Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 8, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
215451 4 警告 NetIQ - NetIQ Access Manager の管理コンソールサーバの iManager の nps/servlet/webacc における任意のファイルを読まれる脆弱性 CWE-Other
その他 		CVE-2014-5214 2014-12-24 18:42 2014-07-1 Show GitHub Exploit DB Packet Storm
215452 3.5 注意 IBM - IBM InfoSphere Master Data Management Server for Product Information Management および InfoSphere Master Data Management - Collaborative Edition の Collaboration Server におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2014-8899 2014-12-24 18:17 2014-12-12 Show GitHub Exploit DB Packet Storm
215453 3.5 注意 IBM - IBM InfoSphere Master Data Management Server for Product Information Management および InfoSphere Master Data Management - Collaborative Edition の Collaboration Server におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2014-8898 2014-12-24 18:17 2014-12-12 Show GitHub Exploit DB Packet Storm
215454 3.5 注意 IBM - IBM InfoSphere Master Data Management Server for Product Information Management および InfoSphere Master Data Management - Collaborative Edition の Collaboration Server におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2014-8897 2014-12-24 18:17 2014-12-12 Show GitHub Exploit DB Packet Storm
215455 4 警告 IBM - IBM InfoSphere Master Data Management Server for Product Information Management および InfoSphere Master Data Management - Collaborative Edition の Collaboration Server における管理者の認証情報を変更される脆弱性 CWE-287
不適切な認証 		CVE-2014-8896 2014-12-24 18:16 2014-12-12 Show GitHub Exploit DB Packet Storm
215456 5 警告 シスコシステムズ - Cisco Enterprise Content Delivery System におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2014-8019 2014-12-24 18:14 2014-12-22 Show GitHub Exploit DB Packet Storm
215457 4 警告 シスコシステムズ - Cisco Prime Infrastructure における device-discovery パスワードを読まれる脆弱性 CWE-200
情報漏えい 		CVE-2014-8007 2014-12-24 18:14 2014-12-22 Show GitHub Exploit DB Packet Storm
215458 4.3 警告 シスコシステムズ - Cisco Adaptive Security Appliance ソフトウェアの syslog-management サブシステムにおける管理者パスワードを取得される脆弱性 CWE-200
情報漏えい 		CVE-2014-3410 2014-12-24 18:13 2014-12-23 Show GitHub Exploit DB Packet Storm
215459 6.8 警告 横河電機株式会社 - CENTUM および Exaopc において任意のファイルにアクセス可能な脆弱性 CWE-Other
その他 		CVE-2014-5208 2014-12-24 17:59 2014-09-17 Show GitHub Exploit DB Packet Storm
215460 5.5 警告 IBM - IBM Security AppScan Enterprise における任意のフォルダに書き込まれる脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2014-6122 2014-12-24 17:55 2014-12-17 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 8, 2026, 4:09 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
292561 - ibm websphere_portal Cross-site scripting (XSS) vulnerability in IBM WebSphere Portal 7.x before 7.0.0.2 CF25 and 8.x before 8.0.0.1 CF8 allows remote authenticated users to inject arbitrary web script or HTML by leverag… CWE-79
Cross-site Scripting 		CVE-2013-5379 2024-11-21 10:57 2013-11-14 Show GitHub Exploit DB Packet Storm
292562 - ibm websphere_portal Cross-site scripting (XSS) vulnerability in IBM WebSphere Portal 8.x before 8.0.0.1 CF8 allows remote authenticated users to inject arbitrary web script or HTML by leveraging incorrect IBM Connection… CWE-79
Cross-site Scripting 		CVE-2013-5378 2024-11-21 10:57 2013-11-14 Show GitHub Exploit DB Packet Storm
292563 - adobe flash_player
air
air_sdk 		Adobe Flash Player before 11.7.700.252 and 11.8.x and 11.9.x before 11.9.900.152 on Windows and Mac OS X and before 11.2.202.327 on Linux, Adobe AIR before 3.9.0.1210, Adobe AIR SDK before 3.9.0.1210… CWE-119
Incorrect Access of Indexable Resource ('Range Error')  		CVE-2013-5330 2024-11-21 10:57 2013-11-13 Show GitHub Exploit DB Packet Storm
292564 - adobe flash_player
air
air_sdk 		Adobe Flash Player before 11.7.700.252 and 11.8.x and 11.9.x before 11.9.900.152 on Windows and Mac OS X and before 11.2.202.327 on Linux, Adobe AIR before 3.9.0.1210, Adobe AIR SDK before 3.9.0.1210… CWE-119
Incorrect Access of Indexable Resource ('Range Error')  		CVE-2013-5329 2024-11-21 10:57 2013-11-13 Show GitHub Exploit DB Packet Storm
292565 - adobe coldfusion Adobe ColdFusion 10 before Update 12 allows remote attackers to read arbitrary files via unspecified vectors. CWE-264
Permissions, Privileges, and Access Controls 		CVE-2013-5328 2024-11-21 10:57 2013-11-13 Show GitHub Exploit DB Packet Storm
292566 - adobe coldfusion Cross-site scripting (XSS) vulnerability in Adobe ColdFusion 9.0 before Update 12, 9.0.1 before Update 11, 9.0.2 before Update 6, and 10 before Update 12, when the CFIDE directory is available, allow… CWE-79
Cross-site Scripting 		CVE-2013-5326 2024-11-21 10:57 2013-11-13 Show GitHub Exploit DB Packet Storm
292567 - cisco nx-os Cisco NX-OS 5.0 and earlier on MDS 9000 devices allows remote attackers to cause a denial of service (supervisor CPU consumption) via Authentication Header (AH) authentication in a Virtual Router Red… CWE-119
Incorrect Access of Indexable Resource ('Range Error')  		CVE-2013-5566 2024-11-21 10:57 2013-11-8 Show GitHub Exploit DB Packet Storm
292568 - cisco ios_xr The OSPFv3 functionality in Cisco IOS XR 5.1 allows remote attackers to cause a denial of service (process crash) via a malformed LSA Type-1 packet, aka Bug ID CSCuj82176. CWE-119
Incorrect Access of Indexable Resource ('Range Error')  		CVE-2013-5565 2024-11-21 10:57 2013-11-8 Show GitHub Exploit DB Packet Storm
292569 - cisco telepresence_vx_clinical_assistant The WIL-A module in Cisco TelePresence VX Clinical Assistant 1.2 before 1.21 changes the admin password to an empty password upon a reboot, which makes it easier for remote attackers to obtain access… CWE-255
Credentials Management 		CVE-2013-5558 2024-11-21 10:57 2013-11-8 Show GitHub Exploit DB Packet Storm
292570 - cisco wide_area_application_services_mobile Directory traversal vulnerability in the web-management interface in the server in Cisco Wide Area Application Services (WAAS) Mobile before 3.5.5 allows remote attackers to upload and execute arbitr… CWE-22
Path Traversal 		CVE-2013-5554 2024-11-21 10:57 2013-11-8 Show GitHub Exploit DB Packet Storm