Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 27, 2026, 6 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
203121 8.8 重要
Network
Apache Software Foundation - Apache Archiva におけるクロスサイトリクエストフォージェリの脆弱性 CWE-352
同一生成元ポリシー違反
CVE-2016-4469 2016-08-1 17:45 2016-07-11 Show GitHub Exploit DB Packet Storm
203122 6.5 警告
Adjacent
シスコシステムズ - Cisco Videoscape Session Resource Manager におけるサービス運用妨害 (DoS) の脆弱性 CWE-399
リソース管理の問題
CVE-2016-1467 2016-08-1 16:55 2016-07-27 Show GitHub Exploit DB Packet Storm
203123 6.5 警告
Adjacent
シスコシステムズ - Cisco Nexus 1000v Application Virtual Switch デバイスにおけるサービス運用妨害 (DoS) の脆弱性 CWE-399
リソース管理の問題
CVE-2016-1465 2016-08-1 16:55 2016-07-27 Show GitHub Exploit DB Packet Storm
203124 7.5 重要
Network
シスコシステムズ - Cisco FireSIGHT システム ソフトウェアにおける Snort ルールを回避される脆弱性 CWE-20
不適切な入力確認
CVE-2016-1463 2016-08-1 16:55 2016-07-27 Show GitHub Exploit DB Packet Storm
203125 6.1 警告
Network
シスコシステムズ - Cisco Prime Service Catalog の Web ベースの管理インターフェースにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2016-1462 2016-08-1 16:55 2016-07-27 Show GitHub Exploit DB Packet Storm
203126 6.5 警告
Adjacent
シスコシステムズ - Cisco Wireless LAN Controller デバイスにおけるサービス運用妨害 (DoS) の脆弱性 CWE-399
リソース管理の問題
CVE-2016-1460 2016-08-1 16:55 2016-07-27 Show GitHub Exploit DB Packet Storm
203127 8.8 重要
Network
シスコシステムズ - Cisco Unified Computing System Performance Manager の Web フレームワークにおける任意のコマンドを実行される脆弱性 CWE-20
不適切な入力確認
CVE-2016-1374 2016-08-1 16:55 2016-07-20 Show GitHub Exploit DB Packet Storm
203128 6.2 警告
Local
Debian
openSUSE project
cronic project
- cronic における任意のファイルに書き込まれる脆弱性 CWE-Other
その他
CVE-2016-3992 2016-08-1 16:28 2016-04-11 Show GitHub Exploit DB Packet Storm
203129 7.5 重要
Network
シーメンス - Siemens SIMATIC WinCC における任意の WinCC ステーションファイルを読まれる脆弱性 CWE-200
情報漏えい
CVE-2016-5744 2016-08-1 16:10 2016-07-22 Show GitHub Exploit DB Packet Storm
203130 9.8 緊急
Network
シーメンス - 複数の Siemens SIMATIC 製品における任意のコードを実行される脆弱性 CWE-20
不適切な入力確認
CVE-2016-5743 2016-08-1 16:10 2016-07-22 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 28, 2026, 4:16 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
289871 - ibm maximo_asset_management
change_and_configuration_management_database
maximo_service_desk
tivoli_service_request_manager
tivoli_it_asset_management_for_it
tivoli_asset_management_for_it…
IBM Maximo Asset Management 7.x before 7.1.1.7 LAFIX.20140319-0837, 7.1.1.11 before IFIX.20140323-0749, 7.1.1.12 before IFIX.20140321-1336, 7.5.x before 7.5.0.3 IFIX027, and 7.5.0.4 before IFIX011; S… CWE-264
Permissions, Privileges, and Access Controls
CVE-2013-5465 2024-11-21 10:57 2014-05-27 Show GitHub Exploit DB Packet Storm
289872 - xiaowen_huang yingzhi_python_programming_language Directory traversal vulnerability in the FTP server in YingZhi Python Programming Language for iOS 1.9 allows remote attackers to read and possibly write arbitrary files via a .. (dot dot) in the def… CWE-22
Path Traversal
CVE-2013-5655 2024-11-21 10:57 2014-05-15 Show GitHub Exploit DB Packet Storm
289873 - mark_evans fog-dragonfly lib/dragonfly/imagemagickutils.rb in the fog-dragonfly gem 0.8.2 for Ruby allows remote attackers to execute arbitrary commands via unspecified vectors. NVD-CWE-Other
CVE-2013-5671 2024-11-21 10:57 2014-05-12 Show GitHub Exploit DB Packet Storm
289874 - powersoftware winarchiver Buffer overflow in Power Software WinArchiver 3.2 allows remote attackers to execute arbitrary code via a crafted .zip file. CWE-119
Incorrect Access of Indexable Resource ('Range Error') 
CVE-2013-5660 2024-11-21 10:57 2014-04-26 Show GitHub Exploit DB Packet Storm
289875 - ibm rhapsody_design_manager
rational_software_architect_design_manager
Unspecified vulnerability in IBM Rational Software Architect (RSA) Design Manager and Rational Rhapsody Design Manager 3.x through 3.0.1 and 4.x before 4.0.6 allows remote authenticated users to modi… NVD-CWE-noinfo
CVE-2013-5459 2024-11-21 10:57 2014-04-22 Show GitHub Exploit DB Packet Storm
289876 - trustwave
debian
modsecurity
debian_linux
apache2/modsecurity.c in ModSecurity before 2.7.6 allows remote attackers to bypass rules by using chunked transfer coding with a capitalized Chunked value in the Transfer-Encoding HTTP header. NVD-CWE-noinfo
CVE-2013-5705 2024-11-21 10:57 2014-04-15 Show GitHub Exploit DB Packet Storm
289877 - apache
redhat
oracle
apple
canonical
http_server
enterprise_linux_desktop
enterprise_linux_workstation
enterprise_linux_server
enterprise_linux_server_tus
enterprise_linux_server_aus
enterprise_linux_eus
jboss_enter…
The mod_headers module in the Apache HTTP Server 2.2.22 allows remote attackers to bypass "RequestHeader unset" directives by placing a header in the trailer portion of data sent with chunked transfe… NVD-CWE-noinfo
CVE-2013-5704 2024-11-21 10:57 2014-04-15 Show GitHub Exploit DB Packet Storm
289878 - lee_howard hylafax\+ Heap-based buffer overflow in hfaxd in HylaFAX+ 5.2.4 through 5.5.3, when using LDAP authentication, might allow remote attackers to cause a denial of service (child hang) or execute arbitrary code v… CWE-119
Incorrect Access of Indexable Resource ('Range Error') 
CVE-2013-5680 2024-11-21 10:57 2014-04-7 Show GitHub Exploit DB Packet Storm
289879 - autodesk sketchbook_for_enterprise_2014
sketchbook_pro
sketchbook_express
sketchbook
Heap-based buffer overflow in Autodesk SketchBook for Enterprise 2014, Pro, and Express before 6.25, and Copic Edition before 2.0.2 allows remote attackers to execute arbitrary code via RLE-compresse… CWE-119
Incorrect Access of Indexable Resource ('Range Error') 
CVE-2013-5365 2024-11-21 10:57 2014-04-3 Show GitHub Exploit DB Packet Storm
289880 - raoul_proenca gnew Multiple SQL injection vulnerabilities in Gnew 2013.1 allow remote attackers to execute arbitrary SQL commands via the (1) answer_id or (2) question_id parameter to polls/vote.php, (3) story_id param… CWE-89
SQL Injection
CVE-2013-5640 2024-11-21 10:57 2014-04-1 Show GitHub Exploit DB Packet Storm