Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 28, 2026, 4:09 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
203611 5.5 警告
Local 		オラクル - Oracle Virtualization の Oracle VM VirtualBox における Core に関する脆弱性 CWE-noinfo
情報不足 		CVE-2016-3597 2016-07-25 14:29 2016-07-19 Show GitHub Exploit DB Packet Storm
203612 5.9 警告
Network 		Misys - Misys FusionCapital Opics Plus における重要な情報を取得される脆弱性 CWE-Other
その他 		CVE-2016-5655 2016-07-25 13:40 2016-07-19 Show GitHub Exploit DB Packet Storm
203613 7.5 重要
Network 		Misys - Misys FusionCapital Opics Plus allows における権限を取得される脆弱性 CWE-264
CWE-Other
CVE-2016-5654 2016-07-25 13:40 2016-07-19 Show GitHub Exploit DB Packet Storm
203614 6.5 警告
Network 		Misys - Misys FusionCapital Opics Plus における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2016-5653 2016-07-25 13:40 2016-07-19 Show GitHub Exploit DB Packet Storm
203615 9.8 緊急
Network 		Moxa Inc. - 複数の Moxa MGate 製品における認証を回避される脆弱性 CWE-287
不適切な認証 		CVE-2016-5804 2016-07-25 12:26 2016-07-14 Show GitHub Exploit DB Packet Storm
203616 5.7 警告
Local 		General Electric Company - General Electric Digital Proficy HMI/SCADA - CIMPLICITY におけるサービスの設定を変更される脆弱性 CWE-Other
その他 		CVE-2016-5787 2016-07-25 11:38 2016-07-12 Show GitHub Exploit DB Packet Storm
203617 7.3 重要
Network 		Schneider Electric - Schneider Electric M171/M172 Logic Controller 用 SoMachine HVAC Programming の ActiveX コントロールにおける任意のコードを実行される脆弱性 CWE-noinfo
情報不足 		CVE-2016-4529 2016-07-25 11:31 2016-06-10 Show GitHub Exploit DB Packet Storm
203618 9.8 緊急
Network 		Schneider Electric - Schneider Electric Pelco Digital Sentry ビデオ管理システムのファームウェアにおけるアクセス権を取得される脆弱性 CWE-Other
その他 		CVE-2016-4520 2016-07-25 11:31 2016-06-1 Show GitHub Exploit DB Packet Storm
203619 9.8 緊急
Physics 		ヒューレット・パッカード・エンタープライズ - 複数の HPE IMC 製品における任意のコマンドを実行される脆弱性 CWE-20
不適切な入力確認 		CVE-2016-4372 2016-07-25 11:14 2016-07-11 Show GitHub Exploit DB Packet Storm
203620 7.6 重要
Network 		HarfBuzz project - HarfBuzz の hb-ot-layout-gpos-table.hh におけるサービス運用妨害 (DoS) の脆弱性 CWE-119
バッファエラー 		CVE-2015-8947 2016-07-25 11:12 2015-10-13 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 28, 2026, 4:16 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
291281 - ibm db2 The Fast Communications Manager (FCM) in IBM DB2 Enterprise Server Edition and Advanced Enterprise Server Edition 10.1 before FP3 and 10.5, when a multi-node configuration is used, allows remote atta… CWE-20
 Improper Input Validation  		CVE-2013-4032 2024-11-21 10:54 2013-10-2 Show GitHub Exploit DB Packet Storm
291282 - mongodb mongodb The find prototype in scripting/engine_v8.h in MongoDB 2.4.0 through 2.4.4 allows remote authenticated users to cause a denial of service (uninitialized pointer dereference and server crash) or possi… CWE-399
 Resource Management Errors 		CVE-2013-3969 2024-11-21 10:54 2013-10-2 Show GitHub Exploit DB Packet Storm
291283 - samsung shr-5082
