Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 28, 2026, 4:09 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
221961 9.3 危険 Hexagon - Intergraph ERDAS ER Viewer の ermapper_u.dll におけるスタックベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー
CVE-2013-3483 2014-01-22 14:56 2013-05-27 Show GitHub Exploit DB Packet Storm
221962 9.3 危険 Hexagon - Intergraph ERDAS ER Viewer の ermapper_u.dll におけるスタックベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー
CVE-2013-3482 2014-01-22 14:54 2013-05-27 Show GitHub Exploit DB Packet Storm
221963 5 警告 Puppet
Canonical
オラクル
- Puppet における SSLv2 ダウングレード攻撃を実行される脆弱性 CWE-noinfo
情報不足
CVE-2013-1654 2014-01-22 14:17 2013-03-12 Show GitHub Exploit DB Packet Storm
221964 5 警告 ウェブセンス
オラクル
- Websense Email Security の SMTP コンポーネントにおける重要な情報を取得される脆弱性 CWE-200
情報漏えい
CVE-2012-4605 2014-01-22 14:08 2012-08-23 Show GitHub Exploit DB Packet Storm
221965 7.8 危険 サイバートラスト株式会社
Apache Software Foundation
オラクル
- Apache Tomcat のデフォルト設定における SSL 通信により安全でない暗号スイートが適用される問題 CWE-DesignError
CVE-2007-1858 2014-01-22 13:56 2007-05-9 Show GitHub Exploit DB Packet Storm
221966 6.8 警告 サイバートラスト株式会社
Mozilla Foundation
サン・マイクロシステムズ
ターボリナックス
ヒューレット・パッカード
オラクル
レッドハット
- Mozilla Network Security Services (NSS) における SSLv2 サーバでのスタックオーバーフローの脆弱性 CWE-119
バッファエラー
CVE-2007-0009 2014-01-22 13:50 2007-02-26 Show GitHub Exploit DB Packet Storm
221967 6.8 警告 VMware - VMware vCloud Director におけるクロスサイトリクエストフォージェリの脆弱性 CWE-352
同一生成元ポリシー違反
CVE-2014-1211 2014-01-22 11:29 2014-01-16 Show GitHub Exploit DB Packet Storm
221968 3.3 注意 VMware - 複数の VMware 製品におけるサービス運用妨害 (DoS) の脆弱性 CWE-DesignError
CVE-2014-1208 2014-01-22 11:29 2014-01-16 Show GitHub Exploit DB Packet Storm
221969 4.3 警告 VMware - VMware ESXi および ESX におけるサービス運用妨害 (DoS) の脆弱性 CWE-Other
その他
CVE-2014-1207 2014-01-22 11:29 2014-01-16 Show GitHub Exploit DB Packet Storm
221970 7.5 危険 Sonatype Inc. - Sonatype Nexus における任意のオブジェクトを作成される脆弱性 CWE-94
コード・インジェクション
CVE-2014-0792 2014-01-22 11:04 2014-01-7 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 28, 2026, 4:16 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
273341 - ffmpeg ffmpeg The init_tile function in libavcodec/jpeg2000dec.c in FFmpeg before 2.8.2 does not enforce minimum-value and maximum-value constraints on tile coordinates, which allows remote attackers to cause a de… CWE-20
 Improper Input Validation 
CVE-2015-8219 2024-11-21 11:38 2015-11-17 Show GitHub Exploit DB Packet Storm
273342 - ffmpeg ffmpeg The decode_uncompressed function in libavcodec/faxcompr.c in FFmpeg before 2.8.2 does not validate uncompressed runs, which allows remote attackers to cause a denial of service (out-of-bounds array a… CWE-20
 Improper Input Validation 
CVE-2015-8218 2024-11-21 11:38 2015-11-17 Show GitHub Exploit DB Packet Storm
273343 - ffmpeg ffmpeg The ff_hevc_parse_sps function in libavcodec/hevc_ps.c in FFmpeg before 2.8.2 does not validate the Chroma Format Indicator, which allows remote attackers to cause a denial of service (out-of-bounds … CWE-20
 Improper Input Validation 
CVE-2015-8217 2024-11-21 11:38 2015-11-17 Show GitHub Exploit DB Packet Storm
273344 - ffmpeg ffmpeg The ljpeg_decode_yuv_scan function in libavcodec/mjpegdec.c in FFmpeg before 2.8.2 omits certain width and height checks, which allows remote attackers to cause a denial of service (out-of-bounds arr… CWE-17
Code
CVE-2015-8216 2024-11-21 11:38 2015-11-17 Show GitHub Exploit DB Packet Storm
273345 - linux linux_kernel net/ipv6/addrconf.c in the IPv6 stack in the Linux kernel before 4.0 does not validate attempted changes to the MTU value, which allows context-dependent attackers to cause a denial of service (packe… CWE-20
 Improper Input Validation 
CVE-2015-8215 2024-11-21 11:38 2015-11-17 Show GitHub Exploit DB Packet Storm
273346 - xen
oracle
linux
debian
canonical
xen
solaris
vm_virtualbox
linux_kernel
debian_linux
ubuntu_linux
The KVM subsystem in the Linux kernel through 4.2.6, and Xen 4.3.x through 4.6.x, allows guest OS users to cause a denial of service (host OS panic or hang) by triggering many #DB (aka Debug) excepti… CWE-399
 Resource Management Errors
CVE-2015-8104 2024-11-21 11:38 2015-11-16 Show GitHub Exploit DB Packet Storm
273347 - libpng
fedoraproject
suse
opensuse
debian
redhat
oracle
apple
canonical
libpng
fedora
linux_enterprise_desktop
linux_enterprise_server
leap
opensuse
debian_linux
enterprise_linux_desktop
enterprise_linux_server_aus
enterprise_linux_workstation<…
Multiple buffer overflows in the (1) png_set_PLTE and (2) png_get_PLTE functions in libpng before 1.0.64, 1.1.x and 1.2.x before 1.2.54, 1.3.x and 1.4.x before 1.4.17, 1.5.x before 1.5.24, and 1.6.x … CWE-120
Classic Buffer Overflow
CVE-2015-8126 2024-11-21 11:38 2015-11-13 Show GitHub Exploit DB Packet Storm
273348 - symantec endpoint_protection Untrusted search path vulnerability in the client in Symantec Endpoint Protection (SEP) 12.1 before 12.1-RU6-MP3 allows local users to gain privileges via a Trojan horse DLL in a client install packa… NVD-CWE-Other
CVE-2015-8113 2024-11-21 11:38 2015-11-12 Show GitHub Exploit DB Packet Storm
273349 - opensuse
roundcube
opensuse
webmail
Cross-site scripting (XSS) vulnerability in program/js/app.js in Roundcube webmail before 1.0.7 and 1.1.x before 1.1.3 allows remote authenticated users to inject arbitrary web script or HTML via the… CWE-79
Cross-site Scripting
CVE-2015-8105 2024-11-21 11:38 2015-11-11 Show GitHub Exploit DB Packet Storm
273350 - net-snmp net-snmp The net-snmp package in OpenBSD through 5.8 uses 0644 permissions for snmpd.conf, which allows local users to obtain sensitive community information by reading this file. CWE-200
Information Exposure
CVE-2015-8100 2024-11-21 11:38 2015-11-10 Show GitHub Exploit DB Packet Storm