Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 25, 2026, 2:01 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
202801 8.8 重要
Network 		シスコシステムズ - Cisco Firepower Management Center および ASA 5500-X Series with FirePOWER Services の Web ベース GUI における root 権限で任意のコマンドを実行される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2016-1457 2016-08-22 16:24 2016-08-17 Show GitHub Exploit DB Packet Storm
202802 8.8 重要
Network 		シスコシステムズ - Cisco Application Policy Infrastructure Controller エンタープライズ モジュールにおける root 権限で任意のコマンドを実行される脆弱性 CWE-20
不適切な入力確認 		CVE-2016-1365 2016-08-22 16:24 2016-08-17 Show GitHub Exploit DB Packet Storm
202803 5.8 警告
Local 		SAP - SAP SAPCAR における任意のファイルのパーミッションを変更される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2016-5847 2016-08-22 15:33 2016-08-10 Show GitHub Exploit DB Packet Storm
202804 5.5 警告
Local 		SAP - SAP SAPCAR におけるサービス運用妨害 (DoS) の脆弱性 CWE-Other
その他 		CVE-2016-5845 2016-08-22 15:33 2016-08-10 Show GitHub Exploit DB Packet Storm
202805 7.8 重要
Local 		Debian
Fedora Project
fontconfig project		 - fontconfig における任意の free コールを誘発される脆弱性 CWE-Other
その他 		CVE-2016-5384 2016-08-19 17:58 2016-08-5 Show GitHub Exploit DB Packet Storm
202806 7.8 重要
Local 		LINE株式会社 - LINE PC版（Windows版）における DLL 読み込みに関する脆弱性 CWE-Other
その他 		CVE-2016-4831 2016-08-19 17:42 2016-07-8 Show GitHub Exploit DB Packet Storm
202807 6.2 警告
Local 		IBM - IBM Tivoli Storage Manager および Tivoli Storage FlashCopy Manager における平文の SQL サーバのパスワードを取得される脆弱性 CWE-200
情報漏えい 		CVE-2016-3059 2016-08-19 16:55 2016-07-25 Show GitHub Exploit DB Packet Storm
202808 6.5 警告
Network 		IBM - IBM WebSphere Portal 用 Connections Portlets コンポーネントにおけるオープンリダイレクトの脆弱性 CWE-Other
その他 		CVE-2016-2989 2016-08-19 16:55 2016-08-2 Show GitHub Exploit DB Packet Storm
202809 3.7 低
Network 		IBM - IBM WebSphere Application Server におけるサービス運用妨害 (DoS) の脆弱性 CWE-Other
その他 		CVE-2016-2960 2016-08-19 16:55 2016-08-1 Show GitHub Exploit DB Packet Storm
202810 5.4 警告
Network 		IBM - IBM WebSphere Portal におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2016-2925 2016-08-19 16:55 2016-07-26 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 25, 2026, 4:01 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
289841 - ibm lotus_domino
lotus_inotes 		Cross-site scripting (XSS) vulnerability in iNotes in IBM Domino 8.5.x before 8.5.3 FP6 and 9.0.x before 9.0.1 allows remote attackers to inject arbitrary web script or HTML via active content in an … CWE-79
Cross-site Scripting 		CVE-2013-4063 2024-11-21 10:54 2013-12-21 Show GitHub Exploit DB Packet Storm
289842 - ibm spss_collaboration_and_deployment_services Open redirect vulnerability in IBM SPSS Collaboration and Deployment Services 4.2.1 before 4.2.1.3 IF3 and 5.0 before FP3 allows remote attackers to redirect users to arbitrary web sites and conduct … CWE-20
 Improper Input Validation  		CVE-2013-4046 2024-11-21 10:54 2013-12-21 Show GitHub Exploit DB Packet Storm
289843 - ibm spss_collaboration_and_deployment_services Cross-site scripting (XSS) vulnerability in the Portal application in IBM SPSS Collaboration and Deployment Services 4.2.1 before 4.2.1.3 IF3 and 5.0 before FP3 allows remote attackers to inject arbi… CWE-79
Cross-site Scripting 		CVE-2013-4045 2024-11-21 10:54 2013-12-21 Show GitHub Exploit DB Packet Storm
289844 - ibm spss_collaboration_and_deployment_services IBM SPSS Collaboration and Deployment Services 4.2.1 before 4.2.1.3 IF3 and 5.0 before FP3 allows remote authenticated users to read application log files via a direct HTTP request. CWE-200
Information Exposure 		CVE-2013-4044 2024-11-21 10:54 2013-12-21 Show GitHub Exploit DB Packet Storm
289845 - ibm cognos_command_center Session fixation vulnerability in IBM Cognos Command Center before 10.2 allows remote attackers to hijack web sessions via an authorization cookie. CWE-287
Improper Authentication 		CVE-2013-4001 2024-11-21 10:54 2013-12-15 Show GitHub Exploit DB Packet Storm
289846 - ibm cognos_command_center Multiple cross-site request forgery (CSRF) vulnerabilities in IBM Cognos Command Center before 10.2 allow remote attackers to hijack the authentication of administrators for requests that (1) start o… CWE-352
 Origin Validation Error 		CVE-2013-4000 2024-11-21 10:54 2013-12-15 Show GitHub Exploit DB Packet Storm
289847 - microsoft windows_server_2008
windows_rt
windows_8
windows_7
windows_vista
windows_server_2012 		portcls.sys in the kernel-mode drivers in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows Server 2012, and Windows RT allows local users to gain pri… CWE-119
Incorrect Access of Indexable Resource ('Range Error')  		CVE-2013-3907 2024-11-21 10:54 2013-12-11 Show GitHub Exploit DB Packet Storm
289848 - microsoft windows_rt
windows_8
windows_rt_8.1
windows_server_2012 		Array index error in win32k.sys in the kernel-mode drivers in Microsoft Windows 8, Windows Server 2012 Gold and R2, and Windows RT Gold and 8.1 allows local users to cause a denial of service (reboot… CWE-20
 Improper Input Validation  		CVE-2013-3903 2024-11-21 10:54 2013-12-11 Show GitHub Exploit DB Packet Storm
289849 - microsoft windows_7 Use-after-free vulnerability in win32k.sys in the kernel-mode drivers in Microsoft Windows Server 2008 R2 SP1 and Windows 7 SP1 on 64-bit platforms allows local users to gain privileges via a crafted… CWE-399
 Resource Management Errors 		CVE-2013-3902 2024-11-21 10:54 2013-12-11 Show GitHub Exploit DB Packet Storm
289850 - microsoft windows_xp
windows_server_2003 		win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3 and Server 2003 SP2 does not properly validate addresses, which allows local users to gain privileges via a crafted applicati… CWE-20
 Improper Input Validation  		CVE-2013-3899 2024-11-21 10:54 2013-12-11 Show GitHub Exploit DB Packet Storm