Vulnerability Search Top

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

Vulnerability Information Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":June 6, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
215231	5.4	警告	billgbennett	-	Android 用 Bill G. Bennett アプリケーションにおけるサーバになりすまされる脆弱性	CWE-310 暗号の問題	CVE-2014-7783	2014-12-17 09:57	2014-09-3	Show	GitHub Exploit DB Packet Storm

215232	5.4	警告	macedonia hacienda hotel project	-	Android 用 Macedonia Hacienda Hotel アプリケーションにおけるサーバになりすまされる脆弱性	CWE-310 暗号の問題	CVE-2014-7782	2014-12-17 09:57	2014-09-3	Show	GitHub Exploit DB Packet Storm

215233	5.4	警告	fallacystudios	-	Android 用 Marijuana Handbook Lite - Weed アプリケーションにおけるサーバになりすまされる脆弱性	CWE-310 暗号の問題	CVE-2014-7781	2014-12-17 09:57	2014-09-3	Show	GitHub Exploit DB Packet Storm

215234	5.4	警告	ienvisage	-	Android 用 Pakistan Cricket News アプリケーションにおけるサーバになりすまされる脆弱性	CWE-310 暗号の問題	CVE-2014-7780	2014-12-17 09:57	2014-09-3	Show	GitHub Exploit DB Packet Storm

215235	5.4	警告	kuran'in bilimsel mucizeleri project	-	Android 用 Kuran'in Bilimsel Mucizeleri アプリケーションにおけるサーバになりすまされる脆弱性	CWE-310 暗号の問題	CVE-2014-7779	2014-12-17 09:57	2014-09-3	Show	GitHub Exploit DB Packet Storm

215236	5.4	警告	Magzter Inc.	-	Android 用 Epc World アプリケーションにおけるサーバになりすまされる脆弱性	CWE-310 暗号の問題	CVE-2014-7778	2014-12-17 09:57	2014-09-3	Show	GitHub Exploit DB Packet Storm

215237	5.4	警告	Group Builder	-	Android 用 Slingshot Forum アプリケーションにおけるサーバになりすまされる脆弱性	CWE-310 暗号の問題	CVE-2014-7777	2014-12-17 09:57	2014-09-3	Show	GitHub Exploit DB Packet Storm

215238	5.4	警告	snaplion	-	Android 用 Kavita KS アプリケーションにおけるサーバになりすまされる脆弱性	CWE-310 暗号の問題	CVE-2014-7776	2014-12-17 09:57	2014-09-3	Show	GitHub Exploit DB Packet Storm

215239	5.4	警告	Magzter Inc.	-	Android 用 Champak - Hindi アプリケーションにおけるサーバになりすまされる脆弱性	CWE-310 暗号の問題	CVE-2014-7775	2014-12-17 09:57	2014-09-3	Show	GitHub Exploit DB Packet Storm

215240	5.4	警告	herbs & flowers dictionary project	-	Android 用 Herbs & Flowers Dictionary アプリケーションにおけるサーバになりすまされる脆弱性	CWE-310 暗号の問題	CVE-2014-7774	2014-12-17 09:57	2014-09-3	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:June 7, 2026, 4:13 a.m.

No	CVSS	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
293311	-	uclouvain	openjpeg	Multiple integer overflows in lib/openjp3d/jp3d.c in OpenJPEG before 1.5.2 allow remote attackers to have unspecified impact and vectors, which trigger a heap-based buffer overflow.	CWE-189 Numeric Errors	CVE-2013-4289	2024-11-21 10:55	2014-04-18	Show	GitHub Exploit DB Packet Storm

293312	-	hitmyserver	hms_testimonials	Multiple cross-site request forgery (CSRF) vulnerabilities in the HMS Testimonials plugin before 2.0.11 for WordPress allow remote attackers to hijack the authentication of administrators for request…	CWE-352 Origin Validation Error	CVE-2013-4240	2024-11-21 10:55	2014-04-3	Show	GitHub Exploit DB Packet Storm

293313	-	samba canonical	samba ubuntu_linux	Samba 3.x before 3.6.23, 4.0.x before 4.0.16, and 4.1.x before 4.1.6 does not enforce the password-guessing protection mechanism for all interfaces, which makes it easier for remote attackers to obta…	CWE-255 Credentials Management	CVE-2013-4496	2024-11-21 10:55	2014-03-14	Show	GitHub Exploit DB Packet Storm

293314	-	vicidial	vicidial	Multiple SQL injection vulnerabilities in the agent interface (agc/) in VICIDIAL dialer (aka Asterisk GUI client) 2.8-403a, 2.7, 2.7RC1, and earlier allow (1) remote attackers to execute arbitrary SQ…	CWE-89 SQL Injection	CVE-2013-4467	2024-11-21 10:55	2014-03-12	Show	GitHub Exploit DB Packet Storm

293315	-	php	xhprof	Cross-site scripting (XSS) vulnerability in XHProf before 0.9.4 allows remote attackers to inject arbitrary web script or HTML via the run parameter.	CWE-79 Cross-site Scripting	CVE-2013-4433	2024-11-21 10:55	2014-03-12	Show	GitHub Exploit DB Packet Storm

293316	-	schneems	wicked	Directory traversal vulnerability in controller/concerns/render_redirect.rb in the Wicked gem before 1.0.1 for Ruby allows remote attackers to read arbitrary files via a %2E%2E%2F (encoded dot dot sl…	CWE-22 Path Traversal	CVE-2013-4413	2024-11-21 10:55	2014-03-12	Show	GitHub Exploit DB Packet Storm

293317	-	plone	plone	mail_password.py in Plone 2.1 through 4.1, 4.2.x through 4.2.5, and 4.3.x through 4.3.1 allows remote authenticated users to bypass the prohibition on password changes via the forgotten password emai…	CWE-264 Permissions, Privileges, and Access Controls	CVE-2013-4198	2024-11-21 10:55	2014-03-12	Show	GitHub Exploit DB Packet Storm

293318	-	plone	plone	(1) cb_decode.py and (2) linkintegrity.py in Plone 2.1 through 4.1, 4.2.x through 4.2.5, and 4.3.x through 4.3.1 allow remote authenticated users to cause a denial of service (resource consumption) v…	CWE-20 Improper Input Validation	CVE-2013-4199	2024-11-21 10:55	2014-03-12	Show	GitHub Exploit DB Packet Storm

293319	-	plone	plone	member_portrait.py in Plone 2.1 through 4.1, 4.2.x through 4.2.5, and 4.3.x through 4.3.1 allows remote authenticated users to modify or delete portraits of other users via unspecified vectors.	CWE-20 Improper Input Validation	CVE-2013-4197	2024-11-21 10:55	2014-03-12	Show	GitHub Exploit DB Packet Storm

293320	-	plone	plone	Multiple open redirect vulnerabilities in (1) marmoset_patch.py, (2) publish.py, and (3) principiaredirect.py in Plone 2.1 through 4.1, 4.2.x through 4.2.5, and 4.3.x through 4.3.1 allow remote attac…	CWE-20 Improper Input Validation	CVE-2013-4195	2024-11-21 10:55	2014-03-12	Show	GitHub Exploit DB Packet Storm