Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 20, 2026, 6 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
204251 7.5 重要
Network
The PHP Group
アップル
- PHP の ext/standard/url.c の php_raw_url_encode 関数における整数オーバーフローの脆弱性 CWE-189
数値処理の問題
CVE-2016-4070 2016-10-26 15:25 2016-03-31 Show GitHub Exploit DB Packet Storm
204252 9.8 緊急
Network
The PHP Group
アップル
- PHP の ext/snmp/snmp.c の php_snmp_error 関数におけるフォーマットストリングの脆弱性 CWE-20
不適切な入力確認
CVE-2016-4071 2016-10-26 15:24 2016-03-31 Show GitHub Exploit DB Packet Storm
204253 9.8 緊急
Network
The PHP Group
アップル
- PHP の Phar エクステンションにおける任意のコードを実行される脆弱性 CWE-20
不適切な入力確認
CVE-2016-4072 2016-10-26 15:23 2016-03-31 Show GitHub Exploit DB Packet Storm
204254 9.8 緊急
Network
LibGD project
Debian
- GD Graphics Library における整数符号エラーの脆弱性 CWE-189
数値処理の問題
CVE-2016-3074 2016-10-26 15:22 2016-04-16 Show GitHub Exploit DB Packet Storm
204255 8.1 重要
Network
オラクル - Oracle Supply Chain Products Suite の Oracle Agile Engineering Data Management における webfileservices に関する脆弱性 CWE-noinfo
情報不足
CVE-2016-5518 2016-10-26 14:33 2016-10-18 Show GitHub Exploit DB Packet Storm
204256 5.5 警告
Local
オラクル - Oracle E-Business Suite の Oracle Applications DBA における AD Utilities に関する脆弱性 CWE-Other
その他
CVE-2016-5517 2016-10-26 14:32 2016-10-18 Show GitHub Exploit DB Packet Storm
204257 6 警告
Local
オラクル - Oracle Database Server の Kernel PDB における脆弱性 CWE-noinfo
情報不足
CVE-2016-5516 2016-10-26 14:28 2016-10-18 Show GitHub Exploit DB Packet Storm
204258 4.3 警告
Network
オラクル - Oracle Supply Chain Products Suite の Oracle Agile PLM における File Manager に関する脆弱性 CWE-200
情報漏えい
CVE-2016-5513 2016-10-26 14:25 2016-10-18 Show GitHub Exploit DB Packet Storm
204259 6.1 警告
Network
オラクル - Oracle Supply Chain Products Suite の Oracle Agile PLM における Security に関する脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2016-5512 2016-10-26 14:23 2016-10-18 Show GitHub Exploit DB Packet Storm
204260 4.3 警告
Network
オラクル - Oracle Fusion Middleware の Oracle WebCenter Sites における Security に関する脆弱性 CWE-Other
その他
CVE-2016-5511 2016-10-26 14:21 2016-10-18 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 21, 2026, 4:01 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
291331 - linux
oracle
suse
linux_kernel
linux
suse_linux_enterprise_server
linux_enterprise_high_availability_extension
suse_linux_enterprise_desktop
Race condition in the mac80211 subsystem in the Linux kernel before 3.13.7 allows remote attackers to cause a denial of service (system crash) via network traffic that improperly interacts with the W… CWE-362
Race Condition
CVE-2014-2706 2024-11-21 11:06 2014-04-15 Show GitHub Exploit DB Packet Storm
291332 - juniper junos The Enhanced Web Filtering (EWF) in Juniper Junos before 10.4R15, 11.4 before 11.4R9, 12.1 before 12.1R7, 12.1X44 before 12.1X44-D20, 12.1X45 before 12.1X45-D10, and 12.1X46 before 12.1X46-D10, as us… CWE-20
 Improper Input Validation 
CVE-2014-2714 2024-11-21 11:06 2014-04-15 Show GitHub Exploit DB Packet Storm
291333 - juniper junos Juniper Junos before 11.4R11, 12.1 before 12.1R9, 12.2 before 12.2R7, 12.3R4 before 12.3R4-S3, 13.1 before 13.1R4, 13.2 before 13.2R2, and 13.3 before 13.3R1, as used in MX Series and T4000 routers, … NVD-CWE-noinfo
CVE-2014-2713 2024-11-21 11:06 2014-04-15 Show GitHub Exploit DB Packet Storm
291334 - juniper junos Cross-site scripting (XSS) vulnerability in J-Web in Juniper Junos before 10.0S25, 10.4 before 10.4R10, 11.4 before 11.4R11, 12.1 before 12.1R9, 12.1X44 before 12.1X44-D30, 12.1X45 before 12.1X45-D20… CWE-79
Cross-site Scripting
CVE-2014-2712 2024-11-21 11:06 2014-04-15 Show GitHub Exploit DB Packet Storm
291335 - juniper junos Cross-site scripting (XSS) vulnerability in J-Web in Juniper Junos before 11.4R11, 11.4X27 before 11.4X27.62 (BBE), 12.1 before 12.1R9, 12.1X44 before 12.1X44-D35, 12.1X45 before 12.1X45-D25, 12.1X46… CWE-79
Cross-site Scripting
CVE-2014-2711 2024-11-21 11:06 2014-04-15 Show GitHub Exploit DB Packet Storm
291336 - blackberry blackberry_os
blackberry_z10
Stack-based buffer overflow in a certain decryption function in qconnDoor on BlackBerry Z10 devices with software 10.1.0.2312, when developer-mode has been previously enabled, allows remote attackers… CWE-119
Incorrect Access of Indexable Resource ('Range Error') 
CVE-2014-2389 2024-11-21 11:06 2014-04-12 Show GitHub Exploit DB Packet Storm
291337 - orbitscripts orbit_open_ad_server SQL injection vulnerability in OrbitScripts Orbit Open Ad Server before 1.1.1 allows remote attackers to execute arbitrary SQL commands via the site_directory_sort_field parameter to guest/site_direc… CWE-89
SQL Injection
CVE-2014-2540 2024-11-21 11:06 2014-04-11 Show GitHub Exploit DB Packet Storm
291338 - marcel_brinkkemper lazyest-gallery Cross-site scripting (XSS) vulnerability in the Lazyest Gallery plugin before 1.1.21 for WordPress allows remote attackers to inject arbitrary web script or HTML via an EXIF tag. NOTE: some of these… CWE-79
Cross-site Scripting
CVE-2014-2333 2024-11-21 11:06 2014-04-11 Show GitHub Exploit DB Packet Storm
291339 - tigase tigase net/IOService.java in Tigase before 5.2.1 does not properly restrict the processing of compressed XML elements, which allows remote attackers to cause a denial of service (resource consumption) via a… CWE-264
Permissions, Privileges, and Access Controls
CVE-2014-2746 2024-11-21 11:06 2014-04-11 Show GitHub Exploit DB Packet Storm
291340 - prosody prosody Prosody before 0.9.4 does not properly restrict the processing of compressed XML elements, which allows remote attackers to cause a denial of service (resource consumption) via a crafted XMPP stream,… CWE-264
Permissions, Privileges, and Access Controls
CVE-2014-2745 2024-11-21 11:06 2014-04-11 Show GitHub Exploit DB Packet Storm