Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 25, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
202451 7.8 重要
Local 		Google - Nexus 5X および 9 デバイス上で稼動する Android の Synaptics タッチスクリーンドライバにおける権限を取得される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2016-3865 2016-09-14 16:45 2016-09-6 Show GitHub Exploit DB Packet Storm
202452 7.8 重要
Local 		Google - 複数の Nexus および Android One デバイス上で稼動する Android の Qualcomm ラジオインターフェースレイヤにおける権限を取得される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2016-3864 2016-09-14 16:45 2016-09-6 Show GitHub Exploit DB Packet Storm
202453 7.8 重要
Local 		Google - Android のメディアサーバの media/ExifInterface.java における任意のコードを実行される脆弱性 CWE-119
バッファエラー 		CVE-2016-3862 2016-09-14 16:45 2016-09-6 Show GitHub Exploit DB Packet Storm
202454 7.8 重要
Local 		Google - Android の LibUtils における任意のコードを実行される脆弱性 CWE-119
CWE-264
CVE-2016-3861 2016-09-14 16:45 2016-09-6 Show GitHub Exploit DB Packet Storm
202455 7.8 重要
Local 		Google - Nexus 5X および 6P デバイス上で稼動する Android の Qualcomm システムドライバにおけるバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2016-3858 2016-09-14 16:45 2016-09-6 Show GitHub Exploit DB Packet Storm
202456 6 警告
Network 		Simtech Ltd. - CS-Cart 用アドオン「Twigmo」における PHP オブジェクトインジェクションの脆弱性 CWE-20
不適切な入力確認 		CVE-2016-4862 2016-09-14 14:05 2016-09-14 Show GitHub Exploit DB Packet Storm
202457 7.5 重要
Network 		シスコシステムズ - Cisco ACE30 Application Control Engine モジュールおよび ACE 4700 Application Control Engine アプライアンスにおけるサービス運用妨害 (DoS) の脆弱性 CWE-20
不適切な入力確認 		CVE-2016-6399 2016-09-14 12:00 2016-09-8 Show GitHub Exploit DB Packet Storm
202458 5.3 警告
Network 		シスコシステムズ - Cisco IOS の PPTP サーバにおける過去のネットワーク通信から重要な情報を取得される脆弱性 CWE-200
情報漏えい 		CVE-2016-6398 2016-09-14 12:00 2016-09-2 Show GitHub Exploit DB Packet Storm
202459 5.3 警告
Network 		シスコシステムズ - Cisco Firepower Management Center および FireSIGHT システム ソフトウェアにおけるマルウェアの検出を回避される脆弱性 CWE-20
不適切な入力確認 		CVE-2016-6396 2016-09-14 12:00 2016-09-7 Show GitHub Exploit DB Packet Storm
202460 5.4 警告
Network 		シスコシステムズ - Cisco Firepower Management Center および FireSIGHT システム ソフトウェアの Web ベースの管理インターフェースにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2016-6395 2016-09-14 12:00 2016-09-7 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 26, 2026, 4:05 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
291651 - open-xchange open-xchange_server Multiple CRLF injection vulnerabilities in Open-Xchange Server before 6.20.7 rev14, 6.22.0 before rev13, and 6.22.1 before rev14 allow remote attackers to inject arbitrary HTTP headers and conduct HT… CWE-94
Code Injection 		CVE-2013-1647 2024-11-21 10:50 2013-09-5 Show GitHub Exploit DB Packet Storm
291652 - open-xchange open-xchange_server Multiple cross-site scripting (XSS) vulnerabilities in Open-Xchange Server before 6.20.7 rev14, 6.22.0 before rev13, and 6.22.1 before rev14 allow remote attackers to inject arbitrary web script or H… CWE-79
Cross-site Scripting 		CVE-2013-1646 2024-11-21 10:50 2013-09-5 Show GitHub Exploit DB Packet Storm
291653 - open-xchange open-xchange_server Directory traversal vulnerability in Open-Xchange Server before 6.20.7 rev14, 6.22.0 before rev13, and 6.22.1 before rev14 allows remote authenticated users to read arbitrary files via a .. (dot dot)… CWE-22
Path Traversal 		CVE-2013-1645 2024-11-21 10:50 2013-09-5 Show GitHub Exploit DB Packet Storm
291654 - vmware esxi
esx 		VMware ESXi 4.0 through 5.1, and ESX 4.0 and 4.1, does not properly implement the Network File Copy (NFC) protocol, which allows man-in-the-middle attackers to cause a denial of service (unhandled ex… CWE-20
 Improper Input Validation  		CVE-2013-1661 2024-11-21 10:50 2013-09-4 Show GitHub Exploit DB Packet Storm
291655 - redhat hawtjni Race condition in hawtjni-runtime/src/main/java/org/fusesource/hawtjni/runtime/Library.java in HawtJNI before 1.8, when a custom library path is not specified, allows local users to execute arbitrary… CWE-94
Code Injection 		CVE-2013-2035 2024-11-21 10:50 2013-08-29 Show GitHub Exploit DB Packet Storm
291656 - xen xen Xen 4.0.x, 4.1.x, and 4.2.x does not properly restrict the contents of a XRSTOR, which allows local PV guest users to cause a denial of service (unhandled exception and hypervisor crash) via unspecif… CWE-264
Permissions, Privileges, and Access Controls 		CVE-2013-2077 2024-11-21 10:50 2013-08-29 Show GitHub Exploit DB Packet Storm
291657 - xen xen Xen 4.0.x, 4.1.x, and 4.2.x, when running on AMD64 processors, only save/restore the FOP, FIP, and FDP x87 registers in FXSAVE/FXRSTOR when an exception is pending, which allows one domain to determi… CWE-200
Information Exposure 		CVE-2013-2076 2024-11-21 10:50 2013-08-29 Show GitHub Exploit DB Packet Storm
291658 - xen
debian 		xen
debian_linux 		Buffer overflow in the Python bindings for the xc_vcpu_setaffinity call in Xen 4.0.x, 4.1.x, and 4.2.x allows local administrators with permissions to configure VCPU affinity to cause a denial of ser… CWE-119
Incorrect Access of Indexable Resource ('Range Error')  		CVE-2013-2072 2024-11-21 10:50 2013-08-29 Show GitHub Exploit DB Packet Storm
291659 - vmware workstation
player 		vmware-mount in VMware Workstation 8.x and 9.x and VMware Player 4.x and 5.x, on systems based on Debian GNU/Linux, allows host OS users to gain host OS privileges via a crafted lsb_release binary in… CWE-264
Permissions, Privileges, and Access Controls 		CVE-2013-1662 2024-11-21 10:50 2013-08-24 Show GitHub Exploit DB Packet Storm
291660 - redhat
apache 		enterprise_mrg
qpid 		The Python client in Apache Qpid before 2.2 does not verify that the server hostname matches a domain name in the subject's Common Name (CN) or subjectAltName field of the X.509 certificate, which al… CWE-20
 Improper Input Validation  		CVE-2013-1909 2024-11-21 10:50 2013-08-24 Show GitHub Exploit DB Packet Storm