Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 6, 2026, 6 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
215221 5.4 警告 itp - Android 用 Harpers Bazaar Art アプリケーションにおけるサーバになりすまされる脆弱性 CWE-310
暗号の問題
CVE-2014-7795 2014-12-17 09:57 2014-09-3 Show GitHub Exploit DB Packet Storm
215222 5.4 警告 narr8 - Android 用 Knights of the Void アプリケーションにおけるサーバになりすまされる脆弱性 CWE-310
暗号の問題
CVE-2014-7794 2014-12-17 09:57 2014-09-3 Show GitHub Exploit DB Packet Storm
215223 5.4 警告 cb - calciatori brutti project - Android 用 CB - Calciatori Brutti アプリケーションにおけるサーバになりすまされる脆弱性 CWE-310
暗号の問題
CVE-2014-7793 2014-12-17 09:57 2014-09-3 Show GitHub Exploit DB Packet Storm
215224 5.4 警告 appsgeyser - Android 用 Backyard Wrestling アプリケーションにおけるサーバになりすまされる脆弱性 CWE-310
暗号の問題
CVE-2014-7791 2014-12-17 09:57 2014-09-3 Show GitHub Exploit DB Packet Storm
215225 5.4 警告 zillionmuslims - Android 用 Zillion Muslims アプリケーションにおけるサーバになりすまされる脆弱性 CWE-310
暗号の問題
CVE-2014-7789 2014-12-17 09:57 2014-09-3 Show GitHub Exploit DB Packet Storm
215226 5.4 警告 best free giveaways project - Android 用 Best Free Giveaways アプリケーションにおけるサーバになりすまされる脆弱性 CWE-310
暗号の問題
CVE-2014-7788 2014-12-17 09:57 2014-09-3 Show GitHub Exploit DB Packet Storm
215227 5.4 警告 synapse - Android 用 iShuttle アプリケーションにおけるサーバになりすまされる脆弱性 CWE-310
暗号の問題
CVE-2014-7787 2014-12-17 09:57 2014-09-3 Show GitHub Exploit DB Packet Storm
215228 5.4 警告 Magzter Inc. - Android 用 English Football Magazine アプリケーションにおけるサーバになりすまされる脆弱性 CWE-310
暗号の問題
CVE-2014-7786 2014-12-17 09:57 2014-09-3 Show GitHub Exploit DB Packet Storm
215229 5.4 警告 onesolutionapps - Android 用 AAAA Discount Bail アプリケーションにおけるサーバになりすまされる脆弱性 CWE-310
暗号の問題
CVE-2014-7785 2014-12-17 09:57 2014-09-3 Show GitHub Exploit DB Packet Storm
215230 5.4 警告 Magzter Inc. - Android 用 Schon! Magazine アプリケーションにおけるサーバになりすまされる脆弱性 CWE-310
暗号の問題
CVE-2014-7784 2014-12-17 09:57 2014-09-3 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 7, 2026, 4:13 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
293291 - gitlab gitlab
gitlab-shell
The repository import feature in gitlab-shell before 1.7.4, as used in GitLab, allows remote authenticated users to execute arbitrary commands via the import URL. NVD-CWE-Other
CVE-2013-4546 2024-11-21 10:55 2014-05-14 Show GitHub Exploit DB Packet Storm
293292 - monster_menus_module_project monster_menus The Monster Menus module 7.x-1.x before 7.x-1.15 allows remote attackers to read arbitrary node comments via a crafted URL. CWE-264
Permissions, Privileges, and Access Controls
CVE-2013-4504 2024-11-21 10:55 2014-05-14 Show GitHub Exploit DB Packet Storm
293293 - feed_element_mapper_project feed_element_mapper Cross-site scripting (XSS) vulnerability in the Feed Element Mapper module for Drupal allows remote authenticated users with the "administer taxonomy" permission to inject arbitrary web script or HTM… CWE-79
Cross-site Scripting
CVE-2013-4503 2024-11-21 10:55 2014-05-14 Show GitHub Exploit DB Packet Storm
293294 - nathan_haug filefield_sources The FileField Sources module 6.x-1.x before 6.x-1.9 and 7.x-1.x before 7.x-1.9 for Drupal does not properly check file permissions, which allows remote authenticated users to read arbitrary files by … CWE-264
Permissions, Privileges, and Access Controls
CVE-2013-4502 2024-11-21 10:55 2014-05-14 Show GitHub Exploit DB Packet Storm
293295 - quiz_module_project quiz The default views in the Quiz module 6.x-4.x before 6.x-4.5 for Drupal allows remote attackers to obtain sensitive quiz results via unspecified vectors. CWE-264
Permissions, Privileges, and Access Controls
CVE-2013-4501 2024-11-21 10:55 2014-05-14 Show GitHub Exploit DB Packet Storm
293296 - quiz_module_project quiz The Quiz module 6.x-4.x before 6.x-4.5 for Drupal allows remote authenticated users with the "view any quiz results" or "view results for own quiz" permission to delete arbitrary results via the dele… CWE-264
Permissions, Privileges, and Access Controls
CVE-2013-4500 2024-11-21 10:55 2014-05-14 Show GitHub Exploit DB Packet Storm
293297 - gitlab gitlab
gitlab-shell
The SSH key upload feature (lib/gitlab_keys.rb) in gitlab-shell before 1.7.3, as used in GitLab 5.0 before 5.4.1 and 6.x before 6.2.3, allows remote authenticated users to execute arbitrary commands … NVD-CWE-Other
CVE-2013-4490 2024-11-21 10:55 2014-05-14 Show GitHub Exploit DB Packet Storm
293298 - gitlab gitlab
gitlab-shell
GitLab 5.0 before 5.4.2, Community Edition before 6.2.4, Enterprise Edition before 6.2.1 and gitlab-shell before 1.7.8 allows remote attackers to execute arbitrary code via a crafted change using SSH. CWE-94
Code Injection
CVE-2013-4581 2024-11-21 10:55 2014-05-12 Show GitHub Exploit DB Packet Storm
293299 - gitlab gitlab GitLab before 5.4.2, Community Edition before 6.2.4, and Enterprise Edition before 6.2.1, when using a MySQL backend, allows remote attackers to impersonate arbitrary users and bypass authentication … CWE-287
Improper Authentication
CVE-2013-4580 2024-11-21 10:55 2014-05-12 Show GitHub Exploit DB Packet Storm
293300 - gnu grub A certain Debian patch for GNU GRUB uses world-readable permissions for grub.cfg, which allows local users to obtain password hashes, as demonstrated by reading the password_pbkdf2 directive in the f… CWE-264
Permissions, Privileges, and Access Controls
CVE-2013-4577 2024-11-21 10:55 2014-05-12 Show GitHub Exploit DB Packet Storm