Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":June 15, 2026, 10 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
227021	5	警告	Acquia Inc. Commons Wikis Project	-	Drupal Commons モジュールで使用される Drupal 用 Commons Wikis モジュールにおけるグループに任意のコンテンツを投稿される脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2013-1908	2013-07-19 12:19	2013-03-27	Show	GitHub Exploit DB Packet Storm

227022	5	警告	Acquia Inc.	-	Drupal Commons モジュールで使用される Drupal 用 Commons Groups モジュールにおけるグループに任意のコンテンツを投稿される脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2013-1907	2013-07-19 12:19	2013-03-27	Show	GitHub Exploit DB Packet Storm

227023	10	危険	富士通ターボリナックス IBM Apache Software Foundation オラクル	-	Apache HTTP Server の mod_isapi における脆弱性	CWE-noinfo 情報不足	CVE-2010-0425	2013-07-18 19:23	2010-03-5	Show	GitHub Exploit DB Packet Storm

227024	4.3	警告	アップル IBM Apache Software Foundation オラクル	-	Apache HTTP Server の mod_proxy_http における重要なレスポンスを取得される脆弱性	CWE-200 情報漏えい	CVE-2010-2068	2013-07-18 18:37	2010-06-18	Show	GitHub Exploit DB Packet Storm

227025	4.3	警告	日本電気 IBM Apache Software Foundation アップルサイバートラスト株式会社富士通サン・マイクロシステムズターボリナックスヒューレット・パッカードオラクル日立レッドハット	-	Apache HTTP Server の mod_imap および mod_imagemap におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2007-5000	2013-07-18 18:29	2007-12-13	Show	GitHub Exploit DB Packet Storm

227026	5	警告	IBM Apache Software Foundation アップルサイバートラスト株式会社富士通ヒューレット・パッカードオラクル日立レッドハット	-	Apache HTTP Server の mod_proxy モジュールにおけるサービス運用妨害 (DoS) の脆弱性	-	CVE-2007-3847	2013-07-18 18:22	2007-08-23	Show	GitHub Exploit DB Packet Storm

227027	4.3	警告	ヒューレット・パッカード Apache Software Foundation オラクル	-	Apache HTTP Server の mod_proxy_ajp モジュールにおけるサービス運用妨害 (DoS) の脆弱性	CWE-399 リソース管理の問題	CVE-2011-3348	2013-07-18 18:21	2011-09-14	Show	GitHub Exploit DB Packet Storm

227028	5	警告	オラクル	-	Oracle and Sun Systems Products Suite の Oracle SPARC Enterprise M シリーズサーバにおける XSCF Control Package (XCP) に関する脆弱性	CWE-noinfo 情報不足	CVE-2013-3773	2013-07-18 15:46	2013-07-16	Show	GitHub Exploit DB Packet Storm

227029	4.3	警告	オラクル	-	Oracle iLearning における Learner Pages に関する脆弱性	CWE-noinfo 情報不足	CVE-2013-3775	2013-07-18 15:46	2013-07-16	Show	GitHub Exploit DB Packet Storm

227030	4	警告	オラクル	-	Oracle Industry Applications の Oracle Policy Automation における Determinations Engine に関する脆弱性	CWE-noinfo 情報不足	CVE-2013-3816	2013-07-18 15:46	2013-07-16	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:June 15, 2026, 4:10 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
273331	7.5	HIGH Network	squid-cache	squid	The Edge Side Includes (ESI) parser in Squid 3.x before 3.5.15 and 4.x before 4.0.7 does not check buffer limits during XML parsing, which allows remote HTTP servers to cause a denial of service (ass…	CWE-20 Improper Input Validation	CVE-2016-2570	2024-11-21 11:48	2016-02-27	Show	GitHub Exploit DB Packet Storm

