Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 15, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
202791	7.5	重要 Network	BMC Software	-	Linux および UNIX 上で稼動する BMC BladeLogic Server Automation の RSCD エージェントの RPC API における認証を回避される脆弱性	CWE-Other その他	CVE-2016-1543	2016-06-17 15:53	2016-04-25	Show	GitHub Exploit DB Packet Storm

202792	7.5	重要 Network	BMC Software	-	Linux および UNIX 上で稼動する BMC BladeLogic Server Automation の RSCD エージェントの RPC API における認証を回避される脆弱性	CWE-20 不適切な入力確認	CVE-2016-1542	2016-06-17 15:53	2016-04-25	Show	GitHub Exploit DB Packet Storm

202793	5	警告 Local	マイクロソフト	-	複数の Microsoft Windows 製品の Windows Search コンポーネントにおけるサービス運用妨害 (DoS) の脆弱性	CWE-20 不適切な入力確認	CVE-2016-3230	2016-06-17 14:56	2016-06-14	Show	GitHub Exploit DB Packet Storm

202794	6.5	警告 Network	マイクロソフト	-	Microsoft Windows Server 2008 および 2012 の Active Directory におけるサービス運用妨害 (DoS) の脆弱性	CWE-Other その他	CVE-2016-3226	2016-06-17 14:56	2016-06-14	Show	GitHub Exploit DB Packet Storm

202795	7.8	重要 Local	マイクロソフト	-	Windows 診断ハブ標準コレクターサービスにおける権限昇格の脆弱性	CWE-Other その他	CVE-2016-3231	2016-06-17 14:56	2016-06-14	Show	GitHub Exploit DB Packet Storm

202796	8.8	重要 Network	マイクロソフト	-	Microsoft Windows Server 2008 および 2012 における任意のコードを実行される脆弱性	CWE-20 不適切な入力確認	CVE-2016-3228	2016-06-17 14:56	2016-06-14	Show	GitHub Exploit DB Packet Storm

202797	7.8	重要 Local	マイクロソフト	-	複数の Microsoft Windows 製品の SMB サーバコンポーネントにおける権限昇格の脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2016-3225	2016-06-17 14:56	2016-06-14	Show	GitHub Exploit DB Packet Storm

202798	7.8	重要 Local	マイクロソフト	-	複数の Microsoft Windows 製品の Adobe Type Manager フォントドライバの atmfd.dll における権限昇格の脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2016-3220	2016-06-17 14:03	2016-06-14	Show	GitHub Exploit DB Packet Storm

202799	7.8	重要 Local	マイクロソフト	-	Microsoft Windows 10 のカーネルモードドライバにおける権限昇格の脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2016-3219	2016-06-17 14:03	2016-06-14	Show	GitHub Exploit DB Packet Storm

202800	4.3	警告 Network	マイクロソフト	-	複数の Microsoft Windows 製品の Graphics コンポーネントの GDI32.dll における ASLR 保護メカニズムを回避される脆弱性	CWE-200 情報漏えい	CVE-2016-3216	2016-06-17 14:03	2016-06-14	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 15, 2026, 4:28 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
290281	9.8	CRITICAL Network	starwindsoftware	iscsi_san	A flaw was found in StarWind iSCSI target. StarWind service does not limit client connections and allocates memory on each connection attempt. An attacker could create a denial of service state by tr…	CWE-400 Uncontrolled Resource Consumption	CVE-2013-20004	2024-11-21 10:50	2022-02-7	Show	GitHub Exploit DB Packet Storm

290282	8.3	HIGH Adjacent	silabs	zgm130s037hgn_firmware zm5202_firmware zm5101_firmware zgm2305a27hgn_firmware zgm230sb27hgn_firmware	Z-Wave devices from Sierra Designs (circa 2013) and Silicon Labs (using S0 security) may use a known, shared network key of all zeros, allowing an attacker within radio range to spoof Z-Wave traffic.	CWE-338 Use of Cryptographically Weak Pseudo-Random Number Generator (PRNG)	CVE-2013-20003	2024-11-21 10:50	2022-02-5	Show	GitHub Exploit DB Packet Storm

290283	9.8	CRITICAL Network	themify	framework	Elemin allows remote attackers to upload and execute arbitrary PHP code via the Themify framework (before 1.2.2) wp-content/themes/elemin/themify/themify-ajax.php file.	CWE-434 Unrestricted Upload of File with Dangerous Type	CVE-2013-20002	2024-11-21 10:50	2021-06-18	Show	GitHub Exploit DB Packet Storm

290284	7.5	HIGH Network	openzfs	openzfs	An issue was discovered in OpenZFS through 2.0.3. When an NFS share is exported to IPv6 addresses via the sharenfs feature, there is a silent failure to parse the IPv6 address data, and access is all…	NVD-CWE-noinfo	CVE-2013-20001	2024-11-21 10:50	2021-02-13	Show	GitHub Exploit DB Packet Storm

290285	7.5	HIGH Network	python	python	The gzip_decode function in the xmlrpc client library in Python 3.4 and earlier allows remote attackers to cause a denial of service (memory consumption) via a crafted HTTP request.	NVD-CWE-noinfo	CVE-2013-1753	2024-11-21 10:50	2020-03-12	Show	GitHub Exploit DB Packet Storm

290286	9.8	CRITICAL Network	berkeley	boinc	Multiple SQL injection vulnerabilities in BOINC allow remote attackers to execute arbitrary SQL commands via unspecified vectors.	CWE-89 SQL Injection	CVE-2013-2018	2024-11-21 10:50	2020-02-20	Show	GitHub Exploit DB Packet Storm

290287	7.5	HIGH Network	intel	82574l_controller_firmware	A denial of service vulnerability exists in some motherboard implementations of Intel e1000e/82574L network controller devices through 2013-02-06 where the device can be brought into a non-processing…	CWE-665 Improper Initialization	CVE-2013-1634	2024-11-21 10:50	2020-02-14	Show	GitHub Exploit DB Packet Storm

290288	6.1	MEDIUM Network	zimbra	zimbra	Zimbra 2013 has XSS in aspell.php	CWE-79 Cross-site Scripting	CVE-2013-1938	2024-11-21 10:50	2020-02-13	Show	GitHub Exploit DB Packet Storm

290289	7.5	HIGH Network	skill	commerce_skrill	Commerce Skrill (Formerly Moneybookers) has an Access bypass vulnerability in all versions prior to 7.x-1.2	NVD-CWE-Other	CVE-2013-1924	2024-11-21 10:50	2020-02-13	Show	GitHub Exploit DB Packet Storm

290290	9.8	CRITICAL Network	boldgrid automattic	w3_total_cache wp_super_cache	WordPress W3 Total Cache Plugin 0.9.2.8 has a Remote PHP Code Execution Vulnerability	CWE-74 Injection	CVE-2013-2010	2024-11-21 10:50	2020-02-13	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed