Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 20, 2026, 6 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
203331 7.8 重要
Local
Linux - Linux Kernel の drivers/hid/usbhid/hiddev.c の hiddev_ioctl_usage 関数におけるヒープベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー
CVE-2016-5829 2016-06-28 16:36 2016-06-23 Show GitHub Exploit DB Packet Storm
203332 7.8 重要
Local
Linux - PowerPC プラットフォーム上で稼動する Linux Kernel の arch/powerpc/kernel/process.c におけるサービス運用妨害 (DoS) の脆弱性 CWE-20
不適切な入力確認
CVE-2016-5828 2016-06-28 16:36 2016-06-17 Show GitHub Exploit DB Packet Storm
203333 7.1 重要
Local
Linux - Linux Kernel の MIC VOP ドライバの drivers/misc/mic/vop/vop_vringh.c の vop_ioctl 関数における重要な情報を取得される脆弱性 CWE-119
バッファエラー
CVE-2016-5728 2016-06-28 16:36 2016-06-1 Show GitHub Exploit DB Packet Storm
203334 5.5 警告
Local
Linux - Linux Kernel の net/tipc/netlink_compat.c の tipc_nl_compat_link_dump 関数におけるカーネルスタックメモリから重要な情報を取得される脆弱性 CWE-200
情報漏えい
CVE-2016-5243 2016-06-28 16:36 2016-06-2 Show GitHub Exploit DB Packet Storm
203335 7.8 重要
Local
Linux - Linux Kernel の arch/x86/kvm/vmx.c におけるホスト OS 上で直接 APIC の MSR アクセス権を取得される脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2016-4440 2016-06-28 16:36 2016-05-18 Show GitHub Exploit DB Packet Storm
203336 7.1 重要
Local
Linux - Linux Kernel の arch/x86/kvm/mtrr.c の msr_mtrr_valid 関数における kvm_arch_vcpu のデータ構造を読み書きされる脆弱性 CWE-Other
その他
CVE-2016-3713 2016-06-28 16:36 2016-06-1 Show GitHub Exploit DB Packet Storm
203337 7.8 重要
Local
Linux - Linux Kernel の fs/ecryptfs/kthread.c の ecryptfs_privileged_open 関数における権限を取得される脆弱性 CWE-119
バッファエラー
CVE-2016-1583 2016-06-28 16:36 2016-06-24 Show GitHub Exploit DB Packet Storm
203338 7.8 重要
Local
Linux - Linux Kernel の ALSA サブシステムの sound/core/compress_offload.c におけるサービス運用妨害 (DoS) の脆弱性 CWE-Other
その他
CVE-2014-9904 2016-06-28 16:36 2014-07-16 Show GitHub Exploit DB Packet Storm
203339 5.5 警告
Local
Linux - Linux Kernel の kernel/sched/core.c の sched_read_attr 関数におけるカーネルスタックメモリから重要な情報を取得される脆弱性 CWE-200
情報漏えい
CVE-2014-9903 2016-06-28 16:36 2014-02-17 Show GitHub Exploit DB Packet Storm
203340 9.8 緊急
Network
アップル - mDNSResponder の handle_regservice_request 関数における任意のコードを実行される脆弱性 CWE-Other
その他
CVE-2015-7988 2016-06-28 14:34 2015-10-27 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 20, 2026, 4:14 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
291011 8.3 HIGH
Adjacent
silabs zgm130s037hgn_firmware
zm5202_firmware
zm5101_firmware
zgm2305a27hgn_firmware
zgm230sb27hgn_firmware
Z-Wave devices from Sierra Designs (circa 2013) and Silicon Labs (using S0 security) may use a known, shared network key of all zeros, allowing an attacker within radio range to spoof Z-Wave traffic. CWE-338
 Use of Cryptographically Weak Pseudo-Random Number Generator (PRNG)
CVE-2013-20003 2024-11-21 10:50 2022-02-5 Show GitHub Exploit DB Packet Storm
291012 9.8 CRITICAL
Network
themify framework Elemin allows remote attackers to upload and execute arbitrary PHP code via the Themify framework (before 1.2.2) wp-content/themes/elemin/themify/themify-ajax.php file. CWE-434
 Unrestricted Upload of File with Dangerous Type 
CVE-2013-20002 2024-11-21 10:50 2021-06-18 Show GitHub Exploit DB Packet Storm
291013 7.5 HIGH
Network
openzfs openzfs An issue was discovered in OpenZFS through 2.0.3. When an NFS share is exported to IPv6 addresses via the sharenfs feature, there is a silent failure to parse the IPv6 address data, and access is all… NVD-CWE-noinfo
CVE-2013-20001 2024-11-21 10:50 2021-02-13 Show GitHub Exploit DB Packet Storm
291014 7.5 HIGH
Network
python python The gzip_decode function in the xmlrpc client library in Python 3.4 and earlier allows remote attackers to cause a denial of service (memory consumption) via a crafted HTTP request. NVD-CWE-noinfo
CVE-2013-1753 2024-11-21 10:50 2020-03-12 Show GitHub Exploit DB Packet Storm
291015 9.8 CRITICAL
Network
berkeley boinc Multiple SQL injection vulnerabilities in BOINC allow remote attackers to execute arbitrary SQL commands via unspecified vectors. CWE-89
SQL Injection
CVE-2013-2018 2024-11-21 10:50 2020-02-20 Show GitHub Exploit DB Packet Storm
291016 7.5 HIGH
Network
intel 82574l_controller_firmware A denial of service vulnerability exists in some motherboard implementations of Intel e1000e/82574L network controller devices through 2013-02-06 where the device can be brought into a non-processing… CWE-665
 Improper Initialization
CVE-2013-1634 2024-11-21 10:50 2020-02-14 Show GitHub Exploit DB Packet Storm
291017 6.1 MEDIUM
Network
zimbra zimbra Zimbra 2013 has XSS in aspell.php CWE-79
Cross-site Scripting
CVE-2013-1938 2024-11-21 10:50 2020-02-13 Show GitHub Exploit DB Packet Storm
291018 7.5 HIGH
Network
skill commerce_skrill Commerce Skrill (Formerly Moneybookers) has an Access bypass vulnerability in all versions prior to 7.x-1.2 NVD-CWE-Other
CVE-2013-1924 2024-11-21 10:50 2020-02-13 Show GitHub Exploit DB Packet Storm
291019 9.8 CRITICAL
Network
boldgrid
automattic
w3_total_cache
wp_super_cache
WordPress W3 Total Cache Plugin 0.9.2.8 has a Remote PHP Code Execution Vulnerability CWE-74
Injection
CVE-2013-2010 2024-11-21 10:50 2020-02-13 Show GitHub Exploit DB Packet Storm
291020 9.8 CRITICAL
Network
yabb yabb YaBB through 2.5.2: 'guestlanguage' Cookie Parameter Local File Include Vulnerability CWE-434
 Unrestricted Upload of File with Dangerous Type 
CVE-2013-2057 2024-11-21 10:50 2020-02-12 Show GitHub Exploit DB Packet Storm