Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 23, 2026, 10:01 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
222741 5 警告 The Foreman - Foreman におけるパスワードを推測される脆弱性 CWE-310
暗号の問題 		CVE-2013-0173 2014-05-9 16:22 2013-01-15 Show GitHub Exploit DB Packet Storm
222742 7.5 危険 The Foreman - Foreman における任意のコードを実行される脆弱性 CWE-94
コード・インジェクション 		CVE-2013-0171 2014-05-9 16:21 2013-01-23 Show GitHub Exploit DB Packet Storm
222743 3.6 注意 The Foreman - Foreman のスマートプロキシにおけるファイルを変更される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2012-5477 2014-05-9 16:20 2012-11-7 Show GitHub Exploit DB Packet Storm
222744 4.7 警告 IBM - IBM AIX および VIOS の ptrace システムコールにおけるサービス運用妨害 (DoS) の脆弱性 CWE-noinfo
情報不足 		CVE-2014-0930 2014-05-9 14:11 2014-05-2 Show GitHub Exploit DB Packet Storm
222745 2.6 注意 Novell - Novell Open Enterprise Server の Novell Client for Linux の /opt/novell/ncl/bin/nwrights における S 権限を取得される脆弱性 CWE-119
バッファエラー 		CVE-2014-0595 2014-05-9 12:28 2014-04-21 Show GitHub Exploit DB Packet Storm
222746 7.6 危険 シマンテック - Symantec Critical System Protection におけるポリシー設定を回避される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2013-5016 2014-05-9 12:14 2013-07-29 Show GitHub Exploit DB Packet Storm
222747 4.3 警告 シスコシステムズ - Telco および Wireless 用 Cisco Broadcast Access Center の Web フレームワークにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2014-2191 2014-05-8 18:44 2014-05-7 Show GitHub Exploit DB Packet Storm
222748 6.8 警告 シスコシステムズ - Telco および Wireless 用 Cisco Broadcast Access Center の Web フレームワークにおけるクロスサイトリクエストフォージェリの脆弱性 CWE-352
同一生成元ポリシー違反 		CVE-2014-2190 2014-05-8 18:44 2014-05-7 Show GitHub Exploit DB Packet Storm
222749 6.8 警告 シスコシステムズ - Cisco Adaptive Security Appliance ソフトウェアにおけるファイルを読まれる脆弱性 CWE-287
不適切な認証 		CVE-2014-2181 2014-05-8 18:44 2014-05-7 Show GitHub Exploit DB Packet Storm
222750 5 警告 シスコシステムズ - VMware 用 Cisco Nexus 1000V InterCloud における ACL 拒否のステートメントを回避される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2014-0685 2014-05-8 18:43 2014-05-6 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 23, 2026, 4 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
268441 6.5 MEDIUM
Network 		libming libming listmp3.c in libming 0.4.7 allows remote attackers to unspecified impact via a crafted mp3 file, which triggers an invalid left shift. CWE-189
Numeric Errors 		CVE-2016-9266 2024-11-21 12:00 2017-03-24 Show GitHub Exploit DB Packet Storm
268442 5.5 MEDIUM
Local 		libming libming The printMP3Headers function in listmp3.c in Libming 0.4.7 allows remote attackers to cause a denial of service (divide-by-zero error and application crash) via a crafted mp3 file. CWE-369
 Divide By Zero 		CVE-2016-9265 2024-11-21 12:00 2017-03-24 Show GitHub Exploit DB Packet Storm
268443 5.5 MEDIUM
Local 		libming libming Buffer overflow in the printMP3Headers function in listmp3.c in Libming 0.4.7 allows remote attackers to cause a denial of service (out-of-bounds read) via a crafted mp3 file. CWE-119
Incorrect Access of Indexable Resource ('Range Error')  		CVE-2016-9264 2024-11-21 12:00 2017-03-24 Show GitHub Exploit DB Packet Storm
268444 5.5 MEDIUM
Local 		jasper_project jasper Multiple integer overflows in the (1) jas_realloc function in base/jas_malloc.c and (2) mem_resize function in base/jas_stream.c in JasPer before 1.900.22 allow remote attackers to cause a denial of … CWE-190
 Integer Overflow or Wraparound 		CVE-2016-9262 2024-11-21 12:00 2017-03-24 Show GitHub Exploit DB Packet Storm
268445 5.5 MEDIUM
Local 		wvware libwmf The wmf_malloc function in api.c in libwmf 0.2.8.4 allows remote attackers to cause a denial of service (application crash) via a crafted wmf file, which triggers a memory allocation failure. CWE-119
Incorrect Access of Indexable Resource ('Range Error')  		CVE-2016-9011 2024-11-21 12:00 2017-03-24 Show GitHub Exploit DB Packet Storm
268446 5.5 MEDIUM
Local 		jasper_project
fedoraproject 		jasper
fedora 		The jp2_colr_destroy function in libjasper/jp2/jp2_cod.c in JasPer before 1.900.10 allows remote attackers to cause a denial of service (NULL pointer dereference). CWE-476
 NULL Pointer Dereference 		CVE-2016-8887 2024-11-21 12:00 2017-03-24 Show GitHub Exploit DB Packet Storm
268447 7.8 HIGH
Local 		jasper_project jasper The jas_malloc function in libjasper/base/jas_malloc.c in JasPer before 1.900.11 allows remote attackers to have unspecified impact via a crafted file, which triggers a memory allocation failure. CWE-119
Incorrect Access of Indexable Resource ('Range Error')  		CVE-2016-8886 2024-11-21 12:00 2017-03-24 Show GitHub Exploit DB Packet Storm
268448 5.5 MEDIUM
Local 		jasper_project jasper The bmp_getdata function in libjasper/bmp/bmp_dec.c in JasPer before 1.900.9 allows remote attackers to cause a denial of service (NULL pointer dereference) by calling the imginfo command with a craf… CWE-476
 NULL Pointer Dereference 		CVE-2016-8885 2024-11-21 12:00 2017-03-24 Show GitHub Exploit DB Packet Storm
268449 6.1 MEDIUM
Network 		novell groupwise A reflected XSS vulnerability exists in the web console of the Document Viewer Agent in Novell GroupWise before 2014 R2 Support Pack 1 Hot Patch 2 that may enable a remote attacker to execute JavaScr… CWE-79
Cross-site Scripting 		CVE-2016-9169 2024-11-21 12:00 2017-03-23 Show GitHub Exploit DB Packet Storm
268450 6.5 MEDIUM
Network 		novell edirectory A missing X-Frame-Options header in the NDS Utility Monitor in NDSD in Novell eDirectory before 9.0.2 could be used by remote attackers for clickjacking. CWE-20
 Improper Input Validation  		CVE-2016-9168 2024-11-21 12:00 2017-03-23 Show GitHub Exploit DB Packet Storm