Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 14, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
203251 6.1 警告
Local 		マイクロソフト - Microsoft Windows 10 および Windows Server 2016 の仮想ハードディスクドライバにおける権限昇格の脆弱性 CWE-Other
その他 		CVE-2016-7225 2016-11-11 16:30 2016-11-8 Show GitHub Exploit DB Packet Storm
203252 6.1 警告
Local 		マイクロソフト - 複数の Microsoft Windows 製品の仮想ハードディスクドライバにおける権限昇格の脆弱性 CWE-Other
その他 		CVE-2016-7224 2016-11-11 16:30 2016-11-8 Show GitHub Exploit DB Packet Storm
203253 6.1 警告
Local 		マイクロソフト - 複数の Microsoft Windows 製品の仮想ハードディスクドライバにおける権限昇格の脆弱性 CWE-Other
その他 		CVE-2016-7223 2016-11-11 16:30 2016-11-8 Show GitHub Exploit DB Packet Storm
203254 3.3 低
Local 		マイクロソフト - Microsoft Windows 10 の仮想保護モードにおける重要な情報を取得される脆弱性 CWE-200
情報漏えい 		CVE-2016-7220 2016-11-11 16:30 2016-11-8 Show GitHub Exploit DB Packet Storm
203255 5.5 警告
Local 		マイクロソフト - 複数の Microsoft Windows 製品のカーネル API における権限昇格の脆弱性 CWE-200
CWE-264
CVE-2016-7216 2016-11-11 16:30 2016-11-8 Show GitHub Exploit DB Packet Storm
203256 7.8 重要
Local 		マイクロソフト - 複数の Microsoft Windows 製品のタスク スケジューラにおける権限昇格の脆弱性 CWE-264
CWE-Other
CVE-2016-7222 2016-11-11 14:54 2016-11-8 Show GitHub Exploit DB Packet Storm
203257 7.5 重要
Network 		マイクロソフト - Microsoft Internet Explorer 11 および Microsoft Edge における任意のコードを実行される脆弱性 CWE-119
バッファエラー 		CVE-2016-7241 2016-11-11 14:51 2016-11-8 Show GitHub Exploit DB Packet Storm
203258 3.1 低
Network 		マイクロソフト - Microsoft Internet Explorer 9 から 11 および Microsoft Edge の XSS フィルタの RegEx クラスにおけるクロスサイトスクリプティングの脆弱性 CWE-200
CWE-79
CVE-2016-7239 2016-11-11 14:51 2016-11-8 Show GitHub Exploit DB Packet Storm
203259 3.1 低
Network 		マイクロソフト - Microsoft Internet Explorer 9 から 11 および Microsoft Edge のスクリプトエンジンにおけるローカルファイルの存在を特定される脆弱性 CWE-200
情報漏えい 		CVE-2016-7227 2016-11-11 14:51 2016-11-8 Show GitHub Exploit DB Packet Storm
203260 3.1 低
Network 		マイクロソフト - Microsoft Internet Explorer 9 から 11 および Microsoft Edge における同一生成元ポリシーを回避される脆弱性 CWE-200
情報漏えい 		CVE-2016-7199 2016-11-11 14:51 2016-11-8 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 14, 2026, 4:12 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
289531 - newsignature addressfield_tokens Cross-site scripting (XSS) vulnerability in the address components field formatter in the AddressField Tokens module 7.x-1.x before 7.x-1.4 for Drupal allows remote authenticated users to inject arbi… CWE-79
Cross-site Scripting 		CVE-2014-3933 2024-11-21 11:09 2014-06-2 Show GitHub Exploit DB Packet Storm
289532 - cososys endpoint_protector SQL injection vulnerability in the device registration component in wsf/webservice.php in CoSoSys Endpoint Protector 4 4.3.0.4 and 4.4.0.2 allows remote attackers to execute arbitrary SQL commands vi… CWE-89
SQL Injection 		CVE-2014-3932 2024-11-21 11:09 2014-06-2 Show GitHub Exploit DB Packet Storm
289533 - canonical
redhat 		ubuntu_linux
sos 		sosreport in Red Hat sos 1.7 and earlier on Red Hat Enterprise Linux (RHEL) 5 produces an archive with an fstab file potentially containing cleartext passwords, and lacks a warning about reviewing th… CWE-255
Credentials Management 		CVE-2014-3925 2024-11-21 11:09 2014-06-1 Show GitHub Exploit DB Packet Storm
289534 - debian dpkg-dev Multiple directory traversal vulnerabilities in dpkg-source in dpkg-dev 1.3.0 allow remote attackers to modify files outside of the intended directories via a source package with a crafted Index: pse… CWE-22
Path Traversal 		CVE-2014-3865 2024-11-21 11:09 2014-05-31 Show GitHub Exploit DB Packet Storm
289535 - debian dpkg-dev Directory traversal vulnerability in dpkg-source in dpkg-dev 1.3.0 allows remote attackers to modify files outside of the intended directories via a crafted source package that lacks a --- header lin… CWE-22
Path Traversal 		CVE-2014-3864 2024-11-21 11:09 2014-05-31 Show GitHub Exploit DB Packet Storm
289536 - webmin webmin
userwin 		Multiple cross-site scripting (XSS) vulnerabilities in Webmin before 1.690 and Usermin before 1.600 allow remote attackers to inject arbitrary web script or HTML via vectors related to popup windows. CWE-79
Cross-site Scripting 		CVE-2014-3924 2024-11-21 11:09 2014-05-30 Show GitHub Exploit DB Packet Storm
289537 - digitalzoomstudio video_gallery Multiple cross-site scripting (XSS) vulnerabilities in the Digital Zoom Studio (DZS) Video Gallery plugin for WordPress allow remote attackers to inject arbitrary web script or HTML via the logoLink … CWE-79
Cross-site Scripting 		CVE-2014-3923 2024-11-21 11:09 2014-05-30 Show GitHub Exploit DB Packet Storm
289538 - trendmicro interscan_messaging_security_virtual_appliance Cross-site scripting (XSS) vulnerability in Trend Micro InterScan Messaging Security Virtual Appliance 8.5.1.1516 allows remote authenticated users to inject arbitrary web script or HTML via the addW… CWE-79
Cross-site Scripting 		CVE-2014-3922 2024-11-21 11:09 2014-05-30 Show GitHub Exploit DB Packet Storm
289539 - simple_popup_project simple_popup Cross-site scripting (XSS) vulnerability in popup.php in the Simple Popup Images plugin for WordPress allows remote attackers to inject arbitrary web script or HTML via the z parameter. CWE-79
Cross-site Scripting 		CVE-2014-3921 2024-11-21 11:09 2014-05-30 Show GitHub Exploit DB Packet Storm
289540 - dlink dap-1350_firmware
dap-1350 		Multiple SQL injection vulnerabilities in the administration login page in D-Link DAP-1350 (Rev. A1) with firmware 1.14 and earlier allow remote attackers to execute arbitrary SQL commands via the (1… CWE-89
SQL Injection 		CVE-2014-3872 2024-11-21 11:09 2014-05-27 Show GitHub Exploit DB Packet Storm