Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 27, 2026, 6 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
205051 6 警告
Local
Fabrice Bellard - QEMU の hw/9pfs/9p.c の v9fs_read 関数におけるサービス運用妨害 (DoS) の脆弱性 CWE-399
リソース管理の問題
CVE-2016-8577 2016-11-8 18:16 2016-10-17 Show GitHub Exploit DB Packet Storm
205052 6 警告
Local
Fabrice Bellard - QEMU の hw/usb/hcd-xhci.c の xhci_ring_fetch 関数におけるサービス運用妨害 (DoS) の脆弱性 CWE-399
CWE-Other
CVE-2016-8576 2016-11-8 18:16 2016-10-6 Show GitHub Exploit DB Packet Storm
205053 6.8 警告
Physics
シトリックス・システムズ - Citrix Receiver Desktop Lock の不正なアクセス制御メカニズムにおける認証要求を回避される脆弱性 CWE-Other
その他
CVE-2016-9111 2016-11-8 17:49 2016-10-27 Show GitHub Exploit DB Packet Storm
205054 7.8 重要
Local
Python Software Foundation - Pillow における任意のコードを実行される脆弱性 CWE-Other
その他
CVE-2016-9190 2016-11-8 17:38 2016-10-3 Show GitHub Exploit DB Packet Storm
205055 5.5 警告
Local
Python Software Foundation - Pillow における重要な情報を取得される脆弱性 CWE-Other
その他
CVE-2016-9189 2016-11-8 17:38 2016-10-3 Show GitHub Exploit DB Packet Storm
205056 7.5 重要
Network
Spark Framework project - Spark におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル
CVE-2016-9177 2016-11-8 17:28 2016-11-7 Show GitHub Exploit DB Packet Storm
205057 9.8 緊急
Network
マイクロフォーカス株式会社 - Micro Focus Rumba の send.exe および receive.exe コンポーネントにおけるスタックベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー
CVE-2016-9176 2016-11-8 17:27 2016-10-31 Show GitHub Exploit DB Packet Storm
205058 8.8 重要
Network
Exponent CMS project - Exponent CMS の framework/modules/core/controllers/expRatingController.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2016-9242 2016-11-8 17:23 2016-11-4 Show GitHub Exploit DB Packet Storm
205059 7.5 重要
Network
Exponent CMS project - Exponent CMS の /framework/modules/core/controllers/expHTMLEditorController.php における SQL インジェクションの脆弱性 CWE-200
CWE-89
CVE-2016-9184 2016-11-8 17:23 2016-11-3 Show GitHub Exploit DB Packet Storm
205060 7.5 重要
Network
Exponent CMS project - Exponent CMS の /framework/modules/ecommerce/controllers/orderController.php における情報公開の脆弱性 CWE-200
情報漏えい
CVE-2016-9183 2016-11-8 17:23 2016-11-3 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 28, 2026, 4:01 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
290071 - login_widget_with_shortcode_project login_widget_with_shortcode Cross-site request forgery (CSRF) vulnerability in the Login Widget With Shortcode (login-sidebar-widget) plugin before 3.2.1 for WordPress allows remote attackers to hijack the authentication of adm… CWE-79
Cross-site Scripting
CVE-2014-6312 2024-11-21 11:14 2014-10-15 Show GitHub Exploit DB Packet Storm
290072 - juniper junos Juniper Junos 11.4 before R11, 12.1 before R9, 12.1X44 before D30, 12.1X45 before D20, 12.1X46 before D15, 12.1X47 before D10, 12.2 before R8, 12.2X50 before D70, 12.3 before R6, 13.1 before R4, 13.1… NVD-CWE-Other
CVE-2014-6380 2024-11-21 11:14 2014-10-14 Show GitHub Exploit DB Packet Storm
290073 - juniper junos Juniper Junos 11.4 before R12, 12.1 before R10, 12.1X44 before D35, 12.1X45 before D25, 12.1X46 before D20, 12.1X47 before D10, 12.2 before R8, 12.2X50 before D70, 12.3 before R6, 13.1 before R4-S3, … CWE-287
Improper Authentication
CVE-2014-6379 2024-11-21 11:14 2014-10-14 Show GitHub Exploit DB Packet Storm
290074 - juniper junos Juniper Junos 11.4 before R12-S4, 12.1X44 before D35, 12.1X45 before D30, 12.1X46 before D25, 12.1X47 before D10, 12.2 before R9, 12.2X50 before D70, 12.3 before R7, 13.1 before R4 before S3, 13.1X49… CWE-399
 Resource Management Errors
CVE-2014-6378 2024-11-21 11:14 2014-10-14 Show GitHub Exploit DB Packet Storm
290075 - juniper junos_e Juniper JunosE before 13.3.3p0-1, 14.x before 14.3.2, and 15.x before 15.1.0, when DEBUG severity icmpTraffic logging is enabled, allows remote attackers to cause a denial of service (SRP reset) via … CWE-399
 Resource Management Errors
CVE-2014-6377 2024-11-21 11:14 2014-10-14 Show GitHub Exploit DB Packet Storm
290076 - woothemes woocommerce_plugin Cross-site scripting (XSS) vulnerability in the WooCommerce plugin before 2.2.3 for WordPress allows remote attackers to inject arbitrary web script or HTML via the range parameter on the wc-reports … CWE-79
Cross-site Scripting
CVE-2014-6313 2024-11-21 11:14 2014-10-14 Show GitHub Exploit DB Packet Storm
290077 - photo_gallery_plugin_project photo_gallery_plugin Multiple cross-site scripting (XSS) vulnerabilities in the Web-Dorado Photo Gallery plugin 1.1.30 and earlier for WordPress allow remote attackers to inject arbitrary web script or HTML via the (1) c… CWE-79
Cross-site Scripting
CVE-2014-6315 2024-11-21 11:14 2014-10-10 Show GitHub Exploit DB Packet Storm
290078 - ewww_image_optimizer_plugin_project ewww_image_optimizer_plugin Cross-site scripting (XSS) vulnerability in the EWWW Image Optimizer plugin before 2.0.2 for WordPress allows remote attackers to inject arbitrary web script or HTML via the error parameter in the ew… CWE-79
Cross-site Scripting
CVE-2014-6243 2024-11-21 11:14 2014-10-10 Show GitHub Exploit DB Packet Storm
290079 - elasticsearch elasticsearch Cross-site scripting (XSS) vulnerability in the CORS functionality in Elasticsearch before 1.4.0.Beta1 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. CWE-79
Cross-site Scripting
CVE-2014-6439 2024-11-21 11:14 2014-10-10 Show GitHub Exploit DB Packet Storm
290080 - joomla joomla\! Joomla! 2.5.x before 2.5.25, 3.x before 3.2.4, and 3.3.x before 3.3.4 allows remote attackers to authenticate and bypass intended access restrictions via vectors involving LDAP authentication. CWE-287
Improper Authentication
CVE-2014-6632 2024-11-21 11:14 2014-10-9 Show GitHub Exploit DB Packet Storm