Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 22, 2026, 6 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
202731 9.8 緊急
Network
Linux - MSM デバイスなどの製品用 QuIC Android コントリビューションで使用される Linux Kernel の MSM-VFE31 ドライバにおける権限を取得される脆弱性 CWE-20
不適切な入力確認
CVE-2014-9410 2016-08-15 15:12 2014-12-22 Show GitHub Exploit DB Packet Storm
202732 7.8 重要
Local
Google
Linux
- Nexus 5 および 7 (2013) デバイス上で稼動する Android で使用される ARM プラットフォームの Linux Kernel における権限を取得される脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2014-9888 2016-08-15 12:18 2016-08-1 Show GitHub Exploit DB Packet Storm
202733 9.8 緊急
Network
Google - Google Chrome におけるサービス運用妨害 (DoS) の脆弱性 CWE-noinfo
情報不足
CVE-2016-5146 2016-08-12 18:33 2016-08-3 Show GitHub Exploit DB Packet Storm
202734 8.8 重要
Network
Google - Google Chrome で使用される Blink における同一生成元ポリシーを回避される脆弱性 CWE-Other
その他
CVE-2016-5145 2016-08-12 18:33 2016-08-3 Show GitHub Exploit DB Packet Storm
202735 9.8 緊急
Network
Google - Google Chrome で使用される Blink の Developer Tools サブシステムにおけるアクセス制限を回避される脆弱性 CWE-Other
その他
CVE-2016-5144 2016-08-12 18:33 2016-08-3 Show GitHub Exploit DB Packet Storm
202736 9.8 緊急
Network
Google - Google Chrome で使用される Blink の Developer Tools サブシステムにおけるアクセス制限を回避される脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2016-5143 2016-08-12 18:33 2016-08-3 Show GitHub Exploit DB Packet Storm
202737 9.8 緊急
Network
Google - Google Chrome で使用される Blink の Web Cryptography API の実装におけるサービス運用妨害 (DoS) の脆弱性 CWE-Other
その他
CVE-2016-5142 2016-08-12 18:33 2016-08-3 Show GitHub Exploit DB Packet Storm
202738 7.5 重要
Network
Google - Google Chrome で使用される Blink における アドレスバーを偽造される脆弱性 CWE-20
不適切な入力確認
CVE-2016-5141 2016-08-12 18:33 2016-08-3 Show GitHub Exploit DB Packet Storm
202739 9.8 緊急
Network
Google - Google Chrome の PDFium で使用される OpenJPEG の j2k.c におけるヒープベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー
CVE-2016-5140 2016-08-12 18:33 2016-08-3 Show GitHub Exploit DB Packet Storm
202740 7.6 重要
Network
Google - Google Chrome の PDFium で使用される OpenJPEG の tcd.c の opj_tcd_init_tile 関数における整数オーバーフローの脆弱性 CWE-119
バッファエラー
CVE-2016-5139 2016-08-12 18:33 2016-08-3 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 23, 2026, 4:08 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
289991 - vmware esxi
esx
Buffer overflow in VMware ESXi 4.0 through 5.0, and ESX 4.0 and 4.1, allows remote attackers to execute arbitrary code or cause a denial of service via unspecified vectors. CWE-119
Incorrect Access of Indexable Resource ('Range Error') 
CVE-2013-3657 2024-11-21 10:54 2013-09-10 Show GitHub Exploit DB Packet Storm
289992 - ibm rational_policy_tester IBM Rational Policy Tester 8.5 before 8.5.0.5 does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof Jazz Team servers, obtain sensitive information, a… CWE-310
Cryptographic Issues
CVE-2013-4062 2024-11-21 10:54 2013-09-9 Show GitHub Exploit DB Packet Storm
289993 - ibm rational_policy_tester IBM Rational Policy Tester 8.5 before 8.5.0.5 does not properly check authorization for changes to the set of authentication hosts, which allows remote authenticated users to perform spoofing attacks… CWE-287
Improper Authentication
CVE-2013-4061 2024-11-21 10:54 2013-09-9 Show GitHub Exploit DB Packet Storm
289994 - ibm tririga_application_platform Multiple cross-site scripting (XSS) vulnerabilities in IBM TRIRIGA Application Platform 2.x and 3.x before 3.3.1.1, and 8, allow remote authenticated users to inject arbitrary web script or HTML via … CWE-79
Cross-site Scripting
CVE-2013-4003 2024-11-21 10:54 2013-08-29 Show GitHub Exploit DB Packet Storm
289995 - stage_file_proxy_project stage_file_proxy The Stage File Proxy module 7.x-1.x before 7.x-1.4 for Drupal allows remote attackers to cause a denial of service (file operations performance degradation and failure) via a large number of requests. NVD-CWE-noinfo
CVE-2013-4139 2024-11-21 10:54 2013-08-29 Show GitHub Exploit DB Packet Storm
289996 - alienwp hatch Cross-site scripting (XSS) vulnerability in the Hatch theme 7.x-1.x before 7.x-1.4 for Drupal allows remote authenticated users with the "Administer content," "Create new article," or "Edit any artic… CWE-79
Cross-site Scripting
CVE-2013-4138 2024-11-21 10:54 2013-08-29 Show GitHub Exploit DB Packet Storm
289997 - openstack
opensuse
python_glanceclient
opensuse
The Python client library for Glance (python-glanceclient) before 0.10.0 does not properly check the preverify_ok value, which prevents the server hostname from being verified with a domain name in t… CWE-20
 Improper Input Validation 
CVE-2013-4111 2024-11-21 10:54 2013-08-29 Show GitHub Exploit DB Packet Storm
289998 - ibm websphere_extended_deployment_compute_grid IBM WebSphere Extended Deployment Compute Grid 8.0 before 8.0.0.3 allows remote authenticated users to obtain sensitive information, and consequently bypass intended access restrictions on jobs, via … CWE-200
Information Exposure
CVE-2013-4039 2024-11-21 10:54 2013-08-28 Show GitHub Exploit DB Packet Storm
289999 - ibm db2_connect
db2
IBM DB2 and DB2 Connect 9.7 through FP8, 9.8 through FP5, 10.1 through FP2, and 10.5 through FP1 allow remote authenticated users to execute DML statements by leveraging EXPLAIN authority. CWE-264
Permissions, Privileges, and Access Controls
CVE-2013-4033 2024-11-21 10:54 2013-08-28 Show GitHub Exploit DB Packet Storm
290000 - ibm websphere_application_server Cross-site scripting (XSS) vulnerability in the Administrative console in IBM WebSphere Application Server (WAS) 6.1 before 6.1.0.47, 7.0 before 7.0.0.31, 8.0 before 8.0.0.7, and 8.5 before 8.5.5.1 a… CWE-79
Cross-site Scripting
CVE-2013-4005 2024-11-21 10:54 2013-08-22 Show GitHub Exploit DB Packet Storm