Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 15, 2026, 10 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
203081 7.5 重要
Network
パルスセキュア - Pulse Connect Secure におけるサービス運用妨害 (DoS) の脆弱性 CWE-noinfo
情報不足
CVE-2016-4786 2016-05-30 16:04 2016-05-20 Show GitHub Exploit DB Packet Storm
203082 7.8 重要
Local
FreeBSD - FreeBSD の sys/kern/uipc_syscalls.c の sockargs 関数における整数符号エラーの脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2016-1887 2016-05-30 15:48 2016-05-17 Show GitHub Exploit DB Packet Storm
203083 7.8 重要
Local
FreeBSD - FreeBSD の sys/dev/kbd/kbd.c の genkbd_commonioctl 関数における整数符号エラーの脆弱性 CWE-119
バッファエラー
CVE-2016-1886 2016-05-30 15:48 2016-05-17 Show GitHub Exploit DB Packet Storm
203084 8.5 危険 サイボウズ - サイボウズ ガルーンにおいて任意の PHP コードが実行される複数の脆弱性 CWE-94
コード・インジェクション
CVE-2015-5646
CVE-2015-5647
2016-05-30 15:33 2015-10-7 Show GitHub Exploit DB Packet Storm
203085 7.5 重要
Network
Kazu Yamamoto
Fedora Project
- pgpdump の buffer.c の read_binary 関数におけるサービス運用妨害 (DoS) の脆弱性 CWE-399
リソース管理の問題
CVE-2016-4021 2016-05-30 14:07 2016-04-13 Show GitHub Exploit DB Packet Storm
203086 6.1 警告
Network
フォーティネット - Fortinet FortiSandbox の Web ユーザインターフェースにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2015-7360 2016-05-30 13:43 2015-07-24 Show GitHub Exploit DB Packet Storm
203087 4.7 警告
Network
CMS Made Simple - CMS Made Simple におけるキャッシュポイズニング攻撃を実行される脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2016-2784 2016-05-30 13:37 2016-03-28 Show GitHub Exploit DB Packet Storm
203088 8.8 重要
Network
シスコシステムズ - Cisco Prime Infrastructure および Evolved Programmable Network Manager の API Web インターフェースにおける RBAC 制限を回避される脆弱性 CWE-Other
その他
CVE-2016-1406 2016-05-27 18:25 2016-05-23 Show GitHub Exploit DB Packet Storm
203089 7.5 重要
Network
シスコシステムズ - Cisco Identity Services Engine の Active Directory 統合コンポーネントにおけるサービス運用妨害 (DoS) の脆弱性 CWE-119
CWE-287
CVE-2016-1402 2016-05-27 18:25 2016-05-17 Show GitHub Exploit DB Packet Storm
203090 6.1 警告
Network
シスコシステムズ - Cisco Unified Computing System Central ソフトウェアの管理インターフェースにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2016-1401 2016-05-27 18:25 2016-05-17 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 15, 2026, 4:28 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
290561 - moodle moodle mod/assign/locallib.php in the assignment module in Moodle 2.3.x before 2.3.7 and 2.4.x before 2.4.4 does not consider capability requirements during the processing of ZIP assignment-archive download… CWE-264
Permissions, Privileges, and Access Controls
CVE-2013-2079 2024-11-21 10:50 2013-05-25 Show GitHub Exploit DB Packet Storm
290562 - openstack keystone OpenStack Identity (Keystone) Folsom 2012.2.4 and earlier, Grizzly before 2013.1.1, and Havana does not immediately revoke the authentication token when deleting a user through the Keystone v2 API, w… CWE-287
Improper Authentication
CVE-2013-2059 2024-11-21 10:50 2013-05-22 Show GitHub Exploit DB Packet Storm
290563 - qemu qemu The qemu guest agent in Qemu 1.4.1 and earlier, as used by Xen, when started in daemon mode, uses weak permissions for certain files, which allows local users to read and write to these files. CWE-264
Permissions, Privileges, and Access Controls
CVE-2013-2007 2024-11-21 10:50 2013-05-22 Show GitHub Exploit DB Packet Storm
290564 - openstack keystone OpenStack Identity (Keystone) Grizzly 2013.1.1, when DEBUG mode logging is enabled, logs the (1) admin_token and (2) LDAP password in plaintext, which allows local users to obtain sensitive by readin… CWE-200
Information Exposure
CVE-2013-2006 2024-11-21 10:50 2013-05-22 Show GitHub Exploit DB Packet Storm
290565 - openstack devstack OpenStack devstack uses world-readable permissions for keystone.conf, which allows local users to obtain sensitive information such as the LDAP password and admin_token secret by reading the file. CWE-264
Permissions, Privileges, and Access Controls
CVE-2013-1977 2024-11-21 10:50 2013-05-22 Show GitHub Exploit DB Packet Storm
290566 - xen xen Xen 4.0.x and 4.1.x incorrectly releases a grant reference when releasing a non-v1, non-transitive grant, which allows local guest administrators to cause a denial of service (host crash), obtain sen… CWE-264
Permissions, Privileges, and Access Controls
CVE-2013-1964 2024-11-21 10:50 2013-05-22 Show GitHub Exploit DB Packet Storm
290567 - mozilla firefox
thunderbird
thunderbird_esr
Use-after-free vulnerability in the nsContentUtils::RemoveScriptBlocker function in Mozilla Firefox before 21.0, Firefox ESR 17.x before 17.0.6, Thunderbird before 17.0.6, and Thunderbird ESR 17.x be… CWE-399
 Resource Management Errors
CVE-2013-1681 2024-11-21 10:50 2013-05-16 Show GitHub Exploit DB Packet Storm
290568 - mozilla firefox
thunderbird
thunderbird_esr
Use-after-free vulnerability in the nsFrameList::FirstChild function in Mozilla Firefox before 21.0, Firefox ESR 17.x before 17.0.6, Thunderbird before 17.0.6, and Thunderbird ESR 17.x before 17.0.6 … CWE-119
Incorrect Access of Indexable Resource ('Range Error') 
CVE-2013-1680 2024-11-21 10:50 2013-05-16 Show GitHub Exploit DB Packet Storm
290569 - mozilla firefox
thunderbird
thunderbird_esr
Use-after-free vulnerability in the mozilla::plugins::child::_geturlnotify function in Mozilla Firefox before 21.0, Firefox ESR 17.x before 17.0.6, Thunderbird before 17.0.6, and Thunderbird ESR 17.x… CWE-399
 Resource Management Errors
CVE-2013-1679 2024-11-21 10:50 2013-05-16 Show GitHub Exploit DB Packet Storm
290570 - mozilla firefox
thunderbird
thunderbird_esr
The _cairo_xlib_surface_add_glyph function in Mozilla Firefox before 21.0, Firefox ESR 17.x before 17.0.6, Thunderbird before 17.0.6, and Thunderbird ESR 17.x before 17.0.6 allows remote attackers to… CWE-119
Incorrect Access of Indexable Resource ('Range Error') 
CVE-2013-1678 2024-11-21 10:50 2013-05-16 Show GitHub Exploit DB Packet Storm