Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 22, 2026, 6:01 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
204321 3.1 低
Network 		マイクロソフト - Microsoft Internet Explorer 9 から 11 および Microsoft Edge における同一生成元ポリシーを回避される脆弱性 CWE-200
情報漏えい 		CVE-2016-7199 2016-11-11 14:51 2016-11-8 Show GitHub Exploit DB Packet Storm
204322 7.5 重要
Network 		マイクロソフト - Microsoft Internet Explorer 9 から 11 および Microsoft Edge における任意のコードを実行される脆弱性 CWE-119
バッファエラー 		CVE-2016-7198 2016-11-11 14:51 2016-11-8 Show GitHub Exploit DB Packet Storm
204323 7.5 重要
Network 		マイクロソフト - Microsoft Internet Explorer 10 および 11 ならびに Microsoft Edge における任意のコードを実行される脆弱性 CWE-119
バッファエラー 		CVE-2016-7196 2016-11-11 14:51 2016-11-8 Show GitHub Exploit DB Packet Storm
204324 7.5 重要
Network 		マイクロソフト - Microsoft Internet Explorer 9 から 11 および Microsoft Edge における任意のコードを実行される脆弱性 CWE-119
バッファエラー 		CVE-2016-7195 2016-11-11 14:51 2016-11-8 Show GitHub Exploit DB Packet Storm
204325 7.5 重要
Network 		マイクロソフト - Microsoft Edge の Chakra JavaScript スクリプトエンジンにおける任意のコードを実行される脆弱性 CWE-119
バッファエラー 		CVE-2016-7243 2016-11-11 14:49 2016-11-8 Show GitHub Exploit DB Packet Storm
204326 7.5 重要
Network 		マイクロソフト - Microsoft Edge の Chakra JavaScript スクリプトエンジンにおける任意のコードを実行される脆弱性 CWE-119
バッファエラー 		CVE-2016-7242 2016-11-11 14:49 2016-11-8 Show GitHub Exploit DB Packet Storm
204327 7.5 重要
Network 		マイクロソフト - Microsoft Edge の Chakra JavaScript スクリプトエンジンにおける任意のコードを実行される脆弱性 CWE-119
バッファエラー 		CVE-2016-7240 2016-11-11 14:49 2016-11-8 Show GitHub Exploit DB Packet Storm
204328 5.3 警告
Network 		マイクロソフト - Microsoft Edge における Web コンテンツになりすまされる脆弱性 CWE-20
不適切な入力確認 		CVE-2016-7209 2016-11-11 14:49 2016-11-8 Show GitHub Exploit DB Packet Storm
204329 7.5 重要
Network 		マイクロソフト - Microsoft Edge の Chakra JavaScript スクリプトエンジンにおける任意のコードを実行される脆弱性 CWE-119
バッファエラー 		CVE-2016-7208 2016-11-11 14:49 2016-11-8 Show GitHub Exploit DB Packet Storm
204330 3.1 低
Network 		マイクロソフト - Microsoft Edge における任意のマイドキュメントファイルにアクセスされる脆弱性 CWE-200
情報漏えい 		CVE-2016-7204 2016-11-11 14:49 2016-11-8 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 23, 2026, 4 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
291851 7.5 HIGH
Network 		canonical metal_as_a_service A vulnerability in maasserver.api.get_file_by_name of Ubuntu MAAS allows unauthenticated network clients to download any file. This issue affects: Ubuntu MAAS versions prior to 1.9.2. CWE-20
 Improper Input Validation  		CVE-2014-1426 2024-11-21 11:04 2019-04-23 Show GitHub Exploit DB Packet Storm
291852 5.3 MEDIUM
Network 		mediawiki mediawiki MediaWiki 1.18.0 allows remote attackers to obtain the installation path via vectors related to thumbnail creation. CWE-200
Information Exposure 		CVE-2014-1686 2024-11-21 11:04 2018-04-16 Show GitHub Exploit DB Packet Storm
291853 6.5 MEDIUM
Network 		entity_api_project
fedoraproject 		entity_api
fedora 		The entity_access API in the Entity API module 7.x-1.x before 7.x-1.3 for Drupal might allow remote authenticated users to bypass intended access restrictions and read unpublished comments via unspec… CWE-284
Improper Access Control 		CVE-2014-1400 2024-11-21 11:04 2018-04-11 Show GitHub Exploit DB Packet Storm
291854 6.5 MEDIUM
Network 		entity_api_project
fedoraproject 		entity_api
fedora 		The entity wrapper access API in the Entity API module 7.x-1.x before 7.x-1.3 for Drupal might allow remote authenticated users to bypass intended access restrictions on referenced entities via unspe… CWE-284
Improper Access Control 		CVE-2014-1399 2024-11-21 11:04 2018-04-11 Show GitHub Exploit DB Packet Storm
291855 6.5 MEDIUM
Network 		entity_api_project
fedoraproject 		entity_api
fedora 		The entity wrapper access API in the Entity API module 7.x-1.x before 7.x-1.3 for Drupal might allow remote authenticated users to bypass intended access restrictions on comment, user and node statis… CWE-284
Improper Access Control 		CVE-2014-1398 2024-11-21 11:04 2018-04-11 Show GitHub Exploit DB Packet Storm
291856 5.4 MEDIUM
Network 		owncloud owncloud Cross-site scripting (XSS) vulnerability in ownCloud before 6.0.1 allows remote authenticated users to inject arbitrary web script or HTML via the filename of an uploaded file. CWE-79
Cross-site Scripting 		CVE-2014-1665 2024-11-21 11:04 2018-03-21 Show GitHub Exploit DB Packet Storm
291857 8.8 HIGH
Network 		openwebanalytics open_web_analytics Open Web Analytics (OWA) before 1.5.6 improperly generates random nonce values, which makes it easier for remote attackers to bypass a CSRF protection mechanism by leveraging knowledge of an OWA user… CWE-352
 Origin Validation Error 		CVE-2014-1457 2024-11-21 11:04 2018-03-21 Show GitHub Exploit DB Packet Storm
291858 8.1 HIGH
Network 		eventum_project eventum htdocs/setup/index.php in Eventum before 2.3.5 allows remote attackers to inject and execute arbitrary PHP code via the hostname parameter. CWE-275
 Permission Issues 		CVE-2014-1632 2024-11-21 11:04 2018-02-1 Show GitHub Exploit DB Packet Storm
291859 7.5 HIGH
Network 		eventum_project eventum Eventum before 2.3.5 allows remote attackers to reinstall the application via direct request to /setup/index.php. CWE-275
 Permission Issues 		CVE-2014-1631 2024-11-21 11:04 2018-02-1 Show GitHub Exploit DB Packet Storm
291860 7.5 HIGH
Network 		technicolor tc7200_firmware Technicolor TC7200 with firmware STD6.01.12 could allow remote attackers to obtain sensitive information. CWE-200
Information Exposure 		CVE-2014-1677 2024-11-21 11:04 2017-04-4 Show GitHub Exploit DB Packet Storm