Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 25, 2026, 12:07 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
202471 9.8 緊急
Network
The PHP Group - PHP の ext/gd/gd.c の imagegammacorrect 関数におけるサービス運用妨害 (DoS) の脆弱性 CWE-Other
その他
CVE-2016-7127 2016-09-13 15:39 2016-08-18 Show GitHub Exploit DB Packet Storm
202472 9.8 緊急
Network
The PHP Group - PHP の ext/gd/gd.c の imagetruecolortopalette 関数におけるサービス運用妨害 (DoS) の脆弱性 CWE-Other
その他
CVE-2016-7126 2016-09-13 15:39 2016-08-18 Show GitHub Exploit DB Packet Storm
202473 7.5 重要
Network
The PHP Group - PHP の ext/session/session.c における任意の型のセッションデータを挿入される脆弱性 CWE-Other
その他
CVE-2016-7125 2016-09-13 15:39 2016-08-18 Show GitHub Exploit DB Packet Storm
202474 9.8 緊急
Network
The PHP Group - PHP の ext/standard/var_unserializer.c におけるサービス運用妨害 (DoS) の脆弱性 CWE-Other
その他
CVE-2016-7124 2016-09-13 15:39 2016-08-18 Show GitHub Exploit DB Packet Storm
202475 8.8 重要
Network
Google - Google Chrome で使用される Skia の SkPath.cpp におけるサービス運用妨害 (DoS) の脆弱性 CWE-Other
その他
CVE-2016-7395 2016-09-13 14:03 2016-08-31 Show GitHub Exploit DB Packet Storm
202476 6.1 警告
Network
Google - Google Chrome で使用される Blink におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2016-5148 2016-09-13 14:01 2016-08-31 Show GitHub Exploit DB Packet Storm
202477 6.1 警告
Network
Google - Google Chrome で使用される Blink における任意の Web スクリプトまたは HTML を挿入される脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2016-5147 2016-09-13 14:01 2016-08-31 Show GitHub Exploit DB Packet Storm
202478 6.5 警告
Network
ジュニパーネットワークス - Juniper Junos OS の PKId における証明書検証メカニズムを回避される脆弱性 CWE-Other
その他
CVE-2016-1280 2016-09-12 16:35 2016-07-13 Show GitHub Exploit DB Packet Storm
202479 9.8 緊急
Network
ジュニパーネットワークス - Juniper Junos OS の J-Web における重要な情報を取得される脆弱性 CWE-200
CWE-287
CVE-2016-1279 2016-09-12 16:35 2016-07-13 Show GitHub Exploit DB Packet Storm
202480 5.9 警告
Network
ジュニパーネットワークス - Juniper Junos OS におけるサービス運用妨害 (DoS) の脆弱性 CWE-20
不適切な入力確認
CVE-2016-1277 2016-09-12 16:35 2016-07-13 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 25, 2026, 4:01 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
291591 - kde kdelibs kioslave/http/http.cpp in KIO in kdelibs 4.10.3 and earlier allows attackers to discover credentials via a crafted request that triggers an "internal server error," which includes the username and pa… CWE-200
Information Exposure
CVE-2013-2074 2024-11-21 10:50 2014-02-6 Show GitHub Exploit DB Packet Storm
291592 - apache activemq Cross-site scripting (XSS) vulnerability in the Portfolio publisher servlet in the demo web application in Apache ActiveMQ before 5.9.0 allows remote attackers to inject arbitrary web script or HTML … CWE-79
Cross-site Scripting
CVE-2013-1880 2024-11-21 10:50 2014-02-6 Show GitHub Exploit DB Packet Storm
291593 - mediaelementjs
owncloud
mediaelement.js
owncloud
Cross-site scripting (XSS) vulnerability in flashmediaelement.swf in MediaElement.js before 2.11.2, as used in ownCloud Server 5.0.x before 5.0.5 and 4.5.x before 4.5.10, allows remote attackers to i… CWE-79
Cross-site Scripting
CVE-2013-1967 2024-11-21 10:50 2014-02-6 Show GitHub Exploit DB Packet Storm
291594 - kolja_schleich leaguemanager SQL injection vulnerability in leaguemanager.php in the LeagueManager plugin before 3.8.1 for WordPress allows remote attackers to execute arbitrary SQL commands via the league_id parameter in the le… CWE-89
SQL Injection
CVE-2013-1852 2024-11-21 10:50 2014-02-6 Show GitHub Exploit DB Packet Storm
291595 - almanah_project almanah Almanah Diary 0.9.0 and 0.10.0 does not encrypt the database when closed, which allows local users to obtain sensitive information by reading the database. CWE-310
Cryptographic Issues
CVE-2013-1853 2024-11-21 10:50 2014-01-25 Show GitHub Exploit DB Packet Storm
291596 - redhat dogtag_certificate_system
certificate_system
Format string vulnerability in the token processing system (pki-tps) in Red Hat Certificate System (RHCS) 8.1 and possibly Dogtag Certificate System 9 and 10 allows remote authenticated users to caus… CWE-134
Use of Externally-Controlled Format String
CVE-2013-1886 2024-11-21 10:50 2014-01-25 Show GitHub Exploit DB Packet Storm
291597 - redhat dogtag_certificate_system
certificate_system
Multiple cross-site scripting (XSS) vulnerabilities in the token processing system (pki-tps) in Red Hat Certificate System (RHCS) 8.1 and possibly Dogtag Certificate System 9 and 10 allow remote atta… CWE-79
Cross-site Scripting
CVE-2013-1885 2024-11-21 10:50 2014-01-25 Show GitHub Exploit DB Packet Storm
291598 - linux-nfs nfs-utils rpc-gssd in nfs-utils before 1.2.8 performs reverse DNS resolution for server names during GSSAPI authentication, which might allow remote attackers to read otherwise-restricted files via DNS spoofin… CWE-200
Information Exposure
CVE-2013-1923 2024-11-21 10:50 2014-01-22 Show GitHub Exploit DB Packet Storm
291599 - simon_mcvittie telepathy_gabble A certain hashing algorithm in Telepathy Gabble 0.16.x before 0.16.5 and 0.17.x before 0.17.3 allows remote attackers to cause a denial of service (NULL pointer dereference and crash) via a crafted m… CWE-310
Cryptographic Issues
CVE-2013-1769 2024-11-21 10:50 2014-01-22 Show GitHub Exploit DB Packet Storm
291600 - mozilla network_security_services The ssl_Do1stHandshake function in sslsecur.c in libssl in Mozilla Network Security Services (NSS) before 3.15.4, when the TLS False Start feature is enabled, allows man-in-the-middle attackers to sp… CWE-310
Cryptographic Issues
CVE-2013-1740 2024-11-21 10:50 2014-01-19 Show GitHub Exploit DB Packet Storm