Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 3, 2026, 6:08 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
222411 4.3 警告 Schneider Electric - Schneider Electric ClearSCADA および SCADA Expert ClearSCADA の DNP3 ドライバにおけるサービス運用妨害 (DoS) の脆弱性 CWE-399
リソース管理の問題 		CVE-2013-6142 2014-01-20 11:12 2013-01-14 Show GitHub Exploit DB Packet Storm
222412 7.5 危険 cspmum - CSP MySQL User Manager における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2014-1466 2014-01-20 10:28 2013-01-8 Show GitHub Exploit DB Packet Storm
222413 7.5 危険 Open Web Analytics - Open Web Analytics のパスワードリセットのページにおける SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2014-1206 2014-01-20 10:16 2014-01-9 Show GitHub Exploit DB Packet Storm
222414 10 危険 LOREX Technology - 複数の Lorex Edge 製品のファームウェアの INetViewX ActiveX コントロールにおけるバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2014-1201 2014-01-20 10:16 2014-01-9 Show GitHub Exploit DB Packet Storm
222415 7.5 危険 WellinTech - 複数の WellinTech 製品の ActiveX コントロールにおける任意の DLL コードをダウンロードされる脆弱性 CWE-94
コード・インジェクション 		CVE-2013-2827 2014-01-20 10:15 2014-01-14 Show GitHub Exploit DB Packet Storm
222416 6.4 警告 WellinTech - 複数の WellinTech 製品におけるアクセス制限を回避される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2013-2826 2014-01-20 10:14 2014-01-14 Show GitHub Exploit DB Packet Storm
222417 3.5 注意 VASCO - VASCO IDENTIKEY Authentication Server に認証不備の脆弱性 CWE-287
CWE-Other
CVE-2013-7292 2014-01-17 18:20 2014-01-9 Show GitHub Exploit DB Packet Storm
222418 7.2 危険 サン・マイクロシステムズ
オラクル		 - Sun Solaris の dbm_open() および dbminit() 関数におけるバッファオーバーフローの脆弱性 - CVE-2003-1067 2014-01-17 18:10 2003-06-19 Show GitHub Exploit DB Packet Storm
222419 9.3 危険 オラクル - Oracle Java SE における Hotspot に関する脆弱性 CWE-noinfo
情報不足 		CVE-2014-0408 2014-01-17 17:17 2014-01-14 Show GitHub Exploit DB Packet Storm
222420 9.3 危険 オラクル - Oracle Java SE における Install に関する脆弱性 CWE-noinfo
情報不足 		CVE-2014-0385 2014-01-17 17:17 2014-01-14 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 3, 2026, 4:18 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
267901 5.3 MEDIUM
Network 		symantec endpoint_protection_manager Symantec Endpoint Protection Manager (SEPM) 12.1 before RU6 MP5 does not properly implement the HSTS protection mechanism, which makes it easier for remote attackers to obtain sensitive information b… CWE-200
CWE-254
Information Exposure
 7PK - Security Features 		CVE-2016-5306 2024-11-21 11:54 2016-07-1 Show GitHub Exploit DB Packet Storm
267902 5.4 MEDIUM
Network 		symantec endpoint_protection_manager Multiple cross-site scripting (XSS) vulnerabilities in management scripts in Symantec Endpoint Protection Manager (SEPM) 12.1 before RU6 MP5 allow remote authenticated users to inject arbitrary web s… CWE-79
Cross-site Scripting 		CVE-2016-5305 2024-11-21 11:54 2016-07-1 Show GitHub Exploit DB Packet Storm
267903 6.8 MEDIUM
Network 		symantec endpoint_protection_manager Open redirect vulnerability in a report-routing component in Symantec Endpoint Protection Manager (SEPM) 12.1 before RU6 MP5 allows remote authenticated users to redirect users to arbitrary web sites… NVD-CWE-Other
CVE-2016-5304 2024-11-21 11:54 2016-07-1 Show GitHub Exploit DB Packet Storm
267904 7.5 HIGH
Network 		canonical
haproxy 		ubuntu_linux
haproxy 		HAproxy 1.6.x before 1.6.6, when a deny comes from a reqdeny rule, allows remote attackers to cause a denial of service (uninitialized memory access and crash) or possibly have unspecified other impa… CWE-119
Incorrect Access of Indexable Resource ('Range Error')  		CVE-2016-5360 2024-11-21 11:54 2016-07-1 Show GitHub Exploit DB Packet Storm
267905 7.5 HIGH
Network 		opensuse
arvidn 		leap
opensuse
libtorrent 		The parse_chunk_header function in libtorrent before 1.1.1 allows remote attackers to cause a denial of service (crash) via a crafted (1) HTTP response or possibly a (2) UPnP broadcast. CWE-20
 Improper Input Validation  		CVE-2016-5301 2024-11-21 11:54 2016-07-1 Show GitHub Exploit DB Packet Storm
267906 8.2 HIGH
Local 		lenovo bios_efi_driver Lenovo BIOS EFI Driver allows local administrators to execute arbitrary code with System Management Mode (SMM) privileges via unspecified vectors. CWE-264
Permissions, Privileges, and Access Controls 		CVE-2016-5729 2024-11-21 11:54 2016-07-1 Show GitHub Exploit DB Packet Storm
267907 7.5 HIGH
Network 		huawei ar3200_firmware Memory leak in Huawei AR3200 before V200R007C00SPC900 allows remote attackers to cause a denial of service (memory consumption) via a large number of crafted Multiprotocol Label Switching (MPLS) pack… CWE-399
 Resource Management Errors 		CVE-2016-5368 2024-11-21 11:54 2016-07-1 Show GitHub Exploit DB Packet Storm
267908 6.3 MEDIUM
Local 		debian
linux 		debian_linux
linux_kernel 		Race condition in the vop_ioctl function in drivers/misc/mic/vop/vop_vringh.c in the MIC VOP driver in the Linux kernel before 4.6.1 allows local users to obtain sensitive information from kernel mem… CWE-119
Incorrect Access of Indexable Resource ('Range Error')  		CVE-2016-5728 2024-11-21 11:54 2016-06-27 Show GitHub Exploit DB Packet Storm
267909 7.8 HIGH
Local 		huawei fusioninsight_hd Huawei FusionInsight HD before V100R002C60SPC200 allows local users to gain root privileges via unspecified vectors. CWE-264
Permissions, Privileges, and Access Controls 		CVE-2016-5723 2024-11-21 11:54 2016-06-25 Show GitHub Exploit DB Packet Storm
267910 7.3 HIGH
Network 		huawei ocean_stor_firmware Huawei OceanStor 5300 V3, 5500 V3, 5600 V3, 5800 V3, 6800 V3, 18800 V3, and 18500 V3 before V300R003C10 sends the plaintext session token in the HTTP header, which allows remote attackers to conduct … CWE-200
Information Exposure 		CVE-2016-5722 2024-11-21 11:54 2016-06-25 Show GitHub Exploit DB Packet Storm