Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":July 1, 2026, 2:01 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
208901	7.5	重要 Network	シスコシステムズ	-	Cisco Web セキュリティアプライアンスデバイス上で稼動する AsyncOS におけるサービス運用妨害 (DoS) の脆弱性	CWE-20 不適切な入力確認	CVE-2016-1380	2016-05-27 18:25	2016-05-18	Show	GitHub Exploit DB Packet Storm

208902	7.5	重要 Network	The Perl Foundation Fedora Project	-	Perl の regexec.c の複数の関数におけるサービス運用妨害 (DoS) の脆弱性	CWE-20 不適切な入力確認	CVE-2015-8853	2016-05-27 17:47	2015-09-16	Show	GitHub Exploit DB Packet Storm

208903	6.5	警告 Local	Xen プロジェクトレッドハット	-	libvirt および Xen の qemu の実装におけるサービス運用妨害 (DoS) の脆弱性	CWE-20 不適切な入力確認	CVE-2014-3672	2016-05-27 16:58	2014-05-14	Show	GitHub Exploit DB Packet Storm

208904	6.1	警告 Network	Lenovo	-	Android 上で稼動する Lenovo SHAREit におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2016-4783	2016-05-27 16:41	2016-05-19	Show	GitHub Exploit DB Packet Storm

208905	8.8	重要 Network	Lenovo	-	Android 上で稼動する Lenovo SHAREit における脆弱性	CWE-20 不適切な入力確認	CVE-2016-4782	2016-05-27 16:41	2016-05-19	Show	GitHub Exploit DB Packet Storm

208906	7.5	重要 Network	Quagga openSUSE project	-	Quagga の bgpd/bgp_dump.c の bgp_dump_routes_func 関数におけるサービス運用妨害 (DoS) の脆弱性	CWE-20 不適切な入力確認	CVE-2016-4049	2016-05-27 16:06	2016-01-25	Show	GitHub Exploit DB Packet Storm

208907	7.5	重要 Network	openSUSE project Fedora Project The Go Project	-	Go の crypto/dsa/dsa.go の Verify 関数におけるサービス運用妨害 (DoS) の脆弱性	CWE-20 不適切な入力確認	CVE-2016-3959	2016-05-27 15:54	2016-04-6	Show	GitHub Exploit DB Packet Storm

208908	7.8	重要 Local	The Go Project	-	Windows 上で稼動する Go における権限を取得される脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2016-3958	2016-05-27 15:54	2016-04-2	Show	GitHub Exploit DB Packet Storm

208909	7.4	重要 Network	トレンドマイクロ	-	Apple iOS 用 Trend Micro Mobile Security におけるモバイルアプリケーションのログインサーバになりすまされる脆弱性	CWE-200 情報漏えい	CVE-2016-3664	2016-05-27 15:03	2016-04-22	Show	GitHub Exploit DB Packet Storm

208910	6.3	警告 Network	エヌ・ティ・ティ・ブロードバンドプラットフォーム株式会社	-	Japan Connected-free Wi-Fi におけるアクセス制限不備の脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2015-5629	2016-05-27 12:12	2015-09-11	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:July 1, 2026, 4:27 a.m.

No	CVSS	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
297861	-	ddsn	cm3_acora_content_management_system	DDSN Interactive cm3 Acora CMS 6.0.6/1a, 6.0.2/1a, 5.5.7/12b, 5.5.0/1b-p1, and possibly other versions, does not set the secure flag for an unspecified cookie in an https session, which makes it easi…	CWE-200 Information Exposure	CVE-2013-4725	2024-11-21 10:56	2014-06-6	Show	GitHub Exploit DB Packet Storm

