Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 27, 2026, 6 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
202741 4.9 警告
Network
F5 Networks - F5 BIG-IP システムの Configuration utility における Access Policy Manager のアクセスログを読まれる脆弱性 CWE-200
情報漏えい
CVE-2016-1497 2016-08-29 15:22 2016-08-10 Show GitHub Exploit DB Packet Storm
202742 8.8 重要
Network
openSUSE project
Roundcube.net
- Roundcube Webmail におけるクロスサイトリクエストフォージェリの脆弱性 CWE-352
同一生成元ポリシー違反
CVE-2016-4069 2016-08-29 12:27 2016-04-20 Show GitHub Exploit DB Packet Storm
202743 5.9 警告
Network
カスペルスキー - Kaspersky Safe Browser iOS における重要な情報を取得される脆弱性 CWE-200
情報漏えい
CVE-2016-6231 2016-08-29 12:14 2016-07-28 Show GitHub Exploit DB Packet Storm
202744 8.8 重要
Network
レッドハット - Red Hat CloudForms の Web UI における任意のコードを実行される脆弱性 CWE-Other
その他
CVE-2016-5383 2016-08-29 11:49 2016-08-18 Show GitHub Exploit DB Packet Storm
202745 7.8 重要
Local
シスコシステムズ - Cisco AnyConnect Secure Mobility Client における権限を取得される脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2016-6369 2016-08-29 11:40 2016-08-24 Show GitHub Exploit DB Packet Storm
202746 5.3 警告
Network
日立
オラクル
- 複数の Oracle Java 製品における JAXP に関する脆弱性 CWE-noinfo
情報不足
CVE-2016-3425 2016-08-26 18:02 2016-04-19 Show GitHub Exploit DB Packet Storm
202747 9.6 緊急
Network
日立
オラクル
- Oracle Java SE および Java SE Embedded における Hotspot に関する脆弱性 CWE-noinfo
情報不足
CVE-2016-0687 2016-08-26 18:02 2016-04-19 Show GitHub Exploit DB Packet Storm
202748 8.1 重要
Network
SUSE
IBM
レッドハット
- IBM SDK, Java Technology Edition の com.ibm.CORBA.iiop.ClientDelegate クラスにおける setSecurityManager を呼び出される脆弱性 CWE-20
不適切な入力確認
CVE-2016-0363 2016-08-26 17:56 2016-04-26 Show GitHub Exploit DB Packet Storm
202749 8.1 重要
Network
SUSE
IBM
レッドハット
- IBM SDK, Java Technology Edition の com.ibm.rmi.io.SunSerializableFactory クラスにおけるサンドボックス保護メカニズムを回避される脆弱性 CWE-Other
その他
CVE-2016-0376 2016-08-26 17:56 2016-04-26 Show GitHub Exploit DB Packet Storm
202750 5.6 警告
Network
SUSE
IBM
レッドハット
- IBM SDK, Java Technology Edition の Java Virtual Machine におけるバッファオーバーフローの脆弱性 CWE-119
バッファエラー
CVE-2016-0264 2016-08-26 17:56 2016-04-21 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 28, 2026, 4:16 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
291671 - trivantis coursemill_learning_management_system Coursemill Learning Management System (LMS) 6.6 allows remote authenticated users to gain privileges via a modified userid value to unspecified functions. CWE-20
 Improper Input Validation 
CVE-2013-3600 2024-11-21 10:53 2013-09-6 Show GitHub Exploit DB Packet Storm
291672 - trivantis coursemill_learning_management_system userlogin.jsp in Coursemill Learning Management System (LMS) 6.6 and 6.8 allows remote attackers to gain privileges via a modified user-role value to home.html. CWE-20
 Improper Input Validation 
CVE-2013-3599 2024-11-21 10:53 2013-09-6 Show GitHub Exploit DB Packet Storm
291673 - emc rsa_archer_egrc Open redirect vulnerability in EMC RSA Archer GRC 5.x before 5.4 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via unspecified vectors. CWE-20
 Improper Input Validation 
CVE-2013-3277 2024-11-21 10:53 2013-09-5 Show GitHub Exploit DB Packet Storm
291674 - emc rsa_archer_egrc EMC RSA Archer GRC 5.x before 5.4 allows remote authenticated users to bypass intended access restrictions and complete a login by leveraging a deactivated account. CWE-264
Permissions, Privileges, and Access Controls
CVE-2013-3276 2024-11-21 10:53 2013-09-5 Show GitHub Exploit DB Packet Storm
291675 - open-xchange open-xchange_appsuite
open-xchange_server
Multiple cross-site scripting (XSS) vulnerabilities in Open-Xchange AppSuite and Server before 6.20.7 rev18, 6.22.0 before rev16, 6.22.1 before rev19, 7.0.1 before rev7, 7.0.2 before rev11, and 7.2.0… CWE-79
Cross-site Scripting
CVE-2013-3106 2024-11-21 10:53 2013-09-5 Show GitHub Exploit DB Packet Storm
291676 - sharethis sharethis Cross-site request forgery (CSRF) vulnerability in the ShareThis plugin before 7.0.6 for WordPress allows remote attackers to hijack the authentication of administrators for requests that modify this… CWE-352
 Origin Validation Error
CVE-2013-3479 2024-11-21 10:53 2013-09-5 Show GitHub Exploit DB Packet Storm
291677 - cisco mobility_services_engine Cisco Mobility Services Engine does not properly set up the Oracle SSL service, which allows remote attackers to obtain an unauthenticated session to the database-replication port, and consequently o… CWE-200
Information Exposure
CVE-2013-3469 2024-11-21 10:53 2013-09-4 Show GitHub Exploit DB Packet Storm
291678 - lulusoftware soda_pdf Multiple untrusted search path vulnerabilities in Soda PDF 5.1.183.10520 allow local users to gain privileges via a Trojan horse (1) dwmapi.dll or (2) api-ms-win-core-localregistry-l1-1-0.dll file in… NVD-CWE-Other
CVE-2013-3485 2024-11-21 10:53 2013-08-31 Show GitHub Exploit DB Packet Storm
291679 - cisco wireless_lan_controller The Web Administrator Interface on Cisco Wireless LAN Controller (WLC) devices allows remote authenticated users to cause a denial of service (device crash) by leveraging membership in the Full Manag… CWE-119
Incorrect Access of Indexable Resource ('Range Error') 
CVE-2013-3474 2024-11-21 10:53 2013-08-31 Show GitHub Exploit DB Packet Storm
291680 - cisco ios_xr The RIP process in Cisco IOS XR allows remote attackers to cause a denial of service (process crash) via a crafted version-2 RIP packet, aka Bug ID CSCue46731. CWE-20
 Improper Input Validation 
CVE-2013-3470 2024-11-21 10:53 2013-08-30 Show GitHub Exploit DB Packet Storm