Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 24, 2026, 6 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
209431 6.8 警告 IBM - IBM Emptoris Contract Management におけるクロスサイトリクエストフォージェリの脆弱性 CWE-352
同一生成元ポリシー違反
CVE-2015-5050 2016-02-29 10:53 2015-06-24 Show GitHub Exploit DB Packet Storm
209432 3.5 注意 IBM - IBM Security QRadar SIEM の Web UI におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2015-4957 2016-02-29 10:52 2015-06-24 Show GitHub Exploit DB Packet Storm
209433 6.8 警告 アップル
Henry Spencer
- Henry Spencer の正規表現 (regex) ライブラリにバッファオーバーフローの脆弱性 CWE-189
CWE-Other
CVE-2015-2305 2016-02-26 17:55 2015-02-13 Show GitHub Exploit DB Packet Storm
209434 9.3 危険 日立 - JP1/Cm2/Network Node Manager i における複数の脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
- 2016-02-26 17:51 2014-12-12 Show GitHub Exploit DB Packet Storm
209435 9.3 危険 日立 - JP1/Cm2/Network Node Manager i における複数のバッファオーバーフローの脆弱性 CWE-noinfo
情報不足
- 2016-02-26 17:28 2014-12-12 Show GitHub Exploit DB Packet Storm
209436 10 危険 Linux - Linux Kernel の net/netfilter/nf_nat_redirect.c の nf_nat_redirect_ipv4 関数におけるサービス運用妨害 (DoS) の脆弱性 CWE-Other
その他
CVE-2015-8787 2016-02-26 16:34 2015-10-27 Show GitHub Exploit DB Packet Storm
209437 4.9 警告 Linux - Linux Kernel の fs/fuse/file.c の fuse_fill_write_pages 関数におけるサービス運用妨害 (DoS) の脆弱性 CWE-399
リソース管理の問題
CVE-2015-8785 2016-02-26 16:34 2015-10-12 Show GitHub Exploit DB Packet Storm
209438 6.9 警告 Linux - Linux Kernel の kernel/ptrace.c における権限を取得される脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2015-8709 2016-02-26 16:34 2015-12-26 Show GitHub Exploit DB Packet Storm
209439 2.1 注意 Linux - Linux Kernel の net/bluetooth/sco.c の sco_sock_bind 関数におけるカーネルメモリから重要な情報を取得される脆弱性 CWE-200
情報漏えい
CVE-2015-8575 2016-02-26 16:34 2015-12-15 Show GitHub Exploit DB Packet Storm
209440 2.9 注意 (複数のベンダ) - 無線接続するキーボードやマウスなどの入力機器が安全でない独自通信プロトコルを使用している問題 CWE-Other
その他
- 2016-02-26 16:26 2016-02-24 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 24, 2026, 4 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
298661 - novell zenworks_configuration_management Directory traversal vulnerability in the GetFle method in the umaninv service in Novell ZENworks Configuration Management (ZCM) 11.2.3 allows remote attackers to read arbitrary files via a .. (dot do… CWE-22
Path Traversal
CVE-2013-1084 2024-11-21 10:48 2013-11-3 Show GitHub Exploit DB Packet Storm
298662 - canonical ubuntu_linux X.org X server 1.13.3 and earlier, when not run as root, allows local users to cause a denial of service (crash) or possibly gain privileges via vectors involving cached xkb files. NVD-CWE-noinfo
CVE-2013-1056 2024-11-21 10:48 2013-10-29 Show GitHub Exploit DB Packet Storm
298663 - canonical ubuntu_linux Apport 2.12.5 and earlier uses weak permissions for core dump files created by setuid binaries, which allows local users to obtain sensitive information by reading the file. CWE-264
Permissions, Privileges, and Access Controls
CVE-2013-1067 2024-11-21 10:48 2013-10-26 Show GitHub Exploit DB Packet Storm
298664 - cartpauj mingle-forum Multiple cross-site request forgery (CSRF) vulnerabilities in the Mingle Forum plugin 1.0.34 and possibly earlier for WordPress allow remote attackers to hijack the authentication of administrators f… CWE-352
 Origin Validation Error
CVE-2013-0736 2024-11-21 10:48 2013-10-10 Show GitHub Exploit DB Packet Storm
298665 - corel pdf_fusion Stack-based buffer overflow in Corel PDF Fusion 1.11 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a long ZIP directory entry name in an XPS f… CWE-119
Incorrect Access of Indexable Resource ('Range Error') 
CVE-2013-0742 2024-11-21 10:48 2013-10-4 Show GitHub Exploit DB Packet Storm
298666 - ubuntu_developers
canonical
language-selector
ubuntu_linux
language-selector 0.110.x before 0.110.1, 0.90.x before 0.90.1, and 0.79.x before 0.79.4 does not properly use D-Bus for communication with a polkit authority, which allows local users to bypass inte… CWE-264
Permissions, Privileges, and Access Controls
CVE-2013-1066 2024-11-21 10:48 2013-10-4 Show GitHub Exploit DB Packet Storm
298667 - martin_pitt
canonical
jockey
ubuntu_linux
backend.py in Jockey before 0.9.7-0ubuntu7.11 does not properly use D-Bus for communication with a polkit authority, which allows local users to bypass intended access restrictions by leveraging a Po… CWE-264
Permissions, Privileges, and Access Controls
CVE-2013-1065 2024-11-21 10:48 2013-10-4 Show GitHub Exploit DB Packet Storm
298668 - canonical apt-xapian-index
ubuntu_linux
apt-xapian-index before 0.45ubuntu2.1, 0.44ubuntu7.1, and 0.44ubuntu5.1 does not properly use D-Bus for communication with a polkit authority, which allows local users to bypass intended access restr… CWE-264
Permissions, Privileges, and Access Controls
CVE-2013-1064 2024-11-21 10:48 2013-10-4 Show GitHub Exploit DB Packet Storm
298669 - canonical
evan_dandrea
ubuntu_linux
usb-creator
usb-creator 0.2.47 before 0.2.47.1, 0.2.40 before 0.2.40ubuntu2, and 0.2.38 before 0.2.38.2 does not properly use D-Bus for communication with a polkit authority, which allows local users to bypass i… CWE-264
Permissions, Privileges, and Access Controls
CVE-2013-1063 2024-11-21 10:48 2013-10-4 Show GitHub Exploit DB Packet Storm
298670 - canonical
michael_vogt
ubuntu_linux
ubuntu-system-service
ubuntu-system-service 0.2.4 before 0.2.4.1. 0.2.3 before 0.2.3.1, and 0.2.2 before 0.2.2.1 does not properly use D-Bus for communication with a polkit authority, which allows local users to bypass in… CWE-264
Permissions, Privileges, and Access Controls
CVE-2013-1062 2024-11-21 10:48 2013-10-4 Show GitHub Exploit DB Packet Storm