Vulnerability Search Top

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

Vulnerability Information Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":June 8, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
203381	8.8	重要 Network	アップル	-	複数の Apple 製品の libxslt における任意のコードを実行される脆弱性	CWE-119 バッファエラー	CVE-2016-4738	2016-09-29 17:10	2016-09-13	Show	GitHub Exploit DB Packet Storm

203382	7.8	重要 Local	アップル	-	複数の Apple 製品の IOAcceleratorFamily における特権付きコンテキスト内で任意のコードを実行される脆弱性	CWE-119 バッファエラー	CVE-2016-4726	2016-09-29 17:10	2016-09-13	Show	GitHub Exploit DB Packet Storm

203383	8.1	重要 Network	アップル	-	複数の Apple 製品の IOAcceleratorFamily におけるプロセスメモリから重要な情報を取得される脆弱性	CWE-119 バッファエラー	CVE-2016-4725	2016-09-29 17:10	2016-09-13	Show	GitHub Exploit DB Packet Storm

203384	6.5	警告 Network	アップル	-	複数の Apple 製品の FontParser におけるバッファオーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2016-4718	2016-09-29 17:10	2016-09-13	Show	GitHub Exploit DB Packet Storm

203385	7.8	重要 Local	アップル	-	複数の Apple 製品の CoreCrypto における任意のコードを実行される脆弱性	CWE-Other その他	CVE-2016-4712	2016-09-29 17:10	2016-09-13	Show	GitHub Exploit DB Packet Storm

203386	6.5	警告 Network	アップル	-	複数の Apple 製品の CFNetwork における重要な情報を取得される脆弱性	CWE-200 情報漏えい	CVE-2016-4708	2016-09-29 17:10	2016-09-13	Show	GitHub Exploit DB Packet Storm

203387	9.8	緊急 Network	アップル	-	複数の Apple 製品のオーディオにおける任意のコードを実行される脆弱性	CWE-119 バッファエラー	CVE-2016-4702	2016-09-29 17:10	2016-09-13	Show	GitHub Exploit DB Packet Storm

203388	9.8	緊急 Network	アップル	-	複数の Apple 製品の libxml2 における任意のコードを実行される脆弱性	CWE-119 バッファエラー	CVE-2016-4658	2016-09-29 17:10	2016-09-13	Show	GitHub Exploit DB Packet Storm

203389	3.5	低 Network	アップル	-	Apple Safari の Safari Tabs コンポーネントにおけるアドレスバーを偽装される脆弱性	CWE-Other その他	CVE-2016-4751	2016-09-29 16:46	2016-09-20	Show	GitHub Exploit DB Packet Storm

203390	8.8	重要 Network	アップル	-	複数の Apple 製品などで使用される WebKit における任意のコードを実行される脆弱性	CWE-119 バッファエラー	CVE-2016-4768	2016-09-29 16:30	2016-09-13	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:June 9, 2026, 4:16 a.m.

No	CVSS	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
291981	-	nextdc	onedc	The ONEDC app before 1.7 for iOS does not properly verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted…	CWE-310 Cryptographic Issues	CVE-2013-6812	2024-11-21 10:59	2013-12-28	Show	GitHub Exploit DB Packet Storm

291982	-	zend	zendto	Cross-site scripting (XSS) vulnerability in lib/NSSDropoff.php in ZendTo before 4.11-13 allows remote attackers to inject arbitrary web script or HTML via a modified emailAddr field to pickup.php.	CWE-79 Cross-site Scripting	CVE-2013-6808	2024-11-21 10:59	2013-12-28	Show	GitHub Exploit DB Packet Storm

291983	-	drupal	drupal	Cross-site scripting (XSS) vulnerability in the Color module in Drupal 7.x before 7.24 allows remote attackers to inject arbitrary web script or HTML via vectors related to CSS.	CWE-79 Cross-site Scripting	CVE-2013-6388	2024-11-21 10:59	2013-12-25	Show	GitHub Exploit DB Packet Storm

291984	-	drupal	drupal	Cross-site scripting (XSS) vulnerability in the Image module in Drupal 7.x before 7.24 allows remote authenticated users with certain permissions to inject arbitrary web script or HTML via the descri…	CWE-79 Cross-site Scripting	CVE-2013-6387	2024-11-21 10:59	2013-12-25	Show	GitHub Exploit DB Packet Storm

291985	-	rackspace	openstack_windows_guest_agent	The Updater in Rackspace Openstack Windows Guest Agent for XenServer before 1.2.6.0 allows remote attackers to execute arbitrary code via a crafted serialized .NET object to TCP port 1984, which trig…	CWE-94 Code Injection	CVE-2013-6795	2024-11-21 10:59	2013-12-25	Show	GitHub Exploit DB Packet Storm

291986	-	owncloud	owncloud	The admin page in ownCloud before 5.0.13 allows remote attackers to bypass intended access restrictions via unspecified vectors, related to MariaDB.	CWE-264 Permissions, Privileges, and Access Controls	CVE-2013-6403	2024-11-21 10:59	2013-12-25	Show	GitHub Exploit DB Packet Storm

291987	-	debian fedoraproject phil_schwartz	debian_linux fedora denyhosts	denyhosts 2.6 uses an incorrect regular expression when analyzing authentication logs, which allows remote attackers to cause a denial of service (incorrect block of IP addresses) via crafted login n…	CWE-287 Improper Authentication	CVE-2013-6890	2024-11-21 10:59	2013-12-24	Show	GitHub Exploit DB Packet Storm

291988	-	openssl	openssl	The ssl_get_algorithm2 function in ssl/s3_lib.c in OpenSSL before 1.0.2 obtains a certain version number from an incorrect data structure, which allows remote attackers to cause a denial of service (…	CWE-310 Cryptographic Issues	CVE-2013-6449	2024-11-21 10:59	2013-12-24	Show	GitHub Exploit DB Packet Storm

291989	-	redhat	subscription_asset_manager	Candlepin in Red Hat Subscription Asset Manager 1.0 through 1.3 uses a weak authentication scheme when the configuration file does not specify a scheme, which has unspecified impact and attack vector…	CWE-287 Improper Authentication	CVE-2013-6439	2024-11-21 10:59	2013-12-24	Show	GitHub Exploit DB Packet Storm

291990	-	debian canonical haxx	debian_linux ubuntu_linux libcurl	The GnuTLS backend in libcurl 7.21.4 through 7.33.0, when disabling digital signature verification (CURLOPT_SSL_VERIFYPEER), also disables the CURLOPT_SSL_VERIFYHOST check for CN or SAN host name fie…	CWE-20 Improper Input Validation	CVE-2013-6422	2024-11-21 10:59	2013-12-24	Show	GitHub Exploit DB Packet Storm