Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 28, 2026, 2:01 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
222581 4.9 警告 Steven Jones - Drupal 用 Context モジュールの json レンダリング機能におけるブロックのアクセストークンを推測される脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2013-4445 2013-12-10 15:11 2013-10-16 Show GitHub Exploit DB Packet Storm
222582 4.3 警告 Sven Fuchs - Ruby 用 i18n gem の exceptions.rb におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2013-4492 2013-12-10 12:38 2013-12-3 Show GitHub Exploit DB Packet Storm
222583 4.3 警告 Ruby on Rails project - Ruby on Rails の actionpack/lib/action_view/helpers/text_helper.rb におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2013-6416 2013-12-10 12:29 2013-12-3 Show GitHub Exploit DB Packet Storm
222584 7.2 危険 Novell - SUSE horde5 パッケージにおける権限を取得される脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2013-1090 2013-12-9 18:21 2013-12-4 Show GitHub Exploit DB Packet Storm
222585 4.3 警告 The Jamroom Network - Jamroom 用 Search モジュールにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2013-6804 2013-12-9 18:08 2013-11-13 Show GitHub Exploit DB Packet Storm
222586 4.3 警告 Ganglia - Ganglia Web の header.php におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2013-6395 2013-12-9 17:50 2013-11-22 Show GitHub Exploit DB Packet Storm
222587 4.3 警告 Claroline Consortium - Claroline におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2013-6267 2013-12-9 15:54 2013-11-25 Show GitHub Exploit DB Packet Storm
222588 7.5 危険 Dokeos - Dokeos における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2013-6341 2013-12-9 14:29 2013-11-27 Show GitHub Exploit DB Packet Storm
222589 4.3 警告 RockMongo - RockMongo の xn 関数におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2013-5108 2013-12-9 14:20 2013-08-16 Show GitHub Exploit DB Packet Storm
222590 4.3 警告 シスコシステムズ - Cisco ONS 15454 コントローラカードのソフトウェアの管理の実装におけるサービス運用妨害 (DoS) の脆弱性 CWE-20
不適切な入力確認
CVE-2013-6702 2013-12-6 16:38 2013-12-3 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 28, 2026, 4:16 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
273411 7.5 HIGH
Network
spi-inc ganeti The RESTful control interface (aka RAPI or ganeti-rapi) in Ganeti before 2.9.7, 2.10.x before 2.10.8, 2.11.x before 2.11.8, 2.12.x before 2.12.6, 2.13.x before 2.13.3, 2.14.x before 2.14.2, and 2.15.… CWE-200
Information Exposure
CVE-2015-7945 2024-11-21 11:37 2017-08-19 Show GitHub Exploit DB Packet Storm
273412 7.5 HIGH
Network
spi-inc ganeti The RESTful control interface (aka RAPI or ganeti-rapi) in Ganeti before 2.9.7, 2.10.x before 2.10.8, 2.11.x before 2.11.8, 2.12.x before 2.12.6, 2.13.x before 2.13.3, 2.14.x before 2.14.2, and 2.15.… CWE-399
 Resource Management Errors
CVE-2015-7944 2024-11-21 11:37 2017-08-19 Show GitHub Exploit DB Packet Storm
273413 8.8 HIGH
Network
samsung galaxy_s6_edge_firmware The DCMProvider service in Samsung LibQjpeg on a Samsung SM-G925V device running build number LRX22G.G925VVRU1AOE2 allows remote attackers to cause a denial of service (segmentation fault and process… CWE-119
Incorrect Access of Indexable Resource ('Range Error') 
CVE-2015-7894 2024-11-21 11:37 2017-08-10 Show GitHub Exploit DB Packet Storm
273414 7.5 HIGH
Network
netflix lemur Lemur 0.1.4 does not use sufficient entropy in its IV when encrypting AES in CBC mode. CWE-331
 Insufficient Entropy
CVE-2015-7764 2024-11-21 11:37 2017-08-10 Show GitHub Exploit DB Packet Storm
273415 9.8 CRITICAL
Network
ntp
debian
netapp
ntp
debian_linux
oncommand_balance
clustered_data_ontap
data_ontap
oncommand_unified_manager
oncommand_performance_manager
Crypto-NAK packets in ntpd in NTP 4.2.x before 4.2.8p4, and 4.3.x before 4.3.77 allows remote attackers to bypass authentication. CWE-287
Improper Authentication
CVE-2015-7871 2024-11-21 11:37 2017-08-8 Show GitHub Exploit DB Packet Storm
273416 6.5 MEDIUM
Network
ntp
debian
netapp
siemens
ntp
debian_linux
oncommand_balance
clustered_data_ontap
data_ontap
oncommand_unified_manager
oncommand_performance_manager
tim_4r-ie_firmware
tim_4r-ie_dnp3_firmware
The decodenetnum function in ntpd in NTP 4.2.x before 4.2.8p4, and 4.3.x before 4.3.77 allows remote attackers to cause a denial of service (assertion failure) via a 6 or mode 7 packet containing a l… CWE-20
 Improper Input Validation 
CVE-2015-7855 2024-11-21 11:37 2017-08-8 Show GitHub Exploit DB Packet Storm
273417 8.8 HIGH
Network
ntp
netapp
ntp
oncommand_balance
clustered_data_ontap
data_ontap
oncommand_unified_manager
oncommand_performance_manager
Buffer overflow in the password management functionality in NTP 4.2.x before 4.2.8p4, and 4.3.x before 4.3.77 allows remote authenticated users to cause a denial of service (daemon crash) or possibly… CWE-120
Classic Buffer Overflow
CVE-2015-7854 2024-11-21 11:37 2017-08-8 Show GitHub Exploit DB Packet Storm
273418 9.8 CRITICAL
Network
ntp
netapp
ntp
oncommand_balance
clustered_data_ontap
data_ontap
oncommand_unified_manager
oncommand_performance_manager
The datalen parameter in the refclock driver in NTP 4.2.x before 4.2.8p4, and 4.3.x before 4.3.77 allows remote attackers to execute arbitrary code or cause a denial of service (crash) via a negative… CWE-120
Classic Buffer Overflow
CVE-2015-7853 2024-11-21 11:37 2017-08-8 Show GitHub Exploit DB Packet Storm
273419 6.5 MEDIUM
Network
ntp
debian
netapp
ntp
debian_linux
oncommand_balance
clustered_data_ontap
data_ontap
oncommand_unified_manager
oncommand_performance_manager
ntpd in NTP 4.2.x before 4.2.8p4, and 4.3.x before 4.3.77 allows remote authenticated users to cause a denial of service (infinite loop or crash) by pointing the key file at the log file. CWE-835
 Loop with Unreachable Exit Condition ('Infinite Loop')
CVE-2015-7850 2024-11-21 11:37 2017-08-8 Show GitHub Exploit DB Packet Storm
273420 8.8 HIGH
Network
ntp
netapp
ntp
oncommand_balance
clustered_data_ontap
data_ontap
oncommand_unified_manager
oncommand_performance_manager
Use-after-free vulnerability in ntpd in NTP 4.2.x before 4.2.8p4, and 4.3.x before 4.3.77 allows remote authenticated users to possibly execute arbitrary code or cause a denial of service (crash) via… CWE-416
 Use After Free
CVE-2015-7849 2024-11-21 11:37 2017-08-8 Show GitHub Exploit DB Packet Storm