Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 12, 2026, 6 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
204371 9.8 緊急
Network
Mozilla Foundation - Mozilla Firefox の nsFrameManager::CaptureFrameState 関数における任意のコードを実行される脆弱性 CWE-Other
その他
CVE-2016-5274 2016-09-27 17:49 2016-09-13 Show GitHub Exploit DB Packet Storm
204372 8.8 重要
Network
Mozilla Foundation - Mozilla Firefox のアクセシビリティの実装の mozilla::a11y::HyperTextAccessible::GetChildOffset 関数における任意のコードを実行される脆弱性 CWE-Other
その他
CVE-2016-5273 2016-09-27 17:49 2016-09-13 Show GitHub Exploit DB Packet Storm
204373 8.8 重要
Network
Mozilla Foundation - Mozilla Firefox の nsImageGeometryMixin クラスにおける任意のコードを実行される脆弱性 CWE-20
不適切な入力確認
CVE-2016-5272 2016-09-27 17:49 2016-09-13 Show GitHub Exploit DB Packet Storm
204374 6.5 警告
Network
Mozilla Foundation - Mozilla Firefox の PropertyProvider::GetSpacingInternal 関数におけるサービス運用妨害 (DoS) の脆弱性 CWE-Other
その他
CVE-2016-5271 2016-09-27 17:49 2016-09-13 Show GitHub Exploit DB Packet Storm
204375 9.8 緊急
Network
Mozilla Foundation - Mozilla Firefox の nsCaseTransformTextRunFactory::TransformString 関数におけるヒープベースのバッファオーバーフローの脆弱性 CWE-119
CWE-Other
CVE-2016-5270 2016-09-27 17:49 2016-09-13 Show GitHub Exploit DB Packet Storm
204376 9.8 緊急
Network
Mozilla Foundation - Mozilla Firefox のブラウザエンジンにおけるサービス運用妨害 (DoS) の脆弱性 CWE-119
バッファエラー
CVE-2016-5257 2016-09-27 17:49 2016-09-13 Show GitHub Exploit DB Packet Storm
204377 9.8 緊急
Network
Mozilla Foundation - Mozilla Firefox のブラウザエンジンにおけるサービス運用妨害 (DoS) の脆弱性 CWE-119
バッファエラー
CVE-2016-5256 2016-09-27 17:49 2016-09-13 Show GitHub Exploit DB Packet Storm
204378 6.5 警告
Network
Mozilla Foundation - Mozilla Firefox の mozilla::net::IsValidReferrerPolicy 関数におけるサービス運用妨害 (DoS) の脆弱性 CWE-Other
その他
CVE-2016-2827 2016-09-27 17:49 2016-09-20 Show GitHub Exploit DB Packet Storm
204379 6.1 警告
Network
フォーティネット - Fortinet FortiWan におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2016-4969 2016-09-27 16:46 2016-09-7 Show GitHub Exploit DB Packet Storm
204380 6.5 警告
Network
フォーティネット - Fortinet FortiWan の linkreport/tmp/admin_global ページにおける管理者の Cookie を取得される脆弱性 CWE-200
情報漏えい
CVE-2016-4968 2016-09-27 16:46 2016-09-7 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 12, 2026, 4:20 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
290791 - ilch ilch_cms Cross-site scripting (XSS) vulnerability in Ilch CMS 2.0 and earlier allows remote attackers to inject arbitrary web script or HTML via the text parameter to index.php/guestbook/index/newentry. CWE-79
Cross-site Scripting
CVE-2014-1944 2024-11-21 11:05 2014-03-9 Show GitHub Exploit DB Packet Storm
290792 - gnu gnutls lib/x509/verify.c in GnuTLS before 3.1.21 and 3.2.x before 3.2.11 treats version 1 X.509 certificates as intermediate CAs, which allows remote attackers to bypass intended restrictions by leveraging … CWE-264
Permissions, Privileges, and Access Controls
CVE-2014-1959 2024-11-21 11:05 2014-03-7 Show GitHub Exploit DB Packet Storm
290793 - videowhisper live_streaming_integration_plugin Multiple directory traversal vulnerabilities in the VideoWhisper Live Streaming Integration plugin before 4.29.5 for WordPress allow remote attackers to (1) read arbitrary files via a .. (dot dot) in… CWE-22
Path Traversal
CVE-2014-1907 2024-11-21 11:05 2014-03-7 Show GitHub Exploit DB Packet Storm
290794 - videowhisper live_streaming_integration_plugin Multiple cross-site scripting (XSS) vulnerabilities in the VideoWhisper Live Streaming Integration plugin before 4.29.5 for WordPress allow remote attackers to inject arbitrary web script or HTML via… CWE-79
Cross-site Scripting
CVE-2014-1906 2024-11-21 11:05 2014-03-7 Show GitHub Exploit DB Packet Storm
290795 - foscam fi8919w_firmware
fi8919w
The Foscam FI8910W camera with firmware before 11.37.2.55 allows remote attackers to obtain sensitive video and image data via a blank username and password. CWE-287
Improper Authentication
CVE-2014-1911 2024-11-21 11:05 2014-03-6 Show GitHub Exploit DB Packet Storm
290796 - cmsmadesimple cms_made_simple SQL injection vulnerability in the News module in CMS Made Simple (CMSMS) before 1.11.10 allows remote authenticated users with the "Modify News" permission to execute arbitrary SQL commands via the … CWE-89
SQL Injection
CVE-2014-2245 2024-11-21 11:05 2014-03-6 Show GitHub Exploit DB Packet Storm
290797 - mantisbt mantisbt SQL injection vulnerability in the manage configuration page (adm_config_report.php) in MantisBT 1.2.13 through 1.2.16 allows remote authenticated administrators to execute arbitrary SQL commands via… CWE-89
SQL Injection
CVE-2014-2238 2024-11-21 11:05 2014-03-6 Show GitHub Exploit DB Packet Storm
290798 - askbot askbot Cross-site scripting (XSS) vulnerability in Askbot before 0.7.49 allows remote attackers to inject arbitrary web script or HTML via vectors related to the question search form. CWE-79
Cross-site Scripting
CVE-2014-2235 2024-11-21 11:05 2014-03-6 Show GitHub Exploit DB Packet Storm
290799 - askbot askbot Multiple cross-site scripting (XSS) vulnerabilities in Askbot before 0.7.49 allow remote attackers to inject arbitrary web script or HTML via vectors related to the (1) tag or (2) user search forms. CWE-79
Cross-site Scripting
CVE-2014-2236 2024-11-21 11:05 2014-03-6 Show GitHub Exploit DB Packet Storm
290800 - getgosoft getgo_download_manager Stack-based buffer overflow in GetGo Download Manager 4.9.0.1982, 4.8.2.1346, 4.4.5.502, and earlier allows remote attackers to cause a denial of service (crash) and execute arbitrary code via a long… CWE-119
Incorrect Access of Indexable Resource ('Range Error') 
CVE-2014-2206 2024-11-21 11:05 2014-03-6 Show GitHub Exploit DB Packet Storm