Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 18, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
203181	4.3	警告 Network	サイボウズ	-	サイボウズガルーンにおけるアクセス制限不備の脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2016-1196	2016-06-23 17:32	2016-05-30	Show	GitHub Exploit DB Packet Storm

203182	5.3	警告 Network	奥一穂	-	H2O における解放済みメモリ使用 (use-after-free) の脆弱性	CWE-399 リソース管理の問題	CVE-2016-4817	2016-06-23 17:22	2016-05-27	Show	GitHub Exploit DB Packet Storm

203183	4.3	警告 Network	株式会社アイ・オー・データ機器	-	ETX-R におけるクロスサイトリクエストフォージェリの脆弱性	CWE-352 同一生成元ポリシー違反	CVE-2016-4820	2016-06-23 17:11	2016-06-14	Show	GitHub Exploit DB Packet Storm

203184	4.4	警告 Network	サイボウズ	-	サイボウズガルーンにおけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2015-7775	2016-06-23 17:08	2016-05-30	Show	GitHub Exploit DB Packet Storm

203185	4.7	警告 Network	サイボウズ	-	サイボウズガルーンにおけるオープンリダイレクトの脆弱性	CWE-20 不適切な入力確認	CVE-2016-1195	2016-06-23 17:06	2016-05-30	Show	GitHub Exploit DB Packet Storm

203186	6.1	警告 Network	サイボウズ	-	サイボウズガルーンにおけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2016-1197	2016-06-23 17:04	2016-05-30	Show	GitHub Exploit DB Packet Storm

203187	5.8	警告 Network	国土地理院	-	「平成27年1月以前の旧地理院地図のソース」におけるディレクトリトラバーサルの脆弱性	CWE-22 パス・トラバーサル	CVE-2016-4814	2016-06-23 15:11	2016-05-30	Show	GitHub Exploit DB Packet Storm

203188	7.1	重要 Network	NetCommons プロジェクト	-	NetCommons における権限昇格の脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2016-4813	2016-06-23 15:11	2016-05-26	Show	GitHub Exploit DB Packet Storm

203189	7.8	危険	ISC, Inc. アップル日本電気	-	ISC BIND 9 にサービス運用妨害 (DoS) の脆弱性	CWE-Other その他	CVE-2015-5477	2016-06-23 14:49	2015-07-29	Show	GitHub Exploit DB Packet Storm

203190	7.8	危険	日本電気（複数のベンダ）	-	Internet Key Exchange (IKEv1, IKEv2) が DoS 攻撃の踏み台として使用される問題	CWE-Other その他	-	2016-06-23 14:46	2016-02-29	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 18, 2026, 4:12 a.m.

No	CVSS	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
290401	-	matrix42	service_store	Cross-site scripting (XSS) vulnerability in SPS/Portal/default.aspx in Service Desk in Matrix42 Service Store 5.3 SP3 (aka 5.33.946.0) allows remote attackers to inject arbitrary web script or HTML v…	CWE-79 Cross-site Scripting	CVE-2013-2504	2024-11-21 10:51	2013-12-29	Show	GitHub Exploit DB Packet Storm

290402	-	x	x_display_manager	X.Org xdm 1.1.10, 1.1.11, and possibly other versions, when performing authentication using certain implementations of the crypt API function that can return NULL, allows remote attackers to cause a …	CWE-310 Cryptographic Issues	CVE-2013-2179	2024-11-21 10:51	2013-12-27	Show	GitHub Exploit DB Packet Storm

290403	-	redhat	jboss_enterprise_application_platform enterprise_linux	The EJB invocation handler implementation in Red Hat JBossWS, as used in JBoss Enterprise Application Platform (EAP) before 6.2.0, does not properly enforce the method level restrictions for JAX-WS S…	CWE-264 Permissions, Privileges, and Access Controls	CVE-2013-2133	2024-11-21 10:51	2013-12-7	Show	GitHub Exploit DB Packet Storm

290404	-	redhat openfabrics	enterprise_linux ibutils	OpenFabrics ibutils 1.5.7 allows local users to overwrite arbitrary files via a symlink attack on (1) ibdiagnet.db, (2) ibdiagnet.fdbs, (3) ibdiagnet_ibis.log, (4) ibdiagnet.log, (5) ibdiagnet.lst, (…	CWE-59 Link Following	CVE-2013-2561	2024-11-21 10:51	2013-11-24	Show	GitHub Exploit DB Packet Storm

290405	-	dlink	dsl-2740b_firmware dsl-2740b	The D-Link DSL-2740B Gateway with firmware EU_1.0, when an active administrator session exists, allows remote attackers to bypass authentication and gain administrator access via a request to login.c…	CWE-264 Permissions, Privileges, and Access Controls	CVE-2013-2271	2024-11-21 10:51	2013-11-19	Show	GitHub Exploit DB Packet Storm

290406	-	mediawiki	mediawiki	Unrestricted file upload vulnerability in the chunk upload API in MediaWiki 1.19 through 1.19.6 and 1.20.x before 1.20.6 allows remote attackers to execute arbitrary code by uploading a file with an …	NVD-CWE-Other	CVE-2013-2114	2024-11-21 10:51	2013-11-18	Show	GitHub Exploit DB Packet Storm

290407	-	openvz	vzkernel	vzkernel before 042stab080.2 in the OpenVZ modification for the Linux kernel 2.6.32 does not initialize certain length variables, which allows local users to obtain sensitive information from kernel …	CWE-264 Permissions, Privileges, and Access Controls	CVE-2013-2239	2024-11-21 10:51	2013-11-12	Show	GitHub Exploit DB Packet Storm

290408	-	andreas_krennmair	tpp	tpp 1.3.1 allows remote attackers to execute arbitrary commands via a --exec command in a TPP template file.	CWE-94 Code Injection	CVE-2013-2208	2024-11-21 10:51	2013-10-29	Show	GitHub Exploit DB Packet Storm

290409	-	redhat ubuntu	jboss_enterprise_portal_platform openshift jboss_enterprise_brms_platform jboss_enterprise_web_server ubuntu	The DiskFileItem class in Apache Commons FileUpload, as used in Red Hat JBoss BRMS 5.3.1; JBoss Portal 4.3 CP07, 5.2.2, and 6.0.0; and Red Hat JBoss Web Server 1.0.2 allows remote attackers to write …	CWE-20 Improper Input Validation	CVE-2013-2186	2024-11-21 10:51	2013-10-29	Show	GitHub Exploit DB Packet Storm

290410	-	redhat	jboss_enterprise_portal_platform	The default configuration of Red Hat JBoss Portal before 6.1.0 enables the JGroups diagnostics service with no authentication when a JGroups channel is started, which allows remote attackers to obtai…	CWE-287 Improper Authentication	CVE-2013-2102	2024-11-21 10:51	2013-10-29	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed