Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 4, 2026, 2 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
201461 6.8 警告 日本電気
Apache Software Foundation
オラクル
- Apache Tomcat のフォーム認証機能におけるセッションにリクエストを挿入される脆弱性 CWE-287
不適切な認証
CVE-2013-2067 2016-11-22 16:00 2013-05-3 Show GitHub Exploit DB Packet Storm
201462 5 警告 アップル
OpenSSL Project
ヒューレット・パッカード
オラクル
- OpenSSL におけるサービス運用妨害 (DoS) の脆弱性 CWE-Other
その他
CVE-2014-3571 2016-11-22 15:58 2014-05-14 Show GitHub Exploit DB Packet Storm
201463 5.8 警告 アップル
オラクル
OpenBSD
- OpenSSH の sshd における環境による制限を回避される脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2014-2532 2016-11-22 15:58 2014-03-16 Show GitHub Exploit DB Packet Storm
201464 6.4 警告 Apache Software Foundation
オラクル
- Apache Tomcat の java/org/apache/coyote/http11/filters/ChunkedInputFilter.java における HTTP リクエストスマグリング攻撃を実行される脆弱性 CWE-Other
その他
CVE-2014-0227 2016-11-22 15:58 2014-06-24 Show GitHub Exploit DB Packet Storm
201465 4 警告 オラクル - Oracle MySQL の MySQL Server における Server : Optimizer に関する脆弱性 CWE-noinfo
情報不足
CVE-2015-0409 2016-11-22 15:57 2015-01-20 Show GitHub Exploit DB Packet Storm
201466 5 警告 アップル
日本電気
OpenSSL Project
ヒューレット・パッカード
オラクル
- OpenSSL の crypto/asn1/a_type.c の ASN1_TYPE_cmp 関数におけるサービス運用妨害 (DoS) の脆弱性 CWE-Other
その他
CVE-2015-0286 2016-11-22 15:56 2015-03-19 Show GitHub Exploit DB Packet Storm
201467 10 危険 日本電気
アップル
サイバートラスト株式会社
ヒューレット・パッカード
オラクル
GNU Project
日立
- glibc ライブラリにバッファオーバーフローの脆弱性 CWE-119
CWE-Other
CVE-2015-0235 2016-11-22 15:56 2015-01-28 Show GitHub Exploit DB Packet Storm
201468 5 警告 ヒューレット・パッカード
日本電気
日立
オラクル
NTP Project
- NTP の ntpd の ntp_proto.c の receive 関数における意図しない関連付けの変更を誘発される脆弱性 CWE-Other
その他
CVE-2014-9296 2016-11-22 15:56 2014-11-3 Show GitHub Exploit DB Packet Storm
201469 7.5 危険 MySQL AB
オラクル
- Oracle MySQL の MySQL Server における Server : Security : Encryption に関する脆弱性 CWE-noinfo
情報不足
CVE-2015-0411 2016-11-22 15:55 2015-01-20 Show GitHub Exploit DB Packet Storm
201470 4 警告 オラクル - Oracle MySQL の MySQL Server における Server : Optimizer に関する脆弱性 CWE-noinfo
情報不足
CVE-2015-0423 2016-11-22 15:51 2015-04-14 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 4, 2026, 4:17 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
291291 - livezilla livezilla Multiple cross-site scripting (XSS) vulnerabilities in LiveZilla before 5.1.1.0 allow remote attackers to inject arbitrary web script or HTML via (1) a name in the call administrator feature, (2) uns… CWE-79
Cross-site Scripting
CVE-2013-6224 2024-11-21 10:58 2013-12-11 Show GitHub Exploit DB Packet Storm
291292 - emc rsa_security_analytics
rsa_netwitness_nextgen
EMC RSA Security Analytics (SA) 10.x before 10.3, and RSA NetWitness NextGen 9.8, does not ensure that SA Core requests originate from the SA REST UI, which allows remote attackers to bypass intended… CWE-264
Permissions, Privileges, and Access Controls
CVE-2013-6180 2024-11-21 10:58 2013-12-10 Show GitHub Exploit DB Packet Storm
291293 - nagiosql nagiosql Multiple cross-site scripting (XSS) vulnerabilities in NagiosQL 3.2 SP2 allow remote attackers to inject arbitrary web script or HTML via the txtSearch parameter to (1) admin/hostdependencies.php, (2… CWE-79
Cross-site Scripting
CVE-2013-6039 2024-11-21 10:58 2013-12-10 Show GitHub Exploit DB Packet Storm
291294 - dovecot dovecot checkpassword-reply in Dovecot before 2.2.7 performs setuid operations to a user who is authenticating, which allows local users to bypass authentication and access virtual email accounts by attachin… CWE-287
Improper Authentication
CVE-2013-6171 2024-11-21 10:58 2013-12-10 Show GitHub Exploit DB Packet Storm
291295 - twibright links Integer overflow in Links before 2.8 allows remote attackers to cause a denial of service (crash) via crafted HTML tables. CWE-189
Numeric Errors
CVE-2013-6050 2024-11-21 10:58 2013-12-8 Show GitHub Exploit DB Packet Storm
291296 - claroline claroline Multiple cross-site scripting (XSS) vulnerabilities in Claroline before 1.11.9 allow remote attackers to inject arbitrary web script or HTML via the (1) box parameter to messaging/messagebox.php, cid… CWE-79
Cross-site Scripting
CVE-2013-6267 2024-11-21 10:58 2013-12-6 Show GitHub Exploit DB Packet Storm
291297 - cybozu garoon Session fixation vulnerability in Cybozu Garoon before 3.7.2 allows remote attackers to hijack web sessions via unspecified vectors. CWE-264
Permissions, Privileges, and Access Controls
CVE-2013-6004 2024-11-21 10:58 2013-12-5 Show GitHub Exploit DB Packet Storm
291298 - cybozu garoon CRLF injection vulnerability in Cybozu Garoon 3.1 through 3.5 SP5, when Phone Messages forwarding is enabled, allows remote authenticated users to inject arbitrary e-mail headers via unspecified vect… CWE-20
 Improper Input Validation 
CVE-2013-6003 2024-11-21 10:58 2013-12-5 Show GitHub Exploit DB Packet Storm
291299 - cybozu garoon The server in Cybozu Garoon before 3.7 SP1 allows remote attackers to cause a denial of service (CPU consumption) via unspecified vectors. CWE-399
 Resource Management Errors
CVE-2013-6002 2024-11-21 10:58 2013-12-5 Show GitHub Exploit DB Packet Storm
291300 - cybozu garoon SQL injection vulnerability in the Space function in Cybozu Garoon before 3.7 SP1 allows remote authenticated users to execute arbitrary SQL commands via unspecified vectors. CWE-89
SQL Injection
CVE-2013-6001 2024-11-21 10:58 2013-12-5 Show GitHub Exploit DB Packet Storm