Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 27, 2026, 10 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
203651 7.2 重要
Network
MetalGenix - GeniXCMS の inc/mod/newsletter/options.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2017-5347 2017-01-24 14:36 2017-01-15 Show GitHub Exploit DB Packet Storm
203652 7.2 重要
Network
MetalGenix - GeniXCMS の inc/lib/Control/Backend/posts.control.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2017-5346 2017-01-24 14:36 2017-01-15 Show GitHub Exploit DB Packet Storm
203653 8.8 重要
Network
MetalGenix - GeniXCMS の inc/lib/Control/Ajax/tags-ajax.control.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2017-5345 2017-01-24 14:36 2017-01-9 Show GitHub Exploit DB Packet Storm
203654 9.8 緊急
Network
LibTIFF - LibTIFF の tools/tiffcp におけるヒープバッファオーバーフローの脆弱性 CWE-119
バッファエラー
CVE-2017-5225 2017-01-24 14:24 2017-01-12 Show GitHub Exploit DB Packet Storm
203655 9.8 緊急
Network
The PHP Group - PHP における任意のコードを実行される脆弱性 CWE-416
解放済みメモリの使用
CVE-2016-7479 2017-01-24 14:23 2016-09-15 Show GitHub Exploit DB Packet Storm
203656 7.5 重要
Network
サムスン - Samsung Note デバイスのソフトウェアにおけるシステムクラッシュを引き起こされる脆弱性 CWE-400
リソースの枯渇
CVE-2017-5351 2017-01-24 13:54 2017-01-12 Show GitHub Exploit DB Packet Storm
203657 7.5 重要
Network
サムスン - Samsung Note デバイスのソフトウェアにおける systemUI のクラッシュを引き起こされる脆弱性 CWE-388
エラー処理
CVE-2017-5350 2017-01-24 13:54 2017-01-12 Show GitHub Exploit DB Packet Storm
203658 9.8 緊急
Network
British Columbia Institute of Technology - CodeIgniter の system/libraries/Email.php における任意のコードを実行される脆弱性 CWE-74
インジェクション
CVE-2016-10131 2017-01-24 13:53 2016-12-27 Show GitHub Exploit DB Packet Storm
203659 5.3 警告
Local
Google - Telephony における権限昇格の脆弱性 CWE-284
不適切なアクセス制御
CVE-2016-6771 2017-01-24 11:11 2016-12-5 Show GitHub Exploit DB Packet Storm
203660 5.5 警告
Local
Google - メディアサーバにおけるサービス運用妨害 (DoS) の脆弱性 CWE-399
リソース管理の問題
CVE-2016-6767 2017-01-24 11:11 2016-12-5 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 27, 2026, 4:35 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
292551 - intel indeo_video ir41_32.ax 4.51.16.3 for Intel Indeo Video 4.5 allows remote attackers to cause a denial of service (crash) via a crafted .avi file. CWE-119
Incorrect Access of Indexable Resource ('Range Error') 
CVE-2014-3735 2024-11-21 11:08 2014-05-19 Show GitHub Exploit DB Packet Storm
292552 - xen xen Xen 4.4.x does not properly validate the load address for 64-bit ARM guest kernels, which allows local users to read system memory or cause a denial of service (crash) via a crafted kernel, which tri… CWE-20
 Improper Input Validation 
CVE-2014-3717 2024-11-21 11:08 2014-05-19 Show GitHub Exploit DB Packet Storm
292553 - xen xen Xen 4.4.x does not properly check alignment, which allows local users to cause a denial of service (crash) via an unspecified field in a DTB header in a 32-bit guest kernel. CWE-20
 Improper Input Validation 
CVE-2014-3716 2024-11-21 11:08 2014-05-19 Show GitHub Exploit DB Packet Storm
292554 - xen xen Buffer overflow in Xen 4.4.x allows local users to read system memory or cause a denial of service (crash) via a crafted 32-bit guest kernel, related to searching for an appended DTB. CWE-119
Incorrect Access of Indexable Resource ('Range Error') 
CVE-2014-3715 2024-11-21 11:08 2014-05-19 Show GitHub Exploit DB Packet Storm
292555 - xen xen The ARM image loading functionality in Xen 4.4.x does not properly validate kernel length, which allows local users to read system memory or cause a denial of service (crash) via a crafted 32-bit ARM… CWE-20
 Improper Input Validation 
CVE-2014-3714 2024-11-21 11:08 2014-05-19 Show GitHub Exploit DB Packet Storm
292556 - juniper network_and_security_manager_software
nsm3000
nsmexpress
Unspecified vulnerability in the NSM XDB service in Juniper NSM before 2012.2R8 allows remote attackers to execute arbitrary code via unspecified vectors. NVD-CWE-noinfo
CVE-2014-3411 2024-11-21 11:08 2014-05-19 Show GitHub Exploit DB Packet Storm
292557 - flag_module_project flag Eval injection vulnerability in the flag_import_form_validate function in includes/flag.export.inc in the Flag module 7.x-3.0, 7.x-3.5, and earlier for Drupal allows remote authenticated administrato… CWE-94
Code Injection
CVE-2014-3453 2024-11-21 11:08 2014-05-18 Show GitHub Exploit DB Packet Storm
292558 - spumko_project hapi_server_framework The hapi server framework 2.0.x and 2.1.x before 2.2.0 for Node.js allows remote attackers to cause a denial of service (file descriptor consumption and process crash) via unspecified vectors. CWE-399
 Resource Management Errors
CVE-2014-3742 2024-11-21 11:08 2014-05-17 Show GitHub Exploit DB Packet Storm
292559 - canonical
djangoproject
opensuse
debian
ubuntu_linux
django
opensuse
debian_linux
The django.util.http.is_safe_url function in Django 1.4 before 1.4.13, 1.5 before 1.5.8, 1.6 before 1.6.5, and 1.7 before 1.7b4 does not properly validate URLs, which allows remote attackers to condu… CWE-20
 Improper Input Validation 
CVE-2014-3730 2024-11-21 11:08 2014-05-17 Show GitHub Exploit DB Packet Storm
292560 - codecguide k-lite_codec_pack Filters\LAV\avfilter-lav-4.dll in K-lite Codec 10.4.5 and earlier allows remote attackers to cause a denial of service (crash) via a crafted .jpg file. CWE-119
Incorrect Access of Indexable Resource ('Range Error') 
CVE-2014-3452 2024-11-21 11:08 2014-05-17 Show GitHub Exploit DB Packet Storm