Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":July 1, 2026, 4:01 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
202951	5.5	警告 Local	Libav	-	Libav の get_bits.h の get_vlc2 関数におけるサービス運用妨害 (DoS) の脆弱性	CWE-476 NULL ポインタデリファレンス	CVE-2016-8675	2017-03-6 16:55	2016-10-15	Show	GitHub Exploit DB Packet Storm

202952	5.5	警告 Local	Libav	-	Libav の rnd_template.c の ff_put_pixels8_xy2_mmx 関数におけるサービス運用妨害 (DoS) の脆弱性	CWE-476 NULL ポインタデリファレンス	CVE-2016-7477	2017-03-6 16:55	2016-09-20	Show	GitHub Exploit DB Packet Storm

202953	7.8	重要 Local	Debian openSUSE project GraphicsMagick	-	GraphicsMagick の magick/memory.c の MagickMalloc 関数における脆弱性	CWE-119 バッファエラー	CVE-2016-8684	2017-03-6 16:50	2016-09-10	Show	GitHub Exploit DB Packet Storm

202954	7.8	重要 Local	Debian openSUSE project GraphicsMagick	-	GraphicsMagick の coders/pcx.c の ReadPCXImage 関数における脆弱性	CWE-119 バッファエラー	CVE-2016-8683	2017-03-6 16:50	2016-09-10	Show	GitHub Exploit DB Packet Storm

202955	7.5	重要 Network	Debian openSUSE project GraphicsMagick	-	GraphicsMagick の coders/sct.c の ReadSCTImage 関数におけるサービス運用妨害 (DoS) の脆弱性	CWE-125 境界外読み取り	CVE-2016-8682	2017-03-6 16:50	2016-09-10	Show	GitHub Exploit DB Packet Storm

202956	6.1	警告 Network	WSO2	-	WSO2 SOA Enablement Server for Java におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2016-4327	2017-03-6 16:32	2016-04-8	Show	GitHub Exploit DB Packet Storm

202957	6.1	警告 Network	WSO2	-	WSO2 Carbon におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2016-4316	2017-03-6 16:32	2016-08-12	Show	GitHub Exploit DB Packet Storm

202958	5.7	警告 Network	WSO2	-	WSO2 Carbon におけるクロスサイトリクエストフォージェリの脆弱性	CWE-352 同一生成元ポリシー違反	CVE-2016-4315	2017-03-6 16:32	2016-08-12	Show	GitHub Exploit DB Packet Storm

202959	4.9	警告 Network	WSO2	-	WSO2 Carbon の LogViewer Admin Service におけるディレクトリトラバーサルの脆弱性	CWE-22 パス・トラバーサル	CVE-2016-4314	2017-03-6 16:32	2016-08-12	Show	GitHub Exploit DB Packet Storm

202960	7.5	重要 Network	suckless.org Fedora Project	-	slock における画面ロックを回避される脆弱性	CWE-476 NULL ポインタデリファレンス	CVE-2016-6866	2017-03-6 16:31	2016-08-30	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:July 1, 2026, 4:27 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
292321	-		louis_jimenez	custom_meta	Cross-site scripting (XSS) vulnerability in the Custom Meta module 6.x-1.x before 6.x-1.2 and 7.x-1.x before 7.x-1.3 for Drupal allows remote authenticated users with the "administer custom meta sett…	CWE-79 Cross-site Scripting	CVE-2014-4506	2024-11-21 11:10	2014-06-20	Show	GitHub Exploit DB Packet Storm

292322	-		roger_padilla_camacho	easy_breadcrumb	Cross-site scripting (XSS) vulnerability in the Easy Breadcrumb module 7.x-2.x before 7.x-2.10 for Drupal allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.	CWE-79 Cross-site Scripting	CVE-2014-4505	2024-11-21 11:10	2014-06-20	Show	GitHub Exploit DB Packet Storm

292323	7.5	HIGH Network	zte	zxv10_w300_firmware	ZTE ZXV10 W300 router with firmware W300V1.0.0a_ZRD_LK stores sensitive information under the web root with insufficient access control, which allows remote attackers to read backup files via a direc…	CWE-200 Information Exposure	CVE-2014-4019	2024-11-21 11:09	2020-02-21	Show	GitHub Exploit DB Packet Storm

292324	9.8	CRITICAL Network	freebsd	freebsd	OpenPAM Nummularia 9.2 through 10.0 does not properly handle the error reported when an include directive refers to a policy that does not exist, which causes the loaded policy chain to no be discard…	CWE-287 Improper Authentication	CVE-2014-3879	2024-11-21 11:09	2020-02-19	Show	GitHub Exploit DB Packet Storm

292325	9.1	CRITICAL Network	bssys	rbs_bs-client._retail_client	A Two-Factor Authentication Bypass Vulnerability exists in BS-Client Private Client 2.4 and 2.5 via an XML request that neglects the use of ADPswID and AD parameters, which could let a malicious user…	CWE-287 Improper Authentication	CVE-2014-4198	2024-11-21 11:09	2020-02-14	Show	GitHub Exploit DB Packet Storm

292326	9.8	CRITICAL Network	freereprintables	articlefr	A Privilege Escalation Vulnerability exists in Free Reprintables ArticleFR 11.06.2014 due to insufficient access restrictions in the data.php script, which could let a remote malicious user obtain ac…	CWE-269 Improper Privilege Management	CVE-2014-4170	2024-11-21 11:09	2020-02-14	Show	GitHub Exploit DB Packet Storm

292327	9.3	CRITICAL Network	netgear	cg3100_firmware	A vulnerability exists in Netgear CG3100 devices before 3.9.2421.13.mp3 V0027 via an embed malicious script in an unspecified page, which could let a malicious user obtain sensitive information.	CWE-79 Cross-site Scripting	CVE-2014-3919	2024-11-21 11:09	2020-02-14	Show	GitHub Exploit DB Packet Storm

292328	7.8	HIGH Local	xilisoft	video_converter	Xilisoft Video Converter Ultimate 7.8.1 build-20140505 has a DLL Hijacking vulnerability	CWE-426 Untrusted Search Path	CVE-2014-3860	2024-11-21 11:09	2020-02-13	Show	GitHub Exploit DB Packet Storm

292329	8.8	HIGH Network	zeuscart	zeuscart	Multiple SQL injection vulnerabilities in ZeusCart 4.x.	CWE-89 SQL Injection	CVE-2014-3868	2024-11-21 11:09	2020-02-1	Show	GitHub Exploit DB Packet Storm

292330	7.5	HIGH Network	bytemark	symbiosis	Bytemark Symbiosis allows remote attackers to cause a denial of service via a crafted username, which triggers the firewall to blacklist the IP.	NVD-CWE-noinfo	CVE-2014-3979	2024-11-21 11:09	2020-01-28	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed