Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 30, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
202531 7.8 重要
Local 		シスコシステムズ - Cisco Application Policy Infrastructure Controller デバイスのインストールプロシージャにおける root アクセス権を取得される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2016-6413 2016-09-28 11:41 2016-09-21 Show GitHub Exploit DB Packet Storm
202532 6.5 警告
Network 		シスコシステムズ - Cisco IOS および IOS XE の Cisco Application-hosting Framework コンポーネントにおける任意のダウンロードを誘発される脆弱性 CWE-20
不適切な入力確認 		CVE-2016-6412 2016-09-28 11:41 2016-09-21 Show GitHub Exploit DB Packet Storm
202533 7.5 重要
Network 		シスコシステムズ - Cisco Prime Home における任意のファイルを読まれる脆弱性 CWE-Other
その他 		CVE-2016-6408 2016-09-28 11:41 2016-09-21 Show GitHub Exploit DB Packet Storm
202534 9.8 緊急
Network 		シスコシステムズ - Cisco E メール セキュリティ アプライアンスデバイス上で稼動する IronPort AsyncOS における root アクセス権を取得される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2016-6406 2016-09-28 11:41 2016-09-22 Show GitHub Exploit DB Packet Storm
202535 9.8 緊急
Network 		シスコシステムズ - Cisco Cloud Services Platform 2100 における任意のコードを実行される脆弱性 CWE-20
不適切な入力確認 		CVE-2016-6374 2016-09-28 11:41 2016-09-21 Show GitHub Exploit DB Packet Storm
202536 7.2 重要
Network 		シスコシステムズ - Cisco Cloud Services Platform 2100 の Web ベースの GUI における root 権限で任意の OS コマンドを実行される脆弱性 CWE-78
OSコマンド・インジェクション 		CVE-2016-6373 2016-09-28 11:41 2016-09-21 Show GitHub Exploit DB Packet Storm
202537 6.5 警告
Network 		シスコシステムズ - Cisco IOS および IOS XE のゾーンベースファイアウォール機能におけるリソースへのアクセス制限を回避される脆弱性 CWE-20
不適切な入力確認 		CVE-2014-2146 2016-09-28 11:41 2014-02-25 Show GitHub Exploit DB Packet Storm
202538 7.8 重要
Local 		Lenovo - 複数の Lenovo デバイスの BIOS におけるセキュアブートの保護メカニズムを回避される脆弱性 CWE-Other
その他 		CVE-2016-5247 2016-09-28 11:10 2016-08-25 Show GitHub Exploit DB Packet Storm
202539 7.4 重要
Network 		Mozilla Foundation - Mozilla Firefox におけるアドオンの更新を偽装される脆弱性 CWE-20
不適切な入力確認 		CVE-2016-5284 2016-09-27 17:51 2016-09-13 Show GitHub Exploit DB Packet Storm
202540 8.8 重要
Network 		Mozilla Foundation - Mozilla Firefox における同一生成元ポリシーを回避される脆弱性 CWE-Other
その他 		CVE-2016-5283 2016-09-27 17:51 2016-09-13 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 31, 2026, 4:16 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
289571 - async-http-client_project
redhat 		async-http-client
jboss_fuse 		main/java/com/ning/http/client/AsyncHttpClientConfig.java in Async Http Client (aka AHC or async-http-client) before 1.9.0 does not require a hostname match during verification of X.509 certificates,… CWE-345
 Insufficient Verification of Data Authenticity 		CVE-2013-7398 2024-11-21 11:00 2015-06-25 Show GitHub Exploit DB Packet Storm
289572 - redhat
async-http-client_project 		jboss_fuse
async-http-client 		Async Http Client (aka AHC or async-http-client) before 1.9.0 skips X.509 certificate verification unless both a keyStore location and a trustStore location are explicitly set, which allows man-in-th… CWE-345
 Insufficient Verification of Data Authenticity 		CVE-2013-7397 2024-11-21 11:00 2015-06-25 Show GitHub Exploit DB Packet Storm
289573 - kanaka novnc noVNC before 0.5 does not set the secure flag for a cookie in an https session, which makes it easier for remote attackers to capture this cookie by intercepting its transmission within an http sessi… CWE-310
Cryptographic Issues 		CVE-2013-7436 2024-11-21 11:00 2015-04-10 Show GitHub Exploit DB Packet Storm
289574 - pbm212030_project pbm212030 Multiple buffer overflows in pbm212030 allow remote attackers to cause a denial of service (crash) or possibly execute arbitrary code via a crafted PBM image, related to (1) stream line data, which t… CWE-119
Incorrect Access of Indexable Resource ('Range Error')  		CVE-2013-7438 2024-11-21 11:00 2015-03-30 Show GitHub Exploit DB Packet Storm
289575 - icoasoft potrace Multiple integer overflows in potrace 1.11 allow remote attackers to cause a denial of service (crash) via large dimensions in a BMP image, which triggers a buffer overflow. CWE-190
 Integer Overflow or Wraparound 		CVE-2013-7437 2024-11-21 11:00 2015-03-30 Show GitHub Exploit DB Packet Storm
289576 - canonical
debian
linux
oracle 		ubuntu_linux
debian_linux
linux_kernel
linux 		The Crypto API in the Linux kernel before 3.18.5 allows local users to load arbitrary kernel modules via a bind system call for an AF_ALG socket with a module name in the salg_name field, a different… CWE-269
 Improper Privilege Management 		CVE-2013-7421 2024-11-21 11:00 2015-03-2 Show GitHub Exploit DB Packet Storm
289577 - redhat
canonical
opensuse
gnu 		enterprise_linux_server_aus
ubuntu_linux
opensuse
glibc 		The send_dg function in resolv/res_send.c in GNU C Library (aka glibc or libc6) before 2.20 does not properly reuse file descriptors, which allows remote attackers to send DNS queries to unintended l… CWE-17
Code 		CVE-2013-7423 2024-11-21 11:00 2015-02-25 Show GitHub Exploit DB Packet Storm
289578 - kde kde_applications kwalletd in KWallet before KDE Applications 14.12.0 uses Blowfish with ECB mode instead of CBC mode when encrypting the password store, which makes it easier for attackers to guess passwords via a co… CWE-310
Cryptographic Issues 		CVE-2013-7252 2024-11-21 11:00 2015-01-19 Show GitHub Exploit DB Packet Storm
289579 - hancom hancom_office_2010_se Buffer overflow in Hancom Office 2010 SE allows remote attackers to execute arbitrary via a long string in the Text attribute in a TEXTART XML element in an HML file. CWE-119
Incorrect Access of Indexable Resource ('Range Error')  		CVE-2013-7420 2024-11-21 11:00 2015-01-13 Show GitHub Exploit DB Packet Storm
289580 - joomlaskin js_multi_hotel Cross-site scripting (XSS) vulnerability in includes/refreshDate.php in the Joomlaskin JS Multi Hotel (aka JS MultiHotel and Js-Multi-Hotel) plugin 2.2.1 for WordPress allows remote attackers to inje… CWE-79
Cross-site Scripting 		CVE-2013-7419 2024-11-21 11:00 2015-01-10 Show GitHub Exploit DB Packet Storm