Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 23, 2026, 10:01 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
209751 6.8 警告 アドバンテック株式会社 - Advantech WebAccess におけるクロスサイトリクエストフォージェリの脆弱性 CWE-352
同一生成元ポリシー違反 		CVE-2015-3946 2016-01-19 10:49 2015-05-12 Show GitHub Exploit DB Packet Storm
209752 5 警告 アドバンテック株式会社 - Advantech WebAccess における電子メールプロジェクトアカウントについての重要な平文情報を読まれる脆弱性 CWE-200
情報漏えい 		CVE-2015-3943 2016-01-19 10:49 2015-05-12 Show GitHub Exploit DB Packet Storm
209753 9.3 危険 Unitronics - Unitronics VisiLogic OPLC IDE におけるヒープベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2015-7939 2016-01-19 10:13 2015-11-12 Show GitHub Exploit DB Packet Storm
209754 4.3 警告 AVM - AVM FRITZ!OS の Push-Service-Mails 機能におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2015-7242 2016-01-18 15:22 2015-07-13 Show GitHub Exploit DB Packet Storm
209755 7.5 危険 Joomla! - Joomla! における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2015-8769 2016-01-18 15:03 2015-12-21 Show GitHub Exploit DB Packet Storm
209756 5 警告 Python Software Foundation - Python 用 RSA パッケージの verify 関数における過度に小さな公開指数を持つ署名を偽造される脆弱性 CWE-20
不適切な入力確認 		CVE-2016-1494 2016-01-18 14:57 2016-01-13 Show GitHub Exploit DB Packet Storm
209757 9.3 危険 Huawei - Huawei Mate 7 および P8 フォンのソフトウェアの HIFI ドライバにおけるヒープベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2015-8088 2016-01-18 14:19 2015-11-4 Show GitHub Exploit DB Packet Storm
209758 4.3 警告 OpenCart - OpenCart におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2015-4671 2016-01-18 14:15 2015-12-30 Show GitHub Exploit DB Packet Storm
209759 4 警告 Firebird Project - FireBird におけるサービス運用妨害 (DoS) の脆弱性 CWE-20
不適切な入力確認 		CVE-2016-1569 2016-01-18 13:57 2016-01-6 Show GitHub Exploit DB Packet Storm
209760 7.8 危険 Canonical
Debian
Novell
Fabrice Bellard
Fedora Project
レッドハット		 - QEMU の VNC WebSocket フレームデコーダにおけるサービス運用妨害 (DoS) の脆弱性 CWE-399
リソース管理の問題 		CVE-2015-1779 2016-01-18 13:53 2015-03-23 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 23, 2026, 4 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
297341 - znc znc ZNC 1.0 allows remote authenticated users to cause a denial of service (NULL pointer reference and crash) via a crafted request to the (1) editnetwork, (2) editchan, (3) addchan, or (4) delchan page … NVD-CWE-Other
CVE-2013-2130 2024-11-21 10:51 2014-06-6 Show GitHub Exploit DB Packet Storm
297342 - rom_walton boinc Multiple stack-based buffer overflows in the XML parser in BOINC 7.x allow attackers to have unspecified impact via a crafted XML file, related to the scheduler. CWE-119
Incorrect Access of Indexable Resource ('Range Error')  		CVE-2013-2298 2024-11-21 10:51 2014-06-3 Show GitHub Exploit DB Packet Storm
297343 - apache hbase Apache HBase 0.92.x before 0.92.3 and 0.94.x before 0.94.9, when the Kerberos features are enabled, allows man-in-the-middle attackers to disable bidirectional authentication and obtain sensitive inf… CWE-287
Improper Authentication 		CVE-2013-2193 2024-11-21 10:51 2014-05-29 Show GitHub Exploit DB Packet Storm
297344 - glpi-project glpi inc/ticket.class.php in GLPI 0.83.9 and earlier allows remote attackers to unserialize arbitrary PHP objects via the _predefined_fields parameter to front/ticket.form.php. NVD-CWE-Other
CVE-2013-2225 2024-11-21 10:51 2014-05-27 Show GitHub Exploit DB Packet Storm
297345 - openbsd opensmtpd OpenSMTPD before 5.3.2 does not properly handle SSL sessions, which allows remote attackers to cause a denial of service (connection blocking) by keeping a connection open. CWE-310
Cryptographic Issues 		CVE-2013-2125 2024-11-21 10:51 2014-05-27 Show GitHub Exploit DB Packet Storm
297346 - libguestfs libguestfs Double free vulnerability in inspect-fs.c in LibguestFS 1.20.x before 1.20.7, 1.21.x, 1.22.0, and 1.23.0 allows remote attackers to cause a denial of service (crash) via empty guest files. NVD-CWE-Other
CVE-2013-2124 2024-11-21 10:51 2014-05-27 Show GitHub Exploit DB Packet Storm
297347 - dovecot dovecot The IMAP functionality in Dovecot before 2.2.2 allows remote attackers to cause a denial of service (infinite loop and CPU consumption) via invalid APPEND parameters. CWE-20
 Improper Input Validation  		CVE-2013-2111 2024-11-21 10:51 2014-05-27 Show GitHub Exploit DB Packet Storm
297348 - uplawski creme_fraiche The set_meta_data function in lib/cremefraiche.rb in the Creme Fraiche gem before 0.6.1 for Ruby allows remote attackers to execute arbitrary commands via shell metacharacters in the file name of an … CWE-78
OS Command  		CVE-2013-2090 2024-11-21 10:51 2014-05-27 Show GitHub Exploit DB Packet Storm
297349 - mail_on_update_project mail_on_update Cross-site request forgery (CSRF) vulnerability in the Mail On Update plugin before 5.2.0 for WordPress allows remote attackers to hijack the authentication of administrators for requests that change… CWE-352
 Origin Validation Error 		CVE-2013-2107 2024-11-21 10:51 2014-05-23 Show GitHub Exploit DB Packet Storm
297350 - glpi-project glpi Multiple SQL injection vulnerabilities in GLPI before 0.83.9 allow remote attackers to execute arbitrary SQL commands via the (1) users_id_assign parameter to ajax/ticketassigninformation.php, (2) fi… CWE-89
SQL Injection 		CVE-2013-2226 2024-11-21 10:51 2014-05-15 Show GitHub Exploit DB Packet Storm