Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 3, 2026, 6:08 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
222491 8.3 危険 Samba Project - Samba の winbindd の librpc/rpc/dcerpc_util.c におけるバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2013-4408 2014-01-17 11:06 2013-12-9 Show GitHub Exploit DB Packet Storm
222492 4.3 警告 Mozilla Foundation - Linux 上で稼働する Mozilla Firefox および SeaMonkey におけるクリップボードデータを読まれる脆弱性 CWE-200
情報漏えい 		CVE-2013-6672 2014-01-17 10:59 2013-12-10 Show GitHub Exploit DB Packet Storm
222493 6.4 警告 Nagios Enterprises, LLC - Nagios Core の contrib/daemonchk.c 内の process_cgivars 関数における重要な情報を取得される脆弱性 CWE-119
バッファエラー 		CVE-2013-7205 2014-01-16 17:55 2013-12-20 Show GitHub Exploit DB Packet Storm
222494 5.5 警告 Nagios Enterprises, LLC
The Icinga Project		 - Nagios Core および Icinga におけるプロセスメモリから重要な情報を取得される脆弱性 CWE-20
不適切な入力確認 		CVE-2013-7108 2014-01-16 17:52 2013-12-17 Show GitHub Exploit DB Packet Storm
222495 4.3 警告 オラクル - Oracle Supply Chain Products Suite の Oracle Demantra Demand Management における DM Others に関する脆弱性 CWE-noinfo
情報不足 		CVE-2014-0379 2014-01-16 17:47 2014-01-14 Show GitHub Exploit DB Packet Storm
222496 5.5 警告 オラクル - Oracle Supply Chain Products Suite の Oracle Demantra Demand Management における DM Others に関する脆弱性 CWE-noinfo
情報不足 		CVE-2014-0372 2014-01-16 17:46 2014-01-14 Show GitHub Exploit DB Packet Storm
222497 3.5 注意 オラクル - Oracle Supply Chain Products Suite の Oracle Demantra Demand Management における DM Others に関する脆弱性 CWE-noinfo
情報不足 		CVE-2014-0371 2014-01-16 17:46 2014-01-14 Show GitHub Exploit DB Packet Storm
222498 5.5 警告 オラクル - Oracle Supply Chain Products Suite の Oracle Agile Product Lifecycle Management for Process における Manage Data Cache に関する脆弱性 CWE-noinfo
情報不足 		CVE-2013-5897 2014-01-16 17:45 2014-01-14 Show GitHub Exploit DB Packet Storm
222499 4 警告 Apache Software Foundation - Apache CloudStack におけるネットワーク ACL を一覧表示される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2014-0031 2014-01-16 17:19 2014-01-10 Show GitHub Exploit DB Packet Storm
222500 6.9 警告 クアルコム
Android for MSM		 - MSM デバイス用 Qualcomm Innovation Center Android コントリビューションなどで使用される Linux Kernel 用 MSM カメラドライバにおける権限を取得される脆弱性 CWE-20
不適切な入力確認 		CVE-2013-6123 2014-01-16 16:48 2013-10-11 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 3, 2026, 4:18 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
268391 5.3 MEDIUM
Network 		miniprofiler rack-mini-profiler The rack-mini-profiler gem before 0.10.1 for Ruby allows remote attackers to obtain sensitive information about allocated strings and objects by leveraging incorrect ordering of security checks. CWE-200
Information Exposure 		CVE-2016-4442 2024-11-21 11:52 2017-05-2 Show GitHub Exploit DB Packet Storm
268392 7.8 HIGH
Local 		apple iphone_os
mac_os_x
tvos 		Heap-based buffer overflow in IOHIDFamily in Apple iOS before 9.3.2, OS X before 10.11.5, and tvOS before 9.2.1 allows attackers to execute arbitrary code in a privileged context or cause a denial of… CWE-119
Incorrect Access of Indexable Resource ('Range Error')  		CVE-2016-4650 2024-11-21 11:52 2017-04-21 Show GitHub Exploit DB Packet Storm
268393 3.3 LOW
Local 		redhat enterprise_linux_desktop
enterprise_linux_workstation
enterprise_linux_server
enterprise_linux_hpc_node
