Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 4, 2026, 4 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
203721 5.6 警告
Network
Apache Software Foundation - Apache Struts において任意のコードを実行可能な脆弱性 CWE-20
不適切な入力確認
CVE-2016-4438 2016-08-3 16:11 2016-06-20 Show GitHub Exploit DB Packet Storm
203722 7.1 重要
Network
西日本電信電話株式会社
東日本電信電話株式会社
- 複数のひかり電話ルータおよびひかり電話対応機器におけるクロスサイトリクエストフォージェリの脆弱性 CWE-352
同一生成元ポリシー違反
CVE-2016-1228 2016-08-3 16:02 2016-06-27 Show GitHub Exploit DB Packet Storm
203723 6.8 警告
Adjacent
西日本電信電話株式会社
東日本電信電話株式会社
- 複数のひかり電話ルータおよびひかり電話対応機器における OS コマンドインジェクションの脆弱性 CWE-78
OSコマンド・インジェクション
CVE-2016-1227 2016-08-3 16:02 2016-06-27 Show GitHub Exploit DB Packet Storm
203724 4.7 警告
Network
日立 - Hitachi Tuning Manager におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
- 2016-08-3 15:25 2016-05-16 Show GitHub Exploit DB Packet Storm
203725 3.1
Network
日立 - Hitachi Command Suite 製品における情報漏えいに関する脆弱性 CWE-noinfo
情報不足
- 2016-08-3 15:20 2016-05-16 Show GitHub Exploit DB Packet Storm
203726 8.8 重要
Network
libbpg - libbpg にメモリ境界外への書き込みを行う脆弱性 CWE-119
CWE-Other
CVE-2016-5637 2016-08-3 15:06 2016-07-12 Show GitHub Exploit DB Packet Storm
203727 6.1 警告
Network
QNAP Systems - QNAP QTS におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2015-5664 2016-08-3 14:54 2016-06-27 Show GitHub Exploit DB Packet Storm
203728 7.5 重要
Network
フォーティネット
Cavium
- Cavium Software Development Kit の RSA-CRT の実装における RSA 秘密鍵を取得される脆弱性 CWE-200
情報漏えい
CVE-2015-5738 2016-08-3 14:39 2015-12-14 Show GitHub Exploit DB Packet Storm
203729 9.8 緊急
Network
- 複数の OS 上で稼動する HPE Operations Manager の AdminUI における任意のコマンドを実行される脆弱性 CWE-Other
その他
CVE-2016-4373 2016-08-3 11:26 2016-07-25 Show GitHub Exploit DB Packet Storm
203730 5 警告 ヒューレット・パッカード
日本電気
Apache Software Foundation
- Apache Tomcat の HTTP Digest Access Authentication 実装における完全性保護の要求を回避される脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2011-5062 2016-08-2 17:34 2012-01-14 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 5, 2026, 4:11 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
291471 - google android Android 4.0 through 4.3 allows attackers to bypass intended access restrictions and remove device locks via a crafted application that invokes the updateUnlockMethodAndFinish method in the com.androi… CWE-264
Permissions, Privileges, and Access Controls
CVE-2013-6271 2024-11-21 10:58 2013-12-15 Show GitHub Exploit DB Packet Storm
291472 - quagga quagga The bgp_attr_unknown function in bgp_attr.c in Quagga 0.99.21 does not properly initialize the total variable, which allows remote attackers to cause a denial of service (bgpd crash) via a crafted BG… NVD-CWE-noinfo
CVE-2013-6051 2024-11-21 10:58 2013-12-15 Show GitHub Exploit DB Packet Storm
291473 - munin-monitoring munin The get_group_tree function in lib/Munin/Master/HTMLConfig.pm in Munin before 2.0.18 allows remote nodes to cause a denial of service (infinite loop and memory consumption in the munin-html process) … CWE-20
 Improper Input Validation 
CVE-2013-6048 2024-11-21 10:58 2013-12-14 Show GitHub Exploit DB Packet Storm
291474 - cybozu dezie Cross-site scripting (XSS) vulnerability in Cybozu Dezie before 8.1.0 allows remote attackers to inject arbitrary web script or HTML via vectors related to the Cancel button. CWE-79
Cross-site Scripting
CVE-2013-6005 2024-11-21 10:58 2013-12-14 Show GitHub Exploit DB Packet Storm
291475 - oracle fusion_middleware Unspecified vulnerability in the Oracle Outside In Technology component in Oracle Fusion Middleware 8.4.0 allows context-dependent attackers to affect availability via unknown vectors related to Outs… NVD-CWE-noinfo
CVE-2013-5763 2024-11-21 10:58 2013-12-13 Show GitHub Exploit DB Packet Storm
291476 - uclouvain openjpeg Heap-based buffer overflow in OpenJPEG 1.3 has unspecified impact and remote vectors, a different vulnerability than CVE-2013-6045. CWE-119
Incorrect Access of Indexable Resource ('Range Error') 
CVE-2013-6054 2024-11-21 10:58 2013-12-13 Show GitHub Exploit DB Packet Storm
291477 - uclouvain openjpeg OpenJPEG 1.3 and earlier allows remote attackers to obtain sensitive information via unspecified vectors that trigger a heap-based out-of-bounds read. CWE-200
Information Exposure
CVE-2013-6052 2024-11-21 10:58 2013-12-13 Show GitHub Exploit DB Packet Storm
291478 - uclouvain openjpeg Multiple heap-based buffer overflows in OpenJPEG 1.3 and earlier might allow remote attackers to execute arbitrary code via unspecified vectors. CWE-119
Incorrect Access of Indexable Resource ('Range Error') 
CVE-2013-6045 2024-11-21 10:58 2013-12-13 Show GitHub Exploit DB Packet Storm
291479 - islonline isl_desktop_plugin
isl_light
The ISL Desktop plugin for Windows before 1.4.7 for ISL Light 3.5.4 and earlier allows remote authenticated users to obtain sensitive information by pasting the clipboard contents that have been copi… CWE-200
Information Exposure
CVE-2013-6237 2024-11-21 10:58 2013-12-11 Show GitHub Exploit DB Packet Storm
291480 - livezilla livezilla Multiple cross-site scripting (XSS) vulnerabilities in LiveZilla before 5.1.1.0 allow remote attackers to inject arbitrary web script or HTML via (1) a name in the call administrator feature, (2) uns… CWE-79
Cross-site Scripting
CVE-2013-6224 2024-11-21 10:58 2013-12-11 Show GitHub Exploit DB Packet Storm