shr-5162 		Cross-site scripting (XSS) vulnerability in Samsung SHR-5162, SHR-5082, and possibly other models, allows remote attackers to inject arbitrary web script or HTML via the PATH_INFO. CWE-79
Cross-site Scripting 		CVE-2013-3964 2024-11-21 10:54 2013-10-2 Show GitHub Exploit DB Packet Storm
291284 - grandstream gxv_device_firmware
gxv3500
gxv3501
gxv3504
gxv3601
gxv3601hd\/ll
gxv3611hd\/ll
gxv3615w\/p
gxv3615wp_hd
gxv3651fhd
gxv3662hd 		Cross-site request forgery (CSRF) vulnerability in goform/usermanage in Grandstream GXV3501, GXV3504, GXV3601, GXV3601HD/LL, GXV3611HD/LL, GXV3615W/P, GXV3651FHD, GXV3662HD, GXV3615WP_HD, GXV3500, an… CWE-352
 Origin Validation Error 		CVE-2013-3963 2024-11-21 10:54 2013-10-2 Show GitHub Exploit DB Packet Storm
291285 - grandstream gxv_device_firmware
gxv3500
gxv3501
gxv3504
gxv3601
gxv3601hd\/ll
gxv3611hd\/ll
gxv3615w\/p
gxv3615wp_hd
gxv3651fhd
gxv3662hd 		Cross-site scripting (XSS) vulnerability in Grandstream GXV3501, GXV3504, GXV3601, GXV3601HD/LL, GXV3611HD/LL, GXV3615W/P, GXV3651FHD, GXV3662HD, GXV3615WP_HD, GXV3500, and possibly other camera mode… CWE-79
Cross-site Scripting 		CVE-2013-3962 2024-11-21 10:54 2013-10-2 Show GitHub Exploit DB Packet Storm
291286 - tp-link tl-sc3130
tl-sc3130g
tl-sc3171
tl-sc3171g
lm_firmware 		The TP-Link IP Cameras TL-SC3171, TL-SC3130, TL-SC3130G, TL-SC3171G, and possibly other models before beta firmware LM.1.6.18P12_sign6, does not properly restrict access to certain administrative fun… CWE-264
Permissions, Privileges, and Access Controls 		CVE-2013-3688 2024-11-21 10:54 2013-10-2 Show GitHub Exploit DB Packet Storm
291287 - ibm maximo_asset_management IBM Maximo Asset Management 6.2 through 6.2.8, 7.1 through 7.1.1.12, and 7.5 before 7.5.0.5 allows remote authenticated users to bypass intended access restrictions via unspecified vectors. CWE-264
Permissions, Privileges, and Access Controls 		CVE-2013-4027 2024-11-21 10:54 2013-10-1 Show GitHub Exploit DB Packet Storm
291288 - ibm maximo_asset_management IBM Maximo Asset Management 6.2 through 6.2.8, 7.1 before 7.1.1.12, and 7.5 before 7.5.0.5 allows remote authenticated users to conduct unspecified file-inclusion attacks via unknown vectors. NVD-CWE-noinfo
CVE-2013-4021 2024-11-21 10:54 2013-10-1 Show GitHub Exploit DB Packet Storm
291289 - ibm maximo_asset_management IBM Maximo Asset Management 6.2 through 6.2.8, 7.1 through 7.1.1.12, and 7.5 before 7.5.0.3 allows remote authenticated users to bypass intended access restrictions via unspecified vectors. NVD-CWE-noinfo
CVE-2013-4020 2024-11-21 10:54 2013-10-1 Show GitHub Exploit DB Packet Storm
291290 - ibm maximo_asset_management Cross-site scripting (XSS) vulnerability in IBM Maximo Asset Management 6.2 through 6.2.8 and 7.1 before 7.1.1.12 allows remote authenticated users to inject arbitrary web script or HTML via unspecif… CWE-79
Cross-site Scripting 		CVE-2013-4019 2024-11-21 10:54 2013-10-1 Show GitHub Exploit DB Packet Storm