273332	7.5	HIGH Network	squid-cache	squid	Squid 3.x before 3.5.15 and 4.x before 4.0.7 does not properly append data to String objects, which allows remote servers to cause a denial of service (assertion failure and daemon exit) via a long s…	CWE-20 Improper Input Validation	CVE-2016-2569	2024-11-21 11:48	2016-02-27	Show	GitHub Exploit DB Packet Storm

273333	7.8	HIGH Local	flexera	installshield	Untrusted search path vulnerability in Flexera InstallShield through 2015 SP1 allows local users to gain privileges via a Trojan horse DLL in the current working directory of a setup-launcher executa…	NVD-CWE-Other	CVE-2016-2542	2024-11-21 11:48	2016-02-24	Show	GitHub Exploit DB Packet Storm

273334	7.5	HIGH Network	is_my_json_valid_project	is_my_json_valid	The is-my-json-valid package before 2.12.4 for Node.js has an incorrect exports['utc-millisec'] regular expression, which allows remote attackers to cause a denial of service (blocked event loop) via…	CWE-20 Improper Input Validation	CVE-2016-2537	2024-11-21 11:48	2016-02-23	Show	GitHub Exploit DB Packet Storm

273335	8.8	HIGH Network	sap google	3d_visual_enterprise_viewer sketchup	Multiple use-after-free vulnerabilities in SAP 3D Visual Enterprise Viewer allow remote attackers to execute arbitrary code via a crafted SketchUp document. NOTE: the primary affected product may be…	CWE-399 Resource Management Errors	CVE-2016-2536	2024-11-21 11:48	2016-02-23	Show	GitHub Exploit DB Packet Storm

273336	5.9	MEDIUM Network	fedoraproject digium	fedora asterisk certified_asterisk	chan_sip in Asterisk Open Source 1.8.x, 11.x before 11.21.1, 12.x, and 13.x before 13.7.1 and Certified Asterisk 1.8.28, 11.6 before 11.6-cert12, and 13.1 before 13.1-cert3, when the timert1 sip.conf…	CWE-191 Integer Underflow (Wrap or Wraparound)	CVE-2016-2316	2024-11-21 11:48	2016-02-23	Show	GitHub Exploit DB Packet Storm

273337	6.5	MEDIUM Network	digium	asterisk certified_asterisk	Asterisk Open Source 1.8.x, 11.x before 11.21.1, 12.x, and 13.x before 13.7.1 and Certified Asterisk 1.8.28, 11.6 before 11.6-cert12, and 13.1 before 13.1-cert3 allow remote authenticated users to ca…	NVD-CWE-Other	CVE-2016-2232	2024-11-21 11:48	2016-02-23	Show	GitHub Exploit DB Packet Storm

273338	9.8	CRITICAL Network	advantech	vesp211-eu_firmware vesp211-232_firmware	The web interface on Advantech/B+B SmartWorx VESP211-EU devices with firmware 1.7.2 and VESP211-232 devices with firmware 1.5.1 and 1.7.2 relies on the client to implement access control, which allow…	CWE-284 Improper Access Control	CVE-2016-2275	2024-11-21 11:48	2016-02-21	Show	GitHub Exploit DB Packet Storm

273339	5.5	MEDIUM Local	xen	xen	VMX in Xen 4.6.x and earlier, when using an Intel or Cyrix CPU, allows local HVM guest users to cause a denial of service (guest crash) via vectors related to a non-canonical RIP.	NVD-CWE-Other	CVE-2016-2271	2024-11-21 11:48	2016-02-20	Show	GitHub Exploit DB Packet Storm

273340	6.8	MEDIUM Network	debian fedoraproject xen oracle	debian_linux fedora xen vm_server	Xen 4.6.x and earlier allows local guest administrators to cause a denial of service (host reboot) via vectors related to multiple mappings of MMIO pages with different cachability settings.	CWE-20 Improper Input Validation	CVE-2016-2270	2024-11-21 11:48	2016-02-20	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed