Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 22, 2026, 6 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
202431 9.8 緊急
Network
NUUO INC.
ネットギア
- 複数の NUUO 製品および NETGEAR ReadyNAS Surveillance の __debugging_center_utils___.php における任意の PHP コードを実行される脆弱性 CWE-20
不適切な入力確認
CVE-2016-5674 2016-09-1 16:07 2016-08-4 Show GitHub Exploit DB Packet Storm
202432 9.8 緊急
Network
MAC-Telnet project - MAC-Telnet クライアントの mactelnet.c の handle_packet 関数におけるバッファオーバーフローの脆弱性 CWE-119
バッファエラー
CVE-2016-7115 2016-09-1 15:24 2016-08-30 Show GitHub Exploit DB Packet Storm
202433 9.8 緊急
Network
vBulletin Solutions, Inc. - vBulletin の forumrunner/includes/moderation.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2016-6195 2016-09-1 14:42 2016-06-16 Show GitHub Exploit DB Packet Storm
202434 9.8 緊急
Network
VMware - VMware vRealize Automation における任意のコードを実行される脆弱性 CWE-noinfo
情報不足
CVE-2016-5336 2016-09-1 13:44 2016-08-23 Show GitHub Exploit DB Packet Storm
202435 7.8 重要
Local
VMware - VMware Identity Manager および vRealize Automation における root アクセス権を取得される脆弱性 CWE-noinfo
情報不足
CVE-2016-5335 2016-09-1 13:44 2016-08-23 Show GitHub Exploit DB Packet Storm
202436 9.8 緊急
Network
VMware - VMware Photon OS OVA における SSH アクセス権を取得される脆弱性 CWE-Other
その他
CVE-2016-5333 2016-09-1 13:44 2016-08-15 Show GitHub Exploit DB Packet Storm
202437 5.3 警告
Network
VMware - VMware vRealize Log Insight におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル
CVE-2016-5332 2016-09-1 13:44 2016-08-11 Show GitHub Exploit DB Packet Storm
202438 8.8 重要
Network
openSUSE project
Canonical
Debian
Google
SUSE
レッドハット
- Google Chrome におけるサービス運用妨害 (DoS) の脆弱性 CWE-noinfo
情報不足
CVE-2016-1703 2016-08-31 18:18 2016-06-1 Show GitHub Exploit DB Packet Storm
202439 6.5 警告
Network
openSUSE project
Canonical
Debian
Google
SUSE
レッドハット
- Google Chrome で使用される Skia の core/SkRegion.cpp におけるサービス運用妨害 (DoS) の脆弱性 CWE-119
バッファエラー
CVE-2016-1702 2016-08-31 18:18 2016-06-1 Show GitHub Exploit DB Packet Storm
202440 8.8 重要
Network
レッドハット
Debian
openSUSE project
SUSE
Google
- Google Chrome の Autofill 実装におけるサービス運用妨害 (DoS) の脆弱性 CWE-Other
その他
CVE-2016-1701 2016-08-31 18:18 2016-06-1 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 22, 2026, 4:08 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
291371 - microsoft windows_7 Unspecified vulnerability in the kernel in Microsoft Windows 7 allows local users to gain privileges via unknown vectors, as demonstrated by Nils and Jon of MWR Labs during a Pwn2Own competition at C… NVD-CWE-noinfo
CVE-2013-2553 2024-11-21 10:51 2013-03-11 Show GitHub Exploit DB Packet Storm
291372 - microsoft internet_explorer Unspecified vulnerability in Microsoft Internet Explorer 10 on Windows 8 allows remote attackers to bypass the sandbox protection mechanism by leveraging access to a Medium integrity process, as demo… NVD-CWE-noinfo
CVE-2013-2552 2024-11-21 10:51 2013-03-11 Show GitHub Exploit DB Packet Storm
291373 - adobe acrobat_reader Unspecified vulnerability in Adobe Reader 11.0.02 allows attackers to bypass the sandbox protection mechanism via unknown vectors, as demonstrated by George Hotz during a Pwn2Own competition at CanSe… NVD-CWE-noinfo
CVE-2013-2550 2024-11-21 10:51 2013-03-11 Show GitHub Exploit DB Packet Storm
291374 - adobe acrobat_reader Unspecified vulnerability in Adobe Reader 11.0.02 allows remote attackers to execute arbitrary code via vectors related to a "break into the sandbox," as demonstrated by George Hotz during a Pwn2Own … CWE-94
Code Injection
CVE-2013-2549 2024-11-21 10:51 2013-03-11 Show GitHub Exploit DB Packet Storm
291375 - ffmpeg ffmpeg The msrle_decode_8_16_24_32 function in msrledec.c in libavcodec in FFmpeg through 1.1.3 does not properly determine certain end pointers, which allows remote attackers to cause a denial of service (… CWE-119
Incorrect Access of Indexable Resource ('Range Error') 
CVE-2013-2496 2024-11-21 10:51 2013-03-9 Show GitHub Exploit DB Packet Storm
291376 - ffmpeg ffmpeg The iff_read_header function in iff.c in libavformat in FFmpeg through 1.1.3 does not properly handle data sizes for Interchange File Format (IFF) data during operations involving a CMAP chunk or a v… CWE-189
Numeric Errors
CVE-2013-2495 2024-11-21 10:51 2013-03-9 Show GitHub Exploit DB Packet Storm
291377 - spreecommerce spree app/models/spree/user.rb in spree_auth_devise in Spree 1.1.x before 1.1.6, 1.2.x, and 1.3.x does not perform mass assignment safely when updating a user, which allows remote authenticated users to as… CWE-264
Permissions, Privileges, and Access Controls
CVE-2013-2506 2024-11-21 10:51 2013-03-9 Show GitHub Exploit DB Packet Storm
291378 - google chrome_frame The Hook_Terminate function in chrome_frame/protocol_sink_wrap.cc in the Google Chrome Frame plugin before 26.0.1410.28 for Internet Explorer does not properly handle attach tab requests, which allow… CWE-119
Incorrect Access of Indexable Resource ('Range Error') 
CVE-2013-2493 2024-11-21 10:51 2013-03-8 Show GitHub Exploit DB Packet Storm
291379 - wireshark
opensuse
debian
wireshark
opensuse
debian_linux
The DTLS dissector in Wireshark 1.6.x before 1.6.14 and 1.8.x before 1.8.6 does not validate the fragment offset before invoking the reassembly state machine, which allows remote attackers to cause a… CWE-20
 Improper Input Validation 
CVE-2013-2488 2024-11-21 10:51 2013-03-8 Show GitHub Exploit DB Packet Storm
291380 - opensuse
debian
wireshark
opensuse
debian_linux
wireshark
epan/dissectors/packet-reload.c in the REsource LOcation And Discovery (aka RELOAD) dissector in Wireshark 1.8.x before 1.8.6 uses incorrect integer data types, which allows remote attackers to cause… CWE-189
Numeric Errors
CVE-2013-2487 2024-11-21 10:51 2013-03-8 Show GitHub Exploit DB Packet Storm