Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 18, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
202621 7.5 重要
Network 		Misys - Misys FusionCapital Opics Plus allows における権限を取得される脆弱性 CWE-264
CWE-Other
CVE-2016-5654 2016-07-25 13:40 2016-07-19 Show GitHub Exploit DB Packet Storm
202622 6.5 警告
Network 		Misys - Misys FusionCapital Opics Plus における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2016-5653 2016-07-25 13:40 2016-07-19 Show GitHub Exploit DB Packet Storm
202623 9.8 緊急
Network 		Moxa Inc. - 複数の Moxa MGate 製品における認証を回避される脆弱性 CWE-287
不適切な認証 		CVE-2016-5804 2016-07-25 12:26 2016-07-14 Show GitHub Exploit DB Packet Storm
202624 5.7 警告
Local 		General Electric Company - General Electric Digital Proficy HMI/SCADA - CIMPLICITY におけるサービスの設定を変更される脆弱性 CWE-Other
その他 		CVE-2016-5787 2016-07-25 11:38 2016-07-12 Show GitHub Exploit DB Packet Storm
202625 7.3 重要
Network 		Schneider Electric - Schneider Electric M171/M172 Logic Controller 用 SoMachine HVAC Programming の ActiveX コントロールにおける任意のコードを実行される脆弱性 CWE-noinfo
情報不足 		CVE-2016-4529 2016-07-25 11:31 2016-06-10 Show GitHub Exploit DB Packet Storm
202626 9.8 緊急
Network 		Schneider Electric - Schneider Electric Pelco Digital Sentry ビデオ管理システムのファームウェアにおけるアクセス権を取得される脆弱性 CWE-Other
その他 		CVE-2016-4520 2016-07-25 11:31 2016-06-1 Show GitHub Exploit DB Packet Storm
202627 9.8 緊急
Physics 		ヒューレット・パッカード・エンタープライズ - 複数の HPE IMC 製品における任意のコマンドを実行される脆弱性 CWE-20
不適切な入力確認 		CVE-2016-4372 2016-07-25 11:14 2016-07-11 Show GitHub Exploit DB Packet Storm
202628 7.6 重要
Network 		HarfBuzz project - HarfBuzz の hb-ot-layout-gpos-table.hh におけるサービス運用妨害 (DoS) の脆弱性 CWE-119
バッファエラー 		CVE-2015-8947 2016-07-25 11:12 2015-10-13 Show GitHub Exploit DB Packet Storm
202629 2.5 低
Local 		Google - Android OS の電話帳アプリにおけるアクセス制限不備の脆弱性 CWE-264
認可・権限・アクセス制御 		- 2016-07-22 14:04 2016-07-22 Show GitHub Exploit DB Packet Storm
202630 8.1 重要
Network 		Tollgrade Communications, Inc. - Tollgrade LightHouse Sensor Management System における管理者権限の認証要求を回避される脆弱性 CWE-Other
その他 		CVE-2016-5807 2016-07-21 18:15 2016-07-12 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 19, 2026, 4:16 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
290111 - linux linux_kernel The Linux kernel before 3.12.2 does not properly use the get_dumpable function, which allows local users to bypass intended ptrace restrictions or obtain sensitive information from IA64 scratch regis… CWE-264
Permissions, Privileges, and Access Controls 		CVE-2013-2929 2024-11-21 10:52 2013-12-10 Show GitHub Exploit DB Packet Storm
290112 - elecsyscorp director_dnp3_outstation_kernel
director_industrial_communication_gateway 		The DNP3 service in the Outstation component on Elecsys Director Gateway devices with kernel 2.6.32.11ael1 and earlier allows remote attackers to cause a denial of service (CPU consumption and commun… CWE-20
 Improper Input Validation  		CVE-2013-2825 2024-11-21 10:52 2013-12-5 Show GitHub Exploit DB Packet Storm
290113 - alstom e-terracontrol The DNP Master Driver in Alstom e-terracontrol 3.5, 3.6, and 3.7 allows physically proximate attackers to cause a denial of service (infinite loop and DNP3 service disruption) via crafted input over … CWE-20
 Improper Input Validation  		CVE-2013-2818 2024-11-21 10:52 2013-12-2 Show GitHub Exploit DB Packet Storm
290114 - ge
catapultsoftware 		intelligent_platforms_proficy_dnp3_i\/o_driver
intelligent_platforms_proficy_hmi\/scada_cimplicity
catapult_dnp3_i\/o_driver
intelligent_platforms_proficy_hmi\/scada_ifix 		The (1) Catapult DNP3 I/O driver before 7.2.0.60 and the (2) GE Intelligent Platforms Proficy DNP3 I/O driver before 7.20k, as used in DNPDrv.exe (aka the DNP master station server) in GE Intelligent… CWE-20
 Improper Input Validation  		CVE-2013-2823 2024-11-21 10:52 2013-11-22 Show GitHub Exploit DB Packet Storm
290115 - ge
catapultsoftware 		intelligent_platforms_proficy_dnp3_i\/o_driver
intelligent_platforms_proficy_hmi\/scada_cimplicity
catapult_dnp3_i\/o_driver
intelligent_platforms_proficy_hmi\/scada_ifix 		The (1) Catapult DNP3 I/O driver before 7.2.0.60 and the (2) GE Intelligent Platforms Proficy DNP3 I/O driver before 7.20k, as used in DNPDrv.exe (aka the DNP master station server) in GE Intelligent… CWE-20
 Improper Input Validation  		CVE-2013-2811 2024-11-21 10:52 2013-11-22 Show GitHub Exploit DB Packet Storm
290116 - dlink dir865l_firmware
dir865l 		Multiple cross-site request forgery (CSRF) vulnerabilities in D-Link DIR865L router (Rev. A1) with firmware before 1.05b07 allow remote attackers to hijack the authentication of administrators for re… CWE-352
 Origin Validation Error 		CVE-2013-3095 2024-11-21 10:52 2013-11-20 Show GitHub Exploit DB Packet Storm
290117 - ibm cognos_business_intelligence The servlet gateway in IBM Cognos Business Intelligence 8.4.1 before IF3, 10.1.0 before IF4, 10.1.1 before IF4, 10.2.0 before IF4, 10.2.1 before IF2, and 10.2.1.1 before IF1 allows remote attackers t… CWE-20
 Improper Input Validation  		CVE-2013-3030 2024-11-21 10:52 2013-11-18 Show GitHub Exploit DB Packet Storm
290118 - google chrome Multiple unspecified vulnerabilities in Google Chrome before 31.0.1650.48 allow attackers to execute arbitrary code or possibly have other impact via unknown vectors. NVD-CWE-noinfo
CVE-2013-2931 2024-11-21 10:52 2013-11-14 Show GitHub Exploit DB Packet Storm
290119 - silverstripe silverstripe security/MemberLoginForm.php in SilverStripe 3.0.3 supports login using a GET request, which makes it easier for remote attackers to conduct phishing attacks without detection by the victim. CWE-20
 Improper Input Validation  		CVE-2013-2653 2024-11-21 10:52 2013-11-13 Show GitHub Exploit DB Packet Storm
290120 - ibm lotus_sametime The Enterprise Meeting Server in IBM Lotus Sametime 8.5.2 and 8.5.2.1 allows remote authenticated users to share crafted links via the Library function. CWE-20
 Improper Input Validation  		CVE-2013-3045 2024-11-21 10:52 2013-11-9 Show GitHub Exploit DB Packet Storm