Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 1, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
202591 8.8 重要
Network 		Apache Software Foundation - Apache Jackrabbit の Jackrabbit-Webdav の CSRF コンテンツ型チェックにおけるクロスサイトリクエストフォージェリの脆弱性 CWE-352
同一生成元ポリシー違反 		CVE-2016-6801 2016-09-26 17:57 2016-08-31 Show GitHub Exploit DB Packet Storm
202592 8.1 重要
Network 		Apache Software Foundation - Apache Zookeeper の C cli シェルにおけるバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2016-5017 2016-09-26 17:57 2016-08-10 Show GitHub Exploit DB Packet Storm
202593 9.8 緊急
Network 		Apache Software Foundation - Apache CXF Fediz のアプリケーションプラグインにおける制限を回避される脆弱性 CWE-Other
その他 		CVE-2016-4464 2016-09-26 17:57 2016-06-3 Show GitHub Exploit DB Packet Storm
202594 6.5 警告
Network 		Huawei - 複数の Huawei アクセス・コントローラ製品のソフトウェアにおけるサービス運用妨害 (DoS) の脆弱性 CWE-20
不適切な入力確認 		CVE-2016-6824 2016-09-26 17:53 2016-08-17 Show GitHub Exploit DB Packet Storm
202595 7.5 重要
Network 		Huawei - 複数の Huawei USG 製品のソフトウェアの AAA モジュールにおけるバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2016-6669 2016-09-26 17:53 2016-08-10 Show GitHub Exploit DB Packet Storm
202596 7.5 重要
Adjacent 		Huawei - Huawei WS331a ルータのソフトウェアの管理インターフェースにおける認証を回避される脆弱性 CWE-287
不適切な認証 		CVE-2016-6159 2016-09-26 17:53 2016-09-7 Show GitHub Exploit DB Packet Storm
202597 6.1 警告
Network 		Huawei - Huawei WS331a ルータのソフトウェアにおけるクロスサイトリクエストフォージェリの脆弱性 CWE-352
同一生成元ポリシー違反 		CVE-2016-6158 2016-09-26 17:53 2016-09-7 Show GitHub Exploit DB Packet Storm
202598 6.7 警告
Local 		Xen プロジェクト - Xen の FIFO イベントチャネルコードにおけるサービス運用妨害 (DoS) の脆弱性 CWE-Other
その他 		CVE-2016-7154 2016-09-26 17:31 2016-09-8 Show GitHub Exploit DB Packet Storm
202599 4.1 警告
Local 		Xen プロジェクト - Xen におけるバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2016-7094 2016-09-26 17:31 2016-09-8 Show GitHub Exploit DB Packet Storm
202600 8.2 重要
Local 		Xen プロジェクト - Xen におけるハイパーバイザのメモリを上書きされる脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2016-7093 2016-09-26 17:31 2016-09-8 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 1, 2026, 4:12 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
289521 - microsoft windows_server_2008
windows_server_2012
windows_rt
windows_8.1
windows_7
windows_rt_8.1
windows_8 		The Direct2D implementation in Microsoft Windows 7 SP1, Windows Server 2008 R2 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, and Windows RT Gold and 8.1 allows remote attackers to exe… CWE-119
Incorrect Access of Indexable Resource ('Range Error')  		CVE-2014-0263 2024-11-21 11:01 2014-02-12 Show GitHub Exploit DB Packet Storm
289522 - microsoft .net_framework Microsoft .NET Framework 1.0 SP3, 1.1 SP1, 2.0 SP2, 3.5, 3.5.1, 4, 4.5, and 4.5.1 does not properly determine whether it is safe to execute a method, which allows remote attackers to execute arbitrar… CWE-20
 Improper Input Validation  		CVE-2014-0257 2024-11-21 11:01 2014-02-12 Show GitHub Exploit DB Packet Storm
289523 - microsoft windows_rt
windows_8
windows_server_2012 		The IPv6 implementation in Microsoft Windows 8, Windows Server 2012, and Windows RT does not properly validate packets, which allows remote attackers to cause a denial of service (system hang) via cr… CWE-20
 Improper Input Validation  		CVE-2014-0254 2024-11-21 11:01 2014-02-12 Show GitHub Exploit DB Packet Storm
289524 - microsoft .net_framework Microsoft .NET Framework 1.1 SP1, 2.0 SP2, 3.5, 3.5.1, 4, 4.5, and 4.5.1 does not properly determine TCP connection states, which allows remote attackers to cause a denial of service (ASP.NET daemon … CWE-20
 Improper Input Validation  		CVE-2014-0253 2024-11-21 11:01 2014-02-12 Show GitHub Exploit DB Packet Storm
289525 - light_speed_gaming mumble
mumblekit 		The needSamples method in AudioOutputSpeech.cpp in the client in Mumble 1.2.4 and the 1.2.3 pre-release snapshots, Mumble for iOS 1.1 through 1.2.2, and MumbleKit before commit fd190328a9b24d37382b26… CWE-189
Numeric Errors 		CVE-2014-0045 2024-11-21 11:01 2014-02-8 Show GitHub Exploit DB Packet Storm
289526 - light_speed_gaming mumble The opus_packet_get_samples_per_frame function in client in Mumble 1.2.4 and the 1.2.3 pre-release snapshots allows remote attackers to cause a denial of service (crash) via a crafted length prefix v… CWE-119
Incorrect Access of Indexable Resource ('Range Error')  		CVE-2014-0044 2024-11-21 11:01 2014-02-8 Show GitHub Exploit DB Packet Storm
289527 - cipherdyne fwsnort Untrusted search path vulnerability in fwsnort before 1.6.4, when not running as root, allows local users to execute arbitrary code via a Trojan horse fwsnort.conf in the current working directory. NVD-CWE-Other
CVE-2014-0039 2024-11-21 11:01 2014-02-8 Show GitHub Exploit DB Packet Storm
289528 - dell kace_k1000_systems_management_appliance_software
kace_k1000_systems_management_appliance 		Cross-site scripting (XSS) vulnerability in adminui/user_list.php on the Dell KACE K1000 management appliance 5.5.90545 allows remote attackers to inject arbitrary web script or HTML via the LABEL_ID… CWE-79
Cross-site Scripting 		CVE-2014-0330 2024-11-21 11:01 2014-02-7 Show GitHub Exploit DB Packet Storm
289529 - linux
opensuse 		linux_kernel
opensuse 		The compat_sys_recvmmsg function in net/compat.c in the Linux kernel before 3.13.2, when CONFIG_X86_X32 is enabled, allows local users to gain privileges via a recvmmsg system call with a crafted tim… CWE-20
 Improper Input Validation  		CVE-2014-0038 2024-11-21 11:01 2014-02-7 Show GitHub Exploit DB Packet Storm
289530 - pidgin pidgin The IRC protocol plugin in libpurple in Pidgin before 2.10.8 does not validate argument counts, which allows remote IRC servers to cause a denial of service (application crash) via a crafted message. CWE-20
 Improper Input Validation  		CVE-2014-0020 2024-11-21 11:01 2014-02-7 Show GitHub Exploit DB Packet Storm