Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 19, 2026, 6 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
203651 5.9 警告
Network
Wireshark - Wireshark の epan/proto.c におけるサービス運用妨害 (DoS) の脆弱性 CWE-119
バッファエラー
CVE-2016-4006 2016-11-17 16:45 2016-04-22 Show GitHub Exploit DB Packet Storm
203652 7.8 重要
Local
Google - Android の Debuggerd の debuggerd/debuggerd.cpp における権限を取得される脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2016-3885 2016-11-17 16:41 2016-09-6 Show GitHub Exploit DB Packet Storm
203653 7.5 重要
Network
Debian
openSUSE project
Canonical
xmlsoft.org
- libxml2 の tree.c の xmlStringGetNodeList 関数におけるサービス運用妨害 (DoS) の脆弱性 CWE-20
不適切な入力確認
CVE-2016-3627 2016-11-17 16:31 2016-05-13 Show GitHub Exploit DB Packet Storm
203654 7.5 重要
Network
Debian
openSUSE project
Canonical
xmlsoft.org
- libxml2 の parser.c の xmlParserEntityCheck および xmlParseAttValueComplex 関数におけるサービス運用妨害 (DoS) の脆弱性 CWE-20
不適切な入力確認
CVE-2016-3705 2016-11-17 16:31 2016-05-3 Show GitHub Exploit DB Packet Storm
203655 3.8
Local
Xen プロジェクト
Fedora Project
オラクル
- Xen の arch/x86/i387.c の fpu_fxrstor 関数における他のゲストから重要なレジスタコンテンツ情報を取得される脆弱性 CWE-200
CWE-Other
CVE-2016-3159 2016-11-17 16:30 2016-03-24 Show GitHub Exploit DB Packet Storm
203656 3.8
Local
Xen プロジェクト
Fedora Project
オラクル
- Xen の arch/x86/xstate.c の xrstor 関数における他のゲストから重要なレジスタコンテンツ情報を取得される脆弱性 CWE-200
CWE-Other
CVE-2016-3158 2016-11-17 16:30 2016-03-24 Show GitHub Exploit DB Packet Storm
203657 5.5 警告 オラクル
OpenBSD
- OpenSSH の sshd の session.c における CRLF インジェクションの脆弱性 CWE-Other
その他
CVE-2016-3115 2016-11-17 16:29 2016-03-9 Show GitHub Exploit DB Packet Storm
203658 4.6 警告 Xen プロジェクト
オラクル
- Xen におけるサービス運用妨害 (DoS) の脆弱性 CWE-20
不適切な入力確認
CVE-2016-2270 2016-11-17 16:29 2016-02-17 Show GitHub Exploit DB Packet Storm
203659 4.3 警告 Debian
Canonical
xmlsoft.org
- libxml2 の HTMLparser.c の htmlParseNameComplex 関数におけるサービス運用妨害 (DoS) の脆弱性 CWE-119
バッファエラー
CVE-2016-2073 2016-11-17 16:20 2016-01-25 Show GitHub Exploit DB Packet Storm
203660 7.5 重要
Network
Linux
Canonical
オラクル
- Linux Kernel の drivers/net/ethernet/atheros/atlx/atl2.c の atl2_probe 関数におけるカーネルメモリから重要な情報を取得される脆弱性 CWE-200
情報漏えい
CVE-2016-2117 2016-11-17 16:16 2016-04-21 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 19, 2026, 4:01 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
289521 - mailpoet mailpoet_newsletters Unspecified vulnerability in the MailPoet Newsletters (wysija-newsletters) plugin before 2.6.8 for WordPress has unspecified impact and attack vectors. NVD-CWE-noinfo
CVE-2014-4726 2024-11-21 11:10 2014-07-28 Show GitHub Exploit DB Packet Storm
289522 - mailpoet mailpoet_newsletters The MailPoet Newsletters (wysija-newsletters) plugin before 2.6.7 for WordPress allows remote attackers to bypass authentication and execute arbitrary PHP code by uploading a crafted theme using wp-a… CWE-287
Improper Authentication
CVE-2014-4725 2024-11-21 11:10 2014-07-28 Show GitHub Exploit DB Packet Storm
289523 - gurock testrail Cross-site scripting (XSS) vulnerability in Gurock TestRail before 3.1.3 allows remote attackers to inject arbitrary web script or HTML via the Created By field in a project activity. CWE-79
Cross-site Scripting
CVE-2014-4857 2024-11-21 11:10 2014-07-27 Show GitHub Exploit DB Packet Storm
289524 - ibm sametime Cross-site scripting (XSS) vulnerability in the Classic Meeting Server in IBM Sametime 8.x through 8.5.2.1 allows remote attackers to inject arbitrary web script or HTML via a crafted URL. CWE-79
Cross-site Scripting
CVE-2014-4748 2024-11-21 11:10 2014-07-27 Show GitHub Exploit DB Packet Storm
289525 - ibm sametime The Classic Meeting Server in IBM Sametime 8.x through 8.5.2.1 allows physically proximate attackers to discover a meeting password hash by leveraging access to an unattended workstation to read HTML… CWE-200
Information Exposure
CVE-2014-4747 2024-11-21 11:10 2014-07-27 Show GitHub Exploit DB Packet Storm
289526 - blogengine e2 SQL injection vulnerability in E2 before 2.4 (2845) allows remote attackers to execute arbitrary SQL commands via the note-id parameter to @actions/comment-process. CWE-89
SQL Injection
CVE-2014-4736 2024-11-21 11:10 2014-07-24 Show GitHub Exploit DB Packet Storm
289527 - siemens wincc
simatic_pcs7
The Project administration application in Siemens SIMATIC WinCC before 7.3, as used in PCS7 and other products, has a hardcoded encryption key, which allows remote attackers to obtain sensitive infor… NVD-CWE-Other
CVE-2014-4686 2024-11-21 11:10 2014-07-24 Show GitHub Exploit DB Packet Storm
289528 - siemens wincc
simatic_pcs7
Siemens SIMATIC WinCC before 7.3, as used in PCS7 and other products, allows local users to gain privileges by leveraging weak system-object access control. CWE-264
Permissions, Privileges, and Access Controls
CVE-2014-4685 2024-11-21 11:10 2014-07-24 Show GitHub Exploit DB Packet Storm
289529 - siemens wincc
simatic_pcs7
The database server in Siemens SIMATIC WinCC before 7.3, as used in PCS7 and other products, allows remote authenticated users to gain privileges via a request to TCP port 1433. CWE-264
Permissions, Privileges, and Access Controls
CVE-2014-4684 2024-11-21 11:10 2014-07-24 Show GitHub Exploit DB Packet Storm
289530 - siemens wincc
simatic_pcs7
The WebNavigator server in Siemens SIMATIC WinCC before 7.3, as used in PCS7 and other products, allows remote authenticated users to gain privileges via a (1) HTTP or (2) HTTPS request. CWE-264
Permissions, Privileges, and Access Controls
CVE-2014-4683 2024-11-21 11:10 2014-07-24 Show GitHub Exploit DB Packet Storm