Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 22, 2026, 2 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
215411 7.2 危険 アップル - Apple OS X の Apple Type Services の fontd における権限を取得される脆弱性 CWE-20
不適切な入力確認
CVE-2015-1133 2015-04-13 16:45 2015-04-8 Show GitHub Exploit DB Packet Storm
215412 10 危険 アップル - Apple OS X の Apple Type Services の fontd における権限を取得される脆弱性 CWE-20
不適切な入力確認
CVE-2015-1132 2015-04-13 16:45 2015-04-8 Show GitHub Exploit DB Packet Storm
215413 7.2 危険 アップル - Apple OS X の Apple Type Services の fontd における権限を取得される脆弱性 CWE-20
不適切な入力確認
CVE-2015-1131 2015-04-13 16:45 2015-04-8 Show GitHub Exploit DB Packet Storm
215414 7.2 危険 アップル - Apple OS X の Admin Framework の XPC の実装における認証を回避される脆弱性 CWE-Other
その他
CVE-2015-1130 2015-04-13 16:45 2015-04-8 Show GitHub Exploit DB Packet Storm
215415 5 警告 アップル - 複数の Apple 製品の libnetcore におけるサービス運用妨害 (DoS) の脆弱性 CWE-noinfo
情報不足
CVE-2015-1118 2015-04-13 16:34 2015-04-8 Show GitHub Exploit DB Packet Storm
215416 7.2 危険 アップル - 複数の Apple 製品の IOHIDFamily における任意のコードを実行される脆弱性 CWE-noinfo
情報不足
CVE-2015-1095 2015-04-13 16:34 2015-04-8 Show GitHub Exploit DB Packet Storm
215417 7.5 危険 アップル - Apple Xcode の Swift のシミュレータにおける整数オーバーフローの脆弱性 CWE-189
数値処理の問題
CVE-2015-1149 2015-04-13 16:24 2015-04-8 Show GitHub Exploit DB Packet Storm
215418 4.3 警告 アップル - Apple iOS および Apple Safari などで使用される WebKit における不正なリソースへのアクセスを誘発される脆弱性 CWE-20
不適切な入力確認
CVE-2015-1126 2015-04-13 16:16 2015-04-8 Show GitHub Exploit DB Packet Storm
215419 5 警告 アップル - Apple iOS およびその他のプラットフォームで使用される Apple Safari における重要な情報を取得される脆弱性 CWE-200
情報漏えい
CVE-2015-1112 2015-04-13 16:15 2015-04-8 Show GitHub Exploit DB Packet Storm
215420 4.3 警告 アップル - Apple iOS などで使用される Webkit のタッチイベントの実装におけるタップと意図しない Web リソースとの関連付けを誘発される脆弱性 CWE-Other
その他
CVE-2015-1125 2015-04-13 15:49 2015-04-8 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 22, 2026, 4 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
295221 - ddsn cm3_acora_content_management_system DDSN Interactive cm3 Acora CMS 6.0.6/1a, 6.0.2/1a, 5.5.7/12b, 5.5.0/1b-p1, and possibly other versions, does not include the HTTPOnly flag in a Set-Cookie header for an unspecified cookie, which make… CWE-200
Information Exposure
CVE-2013-4724 2024-11-21 10:56 2014-06-6 Show GitHub Exploit DB Packet Storm
295222 - radiothermostat ct50_firmware
ct50
ct80_firmware
ct80
Radio Thermostat CT80 And CT50 with firmware 1.4.64 and earlier does not restrict access to the API, which allows remote attackers to change the operation mode, wifi connection settings, temperature … CWE-264
Permissions, Privileges, and Access Controls
CVE-2013-4860 2024-11-21 10:56 2014-06-6 Show GitHub Exploit DB Packet Storm
295223 - squash square_squash The Square Squash allows remote attackers to execute arbitrary code via a YAML document in the (1) namespace parameter to the deobfuscation function or (2) sourcemap parameter to the sourcemap functi… CWE-94
Code Injection
CVE-2013-5036 2024-11-21 10:56 2014-05-27 Show GitHub Exploit DB Packet Storm
295224 - pcman\'s_ftp_server_project pcman\'s_ftp_server Buffer overflow in PCMan's FTP Server 2.0.7 allows remote attackers to execute arbitrary code via a long string in a USER command. CWE-119
Incorrect Access of Indexable Resource ('Range Error') 
CVE-2013-4730 2024-11-21 10:56 2014-05-15 Show GitHub Exploit DB Packet Storm
295225 - dlink dir-826l_wireless_n600_cloud_router_firmware
dir-826l_wireless_n600_cloud_router
dir-505l_shareport_mobile_companion_firmware
dir-505l_shareport_mobile_companion
D-Link DIR-505L SharePort Mobile Companion 1.01 and DIR-826L Wireless N600 Cloud Router 1.02 allows remote attackers to bypass authentication via a direct request when an authorized session is active. CWE-287
Improper Authentication
CVE-2013-4772 2024-11-21 10:56 2014-05-12 Show GitHub Exploit DB Packet Storm
295226 - broadcom symantec_critical_system_protection Symantec Critical System Protection (SCSP) before 5.2.9, when installed on an unpatched Windows Server 2003 R2 platform, allows remote attackers to bypass policy settings via unspecified vectors. CWE-264
Permissions, Privileges, and Access Controls
CVE-2013-5016 2024-11-21 10:56 2014-05-8 Show GitHub Exploit DB Packet Storm
295227 - ddsn cm3_acora_content_management_system Cross-site request forgery (CSRF) vulnerability in DDSN Interactive cm3 Acora CMS 6.0.6/1a, 6.0.2/1a, 5.5.7/12b, 5.5.0/1b-p1, and possibly other versions, allows remote attackers to hijack the authen… CWE-352
 Origin Validation Error
CVE-2013-4726 2024-11-21 10:56 2014-04-26 Show GitHub Exploit DB Packet Storm
295228 - ddsn cm3_acora_content_management_system Open redirect vulnerability in DDSN Interactive cm3 Acora CMS 6.0.6/1a, 6.0.2/1a, 5.5.7/12b, 5.5.0/1b-p1, and possibly other versions allows remote attackers to redirect users to arbitrary web sites … CWE-20
 Improper Input Validation 
CVE-2013-4723 2024-11-21 10:56 2014-04-26 Show GitHub Exploit DB Packet Storm
295229 - ddsn cm3_acora_content_management_system Multiple cross-site scripting (XSS) vulnerabilities in Admin/login/default.asp in DDSN Interactive cm3 Acora CMS 6.0.6/1a, 6.0.2/1a, 5.5.7/12b, 5.5.0/1b-p1, and possibly other versions allow remote a… CWE-79
Cross-site Scripting
CVE-2013-4722 2024-11-21 10:56 2014-04-26 Show GitHub Exploit DB Packet Storm
295230 - nullsoft winamp Stack-based buffer overflow in gen_jumpex.dll in Winamp before 5.64 Build 3418 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a package with a lo… CWE-119
Incorrect Access of Indexable Resource ('Range Error') 
CVE-2013-4694 2024-11-21 10:56 2014-04-17 Show GitHub Exploit DB Packet Storm