Vulnerability Search Top

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

Vulnerability Information Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 17, 2026, noon

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
202621	9.8	緊急 Network	マイクロソフト日立	-	複数の Microsoft Windows 製品の Web プロキシ自動検出プロトコルの実装におけるネットワークトラフィックをリダイレクトされる脆弱性	CWE-Other その他	CVE-2016-3236	2016-06-28 16:58	2016-06-14	Show	GitHub Exploit DB Packet Storm

202622	8.8	重要 Network	マイクロソフト日立	-	複数の Microsoft Windows 製品の Web プロキシ自動検出プロトコルの実装における権限昇格の脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2016-3213	2016-06-28 16:58	2016-06-14	Show	GitHub Exploit DB Packet Storm

202623	7.8	重要 Local	Linux	-	Linux Kernel の drivers/hid/usbhid/hiddev.c の hiddev_ioctl_usage 関数におけるヒープベースのバッファオーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2016-5829	2016-06-28 16:36	2016-06-23	Show	GitHub Exploit DB Packet Storm

202624	7.8	重要 Local	Linux	-	PowerPC プラットフォーム上で稼動する Linux Kernel の arch/powerpc/kernel/process.c におけるサービス運用妨害 (DoS) の脆弱性	CWE-20 不適切な入力確認	CVE-2016-5828	2016-06-28 16:36	2016-06-17	Show	GitHub Exploit DB Packet Storm

202625	7.1	重要 Local	Linux	-	Linux Kernel の MIC VOP ドライバの drivers/misc/mic/vop/vop_vringh.c の vop_ioctl 関数における重要な情報を取得される脆弱性	CWE-119 バッファエラー	CVE-2016-5728	2016-06-28 16:36	2016-06-1	Show	GitHub Exploit DB Packet Storm

202626	5.5	警告 Local	Linux	-	Linux Kernel の net/tipc/netlink_compat.c の tipc_nl_compat_link_dump 関数におけるカーネルスタックメモリから重要な情報を取得される脆弱性	CWE-200 情報漏えい	CVE-2016-5243	2016-06-28 16:36	2016-06-2	Show	GitHub Exploit DB Packet Storm

202627	7.8	重要 Local	Linux	-	Linux Kernel の arch/x86/kvm/vmx.c におけるホスト OS 上で直接 APIC の MSR アクセス権を取得される脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2016-4440	2016-06-28 16:36	2016-05-18	Show	GitHub Exploit DB Packet Storm

202628	7.1	重要 Local	Linux	-	Linux Kernel の arch/x86/kvm/mtrr.c の msr_mtrr_valid 関数における kvm_arch_vcpu のデータ構造を読み書きされる脆弱性	CWE-Other その他	CVE-2016-3713	2016-06-28 16:36	2016-06-1	Show	GitHub Exploit DB Packet Storm

202629	7.8	重要 Local	Linux	-	Linux Kernel の fs/ecryptfs/kthread.c の ecryptfs_privileged_open 関数における権限を取得される脆弱性	CWE-119 バッファエラー	CVE-2016-1583	2016-06-28 16:36	2016-06-24	Show	GitHub Exploit DB Packet Storm

202630	7.8	重要 Local	Linux	-	Linux Kernel の ALSA サブシステムの sound/core/compress_offload.c におけるサービス運用妨害 (DoS) の脆弱性	CWE-Other その他	CVE-2014-9904	2016-06-28 16:36	2014-07-16	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 17, 2026, 4:15 a.m.

