Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 29, 2026, 6 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
202301 7.5 重要
Network
Squid-cache.org - Squid HTTP Proxy の Collapsed Forwarding 機能におけるプライベートな応答を取得される脆弱性 CWE-200
情報漏えい
CVE-2016-10003 2017-03-16 09:56 2016-12-16 Show GitHub Exploit DB Packet Storm
202302 7.5 重要
Network
Squid-cache.org
Debian
- Squid HTTP Proxy におけるクライアント固有の Cookie データ漏えいの脆弱性 CWE-200
情報漏えい
CVE-2016-10002 2017-03-16 09:56 2016-12-16 Show GitHub Exploit DB Packet Storm
202303 9.8 緊急
Network
The Perl Foundation - Perl の VDir::MapPathA および VDir::MapPathW 関数におけるサービス運用妨害 (DoS) の脆弱性 CWE-125
境界外読み取り
CVE-2015-8608 2017-03-15 18:03 2015-11-28 Show GitHub Exploit DB Packet Storm
202304 7.2 重要
Network
IBM - IBM Tivoli Storage Manager Server におけるバッファオーバーフローの脆弱性 CWE-119
バッファエラー
CVE-2016-8998 2017-03-15 17:52 2016-10-25 Show GitHub Exploit DB Packet Storm
202305 6.1 警告
Network
IBM - Ephox WebRadar におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2016-8922 2017-03-15 17:52 2016-11-18 Show GitHub Exploit DB Packet Storm
202306 9.8 緊急
Network
PEAR - PEAR HTML_AJAX の PHP Serializer における PHP オブジェクトインジェクションの脆弱性 CWE-20
不適切な入力確認
CVE-2017-5677 2017-03-15 17:49 2017-02-2 Show GitHub Exploit DB Packet Storm
202307 7.5 重要
Network
PEAR - PEAR Base System のインストーラのダウンロードユーティリティクラスの PECL におけるファイルを上書きされる脆弱性 CWE-254
セキュリティ機能
CVE-2017-5630 2017-03-15 17:49 2017-01-26 Show GitHub Exploit DB Packet Storm
202308 5.9 警告
Network
Square, Inc. - OkHttp における証明書ピン留めを回避される脆弱性 CWE-295
不正な証明書検証
CVE-2016-2402 2017-03-15 17:34 2016-02-11 Show GitHub Exploit DB Packet Storm
202309 7.5 重要
Network
minitar - RubyGems minitar および archive-tar-minitar におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル
CVE-2016-10173 2017-03-15 17:15 2016-11-14 Show GitHub Exploit DB Packet Storm
202310 7.5 重要
Network
SAP - Windows 上で稼動する SAP GUI の SAPlpd におけるサービス運用妨害 (DoS) の脆弱性 CWE-20
不適切な入力確認
CVE-2016-10079 2017-03-15 17:09 2016-12-28 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 30, 2026, 4:22 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
293111 - cisco asr_5000_series_software The Session Manager component in Packet Data Network Gateway (aka PGW) in Cisco ASR 5000 Series Software 11.0, 12.0, 12.1, 12.2, 14.0, 15.0, 16.x through 16.1.2, and 17.0 allows remote attackers to c… CWE-20
 Improper Input Validation 
CVE-2014-3331 2024-11-21 11:07 2014-08-20 Show GitHub Exploit DB Packet Storm
293112 - cisco nx-os
nexus_5000
nexus_5010
nexus_5010p_switch
nexus_5020
nexus_5020p_switch
nexus_5548p
nexus_5548up
nexus_5596t
nexus_5596up
nexus_56128p
nexus_5672up
nexus_6001…
The SNMP module in Cisco NX-OS 7.0(3)N1(1) and earlier on Nexus 5000 and 6000 devices provides different error messages for invalid requests depending on whether the VLAN ID exists, which allows remo… CWE-200
Information Exposure
CVE-2014-3341 2024-11-21 11:07 2014-08-19 Show GitHub Exploit DB Packet Storm
293113 - ibm websphere_application_server
business_process_manager
callService.do in IBM Business Process Manager (BPM) 7.5 through 8.5.5 and WebSphere Lombardi Edition 7.2 through 7.2.0.5 allows remote authenticated users to read arbitrary files via an XML external… CWE-200
Information Exposure
CVE-2014-3087 2024-11-21 11:07 2014-08-18 Show GitHub Exploit DB Packet Storm
293114 - ibm global_console_manager_32_firmware
global_console_manager_16_firmware
systest.php on IBM GCM16 and GCM32 Global Console Manager switches with firmware before 1.20.20.23447 allows remote authenticated users to execute arbitrary commands via shell metacharacters in the l… CWE-78
OS Command 
CVE-2014-3085 2024-11-21 11:07 2014-08-18 Show GitHub Exploit DB Packet Storm
293115 - ibm global_console_manager_32_firmware
global_console_manager_16_firmware
prodtest.php on IBM GCM16 and GCM32 Global Console Manager switches with firmware before 1.20.20.23447 allows remote authenticated users to read arbitrary files via the filename parameter. CWE-200
Information Exposure
CVE-2014-3081 2024-11-21 11:07 2014-08-18 Show GitHub Exploit DB Packet Storm
293116 - ibm global_console_manager_32_firmware
global_console_manager_16_firmware
Multiple cross-site scripting (XSS) vulnerabilities on IBM GCM16 and GCM32 Global Console Manager switches with firmware before 1.20.20.23447 allow remote attackers to inject arbitrary web script or … CWE-79
Cross-site Scripting
CVE-2014-3080 2024-11-21 11:07 2014-08-18 Show GitHub Exploit DB Packet Storm
293117 - ibm infosphere_master_data_management_server_for_product_information_management
infosphere_master_data_management
IBM InfoSphere Master Data Management - Collaborative Edition 10.x before 10.1-FP11 and 11.x before 11.0-FP5 and InfoSphere Master Data Management Server for Product Information Management 9.x before… CWE-264
Permissions, Privileges, and Access Controls
CVE-2014-3063 2024-11-21 11:07 2014-08-18 Show GitHub Exploit DB Packet Storm
293118 - cobham aviator_700d
aviator_700e
Cobham Aviator 700D and 700E satellite terminals have hardcoded passwords for the (1) debug, (2) prod, (3) do160, and (4) flrp programs, which allows physically proximate attackers to gain privileges… NVD-CWE-Other
CVE-2014-2964 2024-11-21 11:07 2014-08-15 Show GitHub Exploit DB Packet Storm
293119 - cobham ailor_6110_mini-c_gmdss
sailor_6006_message_terminal
sailor_6222_vhf
sailor_6300_mf_\/_hf
Cobham Sailor 6000 satellite terminals have hardcoded Tbus 2 credentials, which allows remote attackers to obtain access via a TBUS2 command. NOTE: the vendor reportedly states "there is no possibil… NVD-CWE-Other
CVE-2014-2941 2024-11-21 11:07 2014-08-15 Show GitHub Exploit DB Packet Storm
293120 - cobham sailor_900_firmware
sailor_6000_series_firmware
Cobham Sailor 900 and 6000 satellite terminals with firmware 1.08 MFHF and 2.11 VHF have hardcoded credentials for the administrator account, which allows attackers to obtain administrative control b… NVD-CWE-Other
CVE-2014-2940 2024-11-21 11:07 2014-08-15 Show GitHub Exploit DB Packet Storm