Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 27, 2026, 4 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
215601 5.4 警告 ucontrol - Android 用 uControl Smart Home Automation アプリケーションにおけるサーバになりすまされる脆弱性 CWE-310
暗号の問題 		CVE-2014-4892 2014-12-17 09:57 2014-09-3 Show GitHub Exploit DB Packet Storm
215602 5.4 警告 ctihub - Android 用 CT iHub アプリケーションにおけるサーバになりすまされる脆弱性 CWE-310
暗号の問題 		CVE-2014-4891 2014-12-17 09:57 2014-09-3 Show GitHub Exploit DB Packet Storm
215603 5.4 警告 Magzter Inc. - Android 用 Nano Digest アプリケーションにおけるサーバになりすまされる脆弱性 CWE-310
暗号の問題 		CVE-2014-4890 2014-12-17 09:57 2014-09-3 Show GitHub Exploit DB Packet Storm
215604 5.4 警告 diabetic diet guide project - Android 用 Diabetic Diet Guide アプリケーションにおけるサーバになりすまされる脆弱性 CWE-310
暗号の問題 		CVE-2014-4889 2014-12-17 09:57 2014-09-3 Show GitHub Exploit DB Packet Storm
215605 5.4 警告 tequilagames - Android 用 BattleFriends at Sea GOLD アプリケーションにおけるサーバになりすまされる脆弱性 CWE-310
暗号の問題 		CVE-2014-4888 2014-12-17 09:57 2014-09-3 Show GitHub Exploit DB Packet Storm
215606 5.4 警告 nobexrc - Android 用 Joint Radio Blues アプリケーションにおけるサーバになりすまされる脆弱性 CWE-310
暗号の問題 		CVE-2014-4887 2014-12-17 09:57 2014-09-3 Show GitHub Exploit DB Packet Storm
215607 5.4 警告 closeprotectionworld - Android 用 CPWORLD Close Protection World アプリケーションにおけるサーバになりすまされる脆弱性 CWE-310
暗号の問題 		CVE-2014-4885 2014-12-17 09:57 2014-09-3 Show GitHub Exploit DB Packet Storm
215608 5.4 警告 conrad hotel project - Android 用 Conrad Hotel アプリケーションにおけるサーバになりすまされる脆弱性 CWE-310
暗号の問題 		CVE-2014-4884 2014-12-17 09:57 2014-09-3 Show GitHub Exploit DB Packet Storm
215609 4.3 警告 LinPHA - LinPHA におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2014-7265 2014-12-16 17:07 2014-12-12 Show GitHub Exploit DB Packet Storm
215610 7.5 危険 ULTRAPOP.JP - i-HTTPD 付属「ファイルアップロード BBS」において任意のコマンドが実行される脆弱性 CWE-20
不適切な入力確認 		CVE-2014-7260 2014-12-16 17:06 2014-12-9 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 27, 2026, 4:52 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
293461 - ibm lotus_sametime The Enterprise Meeting Server in IBM Lotus Sametime 8.5.2 and 8.5.2.1 allows remote authenticated users to spoof the origin of shared links by leveraging meeting-attendance privileges. CWE-264
Permissions, Privileges, and Access Controls 		CVE-2013-0537 2024-11-21 10:47 2013-11-9 Show GitHub Exploit DB Packet Storm
293462 - f5 nginx The default configuration of nginx, possibly 1.3.13 and earlier, uses world-readable permissions for the (1) access.log and (2) error.log files, which allows local users to obtain sensitive informati… CWE-264
Permissions, Privileges, and Access Controls 		CVE-2013-0337 2024-11-21 10:47 2013-10-27 Show GitHub Exploit DB Packet Storm
293463 - ibm storwize_v7000_unified_software
storwize_v7000_unified 		IBM Storwize V7000 Unified 1.3.x and 1.4.x before 1.4.2.0 does not properly handle device files that are created with the NFS protocol but accessed with a non-NFS protocol, which allows remote authen… CWE-20
 Improper Input Validation  		CVE-2013-0500 2024-11-21 10:47 2013-10-17 Show GitHub Exploit DB Packet Storm
293464 - ibm infosphere_optim_data_growth_for_oracle_e-business_suite Cross-site request forgery (CSRF) vulnerability in the Optim E-Business Console in IBM Data Growth Solution for Oracle E-business Suite 6.0 through 9.1 allows remote authenticated users to hijack the… CWE-352
 Origin Validation Error 		CVE-2013-0580 2024-11-21 10:47 2013-10-10 Show GitHub Exploit DB Packet Storm
293465 - ibm infosphere_optim_data_growth_for_oracle_e-business_suite The Optim E-Business Console in IBM Data Growth Solution for Oracle E-business Suite 6.0 through 9.1 allows remote attackers to impersonate arbitrary users by leveraging access to a legitimate user's… CWE-264
Permissions, Privileges, and Access Controls 		CVE-2013-0579 2024-11-21 10:47 2013-10-10 Show GitHub Exploit DB Packet Storm
293466 - ibm infosphere_optim_data_growth_for_oracle_e-business_suite The Optim E-Business Console in IBM Data Growth Solution for Oracle E-business Suite 6.0 through 9.1 allows remote authenticated users to bypass intended access restrictions and create, modify, or de… CWE-264
Permissions, Privileges, and Access Controls 		CVE-2013-0577 2024-11-21 10:47 2013-10-10 Show GitHub Exploit DB Packet Storm
293467 - ibm maximo_asset_management SQL injection vulnerability in IBM Maximo Asset Management 6.2 through 6.2.8 and 7.1 through 7.1.1.12 allows remote authenticated users to execute arbitrary SQL commands via unspecified vectors. CWE-89
SQL Injection 		CVE-2013-0451 2024-11-21 10:47 2013-10-1 Show GitHub Exploit DB Packet Storm
293468 - libarchive
canonical
opensuse
fedoraproject
freebsd 		libarchive
ubuntu_linux
opensuse
fedora
freebsd 		Integer signedness error in the archive_write_zip_data function in archive_write_set_format_zip.c in libarchive 3.1.2 and earlier, when running on 64-bit machines, allows context-dependent attackers … CWE-189
Numeric Errors 		CVE-2013-0211 2024-11-21 10:47 2013-10-1 Show GitHub Exploit DB Packet Storm
293469 - ibm rational_clearquest Cross-site request forgery (CSRF) vulnerability in the Web Client in IBM Rational ClearQuest 7.1 before 7.1.2.12, 8.0 before 8.0.0.8, and 8.0.1 before 8.0.1.1 allows remote attackers to hijack the au… CWE-352
 Origin Validation Error 		CVE-2013-0598 2024-11-21 10:47 2013-09-28 Show GitHub Exploit DB Packet Storm
293470 - ibm websphere_application_server Cross-site scripting (XSS) vulnerability in the Administrative console in IBM WebSphere Application Server (WAS) 6.1 before 6.1.0.47 allows remote attackers to inject arbitrary web script or HTML via… CWE-79
Cross-site Scripting 		CVE-2013-0596 2024-11-21 10:47 2013-09-21 Show GitHub Exploit DB Packet Storm