Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 30, 2026, 6 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
203591 7.5 重要
Network
The PHP Group - PHP の ext/standard/var_unserializer.c の object_common1 関数におけるサービス運用妨害 (DoS) の脆弱性 CWE-125
境界外読み取り
CVE-2016-10161 2017-02-7 17:42 2016-12-31 Show GitHub Exploit DB Packet Storm
203592 9.8 緊急
Network
The PHP Group - PHP の ext/phar/phar.c の phar_parse_pharfile 関数におけるサービス運用妨害 (DoS) の脆弱性 CWE-119
バッファエラー
CVE-2016-10160 2017-02-7 17:42 2016-12-31 Show GitHub Exploit DB Packet Storm
203593 7.5 重要
Network
The PHP Group - PHP の ext/phar/phar.c の phar_parse_pharfile 関数における整数オーバーフローの脆弱性 CWE-190
整数オーバーフローまたはラップアラウンド
CVE-2016-10159 2017-02-7 17:42 2016-12-31 Show GitHub Exploit DB Packet Storm
203594 7.5 重要
Network
The PHP Group - PHP の ext/exif/exif.c の exif_convert_any_to_int 関数におけるサービス運用妨害 (DoS) の脆弱性 CWE-189
数値処理の問題
CVE-2016-10158 2017-02-7 17:42 2016-12-14 Show GitHub Exploit DB Packet Storm
203595 7.5 重要
Network
SAP - SAP AS JAVA の P4 SERVERCORE コンポーネントの msp におけるシステム情報を取得される脆弱性 CWE-200
情報漏えい
CVE-2017-5372 2017-02-7 15:51 2017-01-13 Show GitHub Exploit DB Packet Storm
203596 7.5 重要
Network
SAP - SAP Adaptive Server Enterprise の OData サーバにおけるサービス運用妨害 (DoS) の脆弱性 CWE-20
不適切な入力確認
CVE-2017-5371 2017-02-7 15:51 2017-01-13 Show GitHub Exploit DB Packet Storm
203597 6.1 警告
Network
DELL EMC (旧 EMC Corporation) - EMC RSA Security Analytics における反射型クロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2016-8215 2017-02-7 14:49 2016-09-13 Show GitHub Exploit DB Packet Storm
203598 6.7 警告
Local
DELL EMC (旧 EMC Corporation) - EMC Avamar Data Store および Avamar Virtual Edition における Avamar サーバを侵害される脆弱性 CWE-275
パーミッションの問題
CVE-2016-8214 2017-02-7 14:48 2016-09-13 Show GitHub Exploit DB Packet Storm
203599 9.8 緊急
Network
Zoho Corporation - ZOHO WebNMS Framework における認証を回避される脆弱性 CWE-20
不適切な入力確認
CVE-2016-6603 2017-02-7 14:23 2016-07-4 Show GitHub Exploit DB Packet Storm
203600 9.8 緊急
Network
Zoho Corporation - ZOHO WebNMS Framework における平文のパスワードを取得される脆弱性 CWE-327
不完全、または危険な暗号アルゴリズムの使用
CVE-2016-6602 2017-02-7 14:23 2016-07-4 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:July 1, 2026, 4:27 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
291791 - hdwplayer hdw-player-video-player-video-gallery SQL injection vulnerability in the videos page in the HDW Player Plugin (hdw-player-video-player-video-gallery) 2.4.2 for WordPress allows remote authenticated administrators to execute arbitrary SQL… CWE-89
SQL Injection
CVE-2014-5180 2024-11-21 11:11 2014-08-7 Show GitHub Exploit DB Packet Storm
291792 - freelinking_for_case_tracker_project
freelinking_project
freelinking_for_case_tracker
freelinking
The freelinking module for Drupal, as used in the Freelinking for Case Tracker module, does not properly check access permissions for (1) nodes or (2) users, which allows remote attackers to obtain s… CWE-264
Permissions, Privileges, and Access Controls
CVE-2014-5179 2024-11-21 11:11 2014-08-7 Show GitHub Exploit DB Packet Storm
291793 - efssoft easy_file_sharing_web_server Multiple cross-site scripting (XSS) vulnerabilities in Easy File Sharing (EFS) Web Server 6.8 allow remote authenticated users to inject arbitrary web script or HTML via the content parameter when (1… CWE-79
Cross-site Scripting
CVE-2014-5178 2024-11-21 11:11 2014-08-7 Show GitHub Exploit DB Packet Storm
291794 - status2k status2k admin/options/logs.php in Status2k allows remote authenticated administrators to execute arbitrary commands via shell metacharacters in the Location field in Add Logs in the Admin Panel. CWE-94
Code Injection
CVE-2014-5090 2024-11-21 11:11 2014-08-7 Show GitHub Exploit DB Packet Storm
291795 - status2k status2k SQL injection vulnerability in admin/options/logs.php in Status2k allows remote authenticated administrators to execute arbitrary SQL commands via the log parameter. CWE-89
SQL Injection
CVE-2014-5089 2024-11-21 11:11 2014-08-7 Show GitHub Exploit DB Packet Storm
291796 - status2k status2k Cross-site scripting (XSS) vulnerability in Status2k allows remote attackers to inject arbitrary web script or HTML via the username to login.php. CWE-79
Cross-site Scripting
CVE-2014-5088 2024-11-21 11:11 2014-08-7 Show GitHub Exploit DB Packet Storm
291797 - sphider sphider Multiple SQL injection vulnerabilities in admin/admin.php in Sphider 1.3.6 and earlier, Sphider Pro, and Sphider-plus allow remote attackers to execute arbitrary SQL commands via the (1) site_id or (… CWE-89
SQL Injection
CVE-2014-5082 2024-11-21 11:11 2014-08-7 Show GitHub Exploit DB Packet Storm
291798 - redhat
opensuse
enterprise_linux
opensuse
enterprise_virtualization
libvirt
libvirt 1.0.0 through 1.2.x before 1.2.5, when fine grained access control is enabled, allows local users to read arbitrary files via a crafted XML document containing an XML external entity declarat… CWE-20
 Improper Input Validation 
CVE-2014-5177 2024-11-21 11:11 2014-08-4 Show GitHub Exploit DB Packet Storm
291799 - wireshark wireshark The dissect_ber_constrained_bitstring function in epan/dissectors/packet-ber.c in the ASN.1 BER dissector in Wireshark 1.10.x before 1.10.9 does not properly validate padding values, which allows rem… CWE-119
Incorrect Access of Indexable Resource ('Range Error') 
CVE-2014-5165 2024-11-21 11:11 2014-08-1 Show GitHub Exploit DB Packet Storm
291800 - wireshark wireshark The rlc_decode_li function in epan/dissectors/packet-rlc.c in the RLC dissector in Wireshark 1.10.x before 1.10.9 initializes a certain structure member only after this member is used, which allows r… CWE-119
Incorrect Access of Indexable Resource ('Range Error') 
CVE-2014-5164 2024-11-21 11:11 2014-08-1 Show GitHub Exploit DB Packet Storm