Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 4, 2026, 10 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
203801 5.5 警告
Local 		アップル - Apple iOS および watchOS の IOAcceleratorFamily におけるカーネルメモリから重要な情報を取得される脆弱性 CWE-200
CWE-Other
CVE-2016-4628 2016-07-29 12:21 2016-07-18 Show GitHub Exploit DB Packet Storm
203802 6.1 警告
Network 		アップル - Apple iOS および Safari などの WebKit JavaScript バインディングにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2016-4651 2016-07-29 12:21 2016-07-18 Show GitHub Exploit DB Packet Storm
203803 6.5 警告
Network 		アップル - Apple iOS のカレンダーにおけるサービス運用妨害 (DoS) の脆弱性 CWE-Other
その他 		CVE-2016-4605 2016-07-29 12:21 2016-07-18 Show GitHub Exploit DB Packet Storm
203804 5.4 警告
Network 		アップル - Apple iOS の Safari における表示される URL を偽装される脆弱性 CWE-Other
その他 		CVE-2016-4604 2016-07-29 12:21 2016-07-18 Show GitHub Exploit DB Packet Storm
203805 9.8 緊急
Network 		アップル
xmlsoft.org		 - 複数の Apple 製品の libxml2 におけるサービス運用妨害 (DoS) の脆弱性 CWE-119
バッファエラー 		CVE-2016-4619 2016-07-29 12:09 2016-07-18 Show GitHub Exploit DB Packet Storm
203806 9.8 緊急
Network 		アップル
xmlsoft.org		 - 複数の Apple 製品の libxml2 におけるサービス運用妨害 (DoS) の脆弱性 CWE-119
バッファエラー 		CVE-2016-4616 2016-07-29 12:09 2016-07-18 Show GitHub Exploit DB Packet Storm
203807 9.8 緊急
Network 		アップル
xmlsoft.org		 - 複数の Apple 製品の libxml2 におけるサービス運用妨害 (DoS) の脆弱性 CWE-119
バッファエラー 		CVE-2016-4615 2016-07-29 12:09 2016-07-18 Show GitHub Exploit DB Packet Storm
203808 9.8 緊急
Network 		アップル
xmlsoft.org		 - 複数の Apple 製品の libxml2 におけるサービス運用妨害 (DoS) の脆弱性 CWE-119
バッファエラー 		CVE-2016-4614 2016-07-29 12:09 2016-07-18 Show GitHub Exploit DB Packet Storm
203809 9.8 緊急
Network 		アップル
xmlsoft.org		 - 複数の Apple 製品の libxslt におけるサービス運用妨害 (DoS) の脆弱性 CWE-119
バッファエラー 		CVE-2016-4612 2016-07-29 12:09 2016-07-18 Show GitHub Exploit DB Packet Storm
203810 9.8 緊急
Network 		アップル
xmlsoft.org		 - 複数の Apple 製品の libxslt におけるサービス運用妨害 (DoS) の脆弱性 CWE-119
バッファエラー 		CVE-2016-4610 2016-07-29 12:08 2016-07-18 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 4, 2026, 4:17 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
290111 - toshibacommerce 4690_point_of_sale_operating_system The default configuration of IBM 4690 OS, as used in Toshiba Global Commerce Solutions 4690 POS and other products, hashes passwords with the ADXCRYPT algorithm, which makes it easier for context-dep… CWE-310
Cryptographic Issues 		CVE-2014-0361 2024-11-21 11:01 2014-04-22 Show GitHub Exploit DB Packet Storm
290112 - qemu
redhat 		qemu
enterprise_linux 		Integer overflow in the virtio_net_handle_mac function in hw/net/virtio-net.c in QEMU 2.0 and earlier allows local guest users to execute arbitrary code via a MAC addresses table update request, whic… CWE-189
Numeric Errors 		CVE-2014-0150 2024-11-21 11:01 2014-04-18 Show GitHub Exploit DB Packet Storm
290113 - apache syncope Apache Syncope 1.0.0 before 1.0.9 and 1.1.0 before 1.1.7 allows remote administrators to execute arbitrary Java code via vectors related to Apache Commons JEXL expressions, "derived schema definition… CWE-94
Code Injection 		CVE-2014-0111 2024-11-21 11:01 2014-04-17 Show GitHub Exploit DB Packet Storm
290114 - redhat jboss_a-mq
jboss_fuse 		JBoss Fuse did not enable encrypted passwords by default in its usage of Apache Zookeeper. This permitted sensitive information disclosure via logging to local users. Note: this description has been … CWE-255
Credentials Management 		CVE-2014-0085 2024-11-21 11:01 2014-04-17 Show GitHub Exploit DB Packet Storm
290115 - redhat openstack PackStack in Red Hat OpenStack 4.0 does not enforce the default security groups when deployed to Neutron, which allows remote attackers to bypass intended access restrictions and make unauthorized co… CWE-264
Permissions, Privileges, and Access Controls 		CVE-2014-0071 2024-11-21 11:01 2014-04-17 Show GitHub Exploit DB Packet Storm
290116 - springsource
vmware 		spring_framework The Jaxb2RootElementHttpMessageConverter in Spring MVC in Spring Framework before 3.2.8 and 4.0.0 before 4.0.2 does not disable external entity resolution, which allows remote attackers to read arbit… CWE-352
 Origin Validation Error 		CVE-2014-0054 2024-11-21 11:01 2014-04-17 Show GitHub Exploit DB Packet Storm
290117 - amos_benari rbovirt The rbovirt gem before 0.0.24 for Ruby uses the rest-client gem with SSL verification disabled, which allows remote attackers to conduct man-in-the-middle attacks via unspecified vectors. CWE-310
Cryptographic Issues 		CVE-2014-0036 2024-11-21 11:01 2014-04-17 Show GitHub Exploit DB Packet Storm
290118 - oracle
mariadb
redhat 		mysql
mariadb
enterprise_linux_desktop
enterprise_linux_server
enterprise_linux_workstation
enterprise_linux_server_tus
enterprise_linux_server_aus
enterprise_linux_eus 		Unspecified vulnerability in the MySQL Server component in Oracle MySQL 5.5.35 and earlier and 5.6.15 and earlier allows remote authenticated users to affect availability via vectors related to XML. NVD-CWE-noinfo
CVE-2014-0384 2024-11-21 11:01 2014-04-16 Show GitHub Exploit DB Packet Storm
290119 - gopivotal grails-resources
grails 		The default configuration of the Resources plugin 1.0.0 before 1.2.6 for Pivotal Grails 2.0.0 before 2.3.6 does not properly restrict access to files in the WEB-INF directory, which allows remote att… CWE-264
Permissions, Privileges, and Access Controls 		CVE-2014-0053 2024-11-21 11:01 2014-04-16 Show GitHub Exploit DB Packet Storm
290120 - apache
oracle 		xalan-java
webcenter_sites 		The TransformerFactory in Apache Xalan-Java before 2.7.2 does not properly restrict access to certain properties when FEATURE_SECURE_PROCESSING is enabled, which allows remote attackers to bypass exp… CWE-264
Permissions, Privileges, and Access Controls 		CVE-2014-0107 2024-11-21 11:01 2014-04-16 Show GitHub Exploit DB Packet Storm