Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 9, 2026, 6 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
203431 9.8 緊急
Network
The PHP Group - PHP の ext/snmp/snmp.c におけるサービス運用妨害 (DoS) の脆弱性 CWE-Other
その他
CVE-2016-6295 2016-10-7 16:37 2016-07-21 Show GitHub Exploit DB Packet Storm
203432 9.8 緊急
Network
The PHP Group - PHP の ext/intl/locale/locale_methods.c の locale_accept_from_http 関数におけるサービス運用妨害 (DoS) の脆弱性 CWE-Other
その他
CVE-2016-6294 2016-10-7 16:37 2016-07-21 Show GitHub Exploit DB Packet Storm
203433 6.5 警告
Network
The PHP Group - PHP の ext/exif/exif.c の exif_process_user_comment 関数におけるサービス運用妨害 (DoS) の脆弱性 CWE-Other
その他
CVE-2016-6292 2016-10-7 16:37 2016-07-21 Show GitHub Exploit DB Packet Storm
203434 9.8 緊急
Network
The PHP Group - PHP の ext/exif/exif.c の exif_process_IFD_in_MAKERNOTE 関数におけるサービス運用妨害 (DoS) の脆弱性 CWE-119
バッファエラー
CVE-2016-6291 2016-10-7 16:37 2016-07-21 Show GitHub Exploit DB Packet Storm
203435 9.8 緊急
Network
The PHP Group - PHP の ext/session/session.c におけるサービス運用妨害 (DoS) の脆弱性 CWE-Other
その他
CVE-2016-6290 2016-10-7 16:37 2016-07-21 Show GitHub Exploit DB Packet Storm
203436 7.8 重要
Local
The PHP Group - PHP の TSRM/tsrm_virtual_cwd.c の virtual_file_ex 関数における整数オーバーフローの脆弱性 CWE-Other
その他
CVE-2016-6289 2016-10-7 16:37 2016-07-21 Show GitHub Exploit DB Packet Storm
203437 9.8 緊急
Network
The PHP Group - PHP の ext/standard/url.c の php_url_parse_ex 関数におけるサービス運用妨害 (DoS) の脆弱性 CWE-119
バッファエラー
CVE-2016-6288 2016-10-7 16:37 2016-07-21 Show GitHub Exploit DB Packet Storm
203438 8.1 重要
Network
The PHP Group
Invision Power Services, Inc
- Invision Power Services IPS Community Suite の applications/core/modules/front/system/content.php における任意のコードを実行される脆弱性 CWE-noinfo
情報不足
CVE-2016-6174 2016-10-7 16:37 2016-07-5 Show GitHub Exploit DB Packet Storm
203439 3.3
Local
マイクロソフト - Cryptography API: Next Generation (CNG) におけるサービス運用妨害 (DoS) の脆弱性 CWE-119
バッファエラー
- 2016-10-7 12:02 2016-10-7 Show GitHub Exploit DB Packet Storm
203440 7.3 重要
Network
横河電機株式会社 - STARDOM コントローラに任意のコマンドを実行される脆弱性 CWE-287
CWE-Other
CVE-2016-4860 2016-10-7 11:51 2016-09-14 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 9, 2026, 4:16 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
292051 - google chrome The FrameLoader::notifyIfInitialDocumentAccessed function in core/loader/FrameLoader.cpp in Blink, as used in Google Chrome before 31.0.1650.63, makes an incorrect check for an empty document during … CWE-20
 Improper Input Validation 
CVE-2013-6636 2024-11-21 10:59 2013-12-7 Show GitHub Exploit DB Packet Storm
292052 - google chrome Use-after-free vulnerability in the editing implementation in Blink, as used in Google Chrome before 31.0.1650.63, allows remote attackers to cause a denial of service or possibly have unspecified ot… CWE-399
 Resource Management Errors
CVE-2013-6635 2024-11-21 10:59 2013-12-7 Show GitHub Exploit DB Packet Storm
292053 - google chrome The OneClickSigninHelper::ShowInfoBarIfPossible function in browser/ui/sync/one_click_signin_helper.cc in Google Chrome before 31.0.1650.63 uses an incorrect URL during realm validation, which allows… CWE-287
Improper Authentication
CVE-2013-6634 2024-11-21 10:59 2013-12-7 Show GitHub Exploit DB Packet Storm
292054 - rubyonrails ruby_on_rails
rails
actionpack/lib/action_dispatch/http/request.rb in Ruby on Rails before 3.2.16 and 4.x before 4.0.2 does not properly consider differences in parameter handling between the Active Record component and… CWE-264
Permissions, Privileges, and Access Controls
CVE-2013-6417 2024-11-21 10:59 2013-12-7 Show GitHub Exploit DB Packet Storm
292055 - rubyonrails rails Cross-site scripting (XSS) vulnerability in the simple_format helper in actionpack/lib/action_view/helpers/text_helper.rb in Ruby on Rails 4.x before 4.0.2 allows remote attackers to inject arbitrary… CWE-79
Cross-site Scripting
CVE-2013-6416 2024-11-21 10:59 2013-12-7 Show GitHub Exploit DB Packet Storm
292056 - rubyonrails ruby_on_rails
rails
Cross-site scripting (XSS) vulnerability in the number_to_currency helper in actionpack/lib/action_view/helpers/number_helper.rb in Ruby on Rails before 3.2.16 and 4.x before 4.0.2 allows remote atta… CWE-79
Cross-site Scripting
CVE-2013-6415 2024-11-21 10:59 2013-12-7 Show GitHub Exploit DB Packet Storm
292057 - rubyonrails rails
ruby_on_rails
actionpack/lib/action_view/lookup_context.rb in Action View in Ruby on Rails 3.x before 3.2.16 and 4.x before 4.0.2 allows remote attackers to cause a denial of service (memory consumption) via a hea… CWE-20
 Improper Input Validation 
CVE-2013-6414 2024-11-21 10:59 2013-12-7 Show GitHub Exploit DB Packet Storm
292058 - jamroom search_module Cross-site scripting (XSS) vulnerability in the Search module before 1.1.1 for Jamroom allows remote attackers to inject arbitrary web script or HTML via the search_string parameter to search/results… CWE-79
Cross-site Scripting
CVE-2013-6804 2024-11-21 10:59 2013-12-6 Show GitHub Exploit DB Packet Storm
292059 - chamilo chamilo_lms SQL injection vulnerability in the check_user_password function in main/auth/profile.php in Chamilo LMS 1.9.6 and earlier, when using the non-encrypted passwords mode set at installation, allows remo… CWE-89
SQL Injection
CVE-2013-6787 2024-11-21 10:59 2013-12-6 Show GitHub Exploit DB Packet Storm
292060 - ganglia ganglia-web Cross-site scripting (XSS) vulnerability in header.php in Ganglia Web 3.5.8 and 3.5.10 allows remote attackers to inject arbitrary web script or HTML via the host_regex parameter to the default URI, … CWE-79
Cross-site Scripting
CVE-2013-6395 2024-11-21 10:59 2013-12-6 Show GitHub Exploit DB Packet Storm