Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 4, 2026, 10 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
203741 2.9
Local
日立
オラクル
- 複数の Oracle Java 製品における Networking に関する脆弱性 CWE-noinfo
情報不足
CVE-2016-3485 2016-08-2 15:51 2016-07-19 Show GitHub Exploit DB Packet Storm
203742 7.8 重要
Local
Novell - Novell Filr における権限を取得される脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2016-1611 2016-08-2 13:41 2016-06-9 Show GitHub Exploit DB Packet Storm
203743 7.5 重要
Network
Novell - Novell Filr の電子メールのテンプレート機能におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル
CVE-2016-1610 2016-08-2 13:41 2016-07-20 Show GitHub Exploit DB Packet Storm
203744 5.4 警告
Network
Novell - Novell Filr におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2016-1609 2016-08-2 13:41 2016-07-20 Show GitHub Exploit DB Packet Storm
203745 8.8 重要
Network
Novell - Novell Filr の vaconfig/time における任意のコマンドを実行される脆弱性 CWE-Other
その他
CVE-2016-1608 2016-08-2 13:41 2016-07-20 Show GitHub Exploit DB Packet Storm
203746 7.2 重要
Network
Novell - Novell Filr の管理インターフェースにおけるクロスサイトリクエストフォージェリの脆弱性 CWE-352
同一生成元ポリシー違反
CVE-2016-1607 2016-08-2 13:41 2016-07-21 Show GitHub Exploit DB Packet Storm
203747 6.5 警告
Network
MIT Kerberos - MIT Kerberos 5 の鍵配布センタの kdc_util.c の validate_as_request 関数におけるサービス運用妨害 (DoS) の脆弱性 CWE-Other
その他
CVE-2016-3120 2016-08-2 11:36 2016-07-20 Show GitHub Exploit DB Packet Storm
203748 6.5 警告
Network
NetIQ - NetIQ Sentinel のサーバの ReportViewServlet サーブレットにおけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル
CVE-2016-1605 2016-08-2 11:21 2016-07-2 Show GitHub Exploit DB Packet Storm
203749 8.8 重要
Network
Google - Google Chrome の midgard/mali_kbase_vinstr.c における整数オーバーフローの脆弱性 CWE-Other
その他
CVE-2016-5138 2016-08-2 11:11 2016-07-26 Show GitHub Exploit DB Packet Storm
203750 7.5 重要
Network
シスコシステムズ - Cisco E メール セキュリティ アプライアンス デバイス上で稼動する AsyncOS におけるマルウェアの検出を回避される脆弱性 CWE-20
不適切な入力確認
CVE-2016-1461 2016-08-2 10:47 2016-07-27 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 4, 2026, 4:17 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
290111 - toshibacommerce 4690_point_of_sale_operating_system The default configuration of IBM 4690 OS, as used in Toshiba Global Commerce Solutions 4690 POS and other products, hashes passwords with the ADXCRYPT algorithm, which makes it easier for context-dep… CWE-310
Cryptographic Issues
CVE-2014-0361 2024-11-21 11:01 2014-04-22 Show GitHub Exploit DB Packet Storm
290112 - qemu
redhat
qemu
enterprise_linux
Integer overflow in the virtio_net_handle_mac function in hw/net/virtio-net.c in QEMU 2.0 and earlier allows local guest users to execute arbitrary code via a MAC addresses table update request, whic… CWE-189
Numeric Errors
CVE-2014-0150 2024-11-21 11:01 2014-04-18 Show GitHub Exploit DB Packet Storm
290113 - apache syncope Apache Syncope 1.0.0 before 1.0.9 and 1.1.0 before 1.1.7 allows remote administrators to execute arbitrary Java code via vectors related to Apache Commons JEXL expressions, "derived schema definition… CWE-94
Code Injection
CVE-2014-0111 2024-11-21 11:01 2014-04-17 Show GitHub Exploit DB Packet Storm
290114 - redhat jboss_a-mq
jboss_fuse
JBoss Fuse did not enable encrypted passwords by default in its usage of Apache Zookeeper. This permitted sensitive information disclosure via logging to local users. Note: this description has been … CWE-255
Credentials Management
CVE-2014-0085 2024-11-21 11:01 2014-04-17 Show GitHub Exploit DB Packet Storm
290115 - redhat openstack PackStack in Red Hat OpenStack 4.0 does not enforce the default security groups when deployed to Neutron, which allows remote attackers to bypass intended access restrictions and make unauthorized co… CWE-264
Permissions, Privileges, and Access Controls
CVE-2014-0071 2024-11-21 11:01 2014-04-17 Show GitHub Exploit DB Packet Storm
290116 - springsource
vmware
spring_framework The Jaxb2RootElementHttpMessageConverter in Spring MVC in Spring Framework before 3.2.8 and 4.0.0 before 4.0.2 does not disable external entity resolution, which allows remote attackers to read arbit… CWE-352
 Origin Validation Error
CVE-2014-0054 2024-11-21 11:01 2014-04-17 Show GitHub Exploit DB Packet Storm
290117 - amos_benari rbovirt The rbovirt gem before 0.0.24 for Ruby uses the rest-client gem with SSL verification disabled, which allows remote attackers to conduct man-in-the-middle attacks via unspecified vectors. CWE-310
Cryptographic Issues
CVE-2014-0036 2024-11-21 11:01 2014-04-17 Show GitHub Exploit DB Packet Storm
290118 - oracle
mariadb
redhat
mysql
mariadb
enterprise_linux_desktop
enterprise_linux_server
enterprise_linux_workstation
enterprise_linux_server_tus
enterprise_linux_server_aus
enterprise_linux_eus
Unspecified vulnerability in the MySQL Server component in Oracle MySQL 5.5.35 and earlier and 5.6.15 and earlier allows remote authenticated users to affect availability via vectors related to XML. NVD-CWE-noinfo
CVE-2014-0384 2024-11-21 11:01 2014-04-16 Show GitHub Exploit DB Packet Storm
290119 - gopivotal grails-resources
grails
The default configuration of the Resources plugin 1.0.0 before 1.2.6 for Pivotal Grails 2.0.0 before 2.3.6 does not properly restrict access to files in the WEB-INF directory, which allows remote att… CWE-264
Permissions, Privileges, and Access Controls
CVE-2014-0053 2024-11-21 11:01 2014-04-16 Show GitHub Exploit DB Packet Storm
290120 - apache
oracle
xalan-java
webcenter_sites
The TransformerFactory in Apache Xalan-Java before 2.7.2 does not properly restrict access to certain properties when FEATURE_SECURE_PROCESSING is enabled, which allows remote attackers to bypass exp… CWE-264
Permissions, Privileges, and Access Controls
CVE-2014-0107 2024-11-21 11:01 2014-04-16 Show GitHub Exploit DB Packet Storm