Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 6, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
215511 5.4 警告 7725 - Android 用 7725.com Three Kingdoms アプリケーションにおけるサーバになりすまされる脆弱性 CWE-310
暗号の問題 		CVE-2014-7428 2014-12-17 09:57 2014-09-3 Show GitHub Exploit DB Packet Storm
215512 5.4 警告 hunting trophy whitetails project - Android 用 Hunting Trophy Whitetails アプリケーションにおけるサーバになりすまされる脆弱性 CWE-310
暗号の問題 		CVE-2014-7427 2014-12-17 09:57 2014-09-3 Show GitHub Exploit DB Packet Storm
215513 5.4 警告 doodlegod - Android 用 Doodle Devil Free アプリケーションにおけるサーバになりすまされる脆弱性 CWE-310
暗号の問題 		CVE-2014-7425 2014-12-17 09:57 2014-09-3 Show GitHub Exploit DB Packet Storm
215514 5.4 警告 quranedu - Android 用 Quran Abu Bakr AshShatiri Free アプリケーションにおけるサーバになりすまされる脆弱性 CWE-310
暗号の問題 		CVE-2014-7424 2014-12-17 09:57 2014-09-3 Show GitHub Exploit DB Packet Storm
215515 5.4 警告 Magzter Inc. - Android 用 Youth Incorporated アプリケーションにおけるサーバになりすまされる脆弱性 CWE-310
暗号の問題 		CVE-2014-7423 2014-12-17 09:57 2014-09-3 Show GitHub Exploit DB Packet Storm
215516 5.4 警告 homerelectric - Android 用 HEA Mobile アプリケーションにおけるサーバになりすまされる脆弱性 CWE-310
暗号の問題 		CVE-2014-7422 2014-12-17 09:57 2014-09-3 Show GitHub Exploit DB Packet Storm
215517 5.4 警告 mytoursapp - Android 用 Revel in the Rideau Lakes アプリケーションにおけるサーバになりすまされる脆弱性 CWE-310
暗号の問題 		CVE-2014-7421 2014-12-17 09:57 2014-09-3 Show GitHub Exploit DB Packet Storm
215518 5.4 警告 Magzter Inc. - Android 用 Just Bureaucracy アプリケーションにおけるサーバになりすまされる脆弱性 CWE-310
暗号の問題 		CVE-2014-7420 2014-12-17 09:57 2014-09-3 Show GitHub Exploit DB Packet Storm
215519 5.4 警告 pokecreator - Android 用 PokeCreator Lite アプリケーションにおけるサーバになりすまされる脆弱性 CWE-310
暗号の問題 		CVE-2014-7419 2014-12-17 09:57 2014-09-3 Show GitHub Exploit DB Packet Storm
215520 5.4 警告 Magzter Inc. - Android 用 BBC Knowledge Magazine アプリケーションにおけるサーバになりすまされる脆弱性 CWE-310
暗号の問題 		CVE-2014-7418 2014-12-17 09:57 2014-09-3 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 7, 2026, 4:13 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
292511 - mozilla
fedoraproject
oracle
canonical
redhat
suse
opensuse 		firefox
seamonkey
fedora
solaris
ubuntu_linux
enterprise_linux_server
enterprise_linux_server_eus
enterprise_linux_workstation
enterprise_linux_server_aus
enterprise_linux_… 		Cross-site scripting (XSS) vulnerability in Mozilla Firefox before 26.0 and SeaMonkey before 2.23 makes it easier for remote attackers to inject arbitrary web script or HTML by leveraging a Same Orig… CWE-79
Cross-site Scripting 		CVE-2013-5612 2024-11-21 10:57 2013-12-12 Show GitHub Exploit DB Packet Storm
292512 9.8 CRITICAL
Network 		mozilla
fedoraproject
opensuse
suse
canonical
redhat 		firefox_esr
firefox
thunderbird
seamonkey
fedora
opensuse
suse_linux_enterprise_software_development_kit
suse_linux_enterprise_desktop
suse_linux_enterprise_server
ubuntu_l… 		Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 26.0, Firefox ESR 24.x before 24.2, Thunderbird before 24.2, and SeaMonkey before 2.23 allow remote attackers to c… NVD-CWE-noinfo
CVE-2013-5609 2024-11-21 10:57 2013-12-12 Show GitHub Exploit DB Packet Storm
292513 - adobe flash_player
air
air_sdk 		Adobe Flash Player before 11.7.700.257 and 11.8.x and 11.9.x before 11.9.900.170 on Windows and Mac OS X and before 11.2.202.332 on Linux, Adobe AIR before 3.9.0.1380, Adobe AIR SDK before 3.9.0.1380… CWE-94
Code Injection 		CVE-2013-5331 2024-11-21 10:57 2013-12-12 Show GitHub Exploit DB Packet Storm
292514 - ibm rational_requirements_composer
rational_quality_manager
rational_team_concert 		Cross-site scripting (XSS) vulnerability in the search implementation in IBM Rational Quality Manager (RQM) 2.0 through 2.0.1.1, 3.x before 3.0.1.6 iFix 1, and 4.x before 4.0.5, as used in Rational T… CWE-79
Cross-site Scripting 		CVE-2013-5404 2024-11-21 10:57 2013-12-11 Show GitHub Exploit DB Packet Storm
292515 - ibm forms_viewer Stack-based buffer overflow in IBM Forms Viewer 4.x before 4.0.0.3 and 8.x before 8.0.1.1 allows remote attackers to execute arbitrary code via an XFDL form with a long fontname value. CWE-119
Incorrect Access of Indexable Resource ('Range Error')  		CVE-2013-5447 2024-11-21 10:57 2013-12-10 Show GitHub Exploit DB Packet Storm
292516 - sharetronix sharetronix Multiple cross-site request forgery (CSRF) vulnerabilities in Sharetronix 3.1.1 allow remote attackers to hijack the authentication of administrators for requests that (1) change configuration settin… CWE-352
 Origin Validation Error 		CVE-2013-5355 2024-11-21 10:57 2013-12-10 Show GitHub Exploit DB Packet Storm
292517 - sharetronix sharetronix Multiple SQL injection vulnerabilities in Sharetronix 3.1.1 allow remote attackers to execute arbitrary SQL commands via the (1) fb_user_id or (2) tw_user_id parameter to signup. CWE-89
SQL Injection 		CVE-2013-5354 2024-11-21 10:57 2013-12-10 Show GitHub Exploit DB Packet Storm
292518 - ibm smartcloud_provisioning IBM SmartCloud Provisioning 2.1 before FP3 IF0001 allows remote authenticated users to modify virtual-system deployment via deployer.virtualsystems CLI commands, as demonstrated by a deletion using a… CWE-264
Permissions, Privileges, and Access Controls 		CVE-2013-5455 2024-11-21 10:57 2013-12-7 Show GitHub Exploit DB Packet Storm
292519 - rockmongo rockmongo Multiple cross-site scripting (XSS) vulnerabilities in the xn function in RockMongo 1.1.5 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) db parameter on the log… CWE-79
Cross-site Scripting 		CVE-2013-5108 2024-11-21 10:57 2013-12-6 Show GitHub Exploit DB Packet Storm
292520 - ibm filenet_content_manager Cross-site scripting (XSS) vulnerability in workingSet.jsp in IBM Eclipse Help System (IEHS), as used in the installable InfoCenter component in IBM FileNet Content Manager 4.5.1, 5.0.0, 5.1.0, and 5… CWE-79
Cross-site Scripting 		CVE-2013-5449 2024-11-21 10:57 2013-12-5 Show GitHub Exploit DB Packet Storm