Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 19, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
203181	4.3	警告 Network	サイボウズ	-	サイボウズガルーンにおけるアクセス制限不備の脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2016-1196	2016-06-23 17:32	2016-05-30	Show	GitHub Exploit DB Packet Storm

203182	5.3	警告 Network	奥一穂	-	H2O における解放済みメモリ使用 (use-after-free) の脆弱性	CWE-399 リソース管理の問題	CVE-2016-4817	2016-06-23 17:22	2016-05-27	Show	GitHub Exploit DB Packet Storm

203183	4.3	警告 Network	株式会社アイ・オー・データ機器	-	ETX-R におけるクロスサイトリクエストフォージェリの脆弱性	CWE-352 同一生成元ポリシー違反	CVE-2016-4820	2016-06-23 17:11	2016-06-14	Show	GitHub Exploit DB Packet Storm

203184	4.4	警告 Network	サイボウズ	-	サイボウズガルーンにおけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2015-7775	2016-06-23 17:08	2016-05-30	Show	GitHub Exploit DB Packet Storm

203185	4.7	警告 Network	サイボウズ	-	サイボウズガルーンにおけるオープンリダイレクトの脆弱性	CWE-20 不適切な入力確認	CVE-2016-1195	2016-06-23 17:06	2016-05-30	Show	GitHub Exploit DB Packet Storm

203186	6.1	警告 Network	サイボウズ	-	サイボウズガルーンにおけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2016-1197	2016-06-23 17:04	2016-05-30	Show	GitHub Exploit DB Packet Storm

203187	5.8	警告 Network	国土地理院	-	「平成27年1月以前の旧地理院地図のソース」におけるディレクトリトラバーサルの脆弱性	CWE-22 パス・トラバーサル	CVE-2016-4814	2016-06-23 15:11	2016-05-30	Show	GitHub Exploit DB Packet Storm

203188	7.1	重要 Network	NetCommons プロジェクト	-	NetCommons における権限昇格の脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2016-4813	2016-06-23 15:11	2016-05-26	Show	GitHub Exploit DB Packet Storm

203189	7.8	危険	ISC, Inc. アップル日本電気	-	ISC BIND 9 にサービス運用妨害 (DoS) の脆弱性	CWE-Other その他	CVE-2015-5477	2016-06-23 14:49	2015-07-29	Show	GitHub Exploit DB Packet Storm

203190	7.8	危険	日本電気（複数のベンダ）	-	Internet Key Exchange (IKEv1, IKEv2) が DoS 攻撃の踏み台として使用される問題	CWE-Other その他	-	2016-06-23 14:46	2016-02-29	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 19, 2026, 4:16 a.m.

No	CVSS	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
290361	-	google	chrome_os	Use-after-free vulnerability in the O3D plug-in in Google Chrome OS before 26.0.1410.57 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors rela…	CWE-399 Resource Management Errors	CVE-2013-2833	2024-11-21 10:52	2013-04-17	Show	GitHub Exploit DB Packet Storm

290362	-	google	chrome_os	The Buffer::Set function in core/cross/buffer.cc in the O3D plug-in in Google Chrome OS before 26.0.1410.57 does not prevent uninitialized data from remaining in a buffer, which might allow remote at…	CWE-119 Incorrect Access of Indexable Resource ('Range Error')	CVE-2013-2832	2024-11-21 10:52	2013-04-17	Show	GitHub Exploit DB Packet Storm

290363	-	bestwebsharing	groovy_media_player	Buffer overflow in Groovy Media Player 3.2.0 allows remote attackers to execute arbitrary code via a long string in a .m3u file.	CWE-119 Incorrect Access of Indexable Resource ('Range Error')	CVE-2013-2760	2024-11-21 10:52	2013-04-16	Show	GitHub Exploit DB Packet Storm

290364	-	qualcomm motorola	msm8960 android atrix_hd razr_hd razr_m	The TrustZone kernel, when used in conjunction with a certain Motorola build of Android 4.1.2, on Motorola Razr HD, Razr M, and Atrix HD devices with the Qualcomm MSM8960 chipset does not verify the …	CWE-16 Configuration	CVE-2013-3051	2024-11-21 10:52	2013-04-13	Show	GitHub Exploit DB Packet Storm

290365	-	zapms	zapms	SQL injection vulnerability in ZAPms 1.41 and earlier allows remote attackers to execute arbitrary SQL commands via the pid parameter to product.	CWE-89 SQL Injection	CVE-2013-3050	2024-11-21 10:52	2013-04-13	Show	GitHub Exploit DB Packet Storm

290366	-	cisco	ios_xe asr_1001 asr_1002 asr_1002-x asr_1002_fixed_router asr_1004 asr_1006 asr_1013 asr_1023_router	Cisco IOS XE 3.4 before 3.4.5S, and 3.5 through 3.7 before 3.7.1S, on 1000 series Aggregation Services Routers (ASR) does not properly implement the Cisco Multicast Leaf Recycle Elimination (MLRE) fe…	CWE-20 Improper Input Validation	CVE-2013-2779	2024-11-21 10:52	2013-04-11	Show	GitHub Exploit DB Packet Storm

290367	-	splunk	splunk	Cross-site scripting (XSS) vulnerability in Splunk Web in Splunk 4.3.0 through 4.3.5 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.	CWE-79 Cross-site Scripting	CVE-2013-2766	2024-11-21 10:52	2013-04-11	Show	GitHub Exploit DB Packet Storm

290368	-	puppetlabs puppet	puppet puppet_enterprise	Puppet Labs Puppet Enterprise before 2.8.0 does not use a "randomized secret" in the CAS client config file (cas_client_config.yml) when upgrading from older 1.2.x or 2.0.x versions, which allows rem…	CWE-310 Cryptographic Issues	CVE-2013-2716	2024-11-21 10:52	2013-04-11	Show	GitHub Exploit DB Packet Storm

290369	-	chatelao	php_address_book	Cross-site request forgery (CSRF) vulnerability in addressbook/register/delete_user.php in PHP Address Book 8.2.5 allows remote attackers to hijack the authentication of administrators for requests t…	CWE-352 Origin Validation Error	CVE-2013-2778	2024-11-21 10:52	2013-04-9	Show	GitHub Exploit DB Packet Storm

290370	-	apple todd_miller	mac_os_x sudo	sudo before 1.7.10p5 and 1.8.x before 1.8.6p6, when the tty_tickets option is enabled, does not properly validate the controlling terminal device, which allows local users with sudo permissions to hi…	CWE-264 Permissions, Privileges, and Access Controls	CVE-2013-2777	2024-11-21 10:52	2013-04-9	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed