Vulnerability Search Top

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

Vulnerability Information Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 15, 2026, 2:01 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
202411	7.8	重要 Local	Google	-	Nexus 7 (2013) デバイス上で稼動する Android の Qualcomm コンポーネントの drivers/video/fbcmap.c におけるバッファオーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2014-9781	2016-07-13 11:51	2016-07-6	Show	GitHub Exploit DB Packet Storm

202412	7.8	重要 Local	Google	-	複数の Nexus デバイス上で稼動する Android の Qualcomm コンポーネントの drivers/video/msm/mdss/mdp3_ctrl.c における権限を取得される脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2014-9780	2016-07-13 11:51	2016-07-6	Show	GitHub Exploit DB Packet Storm

202413	7.8	重要 Local	Google	-	Nexus 5 デバイス上で稼動する Android の Qualcomm コンポーネントの arch/arm/mach-msm/qdsp6v2/msm_audio_ion.c におけるカーネルメモリから重要な情報を取得される脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2014-9779	2016-07-13 11:51	2016-07-6	Show	GitHub Exploit DB Packet Storm

202414	7.8	重要 Local	Google	-	Nexus 5 および 7 (2013) デバイス上で稼動する Android の Qualcomm コンポーネントにおける権限を取得される脆弱性	CWE-119 バッファエラー	CVE-2014-9778	2016-07-13 11:51	2016-07-6	Show	GitHub Exploit DB Packet Storm

202415	7.8	重要 Local	Google	-	Nexus 5 および 7 (2013) デバイス上で稼動する Android の Qualcomm コンポーネントにおける権限を取得される脆弱性	CWE-119 バッファエラー	CVE-2014-9777	2016-07-13 11:51	2016-07-6	Show	GitHub Exploit DB Packet Storm

202416	7.8	重要 Local	Google	-	Android の Qualcomm コンポーネントにおける権限を取得される脆弱性	CWE-noinfo 情報不足	CVE-2013-7457	2016-07-13 11:51	2016-07-6	Show	GitHub Exploit DB Packet Storm

202417	8.8	重要 Network	IBM	-	IBM Jazz Reporting Service の Report Builder および Data Collection Component におけるクロスサイトリクエストフォージェリの脆弱性	CWE-352 同一生成元ポリシー違反	CVE-2016-2889	2016-07-13 10:13	2016-06-24	Show	GitHub Exploit DB Packet Storm

202418	5.4	警告 Network	IBM	-	IBM Jazz Reporting Service の Report Builder および Data Collection Component におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2016-2888	2016-07-13 10:13	2016-06-24	Show	GitHub Exploit DB Packet Storm

202419	5.4	警告 Network	IBM	-	IBM Jazz Reporting Service の Report Builder および Data Collection Component におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2016-0350	2016-07-13 10:13	2016-06-24	Show	GitHub Exploit DB Packet Storm

202420	8.8	重要 Network	IBM	-	IBM Jazz Reporting Service の Report Builder および Data Collection Component におけるセッションをハイジャックされる脆弱性	CWE-Other その他	CVE-2016-0315	2016-07-13 10:13	2016-06-24	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 15, 2026, 4:28 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
290481	-		acquia commons_wikis_project	commons commons_wikis	The Commons Wikis module before 7.x-3.1 for Drupal, as used in the Commons module before 7.x-3.1, does not properly restrict access to groups, which allows remote attackers to post arbitrary content …	CWE-264 Permissions, Privileges, and Access Controls	CVE-2013-1908	2024-11-21 10:50	2013-07-17	Show	GitHub Exploit DB Packet Storm

290482	-		acquia	commons commons_group	The Commons Group module before 7.x-3.1 for Drupal, as used in the Commons module before 7.x-3.1, does not properly restrict access to groups, which allows remote attackers to post arbitrary content …	CWE-264 Permissions, Privileges, and Access Controls	CVE-2013-1907	2024-11-21 10:50	2013-07-17	Show	GitHub Exploit DB Packet Storm

290483	7.8	HIGH Local	linux redhat canonical	linux_kernel enterprise_linux enterprise_linux_eus ubuntu_linux	The KVM subsystem in the Linux kernel before 3.0 does not check whether kernel addresses are specified during allocation of memory slots for use in a guest's physical address space, which allows loca…	CWE-20 Improper Input Validation	CVE-2013-1943	2024-11-21 10:50	2013-07-16	Show	GitHub Exploit DB Packet Storm

290484	-		redhat	enterprise_linux	A certain Red Hat patch to the KVM subsystem in the kernel package before 2.6.32-358.11.1.el6 on Red Hat Enterprise Linux (RHEL) 6 does not properly implement the PV EOI feature, which allows guest O…	CWE-362 Race Condition	CVE-2013-1935	2024-11-21 10:50	2013-07-16	Show	GitHub Exploit DB Packet Storm

290485	-		ibm apache	websphere_application_server geronimo	The JMX Remoting functionality in Apache Geronimo 3.x before 3.0.1, as used in IBM WebSphere Application Server (WAS) Community Edition 3.0.0.3 and other products, does not properly implement the RMI…	CWE-94 Code Injection	CVE-2013-1777	2024-11-21 10:50	2013-07-12	Show	GitHub Exploit DB Packet Storm

290486	-		apache	openjpa	The BrokerFactory functionality in Apache OpenJPA 1.x before 1.2.3 and 2.x before 2.2.2 creates local executable JSP files containing logging trace data produced during deserialization of certain cra…	CWE-264 Permissions, Privileges, and Access Controls	CVE-2013-1768	2024-11-21 10:50	2013-07-12	Show	GitHub Exploit DB Packet Storm

290487	-		apache redhat canonical opensuse	http_server jboss_enterprise_application_platform enterprise_linux_server enterprise_linux_workstation enterprise_linux_server_aus enterprise_linux_desktop enterprise_linux_eus u…	mod_dav.c in the Apache HTTP Server before 2.2.25 does not properly determine whether DAV is enabled for a URI, which allows remote attackers to cause a denial of service (segmentation fault) via a M…	NVD-CWE-noinfo	CVE-2013-1896	2024-11-21 10:50	2013-07-11	Show	GitHub Exploit DB Packet Storm

290488	-		apache	struts	Apache Struts 2 before 2.3.14.2 allows remote attackers to execute arbitrary OGNL code via a crafted request that is not properly handled when using the includeParams attribute in the (1) URL or (2) …	CWE-94 Code Injection	CVE-2013-1966	2024-11-21 10:50	2013-07-11	Show	GitHub Exploit DB Packet Storm

290489	-		apache	struts struts2-showcase	Apache Struts Showcase App 2.0.0 through 2.3.13, as used in Struts 2 before 2.3.14.3, allows remote attackers to execute arbitrary OGNL code via a crafted parameter name that is not properly handled …	CWE-94 Code Injection	CVE-2013-1965	2024-11-21 10:50	2013-07-11	Show	GitHub Exploit DB Packet Storm

290490	-		videolan	vlc_media_player	The ASF Demuxer (modules/demux/asf/asf.c) in VideoLAN VLC media player 2.0.5 and earlier allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a crafted…	CWE-119 Incorrect Access of Indexable Resource ('Range Error')	CVE-2013-1954	2024-11-21 10:50	2013-07-11	Show	GitHub Exploit DB Packet Storm