Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":July 1, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
225091	7.5	危険	ZLDNN.COM	-	DotNetNuke 用 ZLDNN DNNArticle モジュールの RSS ページにおける SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2013-5117	2014-03-14 15:06	2013-09-12	Show	GitHub Exploit DB Packet Storm

225092	4.3	警告	DNN	-	DotNetNuke におけるオープンリダイレクトの脆弱性	CWE-20 不適切な入力確認	CVE-2013-7335	2014-03-14 15:05	2013-08-13	Show	GitHub Exploit DB Packet Storm

225093	4.3	警告	DNN	-	DotNetNuke におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2013-4649	2014-03-14 15:05	2013-08-13	Show	GitHub Exploit DB Packet Storm

225094	3.5	注意	DNN	-	DotNetNuke におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2013-3943	2014-03-14 14:39	2013-08-13	Show	GitHub Exploit DB Packet Storm

225095	7.5	危険	FreeType Project	-	FreeType の cff/cf2hints.c 内の cf2_hintmap_build 関数におけるスタックベースのバッファオーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2014-2240	2014-03-14 14:19	2014-03-7	Show	GitHub Exploit DB Packet Storm

225096	4.3	警告	CiviCRM Caseproof Joobi	-	複数ベンダの製品で使用される Open Flash Chart の open-flash-chart.swf におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2013-1636	2014-03-14 13:48	2013-06-10	Show	GitHub Exploit DB Packet Storm

225097	10	危険	マイクロソフトアドビシステムズ Google	-	Adobe Flash Player および Adobe AIR におけるメモリ二重解放の脆弱性	CWE-399 リソース管理の問題	CVE-2014-0502	2014-03-13 18:24	2014-02-20	Show	GitHub Exploit DB Packet Storm

225098	7.8	危険	マイクロソフトアドビシステムズ Google	-	Adobe Flash Player および Adobe AIR における ASLR 保護メカニズムを回避される脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2014-0499	2014-03-13 18:23	2014-02-20	Show	GitHub Exploit DB Packet Storm

225099	10	危険	マイクロソフトアドビシステムズ Google	-	Adobe Flash Player および Adobe AIR におけるスタックベースのバッファオーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2014-0498	2014-03-13 18:19	2014-02-20	Show	GitHub Exploit DB Packet Storm

225100	3.5	注意	MySQL AB オラクル	-	Oracle MySQL の MySQL Server における Optimizer に関する脆弱性	CWE-noinfo 情報不足	CVE-2014-0437	2014-03-13 18:18	2014-01-14	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:July 1, 2026, 4:27 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
277371	8.8	HIGH Network	apple	safari watchos iphone_os	WebKit, as used in Apple iOS before 9.2.1 and Safari before 9.0.3, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, a differe…	CWE-119 Incorrect Access of Indexable Resource ('Range Error')	CVE-2016-1723	2024-11-21 11:46	2016-02-1	Show	GitHub Exploit DB Packet Storm

277372	7.8	HIGH Local	apple	tvos iphone_os mac_os_x watchos	syslog in Apple iOS before 9.2.1, OS X before 10.11.3, and tvOS before 9.1.1 allows local users to gain privileges or cause a denial of service (memory corruption) via unspecified vectors.	CWE-119 Incorrect Access of Indexable Resource ('Range Error')	CVE-2016-1722	2024-11-21 11:46	2016-02-1	Show	GitHub Exploit DB Packet Storm

277373	7.8	HIGH Local	apple	iphone_os mac_os_x tvos watchos	The kernel in Apple iOS before 9.2.1, OS X before 10.11.3, and tvOS before 9.1.1 allows local users to gain privileges or cause a denial of service (memory corruption) via unspecified vectors.	CWE-119 Incorrect Access of Indexable Resource ('Range Error')	CVE-2016-1721	2024-11-21 11:46	2016-02-1	Show	GitHub Exploit DB Packet Storm

277374	7.8	HIGH Local	apple	mac_os_x tvos iphone_os watchos	IOKit in Apple iOS before 9.2.1, OS X before 10.11.3, and tvOS before 9.1.1 allows local users to gain privileges or cause a denial of service (memory corruption) via unspecified vectors.	CWE-119 Incorrect Access of Indexable Resource ('Range Error')	CVE-2016-1720	2024-11-21 11:46	2016-02-1	Show	GitHub Exploit DB Packet Storm

277375	7.8	HIGH Local	apple	watchos iphone_os mac_os_x tvos	The IOHIDFamily API in Apple iOS before 9.2.1, OS X before 10.11.3, and tvOS before 9.1.1 allows local users to gain privileges or cause a denial of service (memory corruption) via unspecified vector…	CWE-119 Incorrect Access of Indexable Resource ('Range Error')	CVE-2016-1719	2024-11-21 11:46	2016-02-1	Show	GitHub Exploit DB Packet Storm

277376	7.3	HIGH Local	apple	mac_os_x	The IOAcceleratorFamily2 interface in IOAcceleratorFamily in Apple OS X before 10.11.3 allows local users to gain privileges or cause a denial of service (memory corruption) via unspecified vectors.	CWE-119 Incorrect Access of Indexable Resource ('Range Error')	CVE-2016-1718	2024-11-21 11:46	2016-02-1	Show	GitHub Exploit DB Packet Storm

277377	7.8	HIGH Local	apple	tvos iphone_os mac_os_x watchos	The Disk Images component in Apple iOS before 9.2.1, OS X before 10.11.3, and tvOS before 9.1.1 allows local users to gain privileges or cause a denial of service (memory corruption) via unspecified …	CWE-119 Incorrect Access of Indexable Resource ('Range Error')	CVE-2016-1717	2024-11-21 11:46	2016-02-1	Show	GitHub Exploit DB Packet Storm

277378	7.8	HIGH Local	apple	mac_os_x	AppleGraphicsPowerManagement in Apple OS X before 10.11.3 allows local users to gain privileges or cause a denial of service (memory corruption) via unspecified vectors.	CWE-119 Incorrect Access of Indexable Resource ('Range Error')	CVE-2016-1716	2024-11-21 11:46	2016-02-1	Show	GitHub Exploit DB Packet Storm

277379	6.1	MEDIUM Network	siemens	ozw672_firmware ozw772_firmware	Cross-site scripting (XSS) vulnerability in the login form in the integrated web server on Siemens OZW OZW672 devices before 6.00 and OZW772 devices before 6.00 allows remote attackers to inject arbi…	CWE-79 Cross-site Scripting	CVE-2016-1488	2024-11-21 11:46	2016-01-30	Show	GitHub Exploit DB Packet Storm

277380	6.1	MEDIUM Network	cisco	unity_connection	Cross-site scripting (XSS) vulnerability in Cisco Unity Connection 10.5(2.3009) allows remote attackers to inject arbitrary web script or HTML via a crafted value, aka Bug ID CSCux82596.	CWE-79 Cross-site Scripting	CVE-2016-1304	2024-11-21 11:46	2016-01-30	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed