Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 4, 2026, 4 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
203721 7.1 重要
Network
西日本電信電話株式会社
東日本電信電話株式会社
- 複数のひかり電話ルータおよびひかり電話対応機器におけるクロスサイトリクエストフォージェリの脆弱性 CWE-352
同一生成元ポリシー違反
CVE-2016-1228 2016-08-3 16:02 2016-06-27 Show GitHub Exploit DB Packet Storm
203722 6.8 警告
Adjacent
西日本電信電話株式会社
東日本電信電話株式会社
- 複数のひかり電話ルータおよびひかり電話対応機器における OS コマンドインジェクションの脆弱性 CWE-78
OSコマンド・インジェクション
CVE-2016-1227 2016-08-3 16:02 2016-06-27 Show GitHub Exploit DB Packet Storm
203723 4.7 警告
Network
日立 - Hitachi Tuning Manager におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
- 2016-08-3 15:25 2016-05-16 Show GitHub Exploit DB Packet Storm
203724 3.1
Network
日立 - Hitachi Command Suite 製品における情報漏えいに関する脆弱性 CWE-noinfo
情報不足
- 2016-08-3 15:20 2016-05-16 Show GitHub Exploit DB Packet Storm
203725 8.8 重要
Network
libbpg - libbpg にメモリ境界外への書き込みを行う脆弱性 CWE-119
CWE-Other
CVE-2016-5637 2016-08-3 15:06 2016-07-12 Show GitHub Exploit DB Packet Storm
203726 6.1 警告
Network
QNAP Systems - QNAP QTS におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2015-5664 2016-08-3 14:54 2016-06-27 Show GitHub Exploit DB Packet Storm
203727 7.5 重要
Network
フォーティネット
Cavium
- Cavium Software Development Kit の RSA-CRT の実装における RSA 秘密鍵を取得される脆弱性 CWE-200
情報漏えい
CVE-2015-5738 2016-08-3 14:39 2015-12-14 Show GitHub Exploit DB Packet Storm
203728 9.8 緊急
Network
- 複数の OS 上で稼動する HPE Operations Manager の AdminUI における任意のコマンドを実行される脆弱性 CWE-Other
その他
CVE-2016-4373 2016-08-3 11:26 2016-07-25 Show GitHub Exploit DB Packet Storm
203729 5 警告 ヒューレット・パッカード
日本電気
Apache Software Foundation
- Apache Tomcat の HTTP Digest Access Authentication 実装における完全性保護の要求を回避される脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2011-5062 2016-08-2 17:34 2012-01-14 Show GitHub Exploit DB Packet Storm
203730 4.3 警告 ヒューレット・パッカード
日本電気
Apache Software Foundation
- Apache Tomcat の HTTP Digest Access Authentication 実装におけるアクセス制限を回避される脆弱性 CWE-287
不適切な認証
CVE-2011-5063 2016-08-2 17:34 2012-01-14 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 4, 2026, 4:17 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
290071 - pocoo jinja2 FileSystemBytecodeCache in Jinja2 2.7.2 does not properly create temporary directories, which allows local users to gain privileges by pre-creating a temporary directory with a user's uid. NOTE: thi… CWE-264
Permissions, Privileges, and Access Controls
CVE-2014-0012 2024-11-21 11:01 2014-05-19 Show GitHub Exploit DB Packet Storm
290072 - canonical
x
ubuntu_linux
libxfont
Multiple integer overflows in the (1) fs_get_reply, (2) fs_alloc_glyphs, and (3) fs_read_extent_info functions in X.Org libXfont before 1.4.8 and 1.4.9x before 1.4.99.901 allow remote font servers to… CWE-189
Numeric Errors
CVE-2014-0211 2024-11-21 11:01 2014-05-15 Show GitHub Exploit DB Packet Storm
290073 - x
canonical
libxfont
ubuntu_linux
Multiple buffer overflows in X.Org libXfont before 1.4.8 and 1.4.9x before 1.4.99.901 allow remote font servers to execute arbitrary code via a crafted xfs protocol reply to the (1) _fs_recv_conn_set… CWE-119
Incorrect Access of Indexable Resource ('Range Error') 
CVE-2014-0210 2024-11-21 11:01 2014-05-15 Show GitHub Exploit DB Packet Storm
290074 - x
canonical
libxfont
ubuntu_linux
Multiple integer overflows in the (1) FontFileAddEntry and (2) lexAlias functions in X.Org libXfont before 1.4.8 and 1.4.9x before 1.4.99.901 might allow local users to gain privileges by adding a di… CWE-189
Numeric Errors
CVE-2014-0209 2024-11-21 11:01 2014-05-15 Show GitHub Exploit DB Packet Storm
290075 - redhat cloudforms_3.0_management_engine SQL injection vulnerability in the saved_report_delete action in the ReportController in Red Hat CloudForms Management Engine (CFME) before 5.2.3.2 allows remote authenticated users to execute arbitr… CWE-89
SQL Injection
CVE-2014-0137 2024-11-21 11:01 2014-05-15 Show GitHub Exploit DB Packet Storm
290076 - redhat cloudforms_3.0_management_engine The CatalogController in Red Hat CloudForms Management Engine (CFME) before 5.2.3.2 allows remote authenticated users to delete arbitrary catalogs via vectors involving guessing the catalog ID. CWE-264
Permissions, Privileges, and Access Controls
CVE-2014-0078 2024-11-21 11:01 2014-05-15 Show GitHub Exploit DB Packet Storm
290077 - microsoft internet_explorer Microsoft Internet Explorer 6 through 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Internet Explorer Memory Corru… CWE-119
Incorrect Access of Indexable Resource ('Range Error') 
CVE-2014-0310 2024-11-21 11:01 2014-05-14 Show GitHub Exploit DB Packet Storm
290078 - microsoft windows_server_2008
windows_server_2012
Microsoft Windows Server 2008 SP2 and R2 SP1 and Server 2012 Gold allow remote attackers to cause a denial of service (iSCSI service outage) by sending many crafted packets, aka "iSCSI Target Remote … CWE-20
 Improper Input Validation 
CVE-2014-0256 2024-11-21 11:01 2014-05-14 Show GitHub Exploit DB Packet Storm
290079 - microsoft windows_server_2008
windows_server_2012
Microsoft Windows Server 2008 SP2 and R2 SP1 and Server 2012 Gold and R2 allow remote attackers to cause a denial of service (iSCSI service outage) by sending many crafted packets, aka "iSCSI Target … CWE-20
 Improper Input Validation 
CVE-2014-0255 2024-11-21 11:01 2014-05-14 Show GitHub Exploit DB Packet Storm
290080 - microsoft project_server
sharepoint_foundation
web_applications
sharepoint_server
sharepoint_designer
office_web_apps_server
sharepoint_services
sharepoint_server_client_components_sdk
Microsoft Windows SharePoint Services 3.0 SP3; SharePoint Server 2007 SP3, 2010 SP1 and SP2, and 2013 Gold and SP1; SharePoint Foundation 2010 SP1 and SP2 and 2013 Gold and SP1; Project Server 2010 S… CWE-94
Code Injection
CVE-2014-0251 2024-11-21 11:01 2014-05-14 Show GitHub Exploit DB Packet Storm