Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 14, 2026, 6 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
204431 7.5 重要
Network
AVer Information Inc. - AVer Information EH6108H+ デバイスのファームウェアにおける重要な情報を取得される脆弱性 CWE-200
情報漏えい
CVE-2016-6537 2016-09-26 14:19 2016-09-13 Show GitHub Exploit DB Packet Storm
204432 9.8 緊急
Network
AVer Information Inc. - AVer Information EH6108H+ デバイスのファームウェアの /setup URI におけるページのアクセス制限を回避される脆弱性 CWE-264
CWE-Other
CVE-2016-6536 2016-09-26 14:19 2016-09-13 Show GitHub Exploit DB Packet Storm
204433 9.8 緊急
Network
AVer Information Inc. - AVer Information EH6108H+ デバイスのファームウェアにおける root アクセス権を取得される脆弱性 CWE-Other
その他
CVE-2016-6535 2016-09-26 14:19 2016-09-13 Show GitHub Exploit DB Packet Storm
204434 5.9 警告
Network
DELL EMC (旧 EMC Corporation) - EMC RSA BSAFE Micro Edition Suite のクライアントにおける暗号保護メカニズムを破られる脆弱性 CWE-Other
その他
CVE-2016-0923 2016-09-26 11:47 2016-09-15 Show GitHub Exploit DB Packet Storm
204435 7.5 重要
Local
ABB - ABB DataManagerPro における権限を取得される脆弱性 CWE-Other
その他
CVE-2016-4526 2016-09-26 11:43 2016-08-18 Show GitHub Exploit DB Packet Storm
204436 5.3 警告
Network
トレイン・ジャパン株式会社 - Trane Tracer SC の Web サーバにおける重要な設定ファイルを読まれる脆弱性 CWE-200
情報漏えい
CVE-2016-0870 2016-09-26 11:32 2016-09-15 Show GitHub Exploit DB Packet Storm
204437 9.8 緊急
Network
ICU project - International Components for Unicode の common/locid.cpp の Locale クラスにおけるスタックベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー
CVE-2016-7415 2016-09-26 09:39 2016-09-13 Show GitHub Exploit DB Packet Storm
204438 5.5 警告
Local
SUSE
libarchive
Canonical
- libarchive の archive_read_support_format_rar.c の copy_from_lzss_window 関数におけるサービス運用妨害 (DoS) の脆弱性 CWE-Other
その他
CVE-2015-8934 2016-09-23 16:33 2015-06-20 Show GitHub Exploit DB Packet Storm
204439 5.5 警告
Local
SUSE
libarchive
Canonical
- libarchive の archive_read_support_format_tar.c の archive_read_format_tar_skip 関数における整数オーバーフローの脆弱性 CWE-Other
その他
CVE-2015-8933 2016-09-23 16:33 2015-08-9 Show GitHub Exploit DB Packet Storm
204440 5.5 警告
Local
SUSE
libarchive
Debian
Canonical
- libarchive の archive_read_support_filter_compress.c の compress_bidder_init 関数におけるサービス運用妨害 (DoS) の脆弱性 CWE-20
不適切な入力確認
CVE-2015-8932 2016-09-23 16:33 2015-08-9 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 14, 2026, 4:12 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
290971 - ui unifi_controller Ubiquiti UniFi Controller before 3.2.1 logs the administrative password hash in syslog messages, which allows man-in-the-middle attackers to obtain sensitive information via unspecified vectors. CWE-255
Credentials Management
CVE-2014-2226 2024-11-21 11:05 2014-07-29 Show GitHub Exploit DB Packet Storm
290972 - ui unifi_video The default Flash cross-domain policy (crossdomain.xml) in Ubiquiti Networks UniFi Video (formerly AirVision aka AirVision Controller) before 3.0.1 does not restrict access to the application, which … CWE-264
Permissions, Privileges, and Access Controls
CVE-2014-2227 2024-11-21 11:05 2014-07-26 Show GitHub Exploit DB Packet Storm
290973 - fuelphp fuelphp The auto-format feature in the Request_Curl class in FuelPHP 1.1 through 1.7.1 allows remote attackers to execute arbitrary code via a crafted response. CWE-94
Code Injection
CVE-2014-1999 2024-11-21 11:05 2014-07-20 Show GitHub Exploit DB Packet Storm
290974 - cybozu garoon Cybozu Garoon 3.7 before SP4 allows remote authenticated users to bypass intended access restrictions, and execute arbitrary code or cause a denial of service, via an API call. CWE-264
Permissions, Privileges, and Access Controls
CVE-2014-1996 2024-11-21 11:05 2014-07-20 Show GitHub Exploit DB Packet Storm
290975 - cybozu garoon Cross-site scripting (XSS) vulnerability in the Map search functionality in Cybozu Garoon 2.x and 3.x before 3.7 SP4 allows remote authenticated users to inject arbitrary web script or HTML via unspe… CWE-79
Cross-site Scripting
CVE-2014-1995 2024-11-21 11:05 2014-07-20 Show GitHub Exploit DB Packet Storm
290976 - cybozu garoon Cross-site scripting (XSS) vulnerability in the Notices portlet in Cybozu Garoon 2.x and 3.x before 3.7 SP4 allows remote authenticated users to inject arbitrary web script or HTML via unspecified ve… CWE-79
Cross-site Scripting
CVE-2014-1994 2024-11-21 11:05 2014-07-20 Show GitHub Exploit DB Packet Storm
290977 - cybozu garoon The Portlets subsystem in Cybozu Garoon 2.x and 3.x before 3.7 SP4 allows remote authenticated users to bypass intended access restrictions via unspecified vectors. CWE-264
Permissions, Privileges, and Access Controls
CVE-2014-1993 2024-11-21 11:05 2014-07-20 Show GitHub Exploit DB Packet Storm
290978 - cybozu garoon Cross-site scripting (XSS) vulnerability in the Messages functionality in Cybozu Garoon 3.1.x, 3.5.x, and 3.7.x before 3.7 SP4 allows remote authenticated users to inject arbitrary web script or HTML… CWE-79
Cross-site Scripting
CVE-2014-1992 2024-11-21 11:05 2014-07-20 Show GitHub Exploit DB Packet Storm
290979 - cybozu garoon The CGI component in Cybozu Garoon 3.1.0 through 3.7 SP3 allows remote attackers to execute arbitrary commands via unspecified vectors. CWE-78
OS Command 
CVE-2014-1987 2024-11-21 11:05 2014-07-20 Show GitHub Exploit DB Packet Storm
290980 - nextapp file_explorer Directory traversal vulnerability in the NextApp File Explorer application before 2.1.0.3 for Android allows remote attackers to overwrite or create arbitrary files via a crafted filename. CWE-22
Path Traversal
CVE-2014-1973 2024-11-21 11:05 2014-07-20 Show GitHub Exploit DB Packet Storm