Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 28, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
222321 4.3 警告 Zend Technologies Ltd. - ZendTo の lib/NSSDropoff.php におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2013-6808 2014-01-6 17:13 2013-12-16 Show GitHub Exploit DB Packet Storm
222322 2.1 注意 OpenStack - 複数の OpenStack 製品の keystone/middleware/auth_token.py におけるサーバを偽装される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2013-2030 2014-01-6 17:01 2013-05-9 Show GitHub Exploit DB Packet Storm
222323 6.1 警告 HOT - HOT HOTBOX Router のソフトウェアの goform/login におけるサービス運用妨害 (DoS) の脆弱性 CWE-20
不適切な入力確認 		CVE-2013-5220 2014-01-6 16:56 2013-09-9 Show GitHub Exploit DB Packet Storm
222324 3.3 注意 HOT - HOT HOTBOX Router のソフトウェアにおけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2013-5219 2014-01-6 16:55 2013-09-9 Show GitHub Exploit DB Packet Storm
222325 2.9 注意 HOT - HOT HOTBOX Router のソフトウェアにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2013-5218 2014-01-6 16:54 2013-09-9 Show GitHub Exploit DB Packet Storm
222326 5.4 警告 HOT - HOT HOTBOX Router のソフトウェアの goform/wlanBasicSecurity におけるクロスサイトリクエストフォージェリの脆弱性 CWE-352
同一生成元ポリシー違反 		CVE-2013-5039 2014-01-6 16:53 2013-09-9 Show GitHub Exploit DB Packet Storm
222327 5.8 警告 HOT - HOT HOTBOX Router のソフトウェアにおける認証を回避される脆弱性 CWE-287
不適切な認証 		CVE-2013-5038 2014-01-6 16:52 2013-09-9 Show GitHub Exploit DB Packet Storm
222328 3.3 注意 HOT - HOT HOTBOX Router のソフトウェアにおける事前共有鍵を取得される脆弱性 CWE-255
証明書・パスワード管理 		CVE-2013-5037 2014-01-6 16:51 2013-09-9 Show GitHub Exploit DB Packet Storm
222329 4.3 警告 ヒューレット・パッカード - HP Service Manager WebTier および Windows Client におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2013-6198 2014-01-6 16:34 2013-12-19 Show GitHub Exploit DB Packet Storm
222330 5.2 警告 ヒューレット・パッカード - HP Service Manager WebTier および Windows Client における任意のコードを実行される脆弱性 CWE-noinfo
情報不足 		CVE-2013-6197 2014-01-6 16:34 2013-12-19 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 28, 2026, 4:16 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
272841 9.8 CRITICAL
Network 		suse
opensuse
canonical
debian
gnu
fedoraproject 		linux_enterprise_server
linux_enterprise_desktop
linux_enterprise_debuginfo
linux_enterprise_software_development_kit
opensuse
suse_linux_enterprise_server
ubuntu_linux
debian_li… 		Stack-based buffer overflow in the catopen function in the GNU C Library (aka glibc or libc6) before 2.23 allows context-dependent attackers to cause a denial of service (application crash) or possib… CWE-119
Incorrect Access of Indexable Resource ('Range Error')  		CVE-2015-8779 2024-11-21 11:39 2016-04-20 Show GitHub Exploit DB Packet Storm
272842 9.8 CRITICAL
Network 		fedoraproject
debian
canonical
gnu
suse
opensuse 		fedora
debian_linux
ubuntu_linux
glibc
linux_enterprise_server
linux_enterprise_desktop
linux_enterprise_debuginfo
linux_enterprise_software_development_kit
opensuse
suse_l… 		Integer overflow in the GNU C Library (aka glibc or libc6) before 2.23 allows context-dependent attackers to cause a denial of service (application crash) or possibly execute arbitrary code via the s… CWE-119
Incorrect Access of Indexable Resource ('Range Error')  		CVE-2015-8778 2024-11-21 11:39 2016-04-20 Show GitHub Exploit DB Packet Storm
