Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 16, 2026, 10:01 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
203031 7.2 危険 Linux - Linux Kernel の fs/pipe.c の pipe_read および pipe_write の実装におけるサービス運用妨害 (DoS) の脆弱性 CWE-Other
その他
CVE-2015-1805 2016-05-31 17:54 2015-03-17 Show GitHub Exploit DB Packet Storm
203032 5.4 警告
Network
株式会社ロックオン - EC-CUBE におけるアクセス制限不備の脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2016-1200 2016-05-31 17:38 2016-04-26 Show GitHub Exploit DB Packet Storm
203033 5.3 警告
Network
株式会社ロックオン - EC-CUBE におけるアクセス制限不備の脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2016-1199 2016-05-31 17:38 2016-04-26 Show GitHub Exploit DB Packet Storm
203034 4.3 警告
Network
株式会社ロックオン - EC-CUBE におけるクロスサイトリクエストフォージェリの脆弱性 CWE-352
同一生成元ポリシー違反
CVE-2016-1201 2016-05-31 17:37 2016-04-26 Show GitHub Exploit DB Packet Storm
203035 4.3 警告
Network
Google - Google Chrome の拡張サブシステムにおける同一生成元ポリシーを回避される脆弱性 CWE-200
CWE-Other
CVE-2016-1658 2016-05-31 17:30 2016-04-13 Show GitHub Exploit DB Packet Storm
203036 8.8 重要
Network
Google
Canonical
- Google Chrome におけるサービス運用妨害 (DoS) の脆弱性 CWE-Other
その他
CVE-2016-1655 2016-05-31 17:29 2016-04-13 Show GitHub Exploit DB Packet Storm
203037 8.8 重要
Adjacent
Lemur Vehicle Monitors - BlueDriver LSB2 に認証なしで Bluetooth アクセスが可能な問題 CWE-Other
CWE-Other
CVE-2016-2354 2016-05-31 17:28 2016-04-7 Show GitHub Exploit DB Packet Storm
203038 9.8 緊急
Network
ヒューレット・パッカード・エンタープライズ - HPE P9000 CVAE ソフトウェアおよび XP7 CVAE における任意のコマンドを実行される脆弱性 CWE-Other
その他
CVE-2016-2003 2016-05-31 17:25 2016-04-21 Show GitHub Exploit DB Packet Storm
203039 5.1 警告
Local
マカフィー - Windows 上で稼動する複数の McAfee 製品の McAfee VirusScan Console における自己保護ルールを回避される脆弱性 CWE-Other
その他
CVE-2016-3984 2016-05-31 17:19 2016-02-25 Show GitHub Exploit DB Packet Storm
203040 4 警告 レッドハット
MySQL AB
openSUSE project
オラクル
- Oracle MySQL の MySQL Server における Server : DML に関する脆弱性 CWE-noinfo
情報不足
CVE-2015-4858 2016-05-31 17:06 2015-10-20 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 16, 2026, 4 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
290391 - gimp
redhat
gimp
enterprise_linux
Heap-based buffer overflow in the read_xwd_cols function in file-xwd.c in the X Window Dump (XWD) plug-in in GIMP 2.6.9 and earlier allows remote attackers to cause a denial of service (crash) and po… CWE-787
 Out-of-bounds Write
CVE-2013-1978 2024-11-21 10:50 2013-12-13 Show GitHub Exploit DB Packet Storm
290392 - gimp
redhat
gimp
enterprise_linux
Integer overflow in the load_image function in file-xwd.c in the X Window Dump (XWD) plug-in in GIMP 2.6.9 and earlier, when used with glib before 2.24, allows remote attackers to cause a denial of s… CWE-190
 Integer Overflow or Wraparound
CVE-2013-1913 2024-11-21 10:50 2013-12-13 Show GitHub Exploit DB Packet Storm
290393 - fedoraproject
janrain
fedora
ruby-openid
The ruby-openid gem before 2.2.2 for Ruby allows remote OpenID providers to cause a denial of service (CPU consumption) via (1) a large XRDS document or (2) an XML Entity Expansion (XEE) attack. CWE-399
 Resource Management Errors
CVE-2013-1812 2024-11-21 10:50 2013-12-13 Show GitHub Exploit DB Packet Storm
290394 - autotrace_project autotrace Integer underflow in the input_bmp_reader function in input-bmp.c in AutoTrace 0.31.1 allows context-dependent attackers to have an unspecified impact via a small value in the biSize field in the hea… CWE-189
Numeric Errors
CVE-2013-1953 2024-11-21 10:50 2013-12-10 Show GitHub Exploit DB Packet Storm
290395 - redhat openstack nagios.upgrade_to_v3.sh, as distributed by Red Hat and possibly others for Nagios Core 3.4.4, 3.5.1, and earlier, allows local users to overwrite arbitrary files via a symlink attack on a temporary n… CWE-59
Link Following
CVE-2013-2029 2024-11-21 10:50 2013-11-24 Show GitHub Exploit DB Packet Storm
290396 - redhat
t-mobile
busybox
enterprise_linux
tm-ac1900
busybox
util-linux/mdev.c in BusyBox before 1.21.0 uses 0777 permissions for parent directories when creating nested directories under /dev/, which allows local users to have unknown impact and attack vector… CWE-264
Permissions, Privileges, and Access Controls
CVE-2013-1813 2024-11-21 10:50 2013-11-23 Show GitHub Exploit DB Packet Storm
290397 - mozilla network_security_services Integer overflow in Mozilla Network Security Services (NSS) 3.15 before 3.15.3 allows remote attackers to cause a denial of service or possibly have unspecified other impact via a large size value. CWE-189
Numeric Errors
CVE-2013-1741 2024-11-21 10:50 2013-11-18 Show GitHub Exploit DB Packet Storm
290398 - openvpn
opensuse
openvpn
openvpn_access_server
opensuse
The openvpn_decrypt function in crypto.c in OpenVPN 2.3.0 and earlier, when running in UDP mode, allows remote attackers to obtain sensitive information via a timing attack involving an HMAC comparis… CWE-200
Information Exposure
CVE-2013-2061 2024-11-21 10:50 2013-11-18 Show GitHub Exploit DB Packet Storm
290399 - mediawiki
fedoraproject
gentoo
mediawiki
fedora
linux
MediaWiki before 1.19.6 and 1.20.x before 1.20.5 does not allow extensions to prevent password changes without using both Special:PasswordReset and Special:ChangePassword, which allows remote attacke… CWE-264
Permissions, Privileges, and Access Controls
CVE-2013-2032 2024-11-21 10:50 2013-11-18 Show GitHub Exploit DB Packet Storm
290400 - gentoo
mediawiki
linux
mediawiki
MediaWiki before 1.19.6 and 1.20.x before 1.20.5 allows remote attackers to conduct cross-site scripting (XSS) attacks, as demonstrated by a CDATA section containing valid UTF-7 encoded sequences in … CWE-79
Cross-site Scripting
CVE-2013-2031 2024-11-21 10:50 2013-11-18 Show GitHub Exploit DB Packet Storm