No	CVSS	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
290231	-	schneider-electric	modicon_m340	The Schneider Electric M340 BMXNOE01xx and BMXP3420xx PLC modules allow remote authenticated users to cause a denial of service (module crash) via crafted FTP traffic, as demonstrated by the FileZill…	CWE-119 Incorrect Access of Indexable Resource ('Range Error')	CVE-2013-2761	2024-11-21 10:52	2013-04-4	Show	GitHub Exploit DB Packet Storm

290232	-	schneider-electric	modicon_m340_bmx_noc_0401_firmware modicon_m340_bmx_noe_0100_firmware modicon_m340_bmx_noe_0100h_firmware modicon_m340_bmx_noe_0110_firmware modicon_m340_bmx_noe_0110h_firmware modicon…	The Schneider Electric M340 PLC modules allow remote attackers to cause a denial of service (resource consumption) via unspecified vectors. NOTE: the vendor reportedly disputes this issue because it…	CWE-400 Uncontrolled Resource Consumption	CVE-2013-2763	2024-11-21 10:52	2013-04-4	Show	GitHub Exploit DB Packet Storm

290233	-	ithemes	backupbuddy	importbuddy.php in the BackupBuddy plugin 2.2.25 for WordPress allows remote attackers to obtain configuration information via a step 0 phpinfo action, which calls the phpinfo function.	CWE-200 Information Exposure	CVE-2013-2744	2024-11-21 10:52	2013-04-2	Show	GitHub Exploit DB Packet Storm

290234	-	ithemes	backupbuddy	importbuddy.php in the BackupBuddy plugin 1.3.4, 2.1.4, 2.2.25, 2.2.28, and 2.2.4 for WordPress allows remote attackers to bypass authentication via a crafted integer in the step parameter.	CWE-287 Improper Authentication	CVE-2013-2743	2024-11-21 10:52	2013-04-2	Show	GitHub Exploit DB Packet Storm

290235	-	ithemes	backupbuddy	importbuddy.php in the BackupBuddy plugin 1.3.4, 2.1.4, 2.2.25, 2.2.28, and 2.2.4 for WordPress does not reliably delete itself after completing a restore operation, which makes it easier for remote …	NVD-CWE-Other	CVE-2013-2742	2024-11-21 10:52	2013-04-2	Show	GitHub Exploit DB Packet Storm

290236	-	ithemes	backupbuddy	importbuddy.php in the BackupBuddy plugin 1.3.4, 2.1.4, 2.2.25, 2.2.28, and 2.2.4 for WordPress does not require that authentication be enabled, which allows remote attackers to obtain sensitive info…	CWE-287 Improper Authentication	CVE-2013-2741	2024-11-21 10:52	2013-04-2	Show	GitHub Exploit DB Packet Storm

290237	-	asterisk	open_source certified_asterisk digiumphones	main/http.c in the HTTP server in Asterisk Open Source 1.8.x before 1.8.20.2, 10.x before 10.12.2, and 11.x before 11.2.2; Certified Asterisk 1.8.15 before 1.8.15-cert2; and Asterisk Digiumphones 10.…	CWE-119 Incorrect Access of Indexable Resource ('Range Error')	CVE-2013-2686	2024-11-21 10:52	2013-04-2	Show	GitHub Exploit DB Packet Storm

290238	-	asterisk	open_source	Stack-based buffer overflow in res/res_format_attr_h264.c in Asterisk Open Source 11.x before 11.2.2 allows remote attackers to execute arbitrary code via a long sprop-parameter-sets H.264 media attr…	CWE-119 Incorrect Access of Indexable Resource ('Range Error')	CVE-2013-2685	2024-11-21 10:52	2013-04-2	Show	GitHub Exploit DB Packet Storm

290239	-	synchroweb	synconnect	SQL injection vulnerability in index.php in Synchroweb Technology SynConnect 2.0 allows remote attackers to execute arbitrary SQL commands via the loginid parameter in a logoff action.	CWE-89 SQL Injection	CVE-2013-2690	2024-11-21 10:52	2013-03-29	Show	GitHub Exploit DB Packet Storm

290240	-	emc	smarts_network_configuration_manager	Multiple unspecified vulnerabilities in the System Management (aka SysAdmin) Console in EMC Smarts Network Configuration Manager (NCM) through 9.2 have unknown impact and attack vectors, a different …	NVD-CWE-noinfo	CVE-2013-2717	2024-11-21 10:52	2013-03-29	Show	GitHub Exploit DB Packet Storm