Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":June 2, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
222621	4.9	警告	Novell	-	Windows 上で稼働する Novell Client の VBA32 AntiRootKit コンポーネントにおけるサービス運用妨害 (DoS) の脆弱性	CWE-20 不適切な入力確認	CVE-2013-3705	2013-12-25 13:43	2013-12-10	Show	GitHub Exploit DB Packet Storm

222622	4	警告	シスコシステムズ	-	Cisco Unified Communications Manager のディザスタリカバリシステムコンポーネントにおける重要なデバイス情報を取得される脆弱性	CWE-200 情報漏えい	CVE-2013-6978	2013-12-25 13:41	2013-12-18	Show	GitHub Exploit DB Packet Storm

222623	-	-	ヒューレット・パッカード	-	削除 HP Autonomy Ultraseek におけるクロスサイトスクリプティングの脆弱性	-	CVE-2013-6196	2013-12-25 13:40	2013-12-19	Show	GitHub Exploit DB Packet Storm

222624	4.9	警告	IBM	-	IBM Sterling B2B Integrator および Sterling File Gateway におけるアクセス制限を回避される脆弱性	CWE-20 不適切な入力確認	CVE-2013-5407	2013-12-25 12:34	2013-12-4	Show	GitHub Exploit DB Packet Storm

222625	5	警告	IBM	-	IBM WebSphere Portal における重要なコンポーネント情報を取得される脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2013-6723	2013-12-25 12:31	2013-12-20	Show	GitHub Exploit DB Packet Storm

222626	4.3	警告	IBM	-	IBM WebSphere Portal の Web Content Manager UI におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2013-6328	2013-12-25 12:30	2013-12-20	Show	GitHub Exploit DB Packet Storm

222627	4.3	警告	IBM	-	IBM WebSphere Portal における重要なプロパティ情報を取得される脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2013-6316	2013-12-25 12:30	2013-12-20	Show	GitHub Exploit DB Packet Storm

222628	4.3	警告	IBM	-	IBM Security Access Manager for Enterprise Single Sign-On の IMS サーバにおけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2013-5421	2013-12-25 12:29	2013-12-20	Show	GitHub Exploit DB Packet Storm

222629	4.9	警告	IBM	-	IBM WebSphere Portal におけるデータを変更される脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2013-4012	2013-12-25 12:29	2013-12-20	Show	GitHub Exploit DB Packet Storm

222630	4.3	警告	IBM	-	IBM Sterling B2B Integrator および Sterling File Gateway における認証を回避される脆弱性	CWE-287 不適切な認証	CVE-2013-5413	2013-12-25 12:27	2013-12-4	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:June 2, 2026, 4:18 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
268021	7.8	HIGH Local	canonical linux oracle novell	ubuntu_linux linux_kernel linux suse_linux_enterprise_server suse_linux_enterprise_debuginfo suse_linux_enterprise_software_development_kit	The get_rock_ridge_filename function in fs/isofs/rock.c in the Linux kernel before 4.5.5 mishandles NM (aka alternate name) entries containing \0 characters, which allows local users to obtain sensit…	CWE-200 Information Exposure	CVE-2016-4913	2024-11-21 11:53	2016-05-23	Show	GitHub Exploit DB Packet Storm

268022	7.8	HIGH Local	novell redhat canonical linux oracle	suse_linux_enterprise_desktop suse_linux_enterprise_workstation_extension suse_linux_enterprise_module_for_public_cloud suse_linux_enterprise_server opensuse_leap suse_linux_enterprise…	Use-after-free vulnerability in drivers/net/ppp/ppp_generic.c in the Linux kernel before 4.5.2 allows local users to cause a denial of service (memory corruption and system crash, or spinlock) or pos…	CWE-416 Use After Free	CVE-2016-4805	2024-11-21 11:53	2016-05-23	Show	GitHub Exploit DB Packet Storm

268023	7.5	HIGH Network	zulip	zulip	In zulip before 1.3.12, deactivated users could access messages if SSO was enabled.	NVD-CWE-noinfo	CVE-2016-4427	2024-11-21 11:52	2022-07-29	Show	GitHub Exploit DB Packet Storm

268024	4.3	MEDIUM Network	zulip	zulip	In zulip before 1.3.12, bot API keys were accessible to other users in the same realm.	NVD-CWE-noinfo	CVE-2016-4426	2024-11-21 11:52	2022-07-29	Show	GitHub Exploit DB Packet Storm

268025	9.8	CRITICAL Network	haxx	curl	Curl before 7.49.1 in Apple OS X before macOS Sierra prior to 10.12 allows remote or local attackers to execute arbitrary code, gain sensitive information, cause denial-of-service conditions, bypass …	NVD-CWE-noinfo	CVE-2016-4606	2024-11-21 11:52	2020-02-21	Show	GitHub Exploit DB Packet Storm

268026	7.5	HIGH Network	apple	mac_os_x safari	A Cross-origin vulnerability exists in WebKit in Apple Safari before 10.0.1 when processing location attributes, which could let a remote malicious user obtain sensitive information.	CWE-200 Information Exposure	CVE-2016-4676	2024-11-21 11:52	2020-02-4	Show	GitHub Exploit DB Packet Storm

268027	8.8	HIGH Network	webkitgtk canonical	webkitgtk\+ ubuntu_linux	WebKitGTK+ before 2.14.0: A use-after-free vulnerability can allow remote attackers to cause a DoS	CWE-416 Use After Free	CVE-2016-4761	2024-11-21 11:52	2020-01-23	Show	GitHub Exploit DB Packet Storm

268028	8.8	HIGH Network	cloudera	cdh	In Cloudera CDH before 5.7.1, Impala REVOKE ALL ON SERVER commands do not revoke all privileges.	CWE-863 Incorrect Authorization	CVE-2016-4572	2024-11-21 11:52	2019-11-26	Show	GitHub Exploit DB Packet Storm

268029	9.8	CRITICAL Network	arubanetworks	clearpass	Aruba ClearPass Policy Manager before 6.5.7 and 6.6.x before 6.6.2 allows attackers to obtain database credentials.	CWE-522 Insufficiently Protected Credentials	CVE-2016-4401	2024-11-21 11:52	2019-11-7	Show	GitHub Exploit DB Packet Storm

268030	6.5	MEDIUM Network	apple	iphone_os mac_os apple_tv	In iOS before 9.3.3, tvOS before 9.2.2, and OS X El Capitan before v10.11.6 and Security Update 2016-004, a downgrade issue existed with HTTP authentication credentials saved in Keychain. This issue …	CWE-200 Information Exposure	CVE-2016-4644	2024-11-21 11:52	2019-01-12	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed