Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 20, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
221981 5.5 警告 TYPO3 Association - TYPO3 の File Abstraction Layer における任意のファイルを作成または読まれる脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2013-4320 2014-05-22 15:18 2013-09-4 Show GitHub Exploit DB Packet Storm
221982 6.5 警告 TYPO3 Association - TYPO3 の file upload コンポーネントおよび File Abstraction Layer における任意の PHP コードを実行される脆弱性 CWE-20
不適切な入力確認 		CVE-2013-4250 2014-05-22 15:18 2013-07-30 Show GitHub Exploit DB Packet Storm
221983 4 警告 TYPO3 Association - TYPO3 の Backend History モジュールにおける任意のレコードの履歴を読まれる脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2012-6146 2014-05-22 15:18 2012-11-8 Show GitHub Exploit DB Packet Storm
221984 7.5 危険 Construtiva Internet Software - Construtiva CIS Manager における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2014-3749 2014-05-22 15:13 2014-05-16 Show GitHub Exploit DB Packet Storm
221985 6.8 警告 マイクロソフト - Microsoft Visual Studio で配布される Microsoft Debug Interface Access SDK おける任意のコードを実行される脆弱性 CWE-20
不適切な入力確認 		CVE-2014-3802 2014-05-22 14:40 2014-05-14 Show GitHub Exploit DB Packet Storm
221986 6.8 警告 Beetel - Beetel 450TC2 ルータのファームウェアにおけるクロスサイトリクエストフォージェリの脆弱性 CWE-352
同一生成元ポリシー違反 		CVE-2014-3792 2014-05-22 14:35 2014-04-30 Show GitHub Exploit DB Packet Storm
221987 5.8 警告 Zenoss, Inc. - Zenoss の zport/acl_users/cookieAuthHelper/login_form におけるオープンリダイレクトの脆弱性 CWE-20
不適切な入力確認 		CVE-2014-3739 2014-05-22 12:14 2014-05-14 Show GitHub Exploit DB Packet Storm
221988 4.3 警告 Zenoss, Inc. - Zenoss におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2014-3738 2014-05-22 12:13 2014-05-14 Show GitHub Exploit DB Packet Storm
221989 10 危険 ジュニパーネットワークス - Juniper Junos Space における任意のコマンドを実行される脆弱性 CWE-noinfo
情報不足 		CVE-2014-3412 2014-05-22 11:48 2014-05-14 Show GitHub Exploit DB Packet Storm
221990 4.3 警告 Seo Panel - Seo Panel におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2014-1855 2014-05-22 11:32 2014-05-14 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 20, 2026, 4:01 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
268441 6.5 MEDIUM
Network 		libming libming listmp3.c in libming 0.4.7 allows remote attackers to unspecified impact via a crafted mp3 file, which triggers an invalid left shift. CWE-189
Numeric Errors 		CVE-2016-9266 2024-11-21 12:00 2017-03-24 Show GitHub Exploit DB Packet Storm
268442 5.5 MEDIUM
Local 		libming libming The printMP3Headers function in listmp3.c in Libming 0.4.7 allows remote attackers to cause a denial of service (divide-by-zero error and application crash) via a crafted mp3 file. CWE-369
 Divide By Zero 		CVE-2016-9265 2024-11-21 12:00 2017-03-24 Show GitHub Exploit DB Packet Storm
268443 5.5 MEDIUM
Local 		libming libming Buffer overflow in the printMP3Headers function in listmp3.c in Libming 0.4.7 allows remote attackers to cause a denial of service (out-of-bounds read) via a crafted mp3 file. CWE-119
Incorrect Access of Indexable Resource ('Range Error')  		CVE-2016-9264 2024-11-21 12:00 2017-03-24 Show GitHub Exploit DB Packet Storm
268444 5.5 MEDIUM
Local 		jasper_project jasper Multiple integer overflows in the (1) jas_realloc function in base/jas_malloc.c and (2) mem_resize function in base/jas_stream.c in JasPer before 1.900.22 allow remote attackers to cause a denial of … CWE-190
 Integer Overflow or Wraparound 		CVE-2016-9262 2024-11-21 12:00 2017-03-24 Show GitHub Exploit DB Packet Storm
268445 5.5 MEDIUM
Local 		wvware libwmf The wmf_malloc function in api.c in libwmf 0.2.8.4 allows remote attackers to cause a denial of service (application crash) via a crafted wmf file, which triggers a memory allocation failure. CWE-119
Incorrect Access of Indexable Resource ('Range Error')  		CVE-2016-9011 2024-11-21 12:00 2017-03-24 Show GitHub Exploit DB Packet Storm
268446 5.5 MEDIUM
Local 		jasper_project
fedoraproject 		jasper
fedora 		The jp2_colr_destroy function in libjasper/jp2/jp2_cod.c in JasPer before 1.900.10 allows remote attackers to cause a denial of service (NULL pointer dereference). CWE-476
 NULL Pointer Dereference 		CVE-2016-8887 2024-11-21 12:00 2017-03-24 Show GitHub Exploit DB Packet Storm
268447 7.8 HIGH
Local 		jasper_project jasper The jas_malloc function in libjasper/base/jas_malloc.c in JasPer before 1.900.11 allows remote attackers to have unspecified impact via a crafted file, which triggers a memory allocation failure. CWE-119
Incorrect Access of Indexable Resource ('Range Error')  		CVE-2016-8886 2024-11-21 12:00 2017-03-24 Show GitHub Exploit DB Packet Storm
268448 5.5 MEDIUM
Local 		jasper_project jasper The bmp_getdata function in libjasper/bmp/bmp_dec.c in JasPer before 1.900.9 allows remote attackers to cause a denial of service (NULL pointer dereference) by calling the imginfo command with a craf… CWE-476
 NULL Pointer Dereference 		CVE-2016-8885 2024-11-21 12:00 2017-03-24 Show GitHub Exploit DB Packet Storm
268449 6.1 MEDIUM
Network 		novell groupwise A reflected XSS vulnerability exists in the web console of the Document Viewer Agent in Novell GroupWise before 2014 R2 Support Pack 1 Hot Patch 2 that may enable a remote attacker to execute JavaScr… CWE-79
Cross-site Scripting 		CVE-2016-9169 2024-11-21 12:00 2017-03-23 Show GitHub Exploit DB Packet Storm
268450 6.5 MEDIUM
Network 		novell edirectory A missing X-Frame-Options header in the NDS Utility Monitor in NDSD in Novell eDirectory before 9.0.2 could be used by remote attackers for clickjacking. CWE-20
 Improper Input Validation  		CVE-2016-9168 2024-11-21 12:00 2017-03-23 Show GitHub Exploit DB Packet Storm