Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":June 30, 2026, 10 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
228181	10	危険	エニア株式会社エマソン	-	複数の Emerson Process Management RTU 製品上で稼働する ENEA OSE における重要な情報を取得される脆弱性	CWE-200 情報漏えい	CVE-2013-0693	2013-10-7 15:44	2013-09-26	Show	GitHub Exploit DB Packet Storm

228182	10	危険	エニア株式会社エマソン	-	複数の Emerson Process Management RTU 製品上で稼働する ENEA OSE における任意のコードを実行される脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2013-0692	2013-10-7 15:41	2013-09-26	Show	GitHub Exploit DB Packet Storm

228183	10	危険	エニア株式会社エマソン	-	複数の Emerson Process Management RTU 製品のソフトウェアにおけるファイルをアップロードされる脆弱性	CWE-94 コード・インジェクション	CVE-2013-0689	2013-10-7 15:40	2013-09-26	Show	GitHub Exploit DB Packet Storm

228184	10	危険	シーメンス	-	Siemens SCALANCE X-200 および X-200IRT スイッチのファームウェアにおける管理者アクションを実行される脆弱性	CWE-287 不適切な認証	CVE-2013-5944	2013-10-7 15:02	2013-10-1	Show	GitHub Exploit DB Packet Storm

228185	7.8	危険	baramundi software AG	-	Baramundi Management Suite の不特定の DLL ファイルにおける暗号保護メカニズムを破られる脆弱性	CWE-255 証明書・パスワード管理	CVE-2013-3625	2013-10-7 14:37	2013-10-1	Show	GitHub Exploit DB Packet Storm

228186	7.8	危険	baramundi software AG	-	Baramundi Management Suite における重要な情報を取得される脆弱性	CWE-310 暗号の問題	CVE-2013-3593	2013-10-7 14:36	2013-10-1	Show	GitHub Exploit DB Packet Storm

228187	4.3	警告	シスコシステムズ	-	Cisco Wireless LAN Controller デバイスの管理インターフェースにおけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2013-5519	2013-10-7 12:27	2013-10-3	Show	GitHub Exploit DB Packet Storm

228188	5.5	警告	シスコシステムズ	-	Cisco Unified Communications Domain Manager の Web フレームワークにおける SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2013-5517	2013-10-7 12:09	2013-10-1	Show	GitHub Exploit DB Packet Storm

228189	7.8	危険	シスコシステムズ	-	Cisco IOS XR の UDP プロセスにおけるサービス運用妨害 (DoS) の脆弱性	CWE-399 リソース管理の問題	CVE-2013-5503	2013-10-7 12:08	2013-10-2	Show	GitHub Exploit DB Packet Storm

228190	6.8	警告	シスコシステムズ	-	Cisco Unified Computing System のファブリックインターコネクトコンポーネントにおける重要な情報を取得される脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2012-4136	2013-10-7 12:06	2013-09-27	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:June 30, 2026, 4:22 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
276331	7.5	HIGH Network	smokeping	smokeping	In the ebuild package through smokeping-2.7.3-r1 for SmokePing on Gentoo, the initscript allows the smokeping user to gain ownership of any file, allowing for the smokeping user to gain root privileg…	NVD-CWE-noinfo	CVE-2016-20015	2024-11-21 11:47	2022-09-21	Show	GitHub Exploit DB Packet Storm

276332	6.4	MEDIUM Network	kippo-graph_project	kippo-graph	In kippo-graph before version 1.5.1, there is a cross-site scripting vulnerability in $file_link in class/KippoInput.class.php.	CWE-79 Cross-site Scripting	CVE-2016-2139	2024-11-21 11:47	2022-07-29	Show	GitHub Exploit DB Packet Storm

276333	6.4	MEDIUM Network	kippo-graph_project	kippo-graph	In kippo-graph before version 1.5.1, there is a cross-site scripting vulnerability in xss_clean() in class/KippoInput.class.php.	CWE-79 Cross-site Scripting	CVE-2016-2138	2024-11-21 11:47	2022-07-29	Show	GitHub Exploit DB Packet Storm

276334	9.8	CRITICAL Network	pam_tacplus_project	pam_tacplus	In pam_tacplus.c in pam_tacplus before 1.4.1, pam_sm_acct_mgmt does not zero out the arep data structure.	NVD-CWE-Other	CVE-2016-20014	2024-11-21 11:47	2022-04-21	Show	GitHub Exploit DB Packet Storm

276335	7.5	HIGH Network	sha256crypt_project sha512crypt_project	sha256crypt sha512crypt	sha256crypt and sha512crypt through 0.6 allow attackers to cause a denial of service (CPU consumption) because the algorithm's runtime is proportional to the square of the length of the password.	CWE-770 Allocation of Resources Without Limits or Throttling	CVE-2016-20013	2024-11-21 11:47	2022-02-19	Show	GitHub Exploit DB Packet Storm

276336	5.9	MEDIUM Network	samba debian fedoraproject redhat canonical	samba debian_linux fedora enterprise_linux_desktop enterprise_linux_workstation enterprise_linux_for_scientific_computing enterprise_linux enterprise_linux_server enterprise_l…	A flaw was found in the way samba implemented SMB1 authentication. An attacker could use this flaw to retrieve the plaintext password sent over the wire even if Kerberos authentication was required.	CWE-287 Improper Authentication	CVE-2016-2124	2024-11-21 11:47	2022-02-19	Show	GitHub Exploit DB Packet Storm

276337	5.3	MEDIUM Network	openbsd netapp	openssh ontap_select_deploy_administration_utility clustered_data_ontap solidfire hci_management_node	OpenSSH through 8.7 allows remote attackers, who have a suspicion that a certain combination of username and public key is known to an SSH server, to test whether this suspicion is correct. This occu…	NVD-CWE-Other	CVE-2016-20012	2024-11-21 11:47	2021-09-16	Show	GitHub Exploit DB Packet Storm

276338	7.5	HIGH Network	gnome	libgrss	libgrss through 0.7.0 fails to perform TLS certificate verification when downloading feeds, allowing remote attackers to manipulate the contents of feeds without detection. This occurs because of the…	CWE-295 Improper Certificate Validation	CVE-2016-20011	2024-11-21 11:47	2021-05-26	Show	GitHub Exploit DB Packet Storm

276339	10.0	CRITICAL Network	ewww	image_optimizer	EWWW Image Optimizer before 2.8.5 allows remote command execution because it relies on a protection mechanism involving boolval, which is unavailable before PHP 5.5.	NVD-CWE-noinfo	CVE-2016-20010	2024-11-21 11:47	2021-05-5	Show	GitHub Exploit DB Packet Storm

276340	9.8	CRITICAL Network	windriver siemens	vxworks sgt-100_firmware sgt-200_firmware sgt-300_firmware sgt-400_firmware sgt-a20_firmware sgt-a35_firmware sgt-a65_firmware	A DNS client stack-based buffer overflow in ipdnsc_decode_name() affects Wind River VxWorks 6.5 through 7. NOTE: This vulnerability only affects products that are no longer supported by the maintainer	CWE-787 Out-of-bounds Write	CVE-2016-20009	2024-11-21 11:47	2021-03-12	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed