Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 4, 2026, 4 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
201451 9.8 緊急
Network
Apache Software Foundation
オラクル
- Apache Groovy の runtime/MethodClosure.java の MethodClosure クラスにおける任意のコードを実行される脆弱性 CWE-Other
その他
CVE-2015-3253 2016-11-22 16:01 2015-07-16 Show GitHub Exploit DB Packet Storm
201452 4 警告 OpenSSL Project - OpenSSL における Change Cipher Spec メッセージの処理に脆弱性 CWE-Other
その他
CVE-2014-0224 2016-11-22 16:00 2014-06-6 Show GitHub Exploit DB Packet Storm
201453 4.3 警告 IBM
Apache Software Foundation
オラクル
- Apache Tomcat における任意のファイルを読まれる脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2014-0119 2016-11-22 16:00 2014-05-21 Show GitHub Exploit DB Packet Storm
201454 4.3 警告 日立
IBM
Apache Software Foundation
オラクル
- Apache Tomcat の java/org/apache/tomcat/util/buf/Ascii.java における整数オーバーフローの脆弱性 CWE-189
数値処理の問題
CVE-2014-0099 2016-11-22 16:00 2014-03-27 Show GitHub Exploit DB Packet Storm
201455 4.3 警告 日立
IBM
Apache Software Foundation
オラクル
- Apache Tomcat のデフォルトサーブレットにおけるセキュリティマネージャの制限を回避される脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2014-0096 2016-11-22 16:00 2014-03-27 Show GitHub Exploit DB Packet Storm
201456 5 警告 日立
IBM
Apache Software Foundation
オラクル
- Apache Tomcat の java/org/apache/coyote/http11/filters/ChunkedInputFilter.java における整数オーバーフローの脆弱性 CWE-189
数値処理の問題
CVE-2014-0075 2016-11-22 16:00 2014-03-27 Show GitHub Exploit DB Packet Storm
201457 5 警告 Apache Software Foundation
オラクル
- Apache Commons FileUpload におけるサービス運用妨害 (DoS) の脆弱性 CWE-20
不適切な入力確認
CVE-2014-0050 2016-11-22 16:00 2014-02-10 Show GitHub Exploit DB Packet Storm
201458 4.3 警告 Apache Software Foundation
オラクル
- Apache Tomcat における "Tomcat の内部" 情報を取得される脆弱性 CWE-200
情報漏えい
CVE-2013-4590 2016-11-22 16:00 2013-12-26 Show GitHub Exploit DB Packet Storm
201459 6.8 警告 Apache Software Foundation
オラクル
- Apache Tomcat における任意のコードを実行される脆弱性 CWE-94
コード・インジェクション
CVE-2013-4444 2016-11-22 16:00 2013-05-9 Show GitHub Exploit DB Packet Storm
201460 4.3 警告 IBM
Apache Software Foundation
オラクル
- Apache Tomcat におけるサービス運用妨害 (DoS) の脆弱性 CWE-20
不適切な入力確認
CVE-2013-4322 2016-11-22 16:00 2013-12-26 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 4, 2026, 4:17 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
291301 - tattyan tattyan_hptown Directory traversal vulnerability in Tattyan HP TOWN before 5_10_1 allows remote attackers to read arbitrary files via a .. (dot dot) in a request. CWE-22
Path Traversal
CVE-2013-6000 2024-11-21 10:58 2013-12-5 Show GitHub Exploit DB Packet Storm
291302 - att connect_participant_application Stack-based buffer overflow in the AT&T Connect Participant Application before 9.5.51 on Windows allows remote attackers to execute arbitrary code via a malformed .SVT file. CWE-119
Incorrect Access of Indexable Resource ('Range Error') 
CVE-2013-6029 2024-11-21 10:58 2013-12-5 Show GitHub Exploit DB Packet Storm
291303 - ibm qradar_security_information_and_event_manager Cross-site scripting (XSS) vulnerability in IBM Security QRadar SIEM 7.0 allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors. CWE-79
Cross-site Scripting
CVE-2013-6307 2024-11-21 10:58 2013-11-30 Show GitHub Exploit DB Packet Storm
291304 - thomsonreuters velocity_analytics_vhayu_analytic_server VhttpdMgr in Thomson Reuters Velocity Analytics Vhayu Analytic Server 6.94 build 2995 allows remote attackers to execute arbitrary code via a URL in the fileName parameter during an importFile action. CWE-94
Code Injection
CVE-2013-5912 2024-11-21 10:58 2013-11-28 Show GitHub Exploit DB Packet Storm
291305 - civicrm civicrm Multiple SQL injection vulnerabilities in CRM/Core/Page/AJAX/Location.php in CiviCRM before 4.2.12, 4.3.x before 4.3.7, and 4.4.x before 4.4.beta4 allow remote attackers to execute arbitrary SQL comm… CWE-89
SQL Injection
CVE-2013-5957 2024-11-21 10:58 2013-11-28 Show GitHub Exploit DB Packet Storm
291306 - ibm rational_performance_tester
rational_service_tester
Unspecified vulnerability in IBM Rational Service Tester 8.3.x and 8.5.x before 8.5.1 and Rational Performance Tester 8.3.x and 8.5.x before 8.5.1 allows remote attackers to read arbitrary files via … NVD-CWE-noinfo
CVE-2013-6312 2024-11-21 10:58 2013-11-23 Show GitHub Exploit DB Packet Storm
291307 - kingsoft kdrive Kingsoft KDrive Personal before 1.21.0.1880 on Windows does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information … CWE-310
Cryptographic Issues
CVE-2013-5999 2024-11-21 10:58 2013-11-23 Show GitHub Exploit DB Packet Storm
291308 - dlink des-3800_firmware
des-3800
Unspecified vulnerability in the Web manager implementation on D-Link Japan DES-3800 devices with firmware before R4.50B58 allows remote attackers to cause a denial of service (device hang) via unkno… NVD-CWE-noinfo
CVE-2013-5998 2024-11-21 10:58 2013-11-23 Show GitHub Exploit DB Packet Storm
291309 - dlink des-3800_firmware
des-3800
Unspecified vulnerability in the SSH implementation on D-Link Japan DES-3800 devices with firmware before R4.50B58 allows remote authenticated users to cause a denial of service (device hang) via unk… NVD-CWE-noinfo
CVE-2013-5997 2024-11-21 10:58 2013-11-23 Show GitHub Exploit DB Packet Storm
291310 - emc document_sciences_xpression Directory traversal vulnerability in EMC Document Sciences xPression 4.1 SP1 before Patch 47, 4.2 before Patch 26, and 4.5 before Patch 05, as used in Documentum Edition, Enterprise Edition Publish E… CWE-22
Path Traversal
CVE-2013-6177 2024-11-21 10:58 2013-11-21 Show GitHub Exploit DB Packet Storm