Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 17, 2026, 6 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
203101 7.5 重要
Network
Quagga
openSUSE project
- Quagga の bgpd/bgp_dump.c の bgp_dump_routes_func 関数におけるサービス運用妨害 (DoS) の脆弱性 CWE-20
不適切な入力確認
CVE-2016-4049 2016-05-27 16:06 2016-01-25 Show GitHub Exploit DB Packet Storm
203102 7.5 重要
Network
openSUSE project
Fedora Project
The Go Project
- Go の crypto/dsa/dsa.go の Verify 関数におけるサービス運用妨害 (DoS) の脆弱性 CWE-20
不適切な入力確認
CVE-2016-3959 2016-05-27 15:54 2016-04-6 Show GitHub Exploit DB Packet Storm
203103 7.8 重要
Local
The Go Project - Windows 上で稼動する Go における権限を取得される脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2016-3958 2016-05-27 15:54 2016-04-2 Show GitHub Exploit DB Packet Storm
203104 7.4 重要
Network
トレンドマイクロ - Apple iOS 用 Trend Micro Mobile Security におけるモバイルアプリケーションのログインサーバになりすまされる脆弱性 CWE-200
情報漏えい
CVE-2016-3664 2016-05-27 15:03 2016-04-22 Show GitHub Exploit DB Packet Storm
203105 6.3 警告
Network
エヌ・ティ・ティ・ブロードバンドプラットフォーム株式会社 - Japan Connected-free Wi-Fi におけるアクセス制限不備の脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2015-5629 2016-05-27 12:12 2015-09-11 Show GitHub Exploit DB Packet Storm
203106 7.5 重要
Adjacent
Huawei - 複数の Huawei デバイス製品のソフトウェアの Smart DNS 機能におけるバッファオーバーフローの脆弱性 CWE-119
バッファエラー
CVE-2016-4577 2016-05-27 11:23 2016-05-11 Show GitHub Exploit DB Packet Storm
203107 9.8 緊急
Network
Huawei - 複数の Huawei デバイス製品のソフトウェアの Application Specific Packet Filtering 機能におけるバッファオーバーフローの脆弱性 CWE-119
バッファエラー
CVE-2016-4576 2016-05-27 11:23 2016-05-11 Show GitHub Exploit DB Packet Storm
203108 8.1 重要
Network
Huawei - Huawei S12700 および S5700 スイッチのソフトウェアにおけるサービス運用妨害 (DoS) の脆弱性 CWE-20
不適切な入力確認
CVE-2016-4087 2016-05-27 11:23 2016-04-27 Show GitHub Exploit DB Packet Storm
203109 7.8 重要
Local
Huawei - Huawei Mobile Broadband HL Service における SYSTEM 権限を取得される脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2016-2855 2016-05-27 11:23 2016-05-12 Show GitHub Exploit DB Packet Storm
203110 4.4 警告
Local
Fabrice Bellard
Fedora Project
- QEMU の hw/usb/hcd-ehci.c の ehci_advance_state 関数におけるサービス運用妨害 (DoS) の脆弱性 CWE-20
不適切な入力確認
CVE-2016-4037 2016-05-27 10:08 2016-04-19 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 18, 2026, 4:12 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
290401 - matrix42 service_store Cross-site scripting (XSS) vulnerability in SPS/Portal/default.aspx in Service Desk in Matrix42 Service Store 5.3 SP3 (aka 5.33.946.0) allows remote attackers to inject arbitrary web script or HTML v… CWE-79
Cross-site Scripting
CVE-2013-2504 2024-11-21 10:51 2013-12-29 Show GitHub Exploit DB Packet Storm
290402 - x x_display_manager X.Org xdm 1.1.10, 1.1.11, and possibly other versions, when performing authentication using certain implementations of the crypt API function that can return NULL, allows remote attackers to cause a … CWE-310
Cryptographic Issues
CVE-2013-2179 2024-11-21 10:51 2013-12-27 Show GitHub Exploit DB Packet Storm
290403 - redhat jboss_enterprise_application_platform
enterprise_linux
The EJB invocation handler implementation in Red Hat JBossWS, as used in JBoss Enterprise Application Platform (EAP) before 6.2.0, does not properly enforce the method level restrictions for JAX-WS S… CWE-264
Permissions, Privileges, and Access Controls
CVE-2013-2133 2024-11-21 10:51 2013-12-7 Show GitHub Exploit DB Packet Storm
290404 - redhat
openfabrics
enterprise_linux
ibutils
OpenFabrics ibutils 1.5.7 allows local users to overwrite arbitrary files via a symlink attack on (1) ibdiagnet.db, (2) ibdiagnet.fdbs, (3) ibdiagnet_ibis.log, (4) ibdiagnet.log, (5) ibdiagnet.lst, (… CWE-59
Link Following
CVE-2013-2561 2024-11-21 10:51 2013-11-24 Show GitHub Exploit DB Packet Storm
290405 - dlink dsl-2740b_firmware
dsl-2740b
The D-Link DSL-2740B Gateway with firmware EU_1.0, when an active administrator session exists, allows remote attackers to bypass authentication and gain administrator access via a request to login.c… CWE-264
Permissions, Privileges, and Access Controls
CVE-2013-2271 2024-11-21 10:51 2013-11-19 Show GitHub Exploit DB Packet Storm
290406 - mediawiki mediawiki Unrestricted file upload vulnerability in the chunk upload API in MediaWiki 1.19 through 1.19.6 and 1.20.x before 1.20.6 allows remote attackers to execute arbitrary code by uploading a file with an … NVD-CWE-Other
CVE-2013-2114 2024-11-21 10:51 2013-11-18 Show GitHub Exploit DB Packet Storm
290407 - openvz vzkernel vzkernel before 042stab080.2 in the OpenVZ modification for the Linux kernel 2.6.32 does not initialize certain length variables, which allows local users to obtain sensitive information from kernel … CWE-264
Permissions, Privileges, and Access Controls
CVE-2013-2239 2024-11-21 10:51 2013-11-12 Show GitHub Exploit DB Packet Storm
290408 - andreas_krennmair tpp tpp 1.3.1 allows remote attackers to execute arbitrary commands via a --exec command in a TPP template file. CWE-94
Code Injection
CVE-2013-2208 2024-11-21 10:51 2013-10-29 Show GitHub Exploit DB Packet Storm
290409 - redhat
ubuntu
jboss_enterprise_portal_platform
openshift
jboss_enterprise_brms_platform
jboss_enterprise_web_server
ubuntu
The DiskFileItem class in Apache Commons FileUpload, as used in Red Hat JBoss BRMS 5.3.1; JBoss Portal 4.3 CP07, 5.2.2, and 6.0.0; and Red Hat JBoss Web Server 1.0.2 allows remote attackers to write … CWE-20
 Improper Input Validation 
CVE-2013-2186 2024-11-21 10:51 2013-10-29 Show GitHub Exploit DB Packet Storm
290410 - redhat jboss_enterprise_portal_platform The default configuration of Red Hat JBoss Portal before 6.1.0 enables the JGroups diagnostics service with no authentication when a JGroups channel is started, which allows remote attackers to obtai… CWE-287
Improper Authentication
CVE-2013-2102 2024-11-21 10:51 2013-10-29 Show GitHub Exploit DB Packet Storm