Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 10, 2026, 10 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
222861 4.3 警告 シマンテック - Symantec Web Gateway アプライアンス上で稼働する管理コンソールにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2013-5013 2014-02-12 19:14 2013-07-30 Show GitHub Exploit DB Packet Storm
222862 6.5 警告 シマンテック - Symantec Web Gateway アプライアンス上で稼働する管理コンソールにおける SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2013-5012 2014-02-12 19:14 2013-07-29 Show GitHub Exploit DB Packet Storm
222863 5 警告 Apache Software Foundation - Apache Wicket における重要な情報を取得される脆弱性 CWE-noinfo
情報不足
CVE-2013-2055 2014-02-12 19:02 2013-05-17 Show GitHub Exploit DB Packet Storm
222864 5.6 警告 ソフォス - VDL で使用される Sophos Anti-Virus エンジンにおけるアンチウィルスプロテクションを回避される脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2014-1213 2014-02-12 18:46 2014-01-31 Show GitHub Exploit DB Packet Storm
222865 4 警告 Nagios Enterprises, LLC - Nagios の status.cgi におけるホスト名についての重要な情報を取得される脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2013-2214 2014-02-12 18:45 2013-09-4 Show GitHub Exploit DB Packet Storm
222866 7.8 危険 Android for MSM - MSM デバイス用 Qualcomm Innovation Center Android コントリビューションなどで使用される Linux Kernel 用 MSM カメラドライバにおける整数オーバーフローの脆弱性 CWE-189
数値処理の問題
CVE-2013-4736 2014-02-12 18:45 2013-08-29 Show GitHub Exploit DB Packet Storm
222867 4.6 警告 X.Org Foundation
XKeyboardConfig
- X.Org の xkeyboard-config における X スクリーンロックを回避される脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2012-0064 2014-02-12 18:31 2012-01-19 Show GitHub Exploit DB Packet Storm
222868 5.8 警告 Armin Burgmeier - libnet6 の inc/server.hpp における整数オーバーフローの脆弱性 CWE-189
数値処理の問題
CVE-2011-4093 2014-02-12 18:27 2011-10-30 Show GitHub Exploit DB Packet Storm
222869 5 警告 Standards Based Linux Instrumentation Project
Novell
- Standards Based Linux Instrumentation for Manageability Common Information Model Client におけるサービス運用妨害 (DoS) の脆弱性 CWE-310
暗号の問題
CVE-2012-2328 2014-02-12 18:21 2012-03-14 Show GitHub Exploit DB Packet Storm
222870 5 警告 レッドハット - Red Hat JBoss 製品などで使用される JBoss Web におけるサービス運用妨害 (DoS) の脆弱性 CWE-119
バッファエラー
CVE-2011-4610 2014-02-12 18:18 2011-12-14 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 10, 2026, 5 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
268101 4.3 MEDIUM
Network
drupal drupal Drupal 8.x before 8.1.10 does not properly check for "Administer comments" permission, which allows remote authenticated users to set the visibility of comments for arbitrary nodes by leveraging righ… CWE-264
Permissions, Privileges, and Access Controls
CVE-2016-7570 2024-11-21 11:58 2016-10-4 Show GitHub Exploit DB Packet Storm
268102 7.5 HIGH
Network
uclouvain
opensuse
openjpeg
leap
convert.c in OpenJPEG before 2.1.2 allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via vectors involving the variable s. CWE-476
 NULL Pointer Dereference
CVE-2016-7445 2024-11-21 11:58 2016-10-4 Show GitHub Exploit DB Packet Storm
268103 4.4 MEDIUM
Local
sophos unified_threat_management_software The Frontend component in Sophos UTM with firmware 9.405-5 and earlier allows local administrators to obtain sensitive password information by reading the "value" field of the proxy user settings in … CWE-200
Information Exposure
CVE-2016-7442 2024-11-21 11:58 2016-10-4 Show GitHub Exploit DB Packet Storm
268104 9.8 CRITICAL
Network
libgd
php
debian
libgd
php
debian_linux
Integer overflow in the gdImageWebpCtx function in gd_webp.c in the GD Graphics Library (aka libgd) through 2.2.3, as used in PHP through 7.0.11, allows remote attackers to cause a denial of service … CWE-190
 Integer Overflow or Wraparound
CVE-2016-7568 2024-11-21 11:58 2016-09-29 Show GitHub Exploit DB Packet Storm
268105 6.5 MEDIUM
Network
openstack compute_\(nova\) OpenStack Compute (nova) 13.0.0 does not properly delete instances from compute nodes, which allows remote authenticated users to cause a denial of service (disk consumption) by deleting instances wh… CWE-399
 Resource Management Errors
CVE-2016-7498 2024-11-21 11:58 2016-09-28 Show GitHub Exploit DB Packet Storm
268106 7.5 HIGH
Network
gnu gnutls The gnutls_ocsp_resp_check_crt function in lib/x509/ocsp.c in GnuTLS before 3.4.15 and 3.5.x before 3.5.4 does not verify the serial length of an OCSP response, which might allow remote attackers to … CWE-264
Permissions, Privileges, and Access Controls
CVE-2016-7444 2024-11-21 11:58 2016-09-28 Show GitHub Exploit DB Packet Storm
268107 8.8 HIGH
Network
google chrome Google Chrome before 53.0.2785.113 does not ensure that the recipient of a certain IPC message is a valid RenderFrame or RenderWidget, which allows remote attackers to cause a denial of service (inva… NVD-CWE-noinfo
CVE-2016-7549 2024-11-21 11:58 2016-09-26 Show GitHub Exploit DB Packet Storm
268108 7.5 HIGH
Network
pritunl pritunl-client A flaw was found in pritunl-client before version 1.0.1116.6. A lack of signature verification leads to sensitive information leakage CWE-347
 Improper Verification of Cryptographic Signature
CVE-2016-7064 2024-11-21 11:57 2020-07-22 Show GitHub Exploit DB Packet Storm
268109 9.8 CRITICAL
Network
pritunl pritunl-client A flaw was found in pritunl-client before version 1.0.1116.6. Arbitrary write to user specified path may lead to privilege escalation. CWE-22
Path Traversal
CVE-2016-7063 2024-11-21 11:57 2020-07-22 Show GitHub Exploit DB Packet Storm
268110 9.8 CRITICAL
Network
lexmark markvision_enterprise Lexmark Markvision Enterprise (MVE) before 2.4.1 allows remote attackers to execute arbitrary commands by uploading files. ( CWE-434
 Unrestricted Upload of File with Dangerous Type 
CVE-2016-6918 2024-11-21 11:57 2020-03-10 Show GitHub Exploit DB Packet Storm