Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":June 20, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
228371	4.3	警告	ジュニパーネットワークス	-	Juniper SmartPass WLAN Security Management におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2013-3498	2013-05-10 14:51	2013-05-8	Show	GitHub Exploit DB Packet Storm

228372	4.7	警告	ジュニパーネットワークス	-	Junos Space JA1500 アプライアンスなどで使用される Juniper Junos Space におけるパスワードを取得される脆弱性	CWE-255 証明書・パスワード管理	CVE-2013-3497	2013-05-10 14:51	2013-05-8	Show	GitHub Exploit DB Packet Storm

228373	3.5	注意	シマンテック	-	Symantec Brightmail Gateway におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2013-1611	2013-05-10 14:07	2013-05-8	Show	GitHub Exploit DB Packet Storm

228374	4.3	警告	Invensys	-	Invensys Wonderware Information Server におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2013-0688	2013-05-10 14:07	2013-05-7	Show	GitHub Exploit DB Packet Storm

228375	9.3	危険	Invensys	-	Invensys Wonderware Information Server における任意のファイルを読まれる脆弱性	CWE-20 不適切な入力確認	CVE-2013-0686	2013-05-10 14:06	2013-05-7	Show	GitHub Exploit DB Packet Storm

228376	9.3	危険	Invensys	-	Invensys Wonderware Information Server における任意のコードを実行される脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2013-0685	2013-05-10 14:06	2013-05-7	Show	GitHub Exploit DB Packet Storm

228377	7.5	危険	Invensys	-	Invensys Wonderware Information Server における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2013-0684	2013-05-10 14:05	2013-05-7	Show	GitHub Exploit DB Packet Storm

228378	9.3	危険	IBM	-	IBM WebSphere DataPower XC10 アプライアンスデバイスにおける認証を回避される脆弱性	CWE-noinfo 情報不足	CVE-2013-0600	2013-05-10 14:04	2013-05-3	Show	GitHub Exploit DB Packet Storm

228379	9.3	危険	マイクロソフト	-	Microsoft Internet Explorer における任意のコードを実行される脆弱性	CWE-94 コード・インジェクション	CVE-2012-1876	2013-05-9 19:47	2012-06-12	Show	GitHub Exploit DB Packet Storm

228380	6.8	警告	GroundWork	-	GroundWork Monitor Enterprise におけるクロスサイトリクエストフォージェリの脆弱性	CWE-352 同一生成元ポリシー違反	CVE-2013-3513	2013-05-9 16:33	2013-03-7	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:June 21, 2026, 4:01 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
275991	7.8	HIGH Local	linux	linux_kernel	The crypto scatterlist API in the Linux kernel 4.9.x before 4.9.6 interacts incorrectly with the CONFIG_VMAP_STACK option, which allows local users to cause a denial of service (system crash or memor…	CWE-399 Resource Management Errors	CVE-2016-10153	2024-11-21 11:43	2017-02-6	Show	GitHub Exploit DB Packet Storm

275992	9.8	CRITICAL Network	linux	linux_kernel	Use-after-free vulnerability in the kvm_ioctl_create_device function in virt/kvm/kvm_main.c in the Linux kernel before 4.8.13 allows host OS users to cause a denial of service (host OS crash) or poss…	CWE-264 CWE-416 Permissions, Privileges, and Access Controls Use After Free	CVE-2016-10150	2024-11-21 11:43	2017-02-6	Show	GitHub Exploit DB Packet Storm

275993	9.8	CRITICAL Network	sendquick	entera_sms_gateway_firmware avera_sms_gateway_firmware	An issue was discovered on SendQuick Entera and Avera devices before 2HF16. Multiple Command Injection vulnerabilities allow attackers to execute arbitrary system commands.	CWE-77 Command Injection	CVE-2016-10098	2024-11-21 11:43	2017-02-6	Show	GitHub Exploit DB Packet Storm

275994	7.1	HIGH Local	littlecms debian canonical opensuse redhat netapp	little_cms_color_engine debian_linux ubuntu_linux leap enterprise_linux_desktop enterprise_linux_server enterprise_linux_workstation enterprise_linux_server_tus enterprise_lin…	The Type_MLU_Read function in cmstypes.c in Little CMS (aka lcms2) allows remote attackers to obtain sensitive information or cause a denial of service via an image with a crafted ICC profile, which …	CWE-125 Out-of-bounds Read	CVE-2016-10165	2024-11-21 11:43	2017-02-4	Show	GitHub Exploit DB Packet Storm

275995	7.5	HIGH Network	sap	saplpd	SAPlpd through 7400.3.11.33 in SAP GUI 7.40 on Windows has a Denial of Service vulnerability (service crash) with a long string to TCP port 515.	CWE-20 Improper Input Validation	CVE-2016-10079	2024-11-21 11:43	2017-02-2	Show	GitHub Exploit DB Packet Storm

275996	7.5	HIGH Network	minitar	archive-tar-minitar minitar	Directory traversal vulnerability in the minitar before 0.6 and archive-tar-minitar 0.5.2 gems for Ruby allows remote attackers to write to arbitrary files via a .. (dot dot) in a TAR archive entry.	CWE-22 Path Traversal	CVE-2016-10173	2024-11-21 11:43	2017-02-2	Show	GitHub Exploit DB Packet Storm

275997	9.8	CRITICAL Network	x.org	libxpm	Multiple integer overflows in libXpm before 3.5.12, when a program requests parsing XPM extensions on a 64-bit platform, allow remote attackers to cause a denial of service (out-of-bounds write) or e…	CWE-119 CWE-787 CWE-190 Incorrect Access of Indexable Resource ('Range Error') Out-of-bounds Write Integer Overflow or Wraparound	CVE-2016-10164	2024-11-21 11:43	2017-02-2	Show	GitHub Exploit DB Packet Storm

275998	10.0	CRITICAL Network	mrf	web_panel	An issue was discovered in Radisys MRF Web Panel (SWMS) 9.0.1. The MSM_MACRO_NAME POST parameter in /swms/ms.cgi was discovered to be vulnerable to OS command injection attacks. It is possible to use…	CWE-78 OS Command	CVE-2016-10043	2024-11-21 11:43	2017-02-1	Show	GitHub Exploit DB Packet Storm

275999	7.5	HIGH Network	libpng	libpng	The png_set_text_2 function in libpng 0.71 before 1.0.67, 1.2.x before 1.2.57, 1.4.x before 1.4.20, 1.5.x before 1.5.28, and 1.6.x before 1.6.27 allows context-dependent attackers to cause a NULL poi…	CWE-476 NULL Pointer Dereference	CVE-2016-10087	2024-11-21 11:43	2017-01-31	Show	GitHub Exploit DB Packet Storm

276000	7.5	HIGH Network	dlink	dwr-932b_firmware	An issue was discovered on the D-Link DWR-932B router. /var/miniupnpd.conf has no deny rules.	CWE-399 Resource Management Errors	CVE-2016-10186	2024-11-21 11:43	2017-01-30	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed