Vulnerability Search Top

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

Vulnerability Information Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":June 17, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
228181	6.8	警告	IBM	-	UNIX 用の IBM Sterling Connect:Direct におけるファイルシステムの読み取り権限および書き込み権限を回避される脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2013-2989	2013-05-30 16:37	2013-05-14	Show	GitHub Exploit DB Packet Storm

228182	4.3	警告	IBM	-	IBM Tivoli Monitoring の Tivoli Enterprise Portal browser クライアントにおけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2013-0576	2013-05-30 16:36	2013-05-17	Show	GitHub Exploit DB Packet Storm

228183	4.3	警告	IBM	-	IBM WebSphere DataPower SOA アプライアンスにおけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2013-0499	2013-05-30 16:34	2013-05-17	Show	GitHub Exploit DB Packet Storm

228184	7.2	危険	レッドハット	-	Red Hat livecd-tools における権限を取得される脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2013-2069	2013-05-30 14:07	2013-05-23	Show	GitHub Exploit DB Packet Storm

228185	4.9	警告	マイクロソフト	-	Microsoft Windows の win32k.sys の EPATHOBJ::bFlatten 関数におけるサービス運用妨害 (DoS) の脆弱性	CWE-22 パス・トラバーサル	CVE-2013-3661	2013-05-29 16:54	2013-05-17	Show	GitHub Exploit DB Packet Storm

228186	5	警告	IBM	-	IBM InfoSphere Optim Data Growth for Oracle E-Business Suite における重要な情報を取得される脆弱性	CWE-255 証明書・パスワード管理	CVE-2013-2959	2013-05-29 16:37	2013-05-13	Show	GitHub Exploit DB Packet Storm

228187	3.5	注意	IBM	-	IBM InfoSphere Optim Data Growth for Oracle E-Business Suite におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2013-2957	2013-05-29 16:37	2013-05-13	Show	GitHub Exploit DB Packet Storm

228188	7.5	危険	IBM	-	IBM InfoSphere Optim Data Growth for Oracle E-Business Suite における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2013-2956	2013-05-29 16:36	2013-05-13	Show	GitHub Exploit DB Packet Storm

228189	3.5	注意	IBM	-	IBM InfoSphere Optim Data Growth for Oracle E-Business Suite におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2013-2955	2013-05-29 16:35	2013-05-13	Show	GitHub Exploit DB Packet Storm

228190	5	警告	IBM	-	IBM InfoSphere Optim Data Growth for Oracle E-Business Suite におけるアクセス権を取得される脆弱性	CWE-287 不適切な認証	CVE-2013-2954	2013-05-29 16:35	2013-05-13	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:June 17, 2026, 4:19 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
273871	5.9	MEDIUM Network	fedoraproject digium	fedora asterisk certified_asterisk	chan_sip in Asterisk Open Source 1.8.x, 11.x before 11.21.1, 12.x, and 13.x before 13.7.1 and Certified Asterisk 1.8.28, 11.6 before 11.6-cert12, and 13.1 before 13.1-cert3, when the timert1 sip.conf…	CWE-191 Integer Underflow (Wrap or Wraparound)	CVE-2016-2316	2024-11-21 11:48	2016-02-23	Show	GitHub Exploit DB Packet Storm

273872	6.5	MEDIUM Network	digium	asterisk certified_asterisk	Asterisk Open Source 1.8.x, 11.x before 11.21.1, 12.x, and 13.x before 13.7.1 and Certified Asterisk 1.8.28, 11.6 before 11.6-cert12, and 13.1 before 13.1-cert3 allow remote authenticated users to ca…	NVD-CWE-Other	CVE-2016-2232	2024-11-21 11:48	2016-02-23	Show	GitHub Exploit DB Packet Storm

273873	9.8	CRITICAL Network	advantech	vesp211-eu_firmware vesp211-232_firmware	The web interface on Advantech/B+B SmartWorx VESP211-EU devices with firmware 1.7.2 and VESP211-232 devices with firmware 1.5.1 and 1.7.2 relies on the client to implement access control, which allow…	CWE-284 Improper Access Control	CVE-2016-2275	2024-11-21 11:48	2016-02-21	Show	GitHub Exploit DB Packet Storm

273874	5.5	MEDIUM Local	xen	xen	VMX in Xen 4.6.x and earlier, when using an Intel or Cyrix CPU, allows local HVM guest users to cause a denial of service (guest crash) via vectors related to a non-canonical RIP.	NVD-CWE-Other	CVE-2016-2271	2024-11-21 11:48	2016-02-20	Show	GitHub Exploit DB Packet Storm

273875	6.8	MEDIUM Network	debian fedoraproject xen oracle	debian_linux fedora xen vm_server	Xen 4.6.x and earlier allows local guest administrators to cause a denial of service (host reboot) via vectors related to multiple mappings of MMIO pages with different cachability settings.	CWE-20 Improper Input Validation	CVE-2016-2270	2024-11-21 11:48	2016-02-20	Show	GitHub Exploit DB Packet Storm

273876	5.3	MEDIUM Adjacent	belden	hirschmann_firmware hirschmann_l2b	The password-sync feature on Belden Hirschmann Classic Platform switches L2B before 05.3.07 and L2E, L2P, L3E, and L3P before 09.0.06 sets an SNMP community to the same string as the administrator pa…	CWE-200 Information Exposure	CVE-2016-2509	2024-11-21 11:48	2016-02-19	Show	GitHub Exploit DB Packet Storm

273877	6.5	MEDIUM Adjacent	comcast	xfinity_home_security_system	Comcast XFINITY Home Security System does not properly maintain base-station communication, which allows physically proximate attackers to defeat sensor functionality by interfering with ZigBee 2.4 G…	CWE-254 7PK - Security Features	CVE-2016-2398	2024-11-21 11:48	2016-02-18	Show	GitHub Exploit DB Packet Storm

273878	9.8	CRITICAL Network	sonicwall	uma_em5000_firmware analyzer global_management_system	The cliserver implementation in Dell SonicWALL GMS, Analyzer, and UMA EM5000 7.2, 8.0, and 8.1 before Hotfix 168056 allows remote attackers to deserialize and execute arbitrary Java code via crafted …	CWE-77 Command Injection	CVE-2016-2397	2024-11-21 11:48	2016-02-18	Show	GitHub Exploit DB Packet Storm

273879	9.9	CRITICAL Network	sonicwall	analyzer global_management_system uma_em5000_firmware	The GMS ViewPoint (GMSVP) web application in Dell SonicWALL GMS, Analyzer, and UMA EM5000 7.2, 8.0, and 8.1 before Hotfix 168056 allows remote authenticated users to execute arbitrary commands via ve…	CWE-77 Command Injection	CVE-2016-2396	2024-11-21 11:48	2016-02-18	Show	GitHub Exploit DB Packet Storm

273880	7.5	HIGH Network	sap	netweaver	Directory traversal vulnerability in the GetFileList function in the SAP Manufacturing Integration and Intelligence (xMII) component 15.0 for SAP NetWeaver 7.4 allows remote attackers to read arbitra…	CWE-22 Path Traversal	CVE-2016-2389	2024-11-21 11:48	2016-02-17	Show	GitHub Exploit DB Packet Storm