Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 15, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
203061	7.3	重要 Network	アップル PNG Development Group オラクル	-	libpng の png_set_PLTE 関数におけるバッファオーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2015-8472	2016-05-31 12:02	2015-12-3	Show	GitHub Exploit DB Packet Storm

203062	5	警告	Debian PNG Development Group Canonical	-	libpng の png.c の png_convert_to_rfc1123 関数における重要なプロセスメモリ情報を取得される脆弱性	CWE-200 情報漏えい	CVE-2015-7981	2016-05-31 12:02	2015-11-12	Show	GitHub Exploit DB Packet Storm

203063	7.5	危険	アップル PNG Development Group 日立オラクル	-	libpng の png_set_PLTE および png_get_PLTE 関数におけるバッファオーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2015-8126	2016-05-31 12:02	2015-11-12	Show	GitHub Exploit DB Packet Storm

203064	7.5	重要 Network	Debian Canonical オラクル rpcbind project	-	rpcbind の rpcb_svc_com.c の xprt_set_caller におけるサービス運用妨害 (DoS) の脆弱性	CWE-Other その他	CVE-2015-7236	2016-05-31 11:52	2015-09-23	Show	GitHub Exploit DB Packet Storm

203065	6.5	警告 Network	kernel.org オラクル	-	Linux-PAM の pam_unix モジュールの _unix_run_helper_binary 関数におけるユーザ名を列挙される脆弱性	CWE-200 情報漏えい	CVE-2015-3238	2016-05-31 11:52	2015-06-15	Show	GitHub Exploit DB Packet Storm

203066	7.5	重要 Network	Apache Software Foundation オラクル	-	Apache ActiveMQ の broker/TransportConnection.java の processControlCommand 関数におけるサービス運用妨害 (DoS) の脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2014-3576	2016-05-31 11:50	2014-08-14	Show	GitHub Exploit DB Packet Storm

203067	7.5	重要 Network	インテルオラクル	-	IPMI の仕様におけるパスワードハッシュを取得される脆弱性	CWE-255 証明書・パスワード管理	CVE-2013-4786	2016-05-31 11:49	2013-07-8	Show	GitHub Exploit DB Packet Storm

203068	5.3	警告 Network	Mort Bay Consulting オラクル	-	Jetty におけるサービス運用妨害 (CPU 資源の消費) の脆弱性	CWE-310 暗号の問題	CVE-2011-4461	2016-05-31 11:48	2011-12-30	Show	GitHub Exploit DB Packet Storm

203069	4.3	警告	OpenSSL Project オラクル	-	OpenSSL の ssl/s3_clnt.c におけるサービス運用妨害 (DoS) の脆弱性	CWE-362 競合状態	CVE-2015-3196	2016-05-31 11:02	2015-12-3	Show	GitHub Exploit DB Packet Storm

203070	5	警告	OpenSSL Project オラクル	-	OpenSSL の ssl/s3_clnt.c の ssl3_get_key_exchange 関数におけるサービス運用妨害 (DoS) の脆弱性	CWE-189 数値処理の問題	CVE-2015-1794	2016-05-31 11:02	2015-12-3	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 16, 2026, 4 a.m.

No	CVSS	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
290891	-	cisco	unified_contact_center_express_editor_software	The scripts editor in Cisco Unified Contact Center Express (aka Unified CCX) does not properly manage privileges for anonymous logins, which allows remote attackers to read arbitrary scripts by visit…	CWE-264 Permissions, Privileges, and Access Controls	CVE-2013-1214	2024-11-21 10:49	2013-04-24	Show	GitHub Exploit DB Packet Storm

290892	-	cisco	firewall_services_module adaptive_security_appliance_software	The time-based ACL implementation on Cisco Adaptive Security Appliances (ASA) devices, and in Cisco Firewall Services Module (FWSM), does not properly handle periodic statements for the time-range co…	CWE-264 Permissions, Privileges, and Access Controls	CVE-2013-1195	2024-11-21 10:49	2013-04-24	Show	GitHub Exploit DB Packet Storm

290893	-	mit opensuse fedoraproject redhat	kerberos_5 opensuse fedora enterprise_linux_server_aus enterprise_linux_desktop enterprise_linux_server enterprise_linux_workstation enterprise_linux_eus	The prep_reprocess_req function in do_tgs_req.c in the Key Distribution Center (KDC) in MIT Kerberos 5 (aka krb5) before 1.10.5 does not properly perform service-principal realm referral, which allow…	CWE-476 NULL Pointer Dereference	CVE-2013-1416	2024-11-21 10:49	2013-04-19	Show	GitHub Exploit DB Packet Storm

290894	-	cisco	adaptive_security_appliance_clientless_ssl_vpn adaptive_security_appliance_software adaptive_security_appliance	Race condition in the CIFS implementation in the rewriter module in the Clientless SSL VPN component on Cisco Adaptive Security Appliances (ASA) devices allows remote authenticated users to cause a d…	CWE-362 Race Condition	CVE-2013-1199	2024-11-21 10:49	2013-04-19	Show	GitHub Exploit DB Packet Storm

290895	-	cisco	adaptive_security_appliance_software adaptive_security_appliance	The ISAKMP implementation on Cisco Adaptive Security Appliances (ASA) devices generates different responses for IKE aggressive-mode messages depending on whether invalid VPN groups are specified, whi…	CWE-200 Information Exposure	CVE-2013-1194	2024-11-21 10:49	2013-04-19	Show	GitHub Exploit DB Packet Storm

290896	-	cisco	network_admission_control_manager_and_server_system_software	SQL injection vulnerability in Cisco Network Admission Control (NAC) Manager before 4.8.3.1 and 4.9.x before 4.9.2 allows remote attackers to execute arbitrary SQL commands via unspecified vectors, a…	CWE-89 SQL Injection	CVE-2013-1177	2024-11-21 10:49	2013-04-19	Show	GitHub Exploit DB Packet Storm

290897	-	cisco	telepresence_mcu_4500_series_software telepresence_mcu_4505 telepresence_mcu_4510 telepresence_mcu_4515 telepresence_mcu_4520 telepresence_mcu_4501_series_software telepresence_mcu_…	The DSP card on Cisco TelePresence MCU 4500 and 4501 devices before 4.3(2.30), TelePresence MCU MSE 8510 devices before 4.3(2.30), and TelePresence Server before 2.3(1.55) does not properly validate …	CWE-20 Improper Input Validation	CVE-2013-1176	2024-11-21 10:49	2013-04-19	Show	GitHub Exploit DB Packet Storm

290898	-	oracle sun	jre jdk	Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 17 and earlier, 6 Update 43 and earlier, and 5.0 Update 41 and earlier; and OpenJDK 6 and 7; allow…	NVD-CWE-noinfo	CVE-2013-1569	2024-11-21 10:49	2013-04-18	Show	GitHub Exploit DB Packet Storm

290899	-	oracle	jre jdk javafx	Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 17 and earlier and JavaFX 2.2.7 and earlier allows remote attackers to affect integrity via unknow…	NVD-CWE-noinfo	CVE-2013-1564	2024-11-21 10:49	2013-04-18	Show	GitHub Exploit DB Packet Storm

290900	-	oracle sun	jre jdk javafx	Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 17 and earlier, 6 Update 43 and earlier, and JavaFX 2.2.7 and earlier allows remote attackers to a…	NVD-CWE-noinfo	CVE-2013-1563	2024-11-21 10:49	2013-04-18	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed