Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 1, 2026, 4:01 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
215721 5.4 警告 amberfog - Android 用 VK Amberfog アプリケーションにおけるサーバになりすまされる脆弱性 CWE-310
暗号の問題 		CVE-2014-5920 2014-12-17 09:57 2014-09-3 Show GitHub Exploit DB Packet Storm
215722 5.4 警告 surdoc - Android 用 SurDoc - 100GB+ FREE storage アプリケーションにおけるサーバになりすまされる脆弱性 CWE-310
暗号の問題 		CVE-2014-5919 2014-12-17 09:57 2014-09-3 Show GitHub Exploit DB Packet Storm
215723 5.4 警告 secretcircle - Android 用 Secret Circle - talk freely アプリケーションにおけるサーバになりすまされる脆弱性 CWE-310
暗号の問題 		CVE-2014-5918 2014-12-17 09:57 2014-09-3 Show GitHub Exploit DB Packet Storm
215724 5.4 警告 grassapper - Android 用 Slideshow 365 アプリケーションにおけるサーバになりすまされる脆弱性 CWE-310
暗号の問題 		CVE-2014-5917 2014-12-17 09:57 2014-09-3 Show GitHub Exploit DB Packet Storm
215725 5.4 警告 oi - Android 用 Minha Oi アプリケーションにおけるサーバになりすまされる脆弱性 CWE-310
暗号の問題 		CVE-2014-5916 2014-12-17 09:57 2014-09-3 Show GitHub Exploit DB Packet Storm
215726 5.4 警告 tigo - Android 用 Tigo Copa Mundial FIFA 2014 アプリケーションにおけるサーバになりすまされる脆弱性 CWE-310
暗号の問題 		CVE-2014-5915 2014-12-17 09:57 2014-09-3 Show GitHub Exploit DB Packet Storm
215727 5.4 警告 finansbank - Android 用 Finansbank Cep Subesi アプリケーションにおけるサーバになりすまされる脆弱性 CWE-310
暗号の問題 		CVE-2014-5914 2014-12-17 09:57 2014-09-3 Show GitHub Exploit DB Packet Storm
215728 5.4 警告 game-lion - Android 用 Allies in War アプリケーションにおけるサーバになりすまされる脆弱性 CWE-310
暗号の問題 		CVE-2014-5913 2014-12-17 09:57 2014-09-3 Show GitHub Exploit DB Packet Storm
215729 5.4 警告 IntSig Information - Android 用 InNote アプリケーションにおけるサーバになりすまされる脆弱性 CWE-310
暗号の問題 		CVE-2014-5912 2014-12-17 09:57 2014-09-3 Show GitHub Exploit DB Packet Storm
215730 5.4 警告 jellytap - Android 用 Free App Icons & Icon Packs アプリケーションにおけるサーバになりすまされる脆弱性 CWE-310
暗号の問題 		CVE-2014-5911 2014-12-17 09:57 2014-09-3 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 1, 2026, 4:12 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
292501 7.8 HIGH
Local 		xnview xnview Heap-based buffer overflow in xnview.exe in XnView before 2.03 allows remote attackers to execute arbitrary code via a crafted RLE compressed layer in an XCF file. CWE-787
 Out-of-bounds Write 		CVE-2013-3247 2024-11-21 10:53 2020-01-3 Show GitHub Exploit DB Packet Storm
292502 7.8 HIGH
Local 		xnview xnview Stack-based buffer overflow in xnview.exe in XnView before 2.03 allows remote attackers to execute arbitrary code via a crafted image layer in an XCF file. CWE-787
 Out-of-bounds Write 		CVE-2013-3246 2024-11-21 10:53 2020-01-3 Show GitHub Exploit DB Packet Storm
292503 8.1 HIGH
Network 		supermicro
citrix 		smt_x9_firmware
smt_x8_firmware
netscaler_sdx_firmware
netscaler_firmware
netscaler_sd-wan_firmware 		Intelligent Platform Management Interface (IPMI) with firmware for Supermicro X9 generation motherboards before SMT_X9_317 and firmware for Supermicro X8 generation motherboards before SMT X8 312 con… CWE-798
 Use of Hard-coded Credentials 		CVE-2013-3619 2024-11-21 10:53 2020-01-3 Show GitHub Exploit DB Packet Storm
292504 10.0 CRITICAL
Network 		grandstream gxv3501_firmware
gxv3504_firmware
gxv3601_firmware
gxv3601hd_firmware
gxv3601ll_firmware
gxv3611hd_firmware
gxv3611ll_firmware
gxv3615w_firmware
gxv3615p_firmware
gxv3651fh… 		Grandstream GXV3501, GXV3504, GXV3601, GXV3601HD/LL, GXV3611HD/LL, GXV3615W/P, GXV3651FHD, GXV3662HD, GXV3615WP_HD, GXV3500, and possibly other camera models with firmware 1.0.4.11, have a hardcoded … CWE-798
 Use of Hard-coded Credentials 		CVE-2013-3542 2024-11-21 10:53 2019-12-12 Show GitHub Exploit DB Packet Storm
292505 7.5 HIGH
Network 		loftek nexus_543_firmware The Loftek Nexus 543 IP Camera allows remote attackers to obtain (1) IP addresses via a request to get_realip.cgi or (2) firmware versions (ui and system), timestamp, serial number, p2p port number, … CWE-200
Information Exposure 		CVE-2013-3314 2024-11-21 10:53 2019-11-22 Show GitHub Exploit DB Packet Storm
292506 7.5 HIGH
Network 		loftek nexus_543_firmware The Loftek Nexus 543 IP Camera stores passwords in cleartext, which allows remote attackers to obtain sensitive information via an HTTP GET request to check_users.cgi. NOTE: cleartext passwords can a… CWE-522
 Insufficiently Protected Credentials 		CVE-2013-3313 2024-11-21 10:53 2019-11-22 Show GitHub Exploit DB Packet Storm
292507 8.8 HIGH
Network 		loftek nexus_543_firmware Multiple cross-site request forgery (CSRF) vulnerabilities in the Loftek Nexus 543 IP Camera allow remote attackers to hijack the authentication of unspecified victims for requests that change (1) pa… CWE-352
 Origin Validation Error 		CVE-2013-3312 2024-11-21 10:53 2019-11-22 Show GitHub Exploit DB Packet Storm
292508 7.5 HIGH
Network 		loftek nexus_543_firmware Directory traversal vulnerability in the Loftek Nexus 543 IP Camera allows remote attackers to read arbitrary files via a .. (dot dot) in the URL of an HTTP GET request. CWE-22
Path Traversal 		CVE-2013-3311 2024-11-21 10:53 2019-11-22 Show GitHub Exploit DB Packet Storm
292509 8.8 HIGH
Network 		trendnet tew-812dru_firmware Undocumented TELNET service in TRENDnet TEW-812DRU when a web page named backdoor contains an HTML parameter of password and a value of j78G¬DFdg_24Mhw3. CWE-352
 Origin Validation Error 		CVE-2013-3366 2024-11-21 10:53 2019-11-14 Show GitHub Exploit DB Packet Storm
292510 6.1 MEDIUM
Network 		actiontec mi424wr-gen3i_firmware Unspecified Cross-site scripting (XSS) vulnerability in the Verizon FIOS Actiontec MI424WR-GEN3I router. CWE-79
Cross-site Scripting 		CVE-2013-3097 2024-11-21 10:53 2019-11-14 Show GitHub Exploit DB Packet Storm