Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 31, 2026, 2 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
203551 8.8 重要
Network
Google - Google Chrome で使用される Blink の WebKit/Source/core/loader/FrameLoader.cpp における同一生成元ポリシーを回避される脆弱性 CWE-Other
その他
CVE-2016-1711 2016-07-28 12:05 2016-07-20 Show GitHub Exploit DB Packet Storm
203552 8.8 重要
Network
Google - Google Chrome で使用される Blink の WebKit/Source/web/ChromeClientImpl.cpp における同一生成元ポリシーを回避される脆弱性 CWE-Other
その他
CVE-2016-1710 2016-07-28 12:05 2016-07-20 Show GitHub Exploit DB Packet Storm
203553 8.8 重要
Network
Google - Google Chrome で使用される Google sfntly の data/byte_array.cc におけるヒープベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー
CVE-2016-1709 2016-07-28 12:05 2016-07-20 Show GitHub Exploit DB Packet Storm
203554 8.8 重要
Network
Google - Google Chrome の拡張サブシステムの Chrome Web Store Inline Installation の実装におけるサービス運用妨害 (DoS) の脆弱性 CWE-Other
その他
CVE-2016-1708 2016-07-28 12:05 2016-07-20 Show GitHub Exploit DB Packet Storm
203555 6.5 警告
Network
Google - Apple iOS 上で稼動する Google Chrome の ios/web/web_state/ui/crw_web_controller.mm における URL 表示を偽造される脆弱性 CWE-20
不適切な入力確認
CVE-2016-1707 2016-07-28 12:05 2016-07-20 Show GitHub Exploit DB Packet Storm
203556 9.6 緊急
Network
Google - Google Chrome の PPAPI の実装におけるサンドボックス保護メカニズムを回避される脆弱性 CWE-20
不適切な入力確認
CVE-2016-1706 2016-07-28 12:05 2016-07-20 Show GitHub Exploit DB Packet Storm
203557 8.8 重要
Network
Google - Google Chrome におけるサービス運用妨害 (DoS) の脆弱性 CWE-noinfo
情報不足
CVE-2016-1705 2016-07-28 12:05 2016-07-20 Show GitHub Exploit DB Packet Storm
203558 6.5 警告
Network
オラクル - Oracle PeopleSoft Products の PeopleSoft Enterprise PeopleTools における Application Designer に関する脆弱性 CWE-noinfo
情報不足
CVE-2016-5470 2016-07-28 11:41 2016-07-19 Show GitHub Exploit DB Packet Storm
203559 5.4 警告
Network
オラクル - Oracle Siebel CRM の Siebel UI Framework における EAI に関する脆弱性 CWE-noinfo
情報不足
CVE-2016-5468 2016-07-28 11:41 2016-07-19 Show GitHub Exploit DB Packet Storm
203560 3.7
Network
オラクル - Oracle Siebel CRM の Siebel Core - Server Framework における Services に関する脆弱性 CWE-noinfo
情報不足
CVE-2016-5460 2016-07-28 11:41 2016-07-19 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 31, 2026, 4:16 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
289981 - redhat enterprise_mrg Cumin (aka MRG Management Console), as used in Red Hat Enterprise MRG 2.5, uses the DES-based crypt function to hash passwords, which makes it easier for attackers to obtain sensitive information via… CWE-310
Cryptographic Issues
CVE-2013-6445 2024-11-21 10:59 2014-04-30 Show GitHub Exploit DB Packet Storm
289982 - uclouvain openjpeg OpenJPEG 1.5.1 allows remote attackers to cause a denial of service via unspecified vectors that trigger NULL pointer dereferences, division-by-zero, and other errors. CWE-20
 Improper Input Validation 
CVE-2013-6887 2024-11-21 10:59 2014-04-28 Show GitHub Exploit DB Packet Storm
289983 - ibm smartcloud_analytics_log_analysis Cross-site scripting (XSS) vulnerability in IBM SmartCloud Analytics Log Analysis 1.1 and 1.2 before 1.2.0.0-CSI-SCALA-IF0003 allows remote attackers to inject arbitrary web script or HTML via an inv… CWE-79
Cross-site Scripting
CVE-2013-6738 2024-11-21 10:59 2014-04-24 Show GitHub Exploit DB Packet Storm
289984 - redhat jboss_fuse_service_works
jboss_overlord_run_time_governance
JBoss Overlord Run Time Governance (RTGov) 1.0 for JBossAS allows remote authenticated users to execute arbitrary Java code via an MVFLEX Expression Language (MVEL) expression. NOTE: some of these d… CWE-94
Code Injection
CVE-2013-6469 2024-11-21 10:59 2014-04-22 Show GitHub Exploit DB Packet Storm
289985 - json-c
fedoraproject
json-c
fedora
The hash functionality in json-c before 0.12 allows context-dependent attackers to cause a denial of service (CPU consumption) via crafted JSON data, involving collisions. CWE-310
Cryptographic Issues
CVE-2013-6371 2024-11-21 10:59 2014-04-22 Show GitHub Exploit DB Packet Storm
289986 - json-c
fedoraproject
json-c
fedora
Buffer overflow in the printbuf APIs in json-c before 0.12 allows remote attackers to cause a denial of service via unspecified vectors. CWE-119
Incorrect Access of Indexable Resource ('Range Error') 
CVE-2013-6370 2024-11-21 10:59 2014-04-22 Show GitHub Exploit DB Packet Storm
289987 - redhat
fedoraproject
libvirt
fedora
The LXC driver (lxc/lxc_driver.c) in libvirt 1.0.1 through 1.2.1 allows local users to (1) delete arbitrary host devices via the virDomainDeviceDettach API and a symlink attack on /dev in the contain… CWE-59
Link Following
CVE-2013-6456 2024-11-21 10:59 2014-04-16 Show GitHub Exploit DB Packet Storm
289988 - cambridge_enterprise jbig-kit Stack-based buffer overflow in the jbg_dec_in function in libjbig/jbig.c in JBIG-KIT before 2.1 allows remote attackers to cause a denial of service (application crash) and possibly execute arbitrary… CWE-119
Incorrect Access of Indexable Resource ('Range Error') 
CVE-2013-6369 2024-11-21 10:59 2014-04-11 Show GitHub Exploit DB Packet Storm
289989 - redhat jboss_bpm_suite
jboss_enterprise_brms_platform
jboss_drools
JBoss Drools, Red Hat JBoss BRMS before 6.0.1, and Red Hat JBoss BPM Suite before 6.0.1 allows remote authenticated users to execute arbitrary Java code via a (1) MVFLEX Expression Language (MVEL) or… CWE-94
Code Injection
CVE-2013-6468 2024-11-21 10:59 2014-04-11 Show GitHub Exploit DB Packet Storm
289990 - chainfire supersu The Chainfire SuperSU package before 1.69 for Android allows attackers to gain privileges via the (1) backtick or (2) $() type of shell metacharacters in the -c option to /system/xbin/su. CWE-264
Permissions, Privileges, and Access Controls
CVE-2013-6775 2024-11-21 10:59 2014-03-31 Show GitHub Exploit DB Packet Storm