Vulnerability Search Top

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

Vulnerability Information Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 26, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
202501	7.5	重要 Network	GNU Project openSUSE project Canonical	-	libidn の lib/nfkc.c の stringprep_utf8_nfkc_normalize 関数におけるサービス運用妨害 (DoS) の脆弱性	CWE-Other その他	CVE-2016-6263	2016-09-12 11:45	2016-07-20	Show	GitHub Exploit DB Packet Storm

202502	5.4	警告 Network		-	HPE Operations Manager の AdminUI におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2016-4380	2016-09-12 11:11	2016-08-30	Show	GitHub Exploit DB Packet Storm

202503	3.7	低 Network	ヒューレット・パッカード・エンタープライズ	-	HPE Integrated Lights-Out 3 ファームウェアの TLS の実装における重要な情報を取得される脆弱性	CWE-310 暗号の問題	CVE-2016-4379	2016-09-12 11:11	2016-08-30	Show	GitHub Exploit DB Packet Storm

202504	6.5	警告 Network	Fedora Project FreeIPA project	-	FreeIPA の cert_revoke コマンドにおける任意の証明書を無効にされる脆弱性	CWE-Other その他	CVE-2016-5404	2016-09-12 09:50	2016-08-22	Show	GitHub Exploit DB Packet Storm

202505	7.5	重要 Network	Ruby on Rails project	-	Ruby on Rails の Action Record におけるデータベースクエリの制限を回避される脆弱性	CWE-Other その他	CVE-2016-6317	2016-09-9 18:00	2016-08-11	Show	GitHub Exploit DB Packet Storm

202506	6.1	警告 Network	Debian Ruby on Rails project	-	Ruby on Rails の Action View におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2016-6316	2016-09-9 18:00	2016-08-11	Show	GitHub Exploit DB Packet Storm

202507	7.8	重要 Local	openSUSE project CrackLib project	-	CrackLib の lib/fascist.c の FascistGecosUser 関数におけるスタックベースのバッファオーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2016-6318	2016-09-9 16:57	2016-08-31	Show	GitHub Exploit DB Packet Storm

202508	6.5	警告 Network	Huawei	-	Huawei Unified Maintenance Audit における任意のユーザパスワードの MD5 ハッシュを取得される脆弱性	CWE-200 情報漏えい	CVE-2016-7108	2016-09-9 15:59	2016-08-24	Show	GitHub Exploit DB Packet Storm

202509	7.5	重要 Network	Huawei	-	Huawei Unified Maintenance Audit における任意のユーザパスワードをリセットされる脆弱性	CWE-Other その他	CVE-2016-7107	2016-09-9 15:59	2016-08-24	Show	GitHub Exploit DB Packet Storm

202510	9.8	緊急 Network	Huawei	-	Huawei Unified Maintenance Audit における任意のコマンドを実行される脆弱性	CWE-94 コード・インジェクション	CVE-2016-7110	2016-09-9 15:58	2016-08-24	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 26, 2026, 4:05 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
291691	-		nashtech	easy_php_calendar	Multiple cross-site scripting (XSS) vulnerabilities in (1) index.php and (2) datePicker.php in Easy PHP Calendar 6.x and 7.x before 7.0.13 allow remote attackers to inject arbitrary web script or HTM…	CWE-79 Cross-site Scripting	CVE-2013-1955	2024-11-21 10:50	2013-07-20	Show	GitHub Exploit DB Packet Storm

291692	-		apache	activemq	Cross-site scripting (XSS) vulnerability in scheduled.jsp in Apache ActiveMQ 5.8.0 and earlier allows remote attackers to inject arbitrary web script or HTML via vectors involving the "cron of a mess…	CWE-79 Cross-site Scripting	CVE-2013-1879	2024-11-21 10:50	2013-07-20	Show	GitHub Exploit DB Packet Storm

291693	-		chaos_tool_suite_project	ctools	The Chaos Tool Suite (ctools) module 7.x-1.x before 7.x-1.3 for Drupal does not properly restrict node access, which allows remote authenticated users with the "access content" permission to read res…	CWE-264 Permissions, Privileges, and Access Controls	CVE-2013-1925	2024-11-21 10:50	2013-07-17	Show	GitHub Exploit DB Packet Storm

291694	-		acquia commons_wikis_project	commons commons_wikis	The Commons Wikis module before 7.x-3.1 for Drupal, as used in the Commons module before 7.x-3.1, does not properly restrict access to groups, which allows remote attackers to post arbitrary content …	CWE-264 Permissions, Privileges, and Access Controls	CVE-2013-1908	2024-11-21 10:50	2013-07-17	Show	GitHub Exploit DB Packet Storm

291695	-		acquia	commons commons_group	The Commons Group module before 7.x-3.1 for Drupal, as used in the Commons module before 7.x-3.1, does not properly restrict access to groups, which allows remote attackers to post arbitrary content …	CWE-264 Permissions, Privileges, and Access Controls	CVE-2013-1907	2024-11-21 10:50	2013-07-17	Show	GitHub Exploit DB Packet Storm

291696	7.8	HIGH Local	linux redhat canonical	linux_kernel enterprise_linux enterprise_linux_eus ubuntu_linux	The KVM subsystem in the Linux kernel before 3.0 does not check whether kernel addresses are specified during allocation of memory slots for use in a guest's physical address space, which allows loca…	CWE-20 Improper Input Validation	CVE-2013-1943	2024-11-21 10:50	2013-07-16	Show	GitHub Exploit DB Packet Storm

291697	-		redhat	enterprise_linux	A certain Red Hat patch to the KVM subsystem in the kernel package before 2.6.32-358.11.1.el6 on Red Hat Enterprise Linux (RHEL) 6 does not properly implement the PV EOI feature, which allows guest O…	CWE-362 Race Condition	CVE-2013-1935	2024-11-21 10:50	2013-07-16	Show	GitHub Exploit DB Packet Storm

291698	-		ibm apache	websphere_application_server geronimo	The JMX Remoting functionality in Apache Geronimo 3.x before 3.0.1, as used in IBM WebSphere Application Server (WAS) Community Edition 3.0.0.3 and other products, does not properly implement the RMI…	CWE-94 Code Injection	CVE-2013-1777	2024-11-21 10:50	2013-07-12	Show	GitHub Exploit DB Packet Storm

291699	-		apache	openjpa	The BrokerFactory functionality in Apache OpenJPA 1.x before 1.2.3 and 2.x before 2.2.2 creates local executable JSP files containing logging trace data produced during deserialization of certain cra…	CWE-264 Permissions, Privileges, and Access Controls	CVE-2013-1768	2024-11-21 10:50	2013-07-12	Show	GitHub Exploit DB Packet Storm

291700	-		apache redhat canonical opensuse	http_server jboss_enterprise_application_platform enterprise_linux_server enterprise_linux_workstation enterprise_linux_server_aus enterprise_linux_desktop enterprise_linux_eus u…	mod_dav.c in the Apache HTTP Server before 2.2.25 does not properly determine whether DAV is enabled for a URI, which allows remote attackers to cause a denial of service (segmentation fault) via a M…	NVD-CWE-noinfo	CVE-2013-1896	2024-11-21 10:50	2013-07-11	Show	GitHub Exploit DB Packet Storm