Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 6, 2026, 10 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
203891 7.1 重要
Network
西日本電信電話株式会社
東日本電信電話株式会社
- 複数のひかり電話ルータおよびひかり電話対応機器におけるクロスサイトリクエストフォージェリの脆弱性 CWE-352
同一生成元ポリシー違反
CVE-2016-1228 2016-08-3 16:02 2016-06-27 Show GitHub Exploit DB Packet Storm
203892 6.8 警告
Adjacent
西日本電信電話株式会社
東日本電信電話株式会社
- 複数のひかり電話ルータおよびひかり電話対応機器における OS コマンドインジェクションの脆弱性 CWE-78
OSコマンド・インジェクション
CVE-2016-1227 2016-08-3 16:02 2016-06-27 Show GitHub Exploit DB Packet Storm
203893 4.7 警告
Network
日立 - Hitachi Tuning Manager におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
- 2016-08-3 15:25 2016-05-16 Show GitHub Exploit DB Packet Storm
203894 3.1
Network
日立 - Hitachi Command Suite 製品における情報漏えいに関する脆弱性 CWE-noinfo
情報不足
- 2016-08-3 15:20 2016-05-16 Show GitHub Exploit DB Packet Storm
203895 8.8 重要
Network
libbpg - libbpg にメモリ境界外への書き込みを行う脆弱性 CWE-119
CWE-Other
CVE-2016-5637 2016-08-3 15:06 2016-07-12 Show GitHub Exploit DB Packet Storm
203896 6.1 警告
Network
QNAP Systems - QNAP QTS におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2015-5664 2016-08-3 14:54 2016-06-27 Show GitHub Exploit DB Packet Storm
203897 7.5 重要
Network
フォーティネット
Cavium
- Cavium Software Development Kit の RSA-CRT の実装における RSA 秘密鍵を取得される脆弱性 CWE-200
情報漏えい
CVE-2015-5738 2016-08-3 14:39 2015-12-14 Show GitHub Exploit DB Packet Storm
203898 9.8 緊急
Network
- 複数の OS 上で稼動する HPE Operations Manager の AdminUI における任意のコマンドを実行される脆弱性 CWE-Other
その他
CVE-2016-4373 2016-08-3 11:26 2016-07-25 Show GitHub Exploit DB Packet Storm
203899 5 警告 ヒューレット・パッカード
日本電気
Apache Software Foundation
- Apache Tomcat の HTTP Digest Access Authentication 実装における完全性保護の要求を回避される脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2011-5062 2016-08-2 17:34 2012-01-14 Show GitHub Exploit DB Packet Storm
203900 4.3 警告 ヒューレット・パッカード
日本電気
Apache Software Foundation
- Apache Tomcat の HTTP Digest Access Authentication 実装におけるアクセス制限を回避される脆弱性 CWE-287
不適切な認証
CVE-2011-5063 2016-08-2 17:34 2012-01-14 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 6, 2026, 4:18 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
290151 - apple iphone_os
tvos
Buffer overflow in ImageIO in Apple iOS before 7.1 and Apple TV before 6.1 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via crafted JPEG2000 data… CWE-119
Incorrect Access of Indexable Resource ('Range Error') 
CVE-2014-1275 2024-11-21 11:03 2014-03-14 Show GitHub Exploit DB Packet Storm
290152 - apple iphone_os FaceTime in Apple iOS before 7.1 allows physically proximate attackers to obtain sensitive FaceTime contact information by using the lock screen for an invalid FaceTime call. CWE-200
Information Exposure
CVE-2014-1274 2024-11-21 11:03 2014-03-14 Show GitHub Exploit DB Packet Storm
290153 - apple tvos
iphone_os
dyld in Apple iOS before 7.1 and Apple TV before 6.1 allows attackers to bypass code-signing requirements by leveraging use of text-relocation instructions in a dynamic library. CWE-20
 Improper Input Validation 
CVE-2014-1273 2024-11-21 11:03 2014-03-14 Show GitHub Exploit DB Packet Storm
290154 - apple tvos
iphone_os
CrashHouseKeeping in Crash Reporting in Apple iOS before 7.1 and Apple TV before 6.1 allows local users to change arbitrary file permissions by leveraging a symlink. CWE-59
Link Following
CVE-2014-1272 2024-11-21 11:03 2014-03-14 Show GitHub Exploit DB Packet Storm
290155 - apple iphone_os
tvos
CoreCapture in Apple iOS before 7.1 and Apple TV before 6.1 does not properly validate IOKit API calls, which allows attackers to cause a denial of service (assertion failure and device crash) via a … CWE-20
 Improper Input Validation 
CVE-2014-1271 2024-11-21 11:03 2014-03-14 Show GitHub Exploit DB Packet Storm
290156 - apple tvos
iphone_os
The Configuration Profiles component in Apple iOS before 7.1 and Apple TV before 6.1 does not properly evaluate the expiration date of a mobile configuration profile, which allows attackers to bypass… CWE-20
 Improper Input Validation 
CVE-2014-1267 2024-11-21 11:03 2014-03-14 Show GitHub Exploit DB Packet Storm
290157 - ibm aix ftpd in IBM AIX 7.1.1 before SP10 and 7.1.2 before SP5, when a Workload Partition (aka WPAR) for AIX 5.2 or 5.3 is used, allows remote authenticated users to bypass intended permission settings and m… CWE-264
Permissions, Privileges, and Access Controls
CVE-2014-0899 2024-11-21 11:03 2014-03-11 Show GitHub Exploit DB Packet Storm
290158 - telligent evolution Cross-site scripting (XSS) vulnerability in controlpanel/loading.aspx in Telligent Evolution before 6.1.19.36103, 7.x before 7.1.12.36162, 7.5.x, and 7.6.x before 7.6.7.36651 allows remote attackers … CWE-79
Cross-site Scripting
CVE-2014-1223 2024-11-21 11:03 2014-02-28 Show GitHub Exploit DB Packet Storm
290159 - apple safari
mac_os_x
mac_os_x_server
webkit
WebKit, as used in Apple Safari before 6.1.2 and 7.x before 7.0.2, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a craft… CWE-119
Incorrect Access of Indexable Resource ('Range Error') 
CVE-2014-1270 2024-11-21 11:03 2014-02-27 Show GitHub Exploit DB Packet Storm
290160 - apple safari
mac_os_x
mac_os_x_server
webkit
WebKit, as used in Apple Safari before 6.1.2 and 7.x before 7.0.2, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a craft… CWE-119
Incorrect Access of Indexable Resource ('Range Error') 
CVE-2014-1269 2024-11-21 11:03 2014-02-27 Show GitHub Exploit DB Packet Storm