2013-2061	2024-11-21 10:50	2013-11-18	Show	GitHub Exploit DB Packet Storm

291612	-	mediawiki fedoraproject gentoo	mediawiki fedora linux	MediaWiki before 1.19.6 and 1.20.x before 1.20.5 does not allow extensions to prevent password changes without using both Special:PasswordReset and Special:ChangePassword, which allows remote attacke…	CWE-264 Permissions, Privileges, and Access Controls	CVE-2013-2032	2024-11-21 10:50	2013-11-18	Show	GitHub Exploit DB Packet Storm

291613	-	gentoo mediawiki	linux mediawiki	MediaWiki before 1.19.6 and 1.20.x before 1.20.5 allows remote attackers to conduct cross-site scripting (XSS) attacks, as demonstrated by a CDATA section containing valid UTF-7 encoded sequences in …	CWE-79 Cross-site Scripting	CVE-2013-2031	2024-11-21 10:50	2013-11-18	Show	GitHub Exploit DB Packet Storm

291614	-	linux	linux_kernel	The host_start function in drivers/usb/chipidea/host.c in the Linux kernel before 3.7.4 does not properly support a certain non-streaming option, which allows local users to cause a denial of service…	CWE-119 Incorrect Access of Indexable Resource ('Range Error')	CVE-2013-2058	2024-11-21 10:50	2013-11-5	Show	GitHub Exploit DB Packet Storm

291615	-	opensuse ruby-lang	opensuse ruby	(1) DL and (2) Fiddle in Ruby 1.9 before 1.9.3 patchlevel 426, and 2.0 before 2.0.0 patchlevel 195, do not perform taint checking for native functions, which allows context-dependent attackers to byp…	CWE-264 Permissions, Privileges, and Access Controls	CVE-2013-2065	2024-11-21 10:50	2013-11-3	Show	GitHub Exploit DB Packet Storm

291616	-	mozilla	bugzilla	Multiple cross-site scripting (XSS) vulnerabilities in report.cgi in Bugzilla 4.1.x and 4.2.x before 4.2.7 and 4.3.x and 4.4.x before 4.4.1 allow remote attackers to inject arbitrary web script or HT…	CWE-79 Cross-site Scripting	CVE-2013-1743	2024-11-21 10:50	2013-10-24	Show	GitHub Exploit DB Packet Storm

291617	-	mozilla	bugzilla	Multiple cross-site scripting (XSS) vulnerabilities in editflagtypes.cgi in Bugzilla 2.x, 3.x, and 4.0.x before 4.0.11; 4.1.x and 4.2.x before 4.2.7; and 4.3.x and 4.4.x before 4.4.1 allow remote att…	CWE-79 Cross-site Scripting	CVE-2013-1742	2024-11-21 10:50	2013-10-24	Show	GitHub Exploit DB Packet Storm

291618	-	mozilla	bugzilla	Cross-site request forgery (CSRF) vulnerability in attachment.cgi in Bugzilla 2.x, 3.x, and 4.0.x before 4.0.11; 4.1.x and 4.2.x before 4.2.7; and 4.3.x and 4.4.x before 4.4.1 allows remote attackers…	CWE-352 Origin Validation Error	CVE-2013-1734	2024-11-21 10:50	2013-10-24	Show	GitHub Exploit DB Packet Storm

291619	-	mozilla	bugzilla	Cross-site request forgery (CSRF) vulnerability in process_bug.cgi in Bugzilla 4.4.x before 4.4.1 allows remote attackers to hijack the authentication of arbitrary users for requests that modify bugs…	CWE-352 Origin Validation Error	CVE-2013-1733	2024-11-21 10:50	2013-10-24	Show	GitHub Exploit DB Packet Storm

291620	-	mozilla	network_security_services	Mozilla Network Security Services (NSS) before 3.15.2 does not ensure that data structures are initialized before read operations, which allows remote attackers to cause a denial of service or possib…	NVD-CWE-noinfo	CVE-2013-1739	2024-11-21 10:50	2013-10-23	Show	GitHub Exploit DB Packet Storm