Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 16, 2026, 2 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
202391 7.8 重要
Local
Google - Nexus 5X および 6P デバイス上で稼動する Android の Qualcomm コンポーネントの platform/msm_shared/boot_verifier.c におけるアクセス制限を回避される脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2015-8892 2016-07-13 16:53 2016-07-6 Show GitHub Exploit DB Packet Storm
202392 7.8 重要
Local
Google - Nexus 5 および 7 (2013) デバイス上で稼動する Android の Qualcomm コンポーネントの app/aboot/aboot.c における整数オーバーフローの脆弱性 CWE-189
数値処理の問題
CVE-2015-8891 2016-07-13 16:53 2016-07-6 Show GitHub Exploit DB Packet Storm
202393 7.8 重要
Local
Google - Nexus 6P デバイス上で稼動する Android の Qualcomm コンポーネントの aboot の実装における脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2015-8889 2016-07-13 16:53 2016-07-6 Show GitHub Exploit DB Packet Storm
202394 7.8 重要
Local
Google - Nexus 5 デバイス上で稼動する Android の Qualcomm コンポーネントの app/aboot/aboot.c における整数オーバーフローの脆弱性 CWE-189
CWE-264
CVE-2015-8888 2016-07-13 16:53 2016-07-6 Show GitHub Exploit DB Packet Storm
202395 7.8 重要
Local
Google - Nexus 5 デバイス上で稼動する Android の Qualcomm コンポーネントの lib/libfdt/fdt_rw.c における整数オーバーフローの脆弱性 CWE-189
数値処理の問題
CVE-2014-9801 2016-07-13 16:53 2016-07-6 Show GitHub Exploit DB Packet Storm
202396 7.8 重要
Local
Google - Nexus 5 および 7 (2013) デバイス上で稼動する Android の Qualcomm コンポーネントの lib/heap/heap.c における整数オーバーフローの脆弱性 CWE-189
CWE-264
CVE-2014-9800 2016-07-13 16:52 2016-07-6 Show GitHub Exploit DB Packet Storm
202397 5.5 警告
Local
Google - Nexus 5 デバイス上で稼動する Android の Qualcomm ブートローダの platform/msm_shared/dev_tree.c におけるサービス運用妨害 (DoS) の脆弱性 CWE-Other
その他
CVE-2014-9798 2016-07-13 16:52 2016-07-6 Show GitHub Exploit DB Packet Storm
202398 7.8 重要
Local
Google - Nexus 5 および 7 (2013) デバイス上で稼動する Android の Qualcomm コンポーネントの app/aboot/aboot.c におけるアクセス制限を回避される脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2014-9796 2016-07-13 16:52 2016-07-6 Show GitHub Exploit DB Packet Storm
202399 7.8 重要
Local
Google - Nexus 5 デバイス上で稼動する Android の Qualcomm コンポーネントの app/aboot/aboot.c におけるアクセス制限を回避される脆弱性 CWE-189
数値処理の問題
CVE-2014-9795 2016-07-13 16:52 2016-07-6 Show GitHub Exploit DB Packet Storm
202400 7.8 重要
Local
Google - Nexus 7 (2013) デバイス上で稼動する Android の Qualcomm コンポーネントの platform/msm_shared/mmc.c における権限を取得される脆弱性 CWE-Other
その他
CVE-2014-9793 2016-07-13 16:52 2016-07-6 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 16, 2026, 4 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
290471 - pypa pip pip before 1.3 uses HTTP to retrieve packages from the PyPI repository, and does not perform integrity checks on package contents, which allows man-in-the-middle attackers to execute arbitrary code v… CWE-20
 Improper Input Validation 
CVE-2013-1629 2024-11-21 10:50 2013-08-6 Show GitHub Exploit DB Packet Storm
290472 - symantec web_gateway
web_gateway_appliance_8450
web_gateway_appliance_8490
Multiple SQL injection vulnerabilities in the management console on the Symantec Web Gateway (SWG) appliance before 5.1.1 allow remote authenticated administrators to execute arbitrary SQL commands v… CWE-89
SQL Injection
CVE-2013-1617 2024-11-21 10:50 2013-08-1 Show GitHub Exploit DB Packet Storm
290473 - symantec web_gateway
web_gateway_appliance_8450
web_gateway_appliance_8490
The management console on the Symantec Web Gateway (SWG) appliance before 5.1.1 allows remote attackers to execute arbitrary commands by injecting a command into an application script. CWE-78
OS Command 
CVE-2013-1616 2024-11-21 10:50 2013-08-1 Show GitHub Exploit DB Packet Storm
290474 - redhat satellite The Inter-Satellite Sync (ISS) operation in Red Hat Network (RHN) Satellite 5.3, 5.4, and 5.5 does not properly check client "authenticity," which allows remote attackers to obtain channel content by… CWE-287
Improper Authentication
CVE-2013-2056 2024-11-21 10:50 2013-07-31 Show GitHub Exploit DB Packet Storm
290475 - apache
collabnet
canonical
opensuse
subversion
ubuntu_linux
opensuse
Subversion before 1.6.23 and 1.7.x before 1.7.10 allows remote authenticated users to cause a denial of service (FSFS repository corruption) via a newline character in a file name. NVD-CWE-noinfo
CVE-2013-1968 2024-11-21 10:50 2013-07-31 Show GitHub Exploit DB Packet Storm
290476 - f5
debian
nginx
debian_linux
http/modules/ngx_http_proxy_module.c in nginx 1.1.4 through 1.2.8 and 1.3.0 through 1.4.0, when proxy_pass is used with untrusted HTTP servers, allows remote attackers to cause a denial of service (c… NVD-CWE-noinfo
CVE-2013-2070 2024-11-21 10:50 2013-07-20 Show GitHub Exploit DB Packet Storm
290477 - f5
fedoraproject
nginx
fedora
The ngx_http_parse_chunked function in http/ngx_http_parse.c in nginx 1.3.9 through 1.4.0 allows remote attackers to cause a denial of service (crash) and execute arbitrary code via a chunked Transfe… CWE-787
 Out-of-bounds Write
CVE-2013-2028 2024-11-21 10:50 2013-07-20 Show GitHub Exploit DB Packet Storm
290478 - nashtech easy_php_calendar Multiple cross-site scripting (XSS) vulnerabilities in (1) index.php and (2) datePicker.php in Easy PHP Calendar 6.x and 7.x before 7.0.13 allow remote attackers to inject arbitrary web script or HTM… CWE-79
Cross-site Scripting
CVE-2013-1955 2024-11-21 10:50 2013-07-20 Show GitHub Exploit DB Packet Storm
290479 - apache activemq Cross-site scripting (XSS) vulnerability in scheduled.jsp in Apache ActiveMQ 5.8.0 and earlier allows remote attackers to inject arbitrary web script or HTML via vectors involving the "cron of a mess… CWE-79
Cross-site Scripting
CVE-2013-1879 2024-11-21 10:50 2013-07-20 Show GitHub Exploit DB Packet Storm
290480 - chaos_tool_suite_project ctools The Chaos Tool Suite (ctools) module 7.x-1.x before 7.x-1.3 for Drupal does not properly restrict node access, which allows remote authenticated users with the "access content" permission to read res… CWE-264
Permissions, Privileges, and Access Controls
CVE-2013-1925 2024-11-21 10:50 2013-07-17 Show GitHub Exploit DB Packet Storm