Vulnerability Search Top

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

Vulnerability Information Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":June 3, 2026, 6:08 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
203641	7.8	重要 Local	Google	-	Nexus 5 デバイス上で稼働する Android のカーネルのビデオドライバにおける権限を取得される脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2016-3845	2016-08-9 16:55	2016-08-1	Show	GitHub Exploit DB Packet Storm

203642	5.5	警告 Local	Google	-	Android のメディアサーバの mm-video-v4l2 venc コンポーネントのセキュアセッション機能における重要な情報を取得される脆弱性	CWE-200 情報漏えい	CVE-2016-3835	2016-08-9 16:55	2016-08-1	Show	GitHub Exploit DB Packet Storm

203643	7.8	重要 Local	Google	-	Android のメディアサーバの services/audioflinger/Effects.cpp における権限を取得される脆弱性	CWE-20 不適切な入力確認	CVE-2016-3826	2016-08-9 16:55	2016-08-1	Show	GitHub Exploit DB Packet Storm

203644	7.8	重要 Local	Google	-	Android のメディアサーバの mm-video-v4l2 venc コンポーネントのセキュアセッション機能における権限を取得される脆弱性	CWE-119 バッファエラー	CVE-2016-3823	2016-08-9 16:55	2016-08-1	Show	GitHub Exploit DB Packet Storm

203645	9.8	緊急 Network	Google	-	Android のメディアサーバの libmedia における任意のコードを実行される脆弱性	CWE-Other その他	CVE-2016-3821	2016-08-9 16:55	2016-08-1	Show	GitHub Exploit DB Packet Storm

203646	9.8	緊急 Network	Google	-	Android のメディアサーバの ih264d デコーダにおける任意のコードを実行される脆弱性	CWE-119 バッファエラー	CVE-2016-3820	2016-08-9 16:55	2016-08-1	Show	GitHub Exploit DB Packet Storm

203647	9.8	緊急 Network	Google	-	Android のメディアサーバの libstagefright の codecs/on2/h264dec/source/h264bsd_dpb.c における整数オーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2016-3819	2016-08-9 16:55	2016-08-1	Show	GitHub Exploit DB Packet Storm

203648	7.8	重要 Local	Google	-	複数の Nexus デバイス上で稼動する Android の Qualcomm GPU ドライバにおける権限を取得される脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2016-2504	2016-08-9 16:55	2016-08-1	Show	GitHub Exploit DB Packet Storm

203649	7.5	重要 Network	SAP	-	SAP HANA DB におけるサービス運用妨害 (DoS) の脆弱性	CWE-20 不適切な入力確認	CVE-2016-6148	2016-08-9 16:49	2016-01-12	Show	GitHub Exploit DB Packet Storm

203650	8.1	重要 Network	SAP	-	SAP HANA の SQL インターフェースにおける認証を回避される脆弱性	CWE-Other その他	CVE-2016-6144	2016-08-9 16:49	2016-01-25	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:June 3, 2026, 4:18 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
290111	9.8	CRITICAL Network	zohocorp	manageengine_desktop_central	Unrestricted file upload vulnerability in AgentLogUploadServlet in ManageEngine DesktopCentral 7.x and 8.0.0 before build 80293 allows remote attackers to execute arbitrary code by uploading a file w…	CWE-434 Unrestricted Upload of File with Dangerous Type	CVE-2013-7390	2024-11-21 11:00	2020-01-28	Show	GitHub Exploit DB Packet Storm

290112	7.8	HIGH Local	daum	potplayer	PotPlayer 1.5.40688: .avi File Memory Corruption	CWE-119 Incorrect Access of Indexable Resource ('Range Error')	CVE-2013-7185	2024-11-21 11:00	2020-01-15	Show	GitHub Exploit DB Packet Storm

290113	9.8	CRITICAL Network	ep_imageconvert_project	ep_imageconvert	The Etherpad Lite ep_imageconvert Plugin has a Remote Command Injection Vulnerability	CWE-74 Injection	CVE-2013-7380	2024-11-21 11:00	2020-01-10	Show	GitHub Exploit DB Packet Storm

290114	6.1	MEDIUM Network	shaarli_project	shaarli	Multiple cross-site scripting (XSS) vulnerabilities in index.php in Shaarli allow remote attackers to inject arbitrary web script or HTML via the URL to the (1) showRSS, (2) showATOM, or (3) showDail…	CWE-79 Cross-site Scripting	CVE-2013-7351	2024-11-21 11:00	2020-01-3	Show	GitHub Exploit DB Packet Storm

290115	6.1	MEDIUM Network	plone	plone	Multiple cross-site scripting (XSS) vulnerabilities in Zope, as used in Plone 3.3.x through 3.3.6, 4.0.x through 4.0.9, 4.1.x through 4.1.6, 4.2.x through 4.2.7, and 4.3 through 4.3.2, allow remote a…	CWE-79 Cross-site Scripting	CVE-2013-7062	2024-11-21 11:00	2020-01-3	Show	GitHub Exploit DB Packet Storm

290116	6.1	MEDIUM Network	fibranet	monitorix	Cross-site scripting (XSS) vulnerability in the handle_request function in lib/HTTPServer.pm in Monitorix before 3.4.0 allows remote attackers to inject arbitrary web script or HTML via the PATH_INFO.	CWE-79 Cross-site Scripting	CVE-2013-7071	2024-11-21 11:00	2020-01-1	Show	GitHub Exploit DB Packet Storm

290117	9.8	CRITICAL Network	fibranet	monitorix	The handle_request function in lib/HTTPServer.pm in Monitorix before 3.3.1 allows remote attackers to execute arbitrary commands via shell metacharacters in the URI.	CWE-74 Injection	CVE-2013-7070	2024-11-21 11:00	2020-01-1	Show	GitHub Exploit DB Packet Storm

290118	6.1	MEDIUM Network	sencha debian	connect debian_linux	node-connects before 2.8.2 has cross site scripting in Sencha Labs Connect middleware (vulnerability due to incomplete fix for CVE-2013-7370)	CWE-79 Cross-site Scripting	CVE-2013-7371	2024-11-21 11:00	2019-12-12	Show	GitHub Exploit DB Packet Storm

290119	6.1	MEDIUM Network	redhat sencha opensuse debian	openshift connect opensuse debian_linux	node-connect before 2.8.1 has XSS in the Sencha Labs Connect middleware	CWE-79 Cross-site Scripting	CVE-2013-7370	2024-11-21 11:00	2019-12-11	Show	GitHub Exploit DB Packet Storm

290120	8.8	HIGH Network	debian	devscripts debian_linux	An issue exists in uscan in devscripts before 2.13.19, which could let a remote malicious user execute arbitrary code via a crafted tarball.	NVD-CWE-noinfo	CVE-2013-7325	2024-11-21 11:00	2019-12-4	Show	GitHub Exploit DB Packet Storm