Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 4, 2026, 4 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
222271 7.5 危険 Drupal - Drupal の OpenID モジュールにおける他のユーザとして認証される脆弱性 CWE-noinfo
情報不足 		CVE-2014-1475 2014-01-28 10:11 2014-01-15 Show GitHub Exploit DB Packet Storm
222272 7.5 危険 live555 - VideoLAN VLC media player で使用される Live Networks Live555 Streaming Media におけるサービス運用妨害 (DoS) の脆弱性 CWE-119
CWE-189
CVE-2013-6934 2014-01-27 18:54 2013-12-30 Show GitHub Exploit DB Packet Storm
222273 7.5 危険 live555 - VideoLAN VLC media player で使用される Live Networks Live555 Streaming Media におけるサービス運用妨害 (DoS) の脆弱性 CWE-119
CWE-189
CVE-2013-6933 2014-01-27 18:53 2013-12-30 Show GitHub Exploit DB Packet Storm
222274 2.1 注意 IBM - Windows 上で稼働する IBM Tivoli Storage Manager のクライアントにおけるアクセス制限を回避される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2013-5371 2014-01-27 18:52 2013-08-22 Show GitHub Exploit DB Packet Storm
222275 4.3 警告 IBM - IBM System X および Flex System サーバの Integrated Management Module 2 における暗号保護メカニズムを回避される脆弱性 CWE-310
暗号の問題 		CVE-2013-4030 2014-01-27 18:48 2013-09-10 Show GitHub Exploit DB Packet Storm
222276 7.8 危険 Thecus - Thecus NAS サーバの N8800 ファームウェアにおける重要な情報を取得される脆弱性 CWE-255
証明書・パスワード管理 		CVE-2013-5669 2014-01-27 18:10 2013-08-31 Show GitHub Exploit DB Packet Storm
222277 7.8 危険 Thecus - Thecus NAS サーバの N8800 ファームウェア上で稼働する ADS/NT Support ページにおける管理者の認証情報を取得される脆弱性 CWE-255
証明書・パスワード管理 		CVE-2013-5668 2014-01-27 18:10 2013-08-31 Show GitHub Exploit DB Packet Storm
222278 10 危険 Thecus - Thecus NAS サーバの N8800 ファームウェアにおける任意のコマンドを実行される脆弱性 CWE-78
OSコマンド・インジェクション 		CVE-2013-5667 2014-01-27 18:09 2013-08-31 Show GitHub Exploit DB Packet Storm
222279 4.3 警告 レッドハット - Red Hat Enterprise Virtualization Manager のリモートビューアにおける SPICE サーバになりすまされる脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2013-6434 2014-01-27 17:54 2014-01-21 Show GitHub Exploit DB Packet Storm
222280 5.8 警告 アップル - Apple iTunes におけるコンテンツを偽装される脆弱性 CWE-310
暗号の問題 		CVE-2014-1242 2014-01-27 17:09 2014-01-22 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 5, 2026, 4:11 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
268381 5.9 MEDIUM
Network 		pivotal_software cloud_foundry_uaa
cloud_foundry
cloud_foundry_elastic_runtime
cloud_foundry_uaa-release 		Pivotal Cloud Foundry 239 and earlier, UAA (aka User Account and Authentication Server) 3.4.1 and earlier, UAA release 12.2 and earlier, PCF (aka Pivotal Cloud Foundry) Elastic Runtime 1.6.x before 1… CWE-295
Improper Certificate Validation  		CVE-2016-5016 2024-11-21 11:53 2017-04-25 Show GitHub Exploit DB Packet Storm
268382 7.5 HIGH
Network 		google chrome Skia, as used in Google Chrome before 50.0.2661.94, allows remote attackers to bypass the Same Origin Policy and obtain sensitive information. CWE-346
 Origin Validation Error 		CVE-2016-5168 2024-11-21 11:53 2017-04-22 Show GitHub Exploit DB Packet Storm
268383 7.8 HIGH
Local 		securebrain phishwall_client Untrusted search path vulnerability in the installer of PhishWall Client Internet Explorer before 3.7.8.2. CWE-426
 Untrusted Search Path 		CVE-2016-4846 2024-11-21 11:53 2017-04-21 Show GitHub Exploit DB Packet Storm
268384 4.3 MEDIUM
Network 		cybozu mailwise Cybozu Mailwise before 5.4.0 allows remote attackers to inject arbitrary email headers. CWE-20
 Improper Input Validation  		CVE-2016-4841 2024-11-21 11:53 2017-04-21 Show GitHub Exploit DB Packet Storm
268385 5.9 MEDIUM
Network 		toshiba coordinate_plus Coordinate Plus App for Android 1.0.2 and earlier and Coordinate Plus App for iOS 1.0.2 and earlier do not verify SSL certificates. CWE-295
Improper Certificate Validation  		CVE-2016-4840 2024-11-21 11:53 2017-04-21 Show GitHub Exploit DB Packet Storm
268386 5.9 MEDIUM
Network 		aeon waon WAON "Service Application" for Android 1.4.1 and earlier does not verify SSL certificates. CWE-295
Improper Certificate Validation  		CVE-2016-4832 2024-11-21 11:53 2017-04-21 Show GitHub Exploit DB Packet Storm
268387 5.9 MEDIUM
Network 		akindo-sushiro sushiro Sushiro App for iOS 2.1.16 and earlier and Sushiro App for Android 2.1.16.1 and earlier do not verify SSL certificates. CWE-295
Improper Certificate Validation  		CVE-2016-4830 2024-11-21 11:53 2017-04-21 Show GitHub Exploit DB Packet Storm
268388 5.9 MEDIUM
Network 		dmm ppv_play_player DMM Movie Player App for Android before 1.2.1, and DMM Movie Player App for iPhone/iPad before 2.1.3 does not verify SSL certificates. CWE-295
Improper Certificate Validation  		CVE-2016-4829 2024-11-21 11:53 2017-04-21 Show GitHub Exploit DB Packet Storm
268389 6.5 MEDIUM
Network 		imagemagick imagemagick coders/tiff.c in ImageMagick before 6.9.5-3 allows remote attackers to cause a denial of service (out-of-bounds read) via a crafted TIFF file. CWE-125
Out-of-bounds Read 		CVE-2016-5010 2024-11-21 11:53 2017-04-21 Show GitHub Exploit DB Packet Storm
268390 8.8 HIGH
Network 		cs-cart cs-cart Twigmo bundled with CS-Cart 4.3.9 and earlier and Twigmo bundled with CS-Cart Multi-Vendor 4.3.9 and earlier allow remote authenticated users to execute arbitrary PHP code on the servers. CWE-20
 Improper Input Validation  		CVE-2016-4862 2024-11-21 11:53 2017-04-21 Show GitHub Exploit DB Packet Storm