Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 5, 2026, 6 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
202321 4.3 警告
Network
aki-null - 夜フクロウにおけるサービス運用妨害 (DoS) の脆弱性 CWE-20
不適切な入力確認
CVE-2016-4852 2016-10-27 09:42 2016-08-24 Show GitHub Exploit DB Packet Storm
202322 5.9 警告
Network
OpenSSL Project
日立
ヒューレット・パッカード・エンタープライズ
- OpenSSL の SSLv2 の実装の s2_srvr.c の get_client_master_key 関数における MASTER-KEY 値を決定される脆弱性 CWE-200
情報漏えい
CVE-2016-0703 2016-10-26 18:01 2016-03-1 Show GitHub Exploit DB Packet Storm
202323 9.1 緊急
Network
The PHP Group - PHP の sapi/fpm/fpm/fpm_log.c におけるプロセスメモリから重要な情報を取得される脆弱性 CWE-119
CWE-Other
CVE-2016-5114 2016-10-26 16:44 2016-01-7 Show GitHub Exploit DB Packet Storm
202324 8.6 重要
Network
The PHP Group - PHP の ext/standard/file.c の fread 関数における整数オーバーフローの脆弱性 CWE-Other
その他
CVE-2016-5096 2016-10-26 16:43 2016-05-26 Show GitHub Exploit DB Packet Storm
202325 8.6 重要
Network
The PHP Group - PHP の ext/standard/html.c の php_html_entities 関数における整数オーバーフローの脆弱性 CWE-Other
その他
CVE-2016-5094 2016-10-26 16:42 2016-05-26 Show GitHub Exploit DB Packet Storm
202326 8.6 重要
Network
The PHP Group - PHP の ext/intl/locale/locale_methods.c の get_icu_value_internal 関数におけるサービス運用妨害 (DoS) の脆弱性 CWE-Other
その他
CVE-2016-5093 2016-10-26 16:41 2016-05-26 Show GitHub Exploit DB Packet Storm
202327 9.8 緊急
Network
The PHP Group
openSUSE project
Fedora Project
- PHP の ext/exif/exif.c の exif_process_TIFF_in_JPEG 関数におけるサービス運用妨害 (DoS) の脆弱性 CWE-119
バッファエラー
CVE-2016-4544 2016-10-26 16:37 2016-04-28 Show GitHub Exploit DB Packet Storm
202328 9.8 緊急
Network
The PHP Group
openSUSE project
Fedora Project
- PHP の ext/exif/exif.c の exif_process_IFD_TAG 関数におけるサービス運用妨害 (DoS) の脆弱性 CWE-Other
その他
CVE-2016-4542 2016-10-26 16:36 2016-04-28 Show GitHub Exploit DB Packet Storm
202329 9.8 緊急
Network
The PHP Group
openSUSE project
Fedora Project
- PHP の ext/intl/grapheme/grapheme_string.c の grapheme_strpos 関数におけるサービス運用妨害 (DoS) の脆弱性 CWE-Other
その他
CVE-2016-4541 2016-10-26 16:36 2016-04-28 Show GitHub Exploit DB Packet Storm
202330 9.8 緊急
Network
The PHP Group
openSUSE project
Fedora Project
- PHP の ext/intl/grapheme/grapheme_string.c の grapheme_stripos 関数におけるサービス運用妨害 (DoS) の脆弱性 CWE-Other
その他
CVE-2016-4540 2016-10-26 16:35 2016-04-28 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 6, 2026, 4:18 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
292071 - cybozu garoon CRLF injection vulnerability in Cybozu Garoon 3.1 through 3.5 SP5, when Phone Messages forwarding is enabled, allows remote authenticated users to inject arbitrary e-mail headers via unspecified vect… CWE-20
 Improper Input Validation 
CVE-2013-6003 2024-11-21 10:58 2013-12-5 Show GitHub Exploit DB Packet Storm
292072 - cybozu garoon The server in Cybozu Garoon before 3.7 SP1 allows remote attackers to cause a denial of service (CPU consumption) via unspecified vectors. CWE-399
 Resource Management Errors
CVE-2013-6002 2024-11-21 10:58 2013-12-5 Show GitHub Exploit DB Packet Storm
292073 - cybozu garoon SQL injection vulnerability in the Space function in Cybozu Garoon before 3.7 SP1 allows remote authenticated users to execute arbitrary SQL commands via unspecified vectors. CWE-89
SQL Injection
CVE-2013-6001 2024-11-21 10:58 2013-12-5 Show GitHub Exploit DB Packet Storm
292074 - tattyan tattyan_hptown Directory traversal vulnerability in Tattyan HP TOWN before 5_10_1 allows remote attackers to read arbitrary files via a .. (dot dot) in a request. CWE-22
Path Traversal
CVE-2013-6000 2024-11-21 10:58 2013-12-5 Show GitHub Exploit DB Packet Storm
292075 - att connect_participant_application Stack-based buffer overflow in the AT&T Connect Participant Application before 9.5.51 on Windows allows remote attackers to execute arbitrary code via a malformed .SVT file. CWE-119
Incorrect Access of Indexable Resource ('Range Error') 
CVE-2013-6029 2024-11-21 10:58 2013-12-5 Show GitHub Exploit DB Packet Storm
292076 - ibm qradar_security_information_and_event_manager Cross-site scripting (XSS) vulnerability in IBM Security QRadar SIEM 7.0 allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors. CWE-79
Cross-site Scripting
CVE-2013-6307 2024-11-21 10:58 2013-11-30 Show GitHub Exploit DB Packet Storm
292077 - thomsonreuters velocity_analytics_vhayu_analytic_server VhttpdMgr in Thomson Reuters Velocity Analytics Vhayu Analytic Server 6.94 build 2995 allows remote attackers to execute arbitrary code via a URL in the fileName parameter during an importFile action. CWE-94
Code Injection
CVE-2013-5912 2024-11-21 10:58 2013-11-28 Show GitHub Exploit DB Packet Storm
292078 - civicrm civicrm Multiple SQL injection vulnerabilities in CRM/Core/Page/AJAX/Location.php in CiviCRM before 4.2.12, 4.3.x before 4.3.7, and 4.4.x before 4.4.beta4 allow remote attackers to execute arbitrary SQL comm… CWE-89
SQL Injection
CVE-2013-5957 2024-11-21 10:58 2013-11-28 Show GitHub Exploit DB Packet Storm
292079 - ibm rational_performance_tester
rational_service_tester
Unspecified vulnerability in IBM Rational Service Tester 8.3.x and 8.5.x before 8.5.1 and Rational Performance Tester 8.3.x and 8.5.x before 8.5.1 allows remote attackers to read arbitrary files via … NVD-CWE-noinfo
CVE-2013-6312 2024-11-21 10:58 2013-11-23 Show GitHub Exploit DB Packet Storm
292080 - kingsoft kdrive Kingsoft KDrive Personal before 1.21.0.1880 on Windows does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information … CWE-310
Cryptographic Issues
CVE-2013-5999 2024-11-21 10:58 2013-11-23 Show GitHub Exploit DB Packet Storm