Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":June 13, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
222571	4.9	警告	アップル	-	Apple iOS の iCloud サブシステムにおけるパスワード要求を回避される脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2014-2019	2014-03-19 15:36	2014-02-5	Show	GitHub Exploit DB Packet Storm

222572	4.3	警告	R-Company	-	R-Company 製 Unzipper におけるディレクトリトラバーサルの脆弱性	CWE-22 パス・トラバーサル	CVE-2014-1975	2014-03-19 15:14	2014-03-17	Show	GitHub Exploit DB Packet Storm

222573	4	警告	夢の街創造委員会株式会社	-	Android 版アプリ「出前館」における SSL サーバ証明書の検証不備の脆弱性	CWE-Other その他	CVE-2014-1976	2014-03-19 15:14	2014-03-17	Show	GitHub Exploit DB Packet Storm

222574	4.9	警告	BlackBerry	-	BlackBerry QNX Neutrino RTOS の /sbin/pppoectl における重要な情報を取得される脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2014-2534	2014-03-19 15:12	2014-03-11	Show	GitHub Exploit DB Packet Storm

222575	7.2	危険	BlackBerry	-	BlackBerry QNX Neutrino RTOS の /sbin/ifwatchd における権限を取得される脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2014-2533	2014-03-19 15:11	2014-03-11	Show	GitHub Exploit DB Packet Storm

222576	5	警告	ownCloud	-	ownCloud のデフォルトの Flash クロスドメインポリシーにおけるユーザのファイルにアクセスされる脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2014-2049	2014-03-19 14:01	2014-03-7	Show	GitHub Exploit DB Packet Storm

222577	3.5	注意	ownCloud	-	ownCloud の js/viewer.js におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2013-2150	2014-03-19 14:00	2013-05-31	Show	GitHub Exploit DB Packet Storm

222578	3.5	注意	ownCloud	-	ownCloud におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2013-2149	2014-03-19 13:59	2013-05-15	Show	GitHub Exploit DB Packet Storm

222579	4.6	警告	ownCloud	-	ownCloud における任意の PHP コードを実行される脆弱性	CWE-Other その他	CVE-2013-2089	2014-03-19 13:57	2013-05-10	Show	GitHub Exploit DB Packet Storm

222580	5	警告	ownCloud	-	ownCloud の設定のローダにおける CSRF トークンおよびその他の重要な情報を取得される脆弱性	CWE-200 情報漏えい	CVE-2013-2086	2014-03-19 13:57	2013-05-12	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:June 13, 2026, 4:20 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
268401	7.5	HIGH Network	apache	http_server	The mod_http2 module in the Apache HTTP Server 2.4.17 through 2.4.23, when the Protocols configuration includes h2 or h2c, does not restrict request-header length, which allows remote attackers to ca…	CWE-20 CWE-399 Improper Input Validation Resource Management Errors	CVE-2016-8740	2024-11-21 11:59	2016-12-6	Show	GitHub Exploit DB Packet Storm

268402	4.4	MEDIUM Local	lenovo	thinkpad_10_ella_2_bios thinkpad_11e_beema_bios thinkpad_11e_braswell_bios thinkpad_11e_broadwell_bios thinkpad_11e_skylake_bios thinkpad_13e_bios thinkpad_e450_bios thinkpad_e45…	A vulnerability has been identified in a signed kernel driver for the BIOS of some ThinkPad systems that can allow an attacker with Windows administrator-level privileges to call System Management Mo…	CWE-284 Improper Access Control	CVE-2016-8222	2024-11-21 11:59	2016-12-1	Show	GitHub Exploit DB Packet Storm

268403	4.4	MEDIUM Local	lenovo	bios notebook_110_14ibr_bios notebook_110_15ibr_bios notebook_b70_80_bios notebook_e31_80_bios notebook_e40_80_bios notebook_e41_80_bios notebook_e51_80_bios notebook_g40_80_b…	A vulnerability has been identified in some Lenovo Notebook and ThinkServer systems where an attacker with administrative privileges on a system could install a program that circumvents Intel Managem…	CWE-310 Cryptographic Issues	CVE-2016-8224	2024-11-21 11:59	2016-11-30	Show	GitHub Exploit DB Packet Storm

268404	7.8	HIGH Local	lenovo	system_interface_foundation	During an internal security review, Lenovo identified a local privilege escalation vulnerability in Lenovo System Interface Foundation software installed on some Windows 10 PCs where a user with loca…	CWE-284 Improper Access Control	CVE-2016-8223	2024-11-21 11:59	2016-11-30	Show	GitHub Exploit DB Packet Storm

268405	5.5	MEDIUM Local	linux	linux_kernel	The mpi_powm function in lib/mpi/mpi-pow.c in the Linux kernel through 4.8.11 does not ensure that memory is allocated for limb data, which allows local users to cause a denial of service (stack memo…	CWE-20 CWE-399 Improper Input Validation Resource Management Errors	CVE-2016-8650	2024-11-21 11:59	2016-11-28	Show	GitHub Exploit DB Packet Storm

268406	5.5	MEDIUM Local	linux	linux_kernel	The hash_accept function in crypto/algif_hash.c in the Linux kernel before 4.3.6 allows local users to cause a denial of service (OOPS) by attempting to trigger use of in-kernel hash algorithms for a…	CWE-476 NULL Pointer Dereference	CVE-2016-8646	2024-11-21 11:59	2016-11-28	Show	GitHub Exploit DB Packet Storm

268407	5.5	MEDIUM Local	linux	linux_kernel	The TCP stack in the Linux kernel before 4.8.10 mishandles skb truncation, which allows local users to cause a denial of service (system crash) via a crafted application that makes sendto system call…	CWE-284 Improper Access Control	CVE-2016-8645	2024-11-21 11:59	2016-11-28	Show	GitHub Exploit DB Packet Storm

268408	6.8	MEDIUM Physics	linux	linux_kernel	drivers/firewire/net.c in the Linux kernel before 4.8.7, in certain unusual hardware configurations, allows remote attackers to execute arbitrary code via crafted fragmented packets.	CWE-119 CWE-284 Incorrect Access of Indexable Resource ('Range Error') Improper Access Control	CVE-2016-8633	2024-11-21 11:59	2016-11-28	Show	GitHub Exploit DB Packet Storm

268409	7.8	HIGH Local	linux	linux_kernel	The tipc_msg_build function in net/tipc/msg.c in the Linux kernel through 4.8.11 does not validate the relationship between the minimum fragment length and the maximum packet size, which allows local…	CWE-264 CWE-119 Permissions, Privileges, and Access Controls Incorrect Access of Indexable Resource ('Range Error')	CVE-2016-8632	2024-11-21 11:59	2016-11-28	Show	GitHub Exploit DB Packet Storm

268410	5.5	MEDIUM Local	linux	linux_kernel	The x86_decode_insn function in arch/x86/kvm/emulate.c in the Linux kernel before 4.8.7, when KVM is enabled, allows local users to cause a denial of service (host OS crash) via a certain use of a Mo…	CWE-284 CWE-476 Improper Access Control NULL Pointer Dereference	CVE-2016-8630	2024-11-21 11:59	2016-11-28	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed