Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 22, 2026, 2 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
204081 5 警告 日立
Canonical
オラクル
- 複数の Oracle Java 製品 における JAXP に関する脆弱性 CWE-noinfo
情報不足
CVE-2016-0466 2016-11-21 15:31 2016-01-19 Show GitHub Exploit DB Packet Storm
204082 4 警告 日立
Canonical
オラクル
- Oracle Java SE および Java SE Embedded における JMX に関する脆弱性 CWE-noinfo
情報不足
CVE-2016-0448 2016-11-21 15:31 2016-01-19 Show GitHub Exploit DB Packet Storm
204083 5 警告 日立
Canonical
オラクル
- Oracle Java SE および Java SE Embedded における Networking に関する脆弱性 CWE-noinfo
情報不足
CVE-2016-0402 2016-11-21 15:31 2016-01-19 Show GitHub Exploit DB Packet Storm
204084 6.8 警告
Local
オラクル - Oracle Virtualization の Oracle VM VirtualBox における Core に関する脆弱性 CWE-Other
その他
CVE-2016-5610 2016-11-21 12:23 2016-10-18 Show GitHub Exploit DB Packet Storm
204085 5.5 警告
Local
ImageMagick
Canonical
レッドハット
- ImageMagick の LABEL コーダにおける任意のファイルを読まれる脆弱性 CWE-200
情報漏えい
CVE-2016-3717 2016-11-21 12:02 2016-05-3 Show GitHub Exploit DB Packet Storm
204086 6.3 警告
Local
ImageMagick
Canonical
レッドハット
- ImageMagick の HTTP および FTP コーダにおけるサーバサイドのリクエストフォージェリの脆弱性 CWE-20
不適切な入力確認
CVE-2016-3718 2016-11-21 11:59 2016-05-3 Show GitHub Exploit DB Packet Storm
204087 3.3
Local
ImageMagick
Canonical
レッドハット
- ImageMagick の MSL コーダにおける任意のファイルを移動される脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2016-3716 2016-11-21 11:45 2016-05-3 Show GitHub Exploit DB Packet Storm
204088 6.5 警告
Network
LibGD project
Debian
openSUSE project
- GD Graphics Library の gd_tga.c におけるサービス運用妨害 (DoS) の脆弱性 CWE-Other
その他
CVE-2016-6214 2016-11-21 11:00 2016-07-22 Show GitHub Exploit DB Packet Storm
204089 6.5 警告
Network
LibGD project
Debian
openSUSE project
- GD Graphics Library の gd_interpolation.c の _gdContributionsAlloc 関数における整数オーバーフローの脆弱性 CWE-119
CWE-Other
CVE-2016-6207 2016-11-21 11:00 2016-07-22 Show GitHub Exploit DB Packet Storm
204090 6.5 警告
Network
LibGD project
Debian
openSUSE project
- GD Graphics Library の gd_gif_out.c の output 関数におけるサービス運用妨害 (DoS) の脆弱性 CWE-Other
その他
CVE-2016-6161 2016-11-21 11:00 2016-05-14 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 22, 2026, 4 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
292101 - apple safari WebKit, as used in Apple Safari before 6.1.3 and 7.x before 7.0.3, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a craft… CWE-119
Incorrect Access of Indexable Resource ('Range Error') 
CVE-2014-1304 2024-11-21 11:04 2014-04-3 Show GitHub Exploit DB Packet Storm
292102 - apple safari WebKit, as used in Apple Safari before 6.1.3 and 7.x before 7.0.3, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a craft… CWE-119
Incorrect Access of Indexable Resource ('Range Error') 
CVE-2014-1302 2024-11-21 11:04 2014-04-3 Show GitHub Exploit DB Packet Storm
292103 - apple safari
itunes
WebKit, as used in Apple Safari before 6.1.3 and 7.x before 7.0.3, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a craft… CWE-119
Incorrect Access of Indexable Resource ('Range Error') 
CVE-2014-1301 2024-11-21 11:04 2014-04-3 Show GitHub Exploit DB Packet Storm
292104 - apple safari WebKit, as used in Apple Safari before 6.1.3 and 7.x before 7.0.3, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a craft… CWE-119
Incorrect Access of Indexable Resource ('Range Error') 
CVE-2014-1299 2024-11-21 11:04 2014-04-3 Show GitHub Exploit DB Packet Storm
292105 - apple safari WebKit, as used in Apple Safari before 6.1.3 and 7.x before 7.0.3, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a craft… CWE-119
Incorrect Access of Indexable Resource ('Range Error') 
CVE-2014-1298 2024-11-21 11:04 2014-04-3 Show GitHub Exploit DB Packet Storm
292106 - apple safari WebKit, as used in Apple Safari before 6.1.3 and 7.x before 7.0.3, does not properly validate WebProcess IPC messages, which allows remote attackers to bypass a sandbox protection mechanism and read … CWE-20
 Improper Input Validation 
CVE-2014-1297 2024-11-21 11:04 2014-04-3 Show GitHub Exploit DB Packet Storm
292107 - horde horde_application_framework The framework/Util/lib/Horde/Variables.php script in the Util library in Horde before 5.1.1 allows remote attackers to conduct object injection attacks and execute arbitrary PHP code via a crafted se… CWE-94
Code Injection
CVE-2014-1691 2024-11-21 11:04 2014-04-2 Show GitHub Exploit DB Packet Storm
292108 - mozilla firefox The saltProfileName function in base/GeckoProfileDirectories.java in Mozilla Firefox through 28.0.1 on Android relies on Android's weak approach to seeding the Math.random function, which makes it ea… CWE-264
Permissions, Privileges, and Access Controls
CVE-2014-1516 2024-11-21 11:04 2014-03-30 Show GitHub Exploit DB Packet Storm
292109 - symantec liveupdate_administrator SQL injection vulnerability in forcepasswd.do in the management GUI in Symantec LiveUpdate Administrator (LUA) 2.x before 2.3.2.110 allows remote attackers to execute arbitrary SQL commands via unspe… CWE-89
SQL Injection
CVE-2014-1645 2024-11-21 11:04 2014-03-29 Show GitHub Exploit DB Packet Storm
292110 - symantec liveupdate_administrator The forgotten-password feature in forcepasswd.do in the management GUI in Symantec LiveUpdate Administrator (LUA) 2.x before 2.3.2.110 allows remote attackers to reset arbitrary passwords by providin… CWE-255
Credentials Management
CVE-2014-1644 2024-11-21 11:04 2014-03-29 Show GitHub Exploit DB Packet Storm