Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 4, 2026, 2 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
222521 2.8 注意 オラクル - Oracle Siebel CRM の Siebel Life Sciences における Clinical Trip Report に関する脆弱性 CWE-noinfo
情報不足
CVE-2014-0370 2014-01-16 14:06 2014-01-14 Show GitHub Exploit DB Packet Storm
222522 5 警告 オラクル - Oracle Siebel CRM の Siebel Core - EAI における Java Integration に関する脆弱性 CWE-noinfo
情報不足
CVE-2014-0369 2014-01-16 14:05 2014-01-14 Show GitHub Exploit DB Packet Storm
222523 4.3 警告 オラクル - Oracle iLearning における Learner Pages に関する脆弱性 CWE-noinfo
情報不足
CVE-2014-0389 2014-01-16 13:49 2014-01-14 Show GitHub Exploit DB Packet Storm
222524 4.3 警告 オラクル - Oracle Sun Solaris における Java Web Console に関する脆弱性 CWE-noinfo
情報不足
CVE-2014-0390 2014-01-16 13:36 2014-01-14 Show GitHub Exploit DB Packet Storm
222525 4 警告 オラクル - Oracle MySQL の MySQL Server における InnoDB に関する脆弱性 CWE-noinfo
情報不足
CVE-2013-5894 2014-01-16 11:58 2014-01-14 Show GitHub Exploit DB Packet Storm
222526 7.2 危険 マイクロソフト - Microsoft Windows 7 および Windows Server 2008 R2 のカーネルモードドライバの win32k.sys における権限昇格の脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2014-0262 2014-01-16 11:50 2014-01-14 Show GitHub Exploit DB Packet Storm
222527 4 警告 マイクロソフト - Microsoft Dynamics AX におけるサービス運用妨害 (DoS) の脆弱性 CWE-20
不適切な入力確認
CVE-2014-0261 2014-01-16 11:49 2014-01-14 Show GitHub Exploit DB Packet Storm
222528 9.3 危険 マイクロソフト - 複数の Microsoft 製品における任意のコードを実行される脆弱性 CWE-119
バッファエラー
CVE-2014-0260 2014-01-16 11:48 2014-01-14 Show GitHub Exploit DB Packet Storm
222529 9.3 危険 マイクロソフト - Microsoft Word 2007 および Office 互換機能パックにおける任意のコードを実行される脆弱性 CWE-119
バッファエラー
CVE-2014-0259 2014-01-16 11:48 2014-01-14 Show GitHub Exploit DB Packet Storm
222530 9.3 危険 マイクロソフト - Microsoft Word 製品および Office 互換機能パックにおける任意のコードを実行される脆弱性 CWE-119
バッファエラー
CVE-2014-0258 2014-01-16 11:47 2014-01-14 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 4, 2026, 4:17 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
272891 2.4 LOW
Physics
gnome
redhat
debian
opensuse
gnome_display_manager
enterprise_linux
debian_linux
leap
gdm3 3.14.2 and possibly later has an information leak before screen lock CWE-200
Information Exposure
CVE-2016-1000002 2024-11-21 11:42 2019-11-5 Show GitHub Exploit DB Packet Storm
272892 5.9 MEDIUM
Network
pivotal_software cloud_foundry_elastic_runtime Pivotal Cloud Foundry Elastic Runtime version 1.4.0 through 1.4.5, 1.5.0 through 1.5.11 and 1.6.0 through 1.6.11 is vulnerable to a remote information disclosure. It was found that original mitigatio… CWE-200
Information Exposure
CVE-2016-0715 2024-11-21 11:42 2018-09-12 Show GitHub Exploit DB Packet Storm
272893 8.8 HIGH
Network
infinispan infinispan The hotrod java client in infinispan before 9.1.0.Final automatically deserializes bytearray message contents in certain events. A malicious user could exploit this flaw by injecting a specially-craf… CWE-502
 Deserialization of Untrusted Data
CVE-2016-0750 2024-11-21 11:42 2018-09-11 Show GitHub Exploit DB Packet Storm
272894 9.8 CRITICAL
Network
suse
pidgin
linux_enterprise_server
pidgin
Pidgin version <2.11.0 contains a vulnerability in X.509 Certificates imports specifically due to improper check of return values from gnutls_x509_crt_init() and gnutls_x509_crt_import() that can res… CWE-295
Improper Certificate Validation 
CVE-2016-1000030 2024-11-21 11:42 2018-09-6 Show GitHub Exploit DB Packet Storm
272895 5.9 MEDIUM
Network
cloudfoundry java_buildpack
cf-release
Applications deployed to Cloud Foundry, versions v166 through v227, may be vulnerable to a remote disclosure of information, including, but not limited to environment variables and bound service deta… CWE-200
Information Exposure
CVE-2016-0708 2024-11-21 11:42 2018-07-12 Show GitHub Exploit DB Packet Storm
272896 10.0 CRITICAL
Network
vmware pivotal_software_mysql MySQL for PCF tiles 1.7.x before 1.7.10 were discovered to log the AWS access key in plaintext. These credentials were logged to the Service Backup component logs, and not the system log, thus were n… CWE-255
CWE-532
Credentials Management
 Inclusion of Sensitive Information in Log Files
CVE-2016-0898 2024-11-21 11:42 2018-03-30 Show GitHub Exploit DB Packet Storm
272897 9.8 CRITICAL
Network
kabona webdatorcentral A Plaintext Storage of a Password issue was discovered in Kabona AB WebDatorCentral (WDC) versions prior to Version 3.4.0. WDC stores password credentials in plaintext. CWE-255
Credentials Management
CVE-2016-0872 2024-11-21 11:42 2017-11-8 Show GitHub Exploit DB Packet Storm
272898 8.8 HIGH
Network
cloudfoundry
pivotal
cf-release
user_account_and_authentication
uaa-release
elastic_runtime
The identity zones feature in Pivotal Cloud Foundry 208 through 229; UAA 2.0.0 through 2.7.3 and 3.0.0; UAA-Release 2 through 4, when configured with multiple identity zones; and Elastic Runtime 1.6.… CWE-269
 Improper Privilege Management
CVE-2016-0732 2024-11-21 11:42 2017-09-7 Show GitHub Exploit DB Packet Storm
272899 4.7 MEDIUM
Network
cloudfoundry cf-release Gorouter in Cloud Foundry cf-release v141 through v228 allows man-in-the-middle attackers to conduct cross-site scripting (XSS) attacks via vectors related to modified requests. CWE-79
Cross-site Scripting
CVE-2016-0713 2024-11-21 11:42 2017-08-31 Show GitHub Exploit DB Packet Storm
272900 7.5 HIGH
Network
gnu bash The expansion of '\h' in the prompt string in bash 4.3 allows remote authenticated users to execute arbitrary code via shell metacharacters placed in 'hostname' of a machine. CWE-78
OS Command 
CVE-2016-0634 2024-11-21 11:42 2017-08-29 Show GitHub Exploit DB Packet Storm