Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 8, 2026, 12:07 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
222101 7.8 危険 Belkin International - Belkin WeMo Home Automation ファームウェアにおける重要な情報を取得される脆弱性 CWE-310
CWE-Other
CVE-2013-6950 2014-02-25 15:52 2013-12-4 Show GitHub Exploit DB Packet Storm
222102 9.3 危険 Belkin International - Belkin WeMo Home Automation ファームウェアにおけるアクセス制限を回避される脆弱性 CWE-264
CWE-Other
CVE-2013-6949 2014-02-25 15:52 2013-12-4 Show GitHub Exploit DB Packet Storm
222103 7.8 危険 Belkin International - Belkin WeMo Home Automation ファームウェアの peerAddresses API における XML インジェクション攻撃を実行される脆弱性 CWE-94
CWE-Other
CVE-2013-6948 2014-02-25 15:51 2013-12-4 Show GitHub Exploit DB Packet Storm
222104 7.8 危険 シーメンス - Siemens RuggedCom ROS の SNMP の実装におけるサービス運用妨害 (DoS) の脆弱性 CWE-399
リソース管理の問題 		CVE-2014-1966 2014-02-25 15:33 2014-02-18 Show GitHub Exploit DB Packet Storm
222105 9.3 危険 ICONICS, Inc. - ICONICS GENESIS32 の GenLaunch.htm の ActiveX コントロールにおける任意のプログラムを実行される脆弱性 CWE-20
不適切な入力確認 		CVE-2014-0758 2014-02-25 15:25 2014-02-20 Show GitHub Exploit DB Packet Storm
222106 4.3 警告 シスコシステムズ - Cisco Adaptive Security Appliance ソフトウェアの Phone Proxy コンポーネントにおける sec_db 認証を回避される脆弱性 CWE-287
不適切な認証 		CVE-2014-0739 2014-02-25 15:20 2014-02-21 Show GitHub Exploit DB Packet Storm
222107 4.3 警告 シスコシステムズ - Cisco Adaptive Security Appliance ソフトウェアの Phone Proxy コンポーネントにおける認証を回避される脆弱性 CWE-287
不適切な認証 		CVE-2014-0738 2014-02-25 15:20 2014-02-21 Show GitHub Exploit DB Packet Storm
222108 4.3 警告 シスコシステムズ - Cisco Unified IP Phone 7960G における認証を回避される脆弱性 CWE-287
不適切な認証 		CVE-2014-0737 2014-02-25 15:19 2014-02-21 Show GitHub Exploit DB Packet Storm
222109 5 警告 シスコシステムズ - Cisco Unified Communications Manager の管理インターフェースにおける認証を回避される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2014-0731 2014-02-25 15:18 2014-02-19 Show GitHub Exploit DB Packet Storm
222110 6.8 警告 シスコシステムズ - Cisco Unified Computing System Central ソフトウェアにおける権限を取得される脆弱性 CWE-20
不適切な入力確認 		CVE-2014-0730 2014-02-25 15:17 2014-02-19 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 8, 2026, 4:09 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
268311 8.2 HIGH
Network 		ibm security_key_lifecycle_manager IBM Tivoli Key Lifecycle Manager 2.5 and 2.6 do not perform an authentication check for a critical resource or functionality allowing anonymous users access to protected areas. CWE-284
Improper Access Control 		CVE-2016-6105 2024-11-21 11:55 2017-02-2 Show GitHub Exploit DB Packet Storm
268312 6.5 MEDIUM
Network 		ibm kenexa_lms_on_cloud IBM Kenexa LMS on Cloud 13.1 and 13.2 - 13.2.4 could allow a remote attacker to traverse directories on the system. An attacker could send a specially-crafted URL request containing "dot dot" sequenc… CWE-22
Path Traversal 		CVE-2016-6126 2024-11-21 11:55 2017-02-2 Show GitHub Exploit DB Packet Storm
268313 5.4 MEDIUM
Network 		ibm kenexa_lms_on_cloud IBM Kenexa LMS on Cloud 13.1 and 13.2 - 13.2.4 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended funct… CWE-79
Cross-site Scripting 		CVE-2016-6125 2024-11-21 11:55 2017-02-2 Show GitHub Exploit DB Packet Storm
268314 8.8 HIGH
Network 		ibm kenexa_lms_on_cloud IBM Kenexa LMS on Cloud 13.1 and 13.2 - 13.2.4 could allow a remote attacker to upload arbitrary files, which could allow the attacker to execute arbitrary code on the vulnerable server. CWE-434
 Unrestricted Upload of File with Dangerous Type  		CVE-2016-6124 2024-11-21 11:55 2017-02-2 Show GitHub Exploit DB Packet Storm
268315 5.4 MEDIUM
Network 		ibm kenexa_lms_on_cloud IBM Kenexa LMS on Cloud 13.1 and 13.2 - 13.2.4 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended funct… CWE-79
Cross-site Scripting 		CVE-2016-6123 2024-11-21 11:55 2017-02-2 Show GitHub Exploit DB Packet Storm
268316 4.3 MEDIUM
Network 		ibm kenexa_lms_on_cloud IBM Kenexa LMS on Cloud 13.1 and 13.2 - 13.2.4 discloses answers to security questions in a response to authenticated users. CWE-200
Information Exposure 		CVE-2016-6122 2024-11-21 11:55 2017-02-2 Show GitHub Exploit DB Packet Storm
268317 6.1 MEDIUM
Network 		ibm inotes
domino 		IBM Verse is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to crede… CWE-79
Cross-site Scripting 		CVE-2016-6113 2024-11-21 11:55 2017-02-2 Show GitHub Exploit DB Packet Storm
268318 9.8 CRITICAL
Network 		ibm websphere_commerce IBM WebSphere Commerce contains an unspecified vulnerability that could allow disclosure of user personal data, performing of unauthorized administrative operations, and potentially causing a denial … NVD-CWE-noinfo
CVE-2016-6090 2024-11-21 11:55 2017-02-2 Show GitHub Exploit DB Packet Storm
268319 6.5 MEDIUM
Adjacent 		ibm bigfix_platform IBM BigFix Platform could allow an attacker on the local network to crash the BES and relay servers. CWE-284
Improper Access Control 		CVE-2016-6085 2024-11-21 11:55 2017-02-2 Show GitHub Exploit DB Packet Storm
268320 6.5 MEDIUM
Adjacent 		ibm bigfix_platform IBM BigFix Platform could allow an attacker on the local network to crash the BES server using a specially crafted XMLSchema request. CWE-20
 Improper Input Validation  		CVE-2016-6084 2024-11-21 11:55 2017-02-2 Show GitHub Exploit DB Packet Storm