Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 20, 2026, 6 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
203521 4.3 警告 SIL International
Debian
Fedora Project
Mozilla Foundation
- Mozilla Firefox で使用される Graphite の Libgraphite の FeatureMap.cpp におけるサービス運用妨害 (DoS) の脆弱性 CWE-Other
その他
CVE-2016-1523 2016-11-22 16:49 2016-02-11 Show GitHub Exploit DB Packet Storm
203522 9.3 危険 SIL International
Debian
Fedora Project
Mozilla Foundation
- Mozilla Firefox で使用される Graphite の Libgraphite の Code.cpp におけるサービス運用妨害 (DoS) の脆弱性 CWE-119
バッファエラー
CVE-2016-1522 2016-11-22 16:48 2016-02-11 Show GitHub Exploit DB Packet Storm
203523 6.8 警告 SIL International
Mozilla Foundation
- Mozilla Firefox で使用される Graphite の Libgraphite の directmachine.cpp における任意のコードを実行される脆弱性 CWE-119
バッファエラー
CVE-2016-1521 2016-11-22 16:45 2016-02-11 Show GitHub Exploit DB Packet Storm
203524 6.5 警告
Network
日本電気
OpenSSL Project
オラクル
- OpenSSL に証明書チェーンの検証不備の脆弱性 CWE-Other
その他
CVE-2015-1793 2016-11-22 16:25 2015-07-9 Show GitHub Exploit DB Packet Storm
203525 4.3 警告 MySQL AB
オラクル
- Oracle MySQL の MySQL Server における Server : Replication に関する脆弱性 CWE-noinfo
情報不足
CVE-2015-0381 2016-11-22 16:18 2015-01-20 Show GitHub Exploit DB Packet Storm
203526 8.1 重要
Network
Apache Software Foundation
オラクル
- Apache Struts2 に任意のコード実行の脆弱性 CWE-Other
その他
CVE-2016-3081 2016-11-22 16:17 2016-04-27 Show GitHub Exploit DB Packet Storm
203527 8.8 重要
Network
オラクル - 複数の Oracle 製品における脆弱性 CWE-noinfo
情報不足
CVE-2016-0635 2016-11-22 16:17 2016-07-19 Show GitHub Exploit DB Packet Storm
203528 4.3 警告 MySQL AB
オラクル
- Oracle MySQL の MySQL Server における Server : Replication に関する脆弱性 CWE-noinfo
情報不足
CVE-2015-0382 2016-11-22 16:03 2015-01-20 Show GitHub Exploit DB Packet Storm
203529 8.8 重要
Network
Percona
MariaDB Corporation Ab.
オラクル
- Oracle MySQL およびその他のデータベースにおける任意の構成を作成される脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2016-6662 2016-11-22 16:02 2016-08-10 Show GitHub Exploit DB Packet Storm
203530 6.5 警告 ヒューレット・パッカード
Debian
Canonical
Apache Software Foundation
オラクル
- Apache Tomcat の Session Persistence の実装における SecurityManager の制限を回避される脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2016-0714 2016-11-22 16:02 2016-01-5 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 21, 2026, 4:01 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
292191 - otrs otrs SQL injection vulnerability in the StateGetStatesByType function in Kernel/System/State.pm in Open Ticket Request System (OTRS) 3.1.x before 3.1.19, 3.2.x before 3.2.14, and 3.3.x before 3.3.4 allows… CWE-89
SQL Injection
CVE-2014-1471 2024-11-21 11:04 2014-02-5 Show GitHub Exploit DB Packet Storm
292192 - mediawiki mediawiki MediaWiki 1.22.x before 1.22.2, 1.21.x before 1.21.5, and 1.19.x before 1.19.11, when DjVu or PDF file upload support is enabled, allows remote attackers to execute arbitrary commands via shell metac… CWE-20
 Improper Input Validation 
CVE-2014-1610 2024-11-21 11:04 2014-01-31 Show GitHub Exploit DB Packet Storm
292193 - media5 mediatrix_voip_gateway_4402_firmware
mediatrix_voip_gateway
Cross-site scripting (XSS) vulnerability in login.esp in the Web Management Interface in Media5 Mediatrix 4402 VoIP Gateway with firmware Dgw 1.1.13.186 and earlier allows remote attackers to inject … CWE-79
Cross-site Scripting
CVE-2014-1612 2024-11-21 11:04 2014-01-31 Show GitHub Exploit DB Packet Storm
292194 - anonymous_posting_project anonymous_posting Cross-site scripting (XSS) vulnerability in the Anonymous Posting module 7.x-1.2 and 7.x-1.3 for Drupal allows remote attackers to inject arbitrary web script or HTML via the contact name field. CWE-79
Cross-site Scripting
CVE-2014-1611 2024-11-21 11:04 2014-01-31 Show GitHub Exploit DB Packet Storm
292195 - skybluecanvas skybluecanvas The bashMail function in cms/data/skins/techjunkie/fragments/contacts/functions.php in SkyBlueCanvas CMS before 1.1 r248-04, when the pid parameter is 4, allows remote attackers to execute arbitrary … CWE-134
Use of Externally-Controlled Format String
CVE-2014-1683 2024-11-21 11:04 2014-01-30 Show GitHub Exploit DB Packet Storm
292196 - openbsd openssh The hash_buffer function in schnorr.c in OpenSSH through 6.4, when Makefile.inc is modified to enable the J-PAKE protocol, does not initialize certain data structures, which might allow remote attack… CWE-119
Incorrect Access of Indexable Resource ('Range Error') 
CVE-2014-1692 2024-11-21 11:04 2014-01-30 Show GitHub Exploit DB Packet Storm
292197 - google chrome Multiple unspecified vulnerabilities in Google Chrome before 32.0.1700.102 have unknown impact and attack vectors, related to 12 "security fixes [that were not] either contributed by external researc… NVD-CWE-noinfo
CVE-2014-1681 2024-11-21 11:04 2014-01-28 Show GitHub Exploit DB Packet Storm
292198 - debian axiom axiom-test.sh in axiom 20100701-1.1 uses tempfile to create a safe temporary file but appends a suffix to the original filename and writes to this new filename, which allows local users to overwrite … CWE-59
Link Following
CVE-2014-1640 2024-11-21 11:04 2014-01-28 Show GitHub Exploit DB Packet Storm
292199 - debian syncevolution syncevo/installcheck-local.sh in syncevolution before 1.3.99.7 uses mktemp to create a safe temporary file but appends a suffix to the original filename and writes to this new filename, which allows … CWE-59
Link Following
CVE-2014-1639 2024-11-21 11:04 2014-01-28 Show GitHub Exploit DB Packet Storm
292200 - debian localepurge (1) debian/postrm and (2) debian/localepurge.config in localepurge before 0.7.3.2 use tempfile to create a safe temporary file but appends a suffix to the original filename and writes to this new fil… CWE-59
Link Following
CVE-2014-1638 2024-11-21 11:04 2014-01-28 Show GitHub Exploit DB Packet Storm