Vulnerability Search Top

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

Vulnerability Information Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":June 3, 2026, 10 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
204001	7.8	重要 Local	Google	-	Nexus 5 デバイス上で稼動する Android の Qualcomm コンポーネントの arch/arm/mach-msm/qdsp6v2/msm_audio_ion.c におけるカーネルメモリから重要な情報を取得される脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2014-9779	2016-07-13 11:51	2016-07-6	Show	GitHub Exploit DB Packet Storm

204002	7.8	重要 Local	Google	-	Nexus 5 および 7 (2013) デバイス上で稼動する Android の Qualcomm コンポーネントにおける権限を取得される脆弱性	CWE-119 バッファエラー	CVE-2014-9778	2016-07-13 11:51	2016-07-6	Show	GitHub Exploit DB Packet Storm

204003	7.8	重要 Local	Google	-	Nexus 5 および 7 (2013) デバイス上で稼動する Android の Qualcomm コンポーネントにおける権限を取得される脆弱性	CWE-119 バッファエラー	CVE-2014-9777	2016-07-13 11:51	2016-07-6	Show	GitHub Exploit DB Packet Storm

204004	7.8	重要 Local	Google	-	Android の Qualcomm コンポーネントにおける権限を取得される脆弱性	CWE-noinfo 情報不足	CVE-2013-7457	2016-07-13 11:51	2016-07-6	Show	GitHub Exploit DB Packet Storm

204005	8.8	重要 Network	IBM	-	IBM Jazz Reporting Service の Report Builder および Data Collection Component におけるクロスサイトリクエストフォージェリの脆弱性	CWE-352 同一生成元ポリシー違反	CVE-2016-2889	2016-07-13 10:13	2016-06-24	Show	GitHub Exploit DB Packet Storm

204006	5.4	警告 Network	IBM	-	IBM Jazz Reporting Service の Report Builder および Data Collection Component におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2016-2888	2016-07-13 10:13	2016-06-24	Show	GitHub Exploit DB Packet Storm

204007	5.4	警告 Network	IBM	-	IBM Jazz Reporting Service の Report Builder および Data Collection Component におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2016-0350	2016-07-13 10:13	2016-06-24	Show	GitHub Exploit DB Packet Storm

204008	8.8	重要 Network	IBM	-	IBM Jazz Reporting Service の Report Builder および Data Collection Component におけるセッションをハイジャックされる脆弱性	CWE-Other その他	CVE-2016-0315	2016-07-13 10:13	2016-06-24	Show	GitHub Exploit DB Packet Storm

204009	6.5	警告 Network	IBM	-	IBM Jazz Reporting Service の Report Builder および Data Collection Component におけるクリックジャッキング攻撃を実行される脆弱性	CWE-noinfo 情報不足	CVE-2016-0314	2016-07-13 10:13	2016-06-24	Show	GitHub Exploit DB Packet Storm

204010	5.4	警告 Network	IBM	-	IBM Jazz Reporting Service の Report Builder および Data Collection Component におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2016-0313	2016-07-13 10:13	2016-06-24	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:June 3, 2026, 4:18 a.m.

No	CVSS	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
290611	-	ibm	sametime	The Meeting Server in IBM Sametime 8.5.2 through 8.5.2.1 and 9.x through 9.0.0.1 do not have an off autocomplete attribute for a password field, which makes it easier for remote attackers to obtain a…	CWE-264 Permissions, Privileges, and Access Controls	CVE-2013-6742	2024-11-21 10:59	2014-02-14	Show	GitHub Exploit DB Packet Storm

290612	-	ibm	websphere_portal	Unrestricted file upload vulnerability in the Registration/Edit My Profile portlet in IBM WebSphere Portal 7.x before 7.0.0.2 CF27 and 8.x through 8.0.0.1 CF09 allows remote attackers to cause a deni…	NVD-CWE-Other	CVE-2013-6722	2024-11-21 10:59	2014-02-14	Show	GitHub Exploit DB Packet Storm

290613	-	ibm	websphere_dashboard_framework	The charting component in IBM WebSphere Dashboard Framework (WDF) 6.1.5 and 7.0.1 allows remote attackers to view or delete image files by leveraging incorrect security constraints for a temporary di…	CWE-264 Permissions, Privileges, and Access Controls	CVE-2013-6728	2024-11-21 10:59	2014-02-14	Show	GitHub Exploit DB Packet Storm

290614	-	ibm	algo_one	Unrestricted file upload vulnerability in IBM Algo One UDS 4.7.0 through 5.0.0 allows remote authenticated users to execute arbitrary code by uploading a .jsp file and then launching it.	NVD-CWE-Other	CVE-2013-6332	2024-11-21 10:59	2014-02-7	Show	GitHub Exploit DB Packet Storm

290615	-	pyyaml canonical redhat debian opensuse	libyaml ubuntu_linux openstack debian_linux opensuse leap	The yaml_parser_scan_tag_uri function in scanner.c in LibYAML before 0.1.5 performs an incorrect cast, which allows remote attackers to cause a denial of service (application crash) and possibly exec…	CWE-119 Incorrect Access of Indexable Resource ('Range Error')	CVE-2013-6393	2024-11-21 10:59	2014-02-7	Show	GitHub Exploit DB Packet Storm

290616	-	pidgin	pidgin	The SIMPLE protocol functionality in Pidgin before 2.10.8 allows remote attackers to have an unspecified impact via a negative Content-Length header, which triggers a buffer overflow.	CWE-119 Incorrect Access of Indexable Resource ('Range Error')	CVE-2013-6490	2024-11-21 10:59	2014-02-7	Show	GitHub Exploit DB Packet Storm

290617	-	pidgin	pidgin	Integer signedness error in the MXit functionality in Pidgin before 2.10.8 allows remote attackers to cause a denial of service (segmentation fault) via a crafted emoticon value, which triggers an in…	CWE-189 Numeric Errors	CVE-2013-6489	2024-11-21 10:59	2014-02-7	Show	GitHub Exploit DB Packet Storm

290618	-	pidgin	pidgin	Integer overflow in libpurple/protocols/gg/lib/http.c in the Gadu-Gadu (gg) parser in Pidgin before 2.10.8 allows remote attackers to have an unspecified impact via a large Content-Length value, whic…	CWE-189 Numeric Errors	CVE-2013-6487	2024-11-21 10:59	2014-02-7	Show	GitHub Exploit DB Packet Storm

290619	-	pidgin	pidgin	Pidgin before 2.10.8 allows remote MSN servers to cause a denial of service (NULL pointer dereference and crash) via a crafted (1) SOAP response, (2) OIM XML response, or (3) Content-Length header.	CWE-20 Improper Input Validation	CVE-2013-6482	2024-11-21 10:59	2014-02-7	Show	GitHub Exploit DB Packet Storm

290620	-	pidgin	pidgin	libpurple/protocols/yahoo/libymsg.c in Pidgin before 2.10.8 allows remote attackers to cause a denial of service (crash) via a Yahoo! P2P message with a crafted length field, which triggers a buffer …	CWE-119 Incorrect Access of Indexable Resource ('Range Error')	CVE-2013-6481	2024-11-21 10:59	2014-02-7	Show	GitHub Exploit DB Packet Storm