Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 31, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
221961 7.5 危険 General Electric Company - GE Intelligent Platforms Proficy HMI/SCADA - CIMPLICITY および Proficy Process Systems with CIMPLICITY におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2014-0751 2014-01-28 17:44 2014-01-21 Show GitHub Exploit DB Packet Storm
221962 7.5 危険 General Electric Company - GE Intelligent Platforms Proficy HMI/SCADA - CIMPLICITY および Proficy Process Systems with CIMPLICITY におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2014-0750 2014-01-28 17:37 2014-01-21 Show GitHub Exploit DB Packet Storm
221963 5 警告 baseurl.org - yum の yum-cron/yum-cron.py の installUpdates 関数における RMP パッケージの署名の制限を回避される脆弱性 CWE-20
不適切な入力確認 		CVE-2014-0022 2014-01-28 17:02 2014-01-14 Show GitHub Exploit DB Packet Storm
221964 5.5 警告 シスコシステムズ - Cisco Secure Access Control System のポータルインターフェースにおけるセッションをハイジャックされる脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2014-0678 2014-01-28 16:49 2014-01-27 Show GitHub Exploit DB Packet Storm
221965 4.3 警告 シスコシステムズ - Cisco Video Surveillance 5000 HD IP Dome カメラの Web インターフェースにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2014-0673 2014-01-28 16:32 2014-01-27 Show GitHub Exploit DB Packet Storm
221966 7.5 危険 Josh Fradley - Burden の login.php の "remember me" 機能における認証を回避される脆弱性 CWE-287
不適切な認証 		CVE-2013-7137 2014-01-28 16:19 2013-12-18 Show GitHub Exploit DB Packet Storm
221967 4.3 警告 ヤフー株式会社 - FireFox 用 Yahoo! Toolbar プラグインの clickstream.js におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2013-6853 2014-01-28 16:15 2014-01-14 Show GitHub Exploit DB Packet Storm
221968 3.6 注意 Secunia - Secunia CSI Agent における設定を変更される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2013-5364 2014-01-28 16:13 2014-01-10 Show GitHub Exploit DB Packet Storm
221969 6.8 警告 マイクロソフト - Android 用 Microsoft Bing アプリケーションにおける任意の APK ファイルをインストールされる脆弱性 CWE-94
コード・インジェクション 		CVE-2014-1670 2014-01-28 15:48 2014-01-21 Show GitHub Exploit DB Packet Storm
221970 9.3 危険 SmartBear Software - SoapUI の WSDL/WADL インポート機能における任意の Java コードを実行される脆弱性 CWE-94
コード・インジェクション 		CVE-2014-1202 2014-01-28 15:38 2014-01-14 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 31, 2026, 4:16 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
273421 7.5 HIGH
Network 		microsoft jscript
vbscript 		The Microsoft (1) VBScript 5.7 and 5.8 and (2) JScript 5.7 and 5.8 engines, as used in Internet Explorer 8 through 11 and other products, allow remote attackers to execute arbitrary code via a crafte… CWE-119
Incorrect Access of Indexable Resource ('Range Error')  		CVE-2016-0002 2024-11-21 11:40 2016-01-13 Show GitHub Exploit DB Packet Storm
273422 8.8 HIGH
Network 		jasper_project jasper Integer overflow in the jas_matrix_create function in JasPer allows context-dependent attackers to have unspecified impact via a crafted JPEG 2000 image, related to integer multiplication for memory … CWE-190
 Integer Overflow or Wraparound 		CVE-2015-8751 2024-11-21 11:39 2020-02-18 Show GitHub Exploit DB Packet Storm
273423 7.5 HIGH
Network 		node-uuid_project node-uuid node-uuid before 1.4.4 uses insufficiently random data to create a GUID, which could make it easier for attackers to have unspecified impact via brute force guessing. CWE-331
 Insufficient Entropy 		CVE-2015-8851 2024-11-21 11:39 2020-01-31 Show GitHub Exploit DB Packet Storm
273424 9.8 CRITICAL
Network 		php-gettext_project
opensuse
redhat
fedoraproject 		php-gettext
leap
enterprise_linux
fedora 		The plural form formula in ngettext family of calls in php-gettext before 1.0.12 allows remote attackers to execute arbitrary code. CWE-20
 Improper Input Validation  		CVE-2015-8980 2024-11-21 11:39 2019-11-5 Show GitHub Exploit DB Packet Storm
273425 9.8 CRITICAL
Network 		qualcomm sd_410_firmware
sd_412_firmware
sd_617_firmware
sd_652_firmware
sd_800_firmware
sd_808_firmware
sd_810_firmware
sd_650_firmware 		In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Mobile SD 410/12, SD 617, SD 650/52, SD 800, SD 808, and SD 810, in TQS QSEE application, while parsing "Set Certif… CWE-119
CWE-190
Incorrect Access of Indexable Resource ('Range Error') 
 Integer Overflow or Wraparound 		CVE-2015-9183 2024-11-21 11:39 2018-04-18 Show GitHub Exploit DB Packet Storm
273426 9.8 CRITICAL
Network 		qualcomm msm8974_firmware In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Mobile MSM8974, lack of length checking in OEMCrypto_DeriveKeysFromSessionKey() could lead to a buffer overflow vul… CWE-119
Incorrect Access of Indexable Resource ('Range Error')  		CVE-2015-9179 2024-11-21 11:39 2018-04-18 Show GitHub Exploit DB Packet Storm
273427 9.8 CRITICAL
Network 		qualcomm sd_410_firmware
sd_412_firmware
sd_617_firmware
sd_650_firmware
sd_652_firmware
sd_800_firmware
sd_808_firmware
sd_810_firmware 		In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Mobile SD 410/12, SD 617, SD 650/52, SD 800, SD 808, and SD 810, lack of validation of the return value prior to us… CWE-119
Incorrect Access of Indexable Resource ('Range Error')  		CVE-2015-9174 2024-11-21 11:39 2018-04-18 Show GitHub Exploit DB Packet Storm
273428 9.8 CRITICAL
Network 		qualcomm sd_410_firmware
sd_412_firmware
sd_617_firmware
sd_650_firmware
sd_652_firmware
sd_800_firmware
sd_808_firmware
sd_810_firmware 		In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Mobile SD 410/12, SD 617, SD 650/52, SD 800, SD 808, and SD 810, missing of return value check in memscpy can cause… CWE-119
Incorrect Access of Indexable Resource ('Range Error')  		CVE-2015-9173 2024-11-21 11:39 2018-04-18 Show GitHub Exploit DB Packet Storm
273429 9.8 CRITICAL
Network 		qualcomm sd_410_firmware
sd_412_firmware
sd_617_firmware
sd_650_firmware
sd_652_firmware
sd_800_firmware
sd_808_firmware
sd_810_firmware 		In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Mobile SD 410/12, SD 617, SD 650/52, SD 800, SD 808, and SD 810, in the function "Certificate_CreateWithBuffer" in … CWE-476
 NULL Pointer Dereference 		CVE-2015-9162 2024-11-21 11:39 2018-04-18 Show GitHub Exploit DB Packet Storm
273430 9.8 CRITICAL
Network 		qualcomm mdm9625_firmware
mdm9635m_firmware
sd_400_firmware
sd_800_firmware 		In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Mobile MDM9625, MDM9635M, SD 400, and SD 800, userspace-provided pointer arguments are not validated. CWE-20
 Improper Input Validation  		CVE-2015-9151 2024-11-21 11:39 2018-04-18 Show GitHub Exploit DB Packet Storm