Vulnerability Search Top

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

Vulnerability Information Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 25, 2026, 10 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
203471	7.8	重要 Local	Google	-	Nexus 5 および 7 (2013) デバイス上で稼動する Android の Qualcomm コンポーネントにおけるヒープベースのバッファオーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2014-9786	2016-07-13 16:52	2016-07-6	Show	GitHub Exploit DB Packet Storm

203472	7.8	重要 Local	Google	-	Nexus 7 (2013) デバイス上で稼動する Android の Qualcomm コンポーネントの drivers/misc/qseecom.c における権限を取得される脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2014-9785	2016-07-13 16:52	2016-07-6	Show	GitHub Exploit DB Packet Storm

203473	7.8	重要 Local	Google	-	Nexus 5 および 7 (2013) デバイス上で稼動する Android の Qualcomm コンポーネントにおけるバッファオーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2014-9784	2016-07-13 11:51	2016-07-6	Show	GitHub Exploit DB Packet Storm

203474	7.8	重要 Local	Google	-	Nexus 7 (2013) デバイス上で稼動する Android の Qualcomm コンポーネントにおける権限を取得される脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2014-9783	2016-07-13 11:51	2016-07-6	Show	GitHub Exploit DB Packet Storm

203475	7.8	重要 Local	Google	-	Nexus 5 および 7 (2013) デバイス上で稼動する Android の Qualcomm コンポーネントにおける権限を取得される脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2014-9782	2016-07-13 11:51	2016-07-6	Show	GitHub Exploit DB Packet Storm

203476	7.8	重要 Local	Google	-	Nexus 7 (2013) デバイス上で稼動する Android の Qualcomm コンポーネントの drivers/video/fbcmap.c におけるバッファオーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2014-9781	2016-07-13 11:51	2016-07-6	Show	GitHub Exploit DB Packet Storm

203477	7.8	重要 Local	Google	-	複数の Nexus デバイス上で稼動する Android の Qualcomm コンポーネントの drivers/video/msm/mdss/mdp3_ctrl.c における権限を取得される脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2014-9780	2016-07-13 11:51	2016-07-6	Show	GitHub Exploit DB Packet Storm

203478	7.8	重要 Local	Google	-	Nexus 5 デバイス上で稼動する Android の Qualcomm コンポーネントの arch/arm/mach-msm/qdsp6v2/msm_audio_ion.c におけるカーネルメモリから重要な情報を取得される脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2014-9779	2016-07-13 11:51	2016-07-6	Show	GitHub Exploit DB Packet Storm

203479	7.8	重要 Local	Google	-	Nexus 5 および 7 (2013) デバイス上で稼動する Android の Qualcomm コンポーネントにおける権限を取得される脆弱性	CWE-119 バッファエラー	CVE-2014-9778	2016-07-13 11:51	2016-07-6	Show	GitHub Exploit DB Packet Storm

203480	7.8	重要 Local	Google	-	Nexus 5 および 7 (2013) デバイス上で稼動する Android の Qualcomm コンポーネントにおける権限を取得される脆弱性	CWE-119 バッファエラー	CVE-2014-9777	2016-07-13 11:51	2016-07-6	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 25, 2026, 4:01 a.m.

No	CVSS	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
291121	-	dovecot	dovecot	The IMAP functionality in Dovecot before 2.2.2 allows remote attackers to cause a denial of service (infinite loop and CPU consumption) via invalid APPEND parameters.	CWE-20 Improper Input Validation	CVE-2013-2111	2024-11-21 10:51	2014-05-27	Show	GitHub Exploit DB Packet Storm

291122	-	uplawski	creme_fraiche	The set_meta_data function in lib/cremefraiche.rb in the Creme Fraiche gem before 0.6.1 for Ruby allows remote attackers to execute arbitrary commands via shell metacharacters in the file name of an …	CWE-78 OS Command	CVE-2013-2090	2024-11-21 10:51	2014-05-27	Show	GitHub Exploit DB Packet Storm

291123	-	mail_on_update_project	mail_on_update	Cross-site request forgery (CSRF) vulnerability in the Mail On Update plugin before 5.2.0 for WordPress allows remote attackers to hijack the authentication of administrators for requests that change…	CWE-352 Origin Validation Error	CVE-2013-2107	2024-11-21 10:51	2014-05-23	Show	GitHub Exploit DB Packet Storm

291124	-	glpi-project	glpi	Multiple SQL injection vulnerabilities in GLPI before 0.83.9 allow remote attackers to execute arbitrary SQL commands via the (1) users_id_assign parameter to ajax/ticketassigninformation.php, (2) fi…	CWE-89 SQL Injection	CVE-2013-2226	2024-11-21 10:51	2014-05-15	Show	GitHub Exploit DB Packet Storm

291125	-	galleryproject	gallery	Multiple cross-site scripting (XSS) vulnerabilities in Gallery 3 before 3.0.7 allow remote attackers to inject arbitrary web script or HTML via the (1) movie title to modules/gallery/controllers/movi…	CWE-79 Cross-site Scripting	CVE-2013-2087	2024-11-21 10:51	2014-05-15	Show	GitHub Exploit DB Packet Storm

291126	-	apache	archiva	Cross-site scripting (XSS) vulnerability in Apache Archiva 1.2 through 1.2.2 and 1.3 before 1.3.8 allows remote attackers to inject arbitrary web script or HTML via unspecified parameters, related to…	CWE-79 Cross-site Scripting	CVE-2013-2187	2024-11-21 10:51	2014-04-22	Show	GitHub Exploit DB Packet Storm

291127	-	jonathan_leung	show_in_browser	The Show In Browser (show_in_browser) gem 0.0.3 for Ruby allows local users to inject arbitrary web script or HTML via a symlink attack on /tmp/browser.html.	CWE-59 Link Following	CVE-2013-2105	2024-11-21 10:51	2014-04-22	Show	GitHub Exploit DB Packet Storm

291128	-	redhat theforeman	network_satellite katello	The users controller in Katello 1.5.0-14 and earlier, and Red Hat Satellite, does not check authorization for the update_roles action, which allows remote authenticated users to gain privileges by se…	CWE-20 Improper Input Validation	CVE-2013-2143	2024-11-21 10:51	2014-04-17	Show	GitHub Exploit DB Packet Storm

291129	-	roberta_bramski	uploader	Multiple cross-site scripting (XSS) vulnerabilities in views/notify.php in the Uploader plugin 1.0.4 for WordPress allow remote attackers to inject arbitrary web script or HTML via the (1) notify or …	CWE-79 Cross-site Scripting	CVE-2013-2287	2024-11-21 10:51	2014-04-4	Show	GitHub Exploit DB Packet Storm

291130	-	jgaa	warftpd	Unspecified vulnerability in War FTP Daemon (warftpd) 1.82, when running as a Windows service, allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via unk…	NVD-CWE-noinfo	CVE-2013-2278	2024-11-21 10:51	2014-04-1	Show	GitHub Exploit DB Packet Storm