Vulnerability Search Top

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

Vulnerability Information Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 27, 2026, 2:01 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
202281	7.8	重要 Local	SUSE libarchive Debian Canonical	-	libarchive の archive_read_support_format_mtree.c の get_time_t_max および get_time_t_min 関数における整数オーバーフローの脆弱性	CWE-Other その他	CVE-2015-8931	2016-09-23 16:33	2015-05-17	Show	GitHub Exploit DB Packet Storm

202282	7.5	重要 Network	SUSE libarchive Canonical	-	libarchive の bsdtar におけるサービス運用妨害 (DoS) の脆弱性	CWE-20 不適切な入力確認	CVE-2015-8930	2016-09-23 16:33	2015-04-12	Show	GitHub Exploit DB Packet Storm

202283	5.5	警告 Local	libarchive SUSE	-	libarchive の archive_read_extract2.c の __archive_read_get_extract 関数におけるサービス運用妨害 (DoS) の脆弱性	CWE-119 バッファエラー	CVE-2015-8929	2016-09-23 16:33	2015-04-12	Show	GitHub Exploit DB Packet Storm

202284	5.5	警告 Local	SUSE libarchive Canonical	-	libarchive の archive_read_support_format_mtree.c の process_add_entry 関数におけるサービス運用妨害 (DoS) の脆弱性	CWE-Other その他	CVE-2015-8928	2016-09-23 16:33	2015-05-22	Show	GitHub Exploit DB Packet Storm

202285	5.5	警告 Local	libarchive	-	libarchive の archive_read_support_format_zip.c の trad_enc_decrypt_update 関数におけるサービス運用妨害 (DoS) の脆弱性	CWE-Other その他	CVE-2015-8927	2016-09-23 16:33	2015-04-12	Show	GitHub Exploit DB Packet Storm

202286	5.5	警告 Local	SUSE libarchive Canonical	-	libarchive の archive_read_support_format_rar.c の archive_read_format_rar_read_data 関数におけるサービス運用妨害 (DoS) の脆弱性	CWE-Other その他	CVE-2015-8926	2016-09-23 16:33	2015-04-12	Show	GitHub Exploit DB Packet Storm

202287	5.5	警告 Local	SUSE libarchive Canonical	-	libarchive の archive_read_support_format_mtree.c の readline 関数におけるサービス運用妨害 (DoS) の脆弱性	CWE-Other その他	CVE-2015-8925	2016-09-23 16:33	2015-04-12	Show	GitHub Exploit DB Packet Storm

202288	5.5	警告 Local	SUSE libarchive Canonical	-	libarchive の archive_read_support_format_tar.c の archive_read_format_tar_read_header 関数におけるサービス運用妨害 (DoS) の脆弱性	CWE-Other その他	CVE-2015-8924	2016-09-23 16:33	2015-04-12	Show	GitHub Exploit DB Packet Storm

202289	6.5	警告 Network	SUSE libarchive Canonical	-	libarchive の process_extra 関数におけるサービス運用妨害 (DoS) の脆弱性	CWE-20 不適切な入力確認	CVE-2015-8923	2016-09-23 16:33	2015-04-12	Show	GitHub Exploit DB Packet Storm

202290	5.5	警告 Local	SUSE libarchive Canonical	-	libarchive の archive_read_support_format_7zip.c の read_CodersInfo 関数におけるサービス運用妨害 (DoS) の脆弱性	CWE-Other その他	CVE-2015-8922	2016-09-23 16:33	2015-04-12	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 27, 2026, 4:52 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
289881	7.5	HIGH Network	redhat	openshift	The deployment script in the unsupported "OpenShift Extras" set of add-on scripts, in Red Hat Openshift 1, installs a default public key in the root user's authorized_keys file.	CWE-668 Exposure of Resource to Wrong Sphere	CVE-2013-4253	2024-11-21 10:55	2022-10-20	Show	GitHub Exploit DB Packet Storm

289882	9.1	CRITICAL Network	redhat	openshift	In a openshift node, there is a cron job to update mcollective facts that mishandles a temporary file. This may lead to loss of confidentiality and integrity.	CWE-668 Exposure of Resource to Wrong Sphere	CVE-2013-4561	2024-11-21 10:55	2022-07-1	Show	GitHub Exploit DB Packet Storm

289883	6.1	MEDIUM Network	emberjs	ember.js	In general, Ember.js escapes or strips any user-supplied content before inserting it in strings that will be sent to innerHTML. However, the `tagName` property of an `Ember.View` was inserted into su…	CWE-79 Cross-site Scripting	CVE-2013-4170	2024-11-21 10:55	2022-06-30	Show	GitHub Exploit DB Packet Storm

289884	7.8	HIGH Local	qemu	qemu	An user able to alter the savevm data (either on the disk or over the wire during migration) could use this flaw to to corrupt QEMU process memory on the (destination) host, which could potentially r…	-	CVE-2013-4536	2024-11-21 10:55	2021-05-29	Show	GitHub Exploit DB Packet Storm

289885	4.3	MEDIUM Network	organic_groups_project	organic_groups	The OG access fields (visibility fields) implementation in Organic Groups (OG) module 7.x-2.x before 7.x-2.3 for Drupal does not properly restrict access to private groups, which allows remote authen…	CWE-863 Incorrect Authorization	CVE-2013-4228	2024-11-21 10:55	2020-02-19	Show	GitHub Exploit DB Packet Storm

289886	6.5	MEDIUM Network	drupal	authenticated_user_page_caching	The Authenticated User Page Caching (Authcache) module 7.x-1.x before 7.x-1.5 for Drupal does not properly restrict access to cached pages, which allows remote attackers with the same role-combinatio…	CWE-862 Missing Authorization	CVE-2013-4226	2024-11-21 10:55	2020-02-19	Show	GitHub Exploit DB Packet Storm

289887	8.8	HIGH Network	mozilla	persona	Cross-site request forgery (CSRF) vulnerability in the persona_xsrf_token function in persona.module in the Mozilla Persona module 7.x-1.x before 7.x-1.11 for Drupal allows remote attackers to hijack…	CWE-352 Origin Validation Error	CVE-2013-4227	2024-11-21 10:55	2020-02-19	Show	GitHub Exploit DB Packet Storm

289888	9.1	CRITICAL Network	getbutterfly	portable-phpmyadmin	WordPress Portable phpMyAdmin Plugin 1.4.1 has Multiple Security Bypass Vulnerabilities	CWE-287 Improper Authentication	CVE-2013-4454	2024-11-21 10:55	2020-02-18	Show	GitHub Exploit DB Packet Storm

289889	9.8	CRITICAL Network	openx	openx	A Code Execution Vulnerability exists in OpenX Ad Server 2.8.10 due to a backdoor in flowplayer-3.1.1.min.js library, which could let a remote malicious user execute arbitrary PHP code	CWE-94 Code Injection	CVE-2013-4211	2024-11-21 10:55	2020-02-15	Show	GitHub Exploit DB Packet Storm

289890	5.5	MEDIUM Local	avira	antivir_mailgate antivir_mailgate_suite exchange_security antivir_webgate antivir_webgate_suite antivir_sharepoint professional_security antivir_personal savapi antivirus_s…	A Denial of Service (infinite loop) vulnerability exists in Avira AntiVir Engine before 8.2.12.58 via an unspecified function in the PDF Scanner Engine.	CWE-400 Uncontrolled Resource Consumption	CVE-2013-4602	2024-11-21 10:55	2020-02-13	Show	GitHub Exploit DB Packet Storm