Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 8, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
222791 4.3 警告 AlgoSec - AlgoSec Firewall Analyzer の afa/php/Login.php におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2013-5092 2014-01-31 12:28 2013-08-7 Show GitHub Exploit DB Packet Storm
222792 6.5 警告 WebHive - SocialEngine 用 Timeline プラグインのユーザプロファイルページ機能における任意のコードを実行される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2013-4898 2014-01-31 11:54 2013-07-25 Show GitHub Exploit DB Packet Storm
222793 4.3 警告 Zabbix - Zabbix の libs/zbxmedia/eztexting.c における SSL サーバになりすまされる脆弱性 CWE-310
暗号の問題 		CVE-2012-6086 2014-01-31 11:27 2012-12-2 Show GitHub Exploit DB Packet Storm
222794 5 警告 株式会社ロックオン - EC-CUBE における情報漏えいの脆弱性 CWE-200
情報漏えい 		CVE-2014-0808 2014-01-30 18:39 2014-01-22 Show GitHub Exploit DB Packet Storm
222795 5 警告 株式会社ロックオン - EC-CUBE における情報改ざんの脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2014-0807 2014-01-30 18:37 2014-01-22 Show GitHub Exploit DB Packet Storm
222796 2.6 注意 株式会社ロックオン - EC-CUBE におけるクロスサイトリクエストフォージェリの脆弱性 CWE-352
同一生成元ポリシー違反 		CVE-2013-5993 2014-01-30 18:36 2013-11-20 Show GitHub Exploit DB Packet Storm
222797 4.3 警告 株式会社ロックオン - EC-CUBE におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2013-5996 2014-01-30 18:35 2013-11-20 Show GitHub Exploit DB Packet Storm
222798 5.5 警告 株式会社ロックオン - EC-CUBE における情報漏えいの脆弱性 CWE-200
情報漏えい 		CVE-2013-5995 2014-01-30 18:34 2013-11-20 Show GitHub Exploit DB Packet Storm
222799 5 警告 株式会社ロックオン - EC-CUBE における情報漏えいの脆弱性 CWE-200
情報漏えい 		CVE-2013-5994 2014-01-30 18:32 2013-11-20 Show GitHub Exploit DB Packet Storm
222800 6.4 警告 株式会社ロックオン - EC-CUBE におけるアクセス制限不備の脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2013-2314 2014-01-30 18:31 2013-05-23 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 8, 2026, 4:09 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
268281 4.0 MEDIUM
Local 		ibm tivoli_key_lifecycle_manager
security_key_lifecycle_manager 		IBM Tivoli Key Lifecycle Manager 2.0.1, 2.5, and 2.6 allows web pages to be stored locally which can be read by another user on the system. CWE-200
Information Exposure 		CVE-2016-6097 2024-11-21 11:55 2017-02-8 Show GitHub Exploit DB Packet Storm
268282 6.1 MEDIUM
Network 		ibm tivoli_key_lifecycle_manager
security_key_lifecycle_manager 		IBM Tivoli Key Lifecycle Manager 2.0.1, 2.5, and 2.6 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended… CWE-79
Cross-site Scripting 		CVE-2016-6096 2024-11-21 11:55 2017-02-8 Show GitHub Exploit DB Packet Storm
268283 4.3 MEDIUM
Network 		ibm tivoli_key_lifecycle_manager
security_key_lifecycle_manager 		IBM Tivoli Key Lifecycle Manager 2.0.1, 2.5, and 2.6 generates an error message that includes sensitive information about its environment, users, or associated data. CWE-200
Information Exposure 		CVE-2016-6094 2024-11-21 11:55 2017-02-8 Show GitHub Exploit DB Packet Storm
268284 6.2 MEDIUM
Local 		ibm tivoli_key_lifecycle_manager
security_key_lifecycle_manager 		IBM Tivoli Key Lifecycle Manager 2.0.1, 2.5, and 2.6 stores user credentials in plain in clear text which can be read by a local user. CWE-200
Information Exposure 		CVE-2016-6092 2024-11-21 11:55 2017-02-8 Show GitHub Exploit DB Packet Storm
268285 9.8 CRITICAL
Network 		gradle gradle ObjectSocketWrapper.java in Gradle 2.12 allows remote attackers to execute arbitrary code via a crafted serialized object. CWE-502
 Deserialization of Untrusted Data 		CVE-2016-6199 2024-11-21 11:55 2017-02-8 Show GitHub Exploit DB Packet Storm
268286 9.8 CRITICAL
Network 		php-gettext_project php-gettext Eval injection vulnerability in php-gettext 1.0.12 and earlier allows remote attackers to execute arbitrary PHP code via a crafted plural forms header. CWE-94
Code Injection 		CVE-2016-6175 2024-11-21 11:55 2017-02-8 Show GitHub Exploit DB Packet Storm
268287 7.5 HIGH
Network 		gnu libiberty The demangler in GNU Libiberty allows remote attackers to cause a denial of service (infinite loop, stack overflow, and crash) via a cycle in the references of remembered mangled types. CWE-20
 Improper Input Validation  		CVE-2016-6131 2024-11-21 11:55 2017-02-8 Show GitHub Exploit DB Packet Storm
268288 6.5 MEDIUM
Network 		alinto sogo Memory leak in SOGo 2.3.7 allows remote attackers to cause a denial of service (memory consumption) via a large number of attempts to upload a large attachment, related to temporary files. CWE-399
 Resource Management Errors 		CVE-2016-6188 2024-11-21 11:55 2017-02-4 Show GitHub Exploit DB Packet Storm
268289 5.5 MEDIUM
Local 		gnome librsvg The rsvg_pattern_fix_fallback function in rsvg-paint_server.c in librsvg2 2.40.2 allows remote attackers to cause a denial of service (out-of-bounds read) via a crafted svg file. CWE-125
Out-of-bounds Read 		CVE-2016-6163 2024-11-21 11:55 2017-02-4 Show GitHub Exploit DB Packet Storm
268290 5.9 MEDIUM
Network 		ibm security_key_lifecycle_manager IBM Tivoli Key Lifecycle Manager 2.5 and 2.6 could allow a remote attacker to obtain sensitive information, caused by the failure to properly enable HTTP Strict Transport Security. An attacker could … CWE-200
Information Exposure 		CVE-2016-6116 2024-11-21 11:55 2017-02-3 Show GitHub Exploit DB Packet Storm