297862	-	ddsn	cm3_acora_content_management_system	DDSN Interactive cm3 Acora CMS 6.0.6/1a, 6.0.2/1a, 5.5.7/12b, 5.5.0/1b-p1, and possibly other versions, does not include the HTTPOnly flag in a Set-Cookie header for an unspecified cookie, which make…	CWE-200 Information Exposure	CVE-2013-4724	2024-11-21 10:56	2014-06-6	Show	GitHub Exploit DB Packet Storm

297863	-	radiothermostat	ct50_firmware ct50 ct80_firmware ct80	Radio Thermostat CT80 And CT50 with firmware 1.4.64 and earlier does not restrict access to the API, which allows remote attackers to change the operation mode, wifi connection settings, temperature …	CWE-264 Permissions, Privileges, and Access Controls	CVE-2013-4860	2024-11-21 10:56	2014-06-6	Show	GitHub Exploit DB Packet Storm

297864	-	squash	square_squash	The Square Squash allows remote attackers to execute arbitrary code via a YAML document in the (1) namespace parameter to the deobfuscation function or (2) sourcemap parameter to the sourcemap functi…	CWE-94 Code Injection	CVE-2013-5036	2024-11-21 10:56	2014-05-27	Show	GitHub Exploit DB Packet Storm

297865	-	pcman\'s_ftp_server_project	pcman\'s_ftp_server	Buffer overflow in PCMan's FTP Server 2.0.7 allows remote attackers to execute arbitrary code via a long string in a USER command.	CWE-119 Incorrect Access of Indexable Resource ('Range Error')	CVE-2013-4730	2024-11-21 10:56	2014-05-15	Show	GitHub Exploit DB Packet Storm

297866	-	dlink	dir-826l_wireless_n600_cloud_router_firmware dir-826l_wireless_n600_cloud_router dir-505l_shareport_mobile_companion_firmware dir-505l_shareport_mobile_companion	D-Link DIR-505L SharePort Mobile Companion 1.01 and DIR-826L Wireless N600 Cloud Router 1.02 allows remote attackers to bypass authentication via a direct request when an authorized session is active.	CWE-287 Improper Authentication	CVE-2013-4772	2024-11-21 10:56	2014-05-12	Show	GitHub Exploit DB Packet Storm

297867	-	broadcom	symantec_critical_system_protection	Symantec Critical System Protection (SCSP) before 5.2.9, when installed on an unpatched Windows Server 2003 R2 platform, allows remote attackers to bypass policy settings via unspecified vectors.	CWE-264 Permissions, Privileges, and Access Controls	CVE-2013-5016	2024-11-21 10:56	2014-05-8	Show	GitHub Exploit DB Packet Storm

297868	-	ddsn	cm3_acora_content_management_system	Cross-site request forgery (CSRF) vulnerability in DDSN Interactive cm3 Acora CMS 6.0.6/1a, 6.0.2/1a, 5.5.7/12b, 5.5.0/1b-p1, and possibly other versions, allows remote attackers to hijack the authen…	CWE-352 Origin Validation Error	CVE-2013-4726	2024-11-21 10:56	2014-04-26	Show	GitHub Exploit DB Packet Storm

297869	-	ddsn	cm3_acora_content_management_system	Open redirect vulnerability in DDSN Interactive cm3 Acora CMS 6.0.6/1a, 6.0.2/1a, 5.5.7/12b, 5.5.0/1b-p1, and possibly other versions allows remote attackers to redirect users to arbitrary web sites …	CWE-20 Improper Input Validation	CVE-2013-4723	2024-11-21 10:56	2014-04-26	Show	GitHub Exploit DB Packet Storm

297870	-	ddsn	cm3_acora_content_management_system	Multiple cross-site scripting (XSS) vulnerabilities in Admin/login/default.asp in DDSN Interactive cm3 Acora CMS 6.0.6/1a, 6.0.2/1a, 5.5.7/12b, 5.5.0/1b-p1, and possibly other versions allow remote a…	CWE-79 Cross-site Scripting	CVE-2013-4722	2024-11-21 10:56	2014-04-26	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed