Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 2, 2026, 10 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
202751 7.8 重要
Local
マイクロソフト - 複数の Microsoft Windows 製品のカーネルモードドライバにおける権限昇格の脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2016-3349 2016-09-15 13:42 2016-09-13 Show GitHub Exploit DB Packet Storm
202752 7.8 重要
Local
マイクロソフト - 複数の Microsoft Windows 製品のカーネルモードドライバにおける権限昇格の脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2016-3348 2016-09-15 13:42 2016-09-13 Show GitHub Exploit DB Packet Storm
202753 7.5 重要
Network
マイクロソフト - Microsoft Edge の Chakra JavaScript エンジンにおける任意のコードを実行される脆弱性 CWE-119
バッファエラー
CVE-2016-3377 2016-09-15 12:30 2016-09-13 Show GitHub Exploit DB Packet Storm
202754 7.5 重要
Network
マイクロソフト - Microsoft Edge の Chakra JavaScript エンジンにおける任意のコードを実行される脆弱性 CWE-119
バッファエラー
CVE-2016-3350 2016-09-15 12:30 2016-09-13 Show GitHub Exploit DB Packet Storm
202755 7.5 重要
Network
マイクロソフト - Microsoft Edge における任意のコードを実行される脆弱性 CWE-119
バッファエラー
CVE-2016-3330 2016-09-15 12:30 2016-09-13 Show GitHub Exploit DB Packet Storm
202756 7.5 重要
Network
マイクロソフト - Microsoft Edge における任意のコードを実行される脆弱性 CWE-119
バッファエラー
CVE-2016-3294 2016-09-15 12:30 2016-09-13 Show GitHub Exploit DB Packet Storm
202757 8.3 重要
Network
マイクロソフト - Microsoft Internet Explorer 9 から 11 におけるアクセス制限を回避される脆弱性 CWE-Other
その他
CVE-2016-3353 2016-09-15 11:39 2016-09-13 Show GitHub Exploit DB Packet Storm
202758 8.8 重要
Network
マイクロソフト - Microsoft Internet Explorer 9 から 11 における任意のコードを実行される脆弱性 CWE-noinfo
情報不足
CVE-2016-3324 2016-09-15 11:39 2016-09-13 Show GitHub Exploit DB Packet Storm
202759 5 警告
Network
マイクロソフト - Microsoft Internet Explorer 10 および 11 におけるサンドボックス保護メカニズムを回避される脆弱性 CWE-20
不適切な入力確認
CVE-2016-3292 2016-09-15 11:39 2016-09-13 Show GitHub Exploit DB Packet Storm
202760 5.3 警告
Network
日立 - JP1/Automatic Job Management System 3 における脆弱性 CWE-noinfo
情報不足
- 2016-09-14 18:15 2015-12-7 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 2, 2026, 4:18 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
291931 - libtiff libtiff Multiple buffer overflows in libtiff before 4.0.3 allow remote attackers to cause a denial of service (out-of-bounds write) via a crafted (1) extension block in a GIF image or (2) GIF raster image to… CWE-119
Incorrect Access of Indexable Resource ('Range Error') 
CVE-2013-4231 2024-11-21 10:55 2014-01-20 Show GitHub Exploit DB Packet Storm
291932 - apache santuario_xml_security_for_java Apache Santuario XML Security for Java before 1.5.6, when applying Transforms, allows remote attackers to cause a denial of service (memory consumption) via crafted Document Type Definitions (DTDs), … CWE-399
 Resource Management Errors
CVE-2013-4517 2024-11-21 10:55 2014-01-11 Show GitHub Exploit DB Packet Storm
291933 - mantisbt mantisbt Cross-site scripting (XSS) vulnerability in account_sponsor_page.php in MantisBT 1.0.0 through 1.2.15 allows remote authenticated users to inject arbitrary web script or HTML via a project name. CWE-79
Cross-site Scripting
CVE-2013-4460 2024-11-21 10:55 2014-01-11 Show GitHub Exploit DB Packet Storm
291934 - openssl openssl The ssl3_take_mac function in ssl/s3_both.c in OpenSSL 1.0.1 before 1.0.1f allows remote TLS servers to cause a denial of service (NULL pointer dereference and application crash) via a crafted Next P… CWE-20
 Improper Input Validation 
CVE-2013-4353 2024-11-21 10:55 2014-01-9 Show GitHub Exploit DB Packet Storm
291935 - libreswan libreswan Libreswan 3.6 allows remote attackers to cause a denial of service (crash) via a small length value and (1) no version or (2) an invalid major number in an IKE packet. CWE-189
Numeric Errors
CVE-2013-4564 2024-11-21 10:55 2014-01-8 Show GitHub Exploit DB Packet Storm
291936 - xen xen Xen 3.0.3 through 4.1.x (possibly 4.1.6.1), 4.2.x (possibly 4.2.3), and 4.3.x (possibly 4.3.1) does not properly prevent access to hypercalls, which allows local guest users to gain privileges via a … CWE-264
Permissions, Privileges, and Access Controls
CVE-2013-4554 2024-11-21 10:55 2013-12-25 Show GitHub Exploit DB Packet Storm
291937 - xen xen The XEN_DOMCTL_getmemlist hypercall in Xen 3.4.x through 4.3.x (possibly 4.3.1) does not always obtain the page_alloc_lock and mm_rwlock in the same order, which allows local guest administrators to … CWE-119
Incorrect Access of Indexable Resource ('Range Error') 
CVE-2013-4553 2024-11-21 10:55 2013-12-25 Show GitHub Exploit DB Packet Storm
291938 - redhat jboss_operations_network Red Hat JBoss Operations Network 3.1.2 uses world-readable permissions for the (1) server and (2) agent configuration files, which allows local users to obtain authentication credentials and other un… CWE-264
Permissions, Privileges, and Access Controls
CVE-2013-4452 2024-11-21 10:55 2013-12-25 Show GitHub Exploit DB Packet Storm
291939 - ffmpeg ffmpeg libavcodec/h264.c in FFmpeg before 0.11.4 allows remote attackers to cause a denial of service (crash) via vectors related to alternating bit depths in H.264 data. NVD-CWE-noinfo
CVE-2013-4358 2024-11-21 10:55 2013-12-25 Show GitHub Exploit DB Packet Storm
291940 - fedoraproject
duckcorp
fedora
bip
Bip before 0.8.9, when running as a daemon, writes SSL handshake errors to an unexpected file descriptor that was previously associated with stderr before stderr has been closed, which allows remote … CWE-310
Cryptographic Issues
CVE-2013-4550 2024-11-21 10:55 2013-12-25 Show GitHub Exploit DB Packet Storm