Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 20, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
222871 1.8 注意 Memcached - Memcached におけるサービス運用妨害 (DoS) の脆弱性 CWE-119
バッファエラー 		CVE-2013-7291 2014-04-7 17:23 2013-12-20 Show GitHub Exploit DB Packet Storm
222872 1.8 注意 Memcached - Memcached の items.c の do_item_get 関数におけるサービス運用妨害 (DoS) の脆弱性 CWE-119
バッファエラー 		CVE-2013-7290 2014-04-7 17:21 2013-12-20 Show GitHub Exploit DB Packet Storm
222873 4.8 警告 Memcached - Memcached における認証を回避される脆弱性 CWE-287
不適切な認証 		CVE-2013-7239 2014-04-7 17:20 2013-12-20 Show GitHub Exploit DB Packet Storm
222874 5 警告 The PHP Group
アップル		 - PHP の SOAP パーサにおける任意のファイルを読まれる脆弱性 CWE-200
情報漏えい 		CVE-2013-1643 2014-04-7 17:18 2013-02-21 Show GitHub Exploit DB Packet Storm
222875 7.5 危険 The PHP Group
アップル		 - PHP の ext/soap/soap.c におけるアクセス制限を回避される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2013-1635 2014-04-7 17:17 2013-02-21 Show GitHub Exploit DB Packet Storm
222876 5.8 警告 シーメンス - Siemens SIMATIC S7-1500 CPU PLC デバイスのファームウェアにおけるクロスサイトリクエストフォージェリの脆弱性 CWE-352
同一生成元ポリシー違反 		CVE-2014-2249 2014-04-7 17:05 2014-03-12 Show GitHub Exploit DB Packet Storm
222877 7.1 危険 ZyXEL - ZyXEL P660 シリーズにサービス運用妨害 (DoS) の脆弱性 CWE-20
不適切な入力確認 		CVE-2013-3588 2014-04-7 15:44 2014-04-1 Show GitHub Exploit DB Packet Storm
222878 7.5 危険 CA Technologies - CA ERwin Web Portal におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2014-2210 2014-04-7 15:04 2014-04-3 Show GitHub Exploit DB Packet Storm
222879 5 警告 シスコシステムズ - Cisco IOS および IOS XE の IKE の実装におけるサービス運用妨害 (DoS) の脆弱性 CWE-noinfo
情報不足 		CVE-2014-2143 2014-04-7 14:58 2014-04-3 Show GitHub Exploit DB Packet Storm
222880 4.3 警告 シスコシステムズ - Cisco Emergency Responder におけるオープンリダイレクトの脆弱性 CWE-20
不適切な入力確認 		CVE-2014-2117 2014-04-7 14:58 2014-04-3 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 21, 2026, 4:01 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
268001 8.6 HIGH
Network 		ibm websphere_cast_iron_solution IBM WebSphere Cast Iron Solution 7.0.0 and 7.5.0.0 is vulnerable to External Service Interaction attack, caused by improper validation of user-supplied input. A remote attacker could exploit this vul… CWE-20
 Improper Input Validation  		CVE-2016-9692 2024-11-21 12:01 2017-05-6 Show GitHub Exploit DB Packet Storm
268002 8.6 HIGH
Network 		ibm websphere_cast_iron_solution IBM WebSphere Cast Iron Solution 7.0.0 and 7.5.0.0 is vulnerable to a denial of service, caused by an XML External Entity Injection (XXE) error when processing XML data. A remote attacker could explo… CWE-611
XXE 		CVE-2016-9691 2024-11-21 12:01 2017-05-6 Show GitHub Exploit DB Packet Storm
268003 8.1 HIGH
Network 		ibm rational_rhapsody_design_manager
rational_quality_manager
rational_engineering_lifecycle_manager
rational_software_architect_design_manager
rational_collaborative_lifecycle_management
… 		IBM Jazz Foundation is vulnerable to a denial of service, caused by an XML External Entity Injection (XXE) error when processing XML data. A remote attacker could exploit this vulnerability to expose… CWE-611
XXE 		CVE-2016-9707 2024-11-21 12:01 2017-04-1 Show GitHub Exploit DB Packet Storm
268004 4.7 MEDIUM
Network 		brave browser Brave Browser iOS before 1.2.18 and Brave Browser Android 1.9.56 and earlier suffer from Full Address Bar Spoofing, allowing attackers to trick a victim by displaying a malicious page for legitimate … CWE-79
Cross-site Scripting 		CVE-2016-9473 2024-11-21 12:01 2017-03-28 Show GitHub Exploit DB Packet Storm
268005 5.4 MEDIUM
Network 		revive-adserver revive_adserver Revive Adserver before 3.2.5 and 4.0.0 suffers from Reflected XSS. The Revive Adserver web installer scripts were vulnerable to a reflected XSS attack via the dbHost, dbUser, and possibly other param… CWE-79
Cross-site Scripting 		CVE-2016-9472 2024-11-21 12:01 2017-03-28 Show GitHub Exploit DB Packet Storm
268006 9.0 CRITICAL
Network 		revive-adserver revive_adserver Revive Adserver before 3.2.5 and 4.0.0 suffers from Reflected File Download. `www/delivery/asyncspc.php` was vulnerable to the fairly new Reflected File Download (RFD) web attack vector that enables … CWE-254
 7PK - Security Features 		CVE-2016-9470 2024-11-21 12:01 2017-03-28 Show GitHub Exploit DB Packet Storm
268007 5.3 MEDIUM
Network 		owncloud
nextcloud 		owncloud
nextcloud_server 		Nextcloud Server before 9.0.54 and 10.0.1 & ownCloud Server before 9.0.6 and 9.1.2 suffer from content spoofing in the dav app. The exception message displayed on the DAV endpoints contained partiall… CWE-284
Improper Access Control 		CVE-2016-9468 2024-11-21 12:01 2017-03-28 Show GitHub Exploit DB Packet Storm
268008 3.1 LOW
Network 		revive-adserver revive_adserver Revive Adserver before 3.2.5 and 4.0.0 suffers from Special Element Injection. Usernames weren't properly sanitised when creating users on a Revive Adserver instance. Especially, control characters w… NVD-CWE-Other
CVE-2016-9471 2024-11-21 12:01 2017-03-28 Show GitHub Exploit DB Packet Storm
268009 8.2 HIGH
Network 		gitlab gitlab Multiple versions of GitLab expose a dangerous method to any authenticated user that could lead to the deletion of all Issue and MergeRequest objects on a GitLab instance. For GitLab instances with p… CWE-264
Permissions, Privileges, and Access Controls 		CVE-2016-9469 2024-11-21 12:01 2017-03-28 Show GitHub Exploit DB Packet Storm
268010 5.3 MEDIUM
Network 		owncloud
nextcloud 		owncloud
nextcloud_server 		Nextcloud Server before 9.0.54 and 10.0.1 & ownCloud Server before 9.0.6 and 9.1.2 suffer from content spoofing in the files app. The location bar in the files app was not verifying the passed parame… CWE-284
Improper Access Control 		CVE-2016-9467 2024-11-21 12:01 2017-03-28 Show GitHub Exploit DB Packet Storm