subscription-manager 		The Subscription Manager package (aka subscription-manager) before 1.17.7-1 for Candlepin uses weak permissions (755) for subscription-manager cache directories, which allows local users to obtain se… CWE-264
Permissions, Privileges, and Access Controls 		CVE-2016-4455 2024-11-21 11:52 2017-04-15 Show GitHub Exploit DB Packet Storm
268394 7.5 HIGH
Network 		redhat mod_cluster
enterprise_linux 		Stack-based buffer overflow in native/mod_manager/node.c in mod_cluster 1.2.9. CWE-119
Incorrect Access of Indexable Resource ('Range Error')  		CVE-2016-4459 2024-11-21 11:52 2017-04-13 Show GitHub Exploit DB Packet Storm
268395 7.0 HIGH
Local 		setroubleshoot_project
redhat 		setroubleshoot
enterprise_linux_desktop
enterprise_linux_workstation
enterprise_linux_server
enterprise_linux_hpc_node 		The allow_execstack plugin for setroubleshoot allows local users to execute arbitrary commands by triggering an execstack SELinux denial with a crafted filename, related to the commands.getoutput fun… CWE-77
Command Injection 		CVE-2016-4446 2024-11-21 11:52 2017-04-12 Show GitHub Exploit DB Packet Storm
268396 7.0 HIGH
Local 		setroubleshoot_project
redhat 		setroubleshoot
enterprise_linux_desktop
enterprise_linux_workstation
enterprise_linux_server
enterprise_linux_hpc_node 		The fix_lookup_id function in sealert in setroubleshoot before 3.2.23 allows local users to execute arbitrary commands as root by triggering an SELinux denial with a crafted file name, related to exe… CWE-77
Command Injection 		CVE-2016-4445 2024-11-21 11:52 2017-04-12 Show GitHub Exploit DB Packet Storm
268397 7.0 HIGH
Local 		setroubleshoot_project
redhat 		setroubleshoot
enterprise_linux_desktop
enterprise_linux_workstation
enterprise_linux_server
enterprise_linux_hpc_node 		The allow_execmod plugin for setroubleshoot before 3.2.23 allows local users to execute arbitrary commands by triggering an execmod SELinux denial with a crafted binary filename, related to the comma… CWE-77
Command Injection 		CVE-2016-4444 2024-11-21 11:52 2017-04-12 Show GitHub Exploit DB Packet Storm
268398 7.5 HIGH
Network 		xmlsoft
debian
oracle 		libxml2
debian_linux
solaris 		The xmlBufAttrSerializeTxtContent function in xmlsave.c in libxml2 allows context-dependent attackers to cause a denial of service (out-of-bounds read and application crash) via a non-UTF-8 attribute… CWE-502
 Deserialization of Untrusted Data 		CVE-2016-4483 2024-11-21 11:52 2017-04-12 Show GitHub Exploit DB Packet Storm
268399 8.8 HIGH
Network 		pivotal_software
cloudfoundry 		cloud_foundry_elastic_runtime
cloud_foundry
cloud_foundry_uaa
cloud_foundry_ops_manager
cloud_foundry_uaa_bosh 		SQL injection vulnerability in Pivotal Cloud Foundry (PCF) before 238; UAA 2.x before 2.7.4.4, 3.x before 3.3.0.2, and 3.4.x before 3.4.1; UAA BOSH before 11.2 and 12.x before 12.2; Elastic Runtime b… CWE-89
SQL Injection 		CVE-2016-4468 2024-11-21 11:52 2017-04-12 Show GitHub Exploit DB Packet Storm
268400 8.8 HIGH
Network 		meteocontrol weblog A Cross-Site Request Forgery issue was discovered in Meteocontrol WEB'log Basic 100 all versions, Light all versions, Pro all versions, and Pro Unlimited all versions. There is no CSRF Token generate… CWE-352
 Origin Validation Error 		CVE-2016-4504 2024-11-21 11:52 2017-03-22 Show GitHub Exploit DB Packet Storm