Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 16, 2026, 6 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
204381 8.8 重要
Network
シスコシステムズ - Cisco Unified Contact Center Express で使用される Unified Intelligence Center におけるクロスサイトリクエストフォージェリの脆弱性 CWE-352
同一生成元ポリシー違反
CVE-2016-6427 2016-10-12 16:47 2016-10-5 Show GitHub Exploit DB Packet Storm
204382 6.1 警告
Network
シスコシステムズ - Cisco Unified Contact Center Express で使用される Unified Intelligence Center におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2016-6425 2016-10-12 16:47 2016-10-5 Show GitHub Exploit DB Packet Storm
204383 6.5 警告
Adjacent
シスコシステムズ - Cisco Adaptive Security Appliance ソフトウェアの DHCP リレーの実装におけるサービス運用妨害 (DoS) の脆弱性 CWE-399
リソース管理の問題
CVE-2016-6424 2016-10-12 16:47 2016-10-5 Show GitHub Exploit DB Packet Storm
204384 7.5 重要
Network
シスコシステムズ - Cisco 7600 および Catalyst 6500 デバイスの Supervisor Engine 32 および 720 モジュール上で稼動する Cisco IOS におけるアクセス制限を回避される脆弱性 CWE-20
不適切な入力確認
CVE-2016-6422 2016-10-12 16:47 2016-10-5 Show GitHub Exploit DB Packet Storm
204385 6.1 警告
Network
IBM - IBM Sterling Secure Proxy の構成マネージャにおける重要な情報を取得される脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2016-6027 2016-10-12 15:03 2016-09-29 Show GitHub Exploit DB Packet Storm
204386 5.3 警告
Adjacent
IBM - IBM Sterling Secure Proxy の構成マネージャにおける重要な情報を取得される脆弱性 CWE-200
情報漏えい
CVE-2016-6026 2016-10-12 15:03 2016-09-29 Show GitHub Exploit DB Packet Storm
204387 5.9 警告
Local
IBM - IBM Sterling Secure Proxy の構成マネージャにおけるアクセス権を取得される脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2016-6025 2016-10-12 15:03 2016-09-29 Show GitHub Exploit DB Packet Storm
204388 7.5 重要
Network
IBM - IBM Sterling Secure Proxy の構成マネージャにおけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル
CVE-2016-6023 2016-10-12 15:03 2016-09-29 Show GitHub Exploit DB Packet Storm
204389 9.8 緊急
Network
Katie Seaborn - Wordpress 用 Zotpress プラグインの zp_get_account() における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2016-1000217 2016-10-12 11:46 2016-09-9 Show GitHub Exploit DB Packet Storm
204390 9.1 緊急
Network
contus-video-comments project - WordPress 用 contus-video-comments プラグインにおける未認証のリモートの .jpg ファイルをアップロードされる脆弱性 CWE-22
パス・トラバーサル
CVE-2016-1000112 2016-10-12 11:46 2016-06-15 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 16, 2026, 4:13 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
290211 - exim exim The dmarc_process function in dmarc.c in Exim before 4.82.1, when EXPERIMENTAL_DMARC is enabled, allows remote attackers to execute arbitrary code via the From header in an email, which is passed to … CWE-20
 Improper Input Validation 
CVE-2014-2957 2024-11-21 11:07 2014-09-5 Show GitHub Exploit DB Packet Storm
290212 - cisco ios_xr Cisco IOS XR 4.3(.2) and earlier, as used in Cisco Carrier Routing System (CRS), allows remote attackers to cause a denial of service (CPU consumption and IPv6 packet drops) via a malformed IPv6 pack… CWE-399
 Resource Management Errors
CVE-2014-3353 2024-11-21 11:07 2014-09-4 Show GitHub Exploit DB Packet Storm
290213 - ibm db2 The SQL engine in IBM DB2 9.5 through FP10, 9.7 through FP9a, 9.8 through FP5, 10.1 through FP4, and 10.5 before FP4 on Linux, UNIX, and Windows allows remote authenticated users to cause a denial of… CWE-20
 Improper Input Validation 
CVE-2014-3095 2024-11-21 11:07 2014-09-4 Show GitHub Exploit DB Packet Storm
290214 - ibm db2 Stack-based buffer overflow in IBM DB2 9.7 through FP9a, 9.8 through FP5, 10.1 through FP4, and 10.5 before FP4 on Linux, UNIX, and Windows allows remote authenticated users to execute arbitrary code… CWE-119
Incorrect Access of Indexable Resource ('Range Error') 
CVE-2014-3094 2024-11-21 11:07 2014-09-4 Show GitHub Exploit DB Packet Storm
290215 - ibm websphere_application_server
business_process_manager
Cross-site scripting (XSS) vulnerability in IBM Business Process Manager (BPM) 7.5.x through 8.5.5 and WebSphere Lombardi Edition 7.2.0.x allows remote authenticated users to inject arbitrary web scr… CWE-79
Cross-site Scripting
CVE-2014-3075 2024-11-21 11:07 2014-09-4 Show GitHub Exploit DB Packet Storm
290216 - cisco cloud_portal Cisco Intelligent Automation for Cloud (aka Cisco Cloud Portal) 2008.3_SP9 and earlier does not properly consider whether a session is a problematic NULL session, which allows remote attackers to obt… CWE-20
 Improper Input Validation 
CVE-2014-3352 2024-11-21 11:07 2014-08-30 Show GitHub Exploit DB Packet Storm
290217 - cisco cloud_portal Cisco Intelligent Automation for Cloud (aka Cisco Cloud Portal) does not properly consider whether a session is a problematic NULL session, which allows remote attackers to obtain sensitive informati… CWE-200
Information Exposure
CVE-2014-3351 2024-11-21 11:07 2014-08-29 Show GitHub Exploit DB Packet Storm
290218 - cisco cloud_portal Cisco Intelligent Automation for Cloud (aka Cisco Cloud Portal) does not properly implement URL redirection, which allows remote authenticated users to obtain sensitive information via a crafted URL,… CWE-264
Permissions, Privileges, and Access Controls
CVE-2014-3350 2024-11-21 11:07 2014-08-29 Show GitHub Exploit DB Packet Storm
290219 - cisco cloud_portal Cisco Intelligent Automation for Cloud (aka Cisco Cloud Portal) does not validate file types during the handling of file submission, which allows remote authenticated users to upload arbitrary files … CWE-20
 Improper Input Validation 
CVE-2014-3349 2024-11-21 11:07 2014-08-29 Show GitHub Exploit DB Packet Storm
290220 - cisco transport_gateway_installation_software The web framework in Cisco Transport Gateway for Smart Call Home (aka TG-SCH or Transport Gateway Installation Software) does not validate an unspecified parameter, which allows remote authenticated … CWE-20
 Improper Input Validation 
CVE-2014-3346 2024-11-21 11:07 2014-08-29 Show GitHub Exploit DB Packet Storm