272843 9.1 CRITICAL
Network 		suse
opensuse
canonical
debian
fedoraproject
gnu 		linux_enterprise_server
linux_enterprise_desktop
linux_enterprise_debuginfo
linux_enterprise_software_development_kit
opensuse
suse_linux_enterprise_server
ubuntu_linux
debian_li… 		The strftime function in the GNU C Library (aka glibc or libc6) before 2.23 allows context-dependent attackers to cause a denial of service (application crash) or possibly obtain sensitive informatio… CWE-189
Numeric Errors 		CVE-2015-8776 2024-11-21 11:39 2016-04-20 Show GitHub Exploit DB Packet Storm
272844 7.5 HIGH
Network 		xmlsoft
canonical
debian 		libxml2
ubuntu_linux
debian_linux 		dict.c in libxml2 allows remote attackers to cause a denial of service (heap-based buffer over-read and application crash) via an unexpected character immediately after the "<!DOCTYPE html" substring… NVD-CWE-noinfo
CVE-2015-8806 2024-11-21 11:39 2016-04-14 Show GitHub Exploit DB Packet Storm
272845 6.5 MEDIUM
Network 		libtiff
debian 		libtiff
debian_linux 		The NeXTDecode function in tif_next.c in LibTIFF allows remote attackers to cause a denial of service (out-of-bounds write) via a crafted TIFF image, as demonstrated by libtiff5.tif. CWE-787
 Out-of-bounds Write 		CVE-2015-8784 2024-11-21 11:39 2016-04-14 Show GitHub Exploit DB Packet Storm
272846 6.1 MEDIUM
Network 		fedoraproject
horde
debian 		fedora
groupware
debian_linux 		Cross-site scripting (XSS) vulnerability in the _renderVarInput_number function in horde/framework/Core/lib/Horde/Core/Ui/VarRenderer/Html.php in Horde Groupware before 5.2.12 and Horde Groupware Web… CWE-79
Cross-site Scripting 		CVE-2015-8807 2024-11-21 11:39 2016-04-14 Show GitHub Exploit DB Packet Storm
272847 7.4 HIGH
Local 		foxitsoftware foxit_reader The Foxit Cloud Update Service (FoxitCloudUpdateService) in Foxit Reader 6.1 through 6.2.x and 7.x before 7.2.2, when an update to the Cloud plugin is available, allows local users to gain privileges… CWE-119
Incorrect Access of Indexable Resource ('Range Error')  		CVE-2015-8843 2024-11-21 11:39 2016-04-14 Show GitHub Exploit DB Packet Storm
272848 9.8 CRITICAL
Network 		eset nod32 Heap-based buffer overflow in the Archive support module in ESET NOD32 before update 11861 allows remote attackers to execute arbitrary code via a large number of languages in an EPOC installation fi… CWE-787
 Out-of-bounds Write 		CVE-2015-8841 2024-11-21 11:39 2016-04-12 Show GitHub Exploit DB Packet Storm
272849 9.8 CRITICAL
Network 		cypherpunks pidgin-otr Use-after-free vulnerability in the create_smp_dialog function in gtk-dialog.c in the Off-the-Record Messaging (OTR) pidgin-otr plugin before 4.0.2 for Pidgin allows remote attackers to execute arbit… NVD-CWE-Other
CVE-2015-8833 2024-11-21 11:39 2016-04-12 Show GitHub Exploit DB Packet Storm
272850 9.8 CRITICAL
Network 		xmlsoft
debian 		libxml2
debian_linux 		The htmlParseComment function in HTMLparser.c in libxml2 allows attackers to obtain sensitive information, cause a denial of service (out-of-bounds heap memory access and application crash), or possi… CWE-119
Incorrect Access of Indexable Resource ('Range Error')  		CVE-2015-8710 2024-11-21 11:39 2016-04-12 Show GitHub Exploit DB Packet Storm