Vulnerability Search Top

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

Vulnerability Information Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":June 20, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
204101	8.2	重要 Local	Fabrice Bellard Canonical	-	QEMU の 53C9X Fast SCSI Controller サポートの hw/scsi/esp.c の esp_reg_write 関数におけるサービス運用妨害 (DoS) の脆弱性	CWE-119 バッファエラー	CVE-2016-4439	2016-10-28 16:25	2016-05-19	Show	GitHub Exploit DB Packet Storm

204102	5.3	警告 Network	nov (jose-php project)	-	jose-php の JWE.php の JOSE_JWE クラスの RSA 1.5 アルゴリズムの実装における平文データを取得される脆弱性	CWE-200 CWE-310	CVE-2016-5430	2016-10-28 14:55	2016-08-31	Show	GitHub Exploit DB Packet Storm

204103	3.7	低 Network	nov (jose-php project)	-	jose-php における重要な情報を取得される脆弱性	CWE-200 情報漏えい	CVE-2016-5429	2016-10-28 14:55	2016-08-30	Show	GitHub Exploit DB Packet Storm

204104	3.1	低 Network	オラクル	-	Oracle Fusion Middleware の Oracle Data Integrator における Code Generation Engine に関する脆弱性	CWE-200 情報漏えい	CVE-2016-5618	2016-10-28 14:20	2016-10-18	Show	GitHub Exploit DB Packet Storm

204105	6.1	警告 Network	オラクル	-	Oracle Financial Services Applications の Oracle FLEXCUBE Universal Banking における INFRA に関する脆弱性	CWE-Other その他	CVE-2016-5622	2016-10-28 14:20	2016-10-18	Show	GitHub Exploit DB Packet Storm

204106	4.3	警告 Network	オラクル	-	Oracle Financial Services Applications の Oracle FLEXCUBE Universal Banking における INFRA に関する脆弱性	CWE-200 CWE-Other	CVE-2016-5621	2016-10-28 14:20	2016-10-18	Show	GitHub Exploit DB Packet Storm

204107	5.4	警告 Network	オラクル	-	Oracle Financial Services Applications の Oracle FLEXCUBE Universal Banking における INFRA に関する脆弱性	CWE-Other その他	CVE-2016-5620	2016-10-28 14:20	2016-10-18	Show	GitHub Exploit DB Packet Storm

204108	8.1	重要 Network	オラクル	-	Oracle Financial Services Applications の Oracle FLEXCUBE Universal Banking における INFRA に関する脆弱性	CWE-Other その他	CVE-2016-5619	2016-10-28 14:20	2016-10-18	Show	GitHub Exploit DB Packet Storm

204109	8.8	重要 Network	オラクル	-	Oracle Financial Services Applications の Oracle FLEXCUBE Universal Banking における INFRA に関する脆弱性	CWE-Other その他	CVE-2016-5607	2016-10-28 14:20	2016-10-18	Show	GitHub Exploit DB Packet Storm

204110	6.1	警告 Local	オラクル	-	Oracle Sun Systems Products Suite の Solaris における Kernel Zones に関する脆弱性	CWE-Other その他	CVE-2016-5606	2016-10-28 14:20	2016-10-18	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:June 21, 2026, 4:01 a.m.

No	CVSS	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
291341	-	lightwitch prosody	metronome prosody	plugins/mod_compression.lua in (1) Prosody before 0.9.4 and (2) Lightwitch Metronome through 3.4 negotiates stream compression while a session is unauthenticated, which allows remote attackers to cau…	CWE-20 Improper Input Validation	CVE-2014-2744	2024-11-21 11:06	2014-04-11	Show	GitHub Exploit DB Packet Storm

291342	-	lightwitch	metronome	plugins/mod_compression.lua in Lightwitch Metronome through 3.4 does not properly restrict the processing of compressed XML elements, which allows remote attackers to cause a denial of service (resou…	CWE-264 Permissions, Privileges, and Access Controls	CVE-2014-2743	2024-11-21 11:06	2014-04-11	Show	GitHub Exploit DB Packet Storm

291343	-	isode	m-link	Isode M-Link before 16.0v7 does not properly restrict the processing of compressed XML elements, which allows remote attackers to cause a denial of service (resource consumption) via a crafted XMPP s…	CWE-264 Permissions, Privileges, and Access Controls	CVE-2014-2742	2024-11-21 11:06	2014-04-11	Show	GitHub Exploit DB Packet Storm

291344	-	igniterealtime	openfire	nio/XMLLightweightParser.java in Ignite Realtime Openfire before 3.9.2 does not properly restrict the processing of compressed XML elements, which allows remote attackers to cause a denial of service…	CWE-264 Permissions, Privileges, and Access Controls	CVE-2014-2741	2024-11-21 11:06	2014-04-11	Show	GitHub Exploit DB Packet Storm

291345	-	sap	business_object_processing_framework_for_abap	SAP Business Object Processing Framework (BOPF) for ABAP has hardcoded credentials, which makes it easier for remote attackers to obtain access via unspecified vectors.	CWE-255 Credentials Management	CVE-2014-2752	2024-11-21 11:06	2014-04-11	Show	GitHub Exploit DB Packet Storm

291346	-	sap	print_and_output_management	SAP Print and Output Management has hardcoded credentials, which makes it easier for remote attackers to obtain access via unspecified vectors.	CWE-255 Credentials Management	CVE-2014-2751	2024-11-21 11:06	2014-04-11	Show	GitHub Exploit DB Packet Storm

291347	-	sap	hana	The HANA ICM process in SAP HANA allows remote attackers to obtain the platform version, host name, instance number, and possibly other sensitive information via a malformed HTTP GET request.	CWE-200 Information Exposure	CVE-2014-2749	2024-11-21 11:06	2014-04-11	Show	GitHub Exploit DB Packet Storm

291348	-	sap	enhancement_package	The Security Audit Log facility in SAP Enhancement Package (EHP) 6 for SAP ERP 6.0 allows remote attackers to modify or delete arbitrary log classes via unspecified vectors. NOTE: some of these deta…	CWE-264 Permissions, Privileges, and Access Controls	CVE-2014-2748	2024-11-21 11:06	2014-04-11	Show	GitHub Exploit DB Packet Storm

291349	-	cacti	cacti	Multiple SQL injection vulnerabilities in graph_xport.php in Cacti 0.8.7g, 0.8.8b, and earlier allow remote attackers to execute arbitrary SQL commands via the (1) graph_start, (2) graph_end, (3) gra…	CWE-89 SQL Injection	CVE-2014-2708	2024-11-21 11:06	2014-04-11	Show	GitHub Exploit DB Packet Storm

291350	-	linux-pam	linux-pam	Multiple directory traversal vulnerabilities in pam_timestamp.c in the pam_timestamp module for Linux-PAM (aka pam) 1.1.8 allow local users to create arbitrary files or possibly bypass authentication…	CWE-22 Path Traversal	CVE-2014-2583	2024-11-21 11:06	2014-04-11	Show	GitHub Exploit DB Packet Storm