Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 8, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
204261 5.4 警告
Network 		フォーティネット - Fortinet FortiAnalyzer および FortiManager におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2016-3196 2016-08-9 11:27 2016-07-14 Show GitHub Exploit DB Packet Storm
204262 4.3 警告
Network 		Mozilla Foundation - Mozilla Firefox におけるなりすまし攻撃を実行される脆弱性 CWE-Other
その他 		CVE-2016-5268 2016-08-8 16:00 2016-08-2 Show GitHub Exploit DB Packet Storm
204263 5.3 警告
Network 		Mozilla Foundation - Android 上で稼働する Mozilla Firefox におけるアドレスバーを偽装される脆弱性 CWE-20
不適切な入力確認 		CVE-2016-5267 2016-08-8 16:00 2016-08-2 Show GitHub Exploit DB Packet Storm
204264 8.1 重要
Network 		Mozilla Foundation - Mozilla Firefox におけるローカルファイルにアクセスされる脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2016-5266 2016-08-8 16:00 2016-08-2 Show GitHub Exploit DB Packet Storm
204265 4.7 警告
Local 		Mozilla Foundation - Mozilla Firefox における同一生成元ポリシーを回避される脆弱性 CWE-200
情報漏えい 		CVE-2016-5265 2016-08-8 16:00 2016-08-2 Show GitHub Exploit DB Packet Storm
204266 8.8 重要
Network 		Mozilla Foundation - Mozilla Firefox の nsNodeUtils::NativeAnonymousChildListChange 関数における任意のコードを実行される脆弱性 CWE-Other
その他 		CVE-2016-5264 2016-08-8 16:00 2016-08-2 Show GitHub Exploit DB Packet Storm
204267 8.8 重要
Network 		Mozilla Foundation - Mozilla Firefox の nsDisplayList::HitTest 関数における任意のコードを実行される脆弱性 CWE-Other
その他 		CVE-2016-5263 2016-08-8 16:00 2016-08-2 Show GitHub Exploit DB Packet Storm
204268 6.1 警告
Network 		Mozilla Foundation - Mozilla Firefox におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2016-5262 2016-08-8 16:00 2016-08-2 Show GitHub Exploit DB Packet Storm
204269 8.8 重要
Network 		Mozilla Foundation - Mozilla Firefox の WebSockets サブシステムの WebSocketChannel クラスにおける整数オーバーフローの脆弱性 CWE-Other
その他 		CVE-2016-5261 2016-08-8 16:00 2016-08-2 Show GitHub Exploit DB Packet Storm
204270 6.5 警告
Network 		Mozilla Foundation - Mozilla Firefox における平文のパスワードを取得される脆弱性 CWE-200
情報漏えい 		CVE-2016-5260 2016-08-8 16:00 2016-08-2 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 8, 2026, 4:09 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
291101 - cmsmadesimple cms_made_simple Multiple cross-site scripting (XSS) vulnerabilities in CMS Made Simple allow remote authenticated users to inject arbitrary web script or HTML via (1) the group parameter to admin/addgroup.php, (2) t… CWE-79
Cross-site Scripting 		CVE-2014-0334 2024-11-21 11:01 2014-03-3 Show GitHub Exploit DB Packet Storm
291102 - linux
suse
redhat 		linux_kernel
linux_enterprise_desktop
linux_enterprise_server
enterprise_linux_server_aus
enterprise_linux_server_tus
enterprise_linux_desktop
enterprise_linux_server
enterprise_… 		The cifs_iovec_write function in fs/cifs/file.c in the Linux kernel through 3.13.5 does not properly handle uncached write operations that copy fewer than the requested number of bytes, which allows … CWE-119
Incorrect Access of Indexable Resource ('Range Error')  		CVE-2014-0069 2024-11-21 11:01 2014-02-28 Show GitHub Exploit DB Packet Storm
291103 - libpng libpng The png_push_read_chunk function in pngpread.c in the progressive decoder in libpng 1.6.x through 1.6.9 allows remote attackers to cause a denial of service (infinite loop and CPU consumption) via an… CWE-189
Numeric Errors 		CVE-2014-0333 2024-11-21 11:01 2014-02-28 Show GitHub Exploit DB Packet Storm
291104 - emberjs ember.js Cross-site scripting (XSS) vulnerability in the link-to helper in Ember.js 1.2.x before 1.2.2, 1.3.x before 1.3.2, and 1.4.x before 1.4.0-beta.6, when used in non-block form, allows remote attackers … CWE-79
Cross-site Scripting 		CVE-2014-0046 2024-11-21 11:01 2014-02-28 Show GitHub Exploit DB Packet Storm
291105 - redhat jboss_enterprise_application_platform The security audit functionality in Red Hat JBoss Enterprise Application Platform (EAP) 6.x before 6.2.1 logs request parameters in plaintext, which might allow local users to obtain passwords by rea… CWE-310
Cryptographic Issues 		CVE-2014-0058 2024-11-21 11:01 2014-02-27 Show GitHub Exploit DB Packet Storm
291106 - apache tomcat org/apache/catalina/connector/CoyoteAdapter.java in Apache Tomcat 6.0.33 through 6.0.37 does not consider the disableURLRewriting setting when handling a session ID in a URL, which allows remote atta… CWE-20
 Improper Input Validation  		CVE-2014-0033 2024-11-21 11:01 2014-02-26 Show GitHub Exploit DB Packet Storm
291107 - rubyonrails ruby_on_rails
rails 		actionpack/lib/action_view/template/text.rb in Action View in Ruby on Rails 3.x before 3.2.17 converts MIME type strings to symbols during use of the :text option to the render method, which allows r… CWE-20
 Improper Input Validation  		CVE-2014-0082 2024-11-21 11:01 2014-02-21 Show GitHub Exploit DB Packet Storm
291108 - rubyonrails
opensuse_project
opensuse
redhat 		ruby_on_rails
rails
opensuse
enterprise_linux
cloudforms 		Multiple cross-site scripting (XSS) vulnerabilities in actionview/lib/action_view/helpers/number_helper.rb in Ruby on Rails before 3.2.17, 4.0.x before 4.0.3, and 4.1.x before 4.1.0.beta2 allow remot… CWE-79
Cross-site Scripting 		CVE-2014-0081 2024-11-21 11:01 2014-02-21 Show GitHub Exploit DB Packet Storm
291109 - rubyonrails rails SQL injection vulnerability in activerecord/lib/active_record/connection_adapters/postgresql/cast.rb in Active Record in Ruby on Rails 4.0.x before 4.0.3, and 4.1.0.beta1, when PostgreSQL is used, al… CWE-89
SQL Injection 		CVE-2014-0080 2024-11-21 11:01 2014-02-21 Show GitHub Exploit DB Packet Storm
291110 - sonicwall global_management_system
analyzer 		Cross-site scripting (XSS) vulnerability in mainPage in Dell SonicWALL GMS before 7.1 SP2, SonicWALL Analyzer before 7.1 SP2, and SonicWALL UMA E5000 before 7.1 SP2 might allow remote attackers to in… CWE-79
Cross-site Scripting 		CVE-2014-0332 2024-11-21 11:01 2014-02-15 Show GitHub Exploit DB Packet Storm