Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 18, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
228781 5 警告 Digium - 複数の Asterisk 製品におけるサービス運用妨害 (デーモンクラッシュ) 状態にされる脆弱性 CWE-119
バッファエラー 		CVE-2013-2686 2013-04-2 14:35 2013-03-27 Show GitHub Exploit DB Packet Storm
228782 7.5 危険 Digium - Asterisk Open Source の res/res_format_attr_h264.c におけるスタックベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2013-2685 2013-04-2 14:35 2013-03-27 Show GitHub Exploit DB Packet Storm
228783 5 警告 Digium - 複数の Asterisk 製品の SIP チャンネルドライバにおけるアカウント名を列挙される脆弱性 CWE-200
情報漏えい 		CVE-2013-2264 2013-04-2 14:34 2013-02-21 Show GitHub Exploit DB Packet Storm
228784 7.5 危険 Synchroweb Technology - Synchroweb Technology SynConnect の index.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2013-2690 2013-04-2 14:03 2013-03-28 Show GitHub Exploit DB Packet Storm
228785 - - ヒューレット・パッカード - ** 削除 ** HP ProCurve 1700-8 および 1700-24 スイッチにおけるクロスサイトリクエストフォージェリの脆弱性 - CVE-2012-5216 2013-04-2 13:53 2013-03-25 Show GitHub Exploit DB Packet Storm
228786 4.3 警告 アップル
Google		 - Google Chrome におけるクロスサイトスクリプティング攻撃を実行される脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2011-3058 2013-04-2 11:33 2012-03-28 Show GitHub Exploit DB Packet Storm
228787 4.3 警告 アルバネットワークス株式会社 - Mobility Controller で使用される Aruba Networks ArubaOS におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2013-2290 2013-04-1 20:54 2013-03-18 Show GitHub Exploit DB Packet Storm
228788 7.8 危険 シスコシステムズ - Cisco IOS の IP Service Level Agreement 機能におけるサービス運用妨害 (デバイスリロード) の脆弱性 CWE-119
バッファエラー 		CVE-2013-1148 2013-04-1 20:47 2013-02-8 Show GitHub Exploit DB Packet Storm
228789 7.8 危険 シスコシステムズ - Cisco IOS の Protocol Translation (PT) 機能におけるサービス運用妨害 (デバイスリロード) の脆弱性 CWE-119
バッファエラー 		CVE-2013-1147 2013-04-1 20:46 2013-03-27 Show GitHub Exploit DB Packet Storm
228790 7.8 危険 シスコシステムズ - Cisco IOS の Smart Install クライアント機能におけるサービス運用妨害 (デバイスリロード) の脆弱性 CWE-119
バッファエラー 		CVE-2013-1146 2013-04-1 20:46 2013-03-27 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 19, 2026, 4:01 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
275391 9.8 CRITICAL
Network 		projectsend projectsend ProjectSend (formerly cFTP) r582 allows SQL injection via manage-files.php with the request parameter status, manage-files.php with the request parameter files, clients.php with the request parameter… CWE-89
SQL Injection 		CVE-2016-10731 2024-11-21 11:44 2018-10-29 Show GitHub Exploit DB Packet Storm
275392 7.8 HIGH
Local 		zmanda
redhat 		amanda
enterprise_linux 		An issue was discovered in Amanda 3.3.1. A user with backup privileges can trivially compromise a client installation. Amstar is an Amanda Application API script. It should not be run by users direct… CWE-264
Permissions, Privileges, and Access Controls 		CVE-2016-10730 2024-11-21 11:44 2018-10-25 Show GitHub Exploit DB Packet Storm
275393 7.8 HIGH
Local 		zmanda
redhat
debian 		amanda
enterprise_linux
debian_linux 		An issue was discovered in Amanda 3.3.1. A user with backup privileges can trivially compromise a client installation. The "runtar" setuid root binary does not check for additional arguments supplied… CWE-77
Command Injection 		CVE-2016-10729 2024-11-21 11:44 2018-10-25 Show GitHub Exploit DB Packet Storm
275394 5.3 MEDIUM
Network 		suricata-ids suricata An issue was discovered in Suricata before 3.1.2. If an ICMPv4 error packet is received as the first packet on a flow in the to_client direction, it confuses the rule grouping lookup logic. The tocli… CWE-20
 Improper Input Validation  		CVE-2016-10728 2024-11-21 11:44 2018-07-24 Show GitHub Exploit DB Packet Storm
275395 9.8 CRITICAL
Network 		canonical
gnome 		ubuntu_linux
evolution 		camel/providers/imapx/camel-imapx-server.c in the IMAPx component in GNOME evolution-data-server before 3.21.2 proceeds with cleartext data containing a password if the client wishes to use STARTTLS … CWE-200
Information Exposure 		CVE-2016-10727 2024-11-21 11:44 2018-07-20 Show GitHub Exploit DB Packet Storm
275396 7.5 HIGH
Network 		duraspace dspace The XMLUI feature in DSpace before 3.6, 4.x before 4.5, and 5.x before 5.5 allows directory traversal via the themes/ path in an attack with two or more arbitrary characters and a colon before a path… CWE-22
Path Traversal 		CVE-2016-10726 2024-11-21 11:44 2018-07-10 Show GitHub Exploit DB Packet Storm
275397 7.5 HIGH
Network 		bitcoin bitcoin_core
bitcoin-qt
bitcoind 		In Bitcoin Core before v0.13.0, a non-final alert is able to block the special "final alert" (which is supposed to override all other alerts) because operations occur in the wrong order. This behavio… CWE-310
Cryptographic Issues 		CVE-2016-10725 2024-11-21 11:44 2018-07-6 Show GitHub Exploit DB Packet Storm
275398 7.5 HIGH
Network 		bitcoin bitcoin_core
bitcoin-qt
bitcoind 		Bitcoin Core before v0.13.0 allows denial of service (memory exhaustion) triggered by the remote network alert system (deprecated since Q1 2016) if an attacker can sign a message with a certain priva… CWE-400
 Uncontrolled Resource Consumption 		CVE-2016-10724 2024-11-21 11:44 2018-07-6 Show GitHub Exploit DB Packet Storm
275399 8.8 HIGH
Network 		rails_admin_project rails_admin rails_admin ruby gem <v1.1.1 is vulnerable to cross-site request forgery (CSRF) attacks. Non-GET methods were not validating CSRF tokens and, as a result, an attacker could hypothetically gain access… CWE-352
 Origin Validation Error 		CVE-2016-10522 2024-11-21 11:44 2018-07-6 Show GitHub Exploit DB Packet Storm
275400 5.5 MEDIUM
Local 		linux linux_kernel An issue was discovered in the Linux kernel through 4.17.2. Since the page allocator does not yield CPU resources to the owner of the oom_lock mutex, a local unprivileged user can trivially lock up t… CWE-399
 Resource Management Errors 		CVE-2016-10723 2024-11-21 11:44 2018-06-21 Show GitHub Exploit DB Packet Storm