Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 31, 2026, 4 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
215741 5.4 警告 parallelmafia - Android 用 Parallel Mafia MMORPG アプリケーションにおけるサーバになりすまされる脆弱性 CWE-310
暗号の問題
CVE-2014-5897 2014-12-17 09:57 2014-09-3 Show GitHub Exploit DB Packet Storm
215742 5.4 警告 seawolftech - Android 用 GlobalTalk- free phone calls アプリケーションにおけるサーバになりすまされる脆弱性 CWE-310
暗号の問題
CVE-2014-5896 2014-12-17 09:57 2014-09-3 Show GitHub Exploit DB Packet Storm
215743 5.4 警告 shopyourway - Android 用 ShopYourWay アプリケーションにおけるサーバになりすまされる脆弱性 CWE-310
暗号の問題
CVE-2014-5895 2014-12-17 09:57 2014-09-3 Show GitHub Exploit DB Packet Storm
215744 5.4 警告 pingshow - Android 用 AireTalk: Text, Call, & More! アプリケーションにおけるサーバになりすまされる脆弱性 CWE-310
暗号の問題
CVE-2014-5894 2014-12-17 09:57 2014-09-3 Show GitHub Exploit DB Packet Storm
215745 5.4 警告 shinsegaemall - Android 用 froyo アプリケーションにおけるサーバになりすまされる脆弱性 CWE-310
暗号の問題
CVE-2014-5893 2014-12-17 09:57 2014-09-3 Show GitHub Exploit DB Packet Storm
215746 5.4 警告 olleh - Android 用 greenbill アプリケーションにおけるサーバになりすまされる脆弱性 CWE-310
暗号の問題
CVE-2014-5892 2014-12-17 09:57 2014-09-3 Show GitHub Exploit DB Packet Storm
215747 5.4 警告 snipsnap - Android 用 SnipSnap Coupon App アプリケーションにおけるサーバになりすまされる脆弱性 CWE-310
暗号の問題
CVE-2014-5891 2014-12-17 09:57 2014-09-3 Show GitHub Exploit DB Packet Storm
215748 5.4 警告 sports2i - Android 用 KBO sports2i 2014 アプリケーションにおけるサーバになりすまされる脆弱性 CWE-310
暗号の問題
CVE-2014-5890 2014-12-17 09:57 2014-09-3 Show GitHub Exploit DB Packet Storm
215749 5.4 警告 androidforums - Android 用 Android Forums アプリケーションにおけるサーバになりすまされる脆弱性 CWE-310
暗号の問題
CVE-2014-5889 2014-12-17 09:57 2014-09-3 Show GitHub Exploit DB Packet Storm
215750 5.4 警告 bibleslots - Android 用 SLOTS: Bible Slots Free アプリケーションにおけるサーバになりすまされる脆弱性 CWE-310
暗号の問題
CVE-2014-5888 2014-12-17 09:57 2014-09-3 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 31, 2026, 4:16 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
292491 - trendnet tew-812dru_firmware
tew-812dru
Multiple cross-site request forgery (CSRF) vulnerabilities in TRENDnet TEW-812DRU router with firmware before 1.0.9.0 allow remote attackers to hijack the authentication of administrators for request… CWE-352
 Origin Validation Error
CVE-2013-3098 2024-11-21 10:53 2014-02-5 Show GitHub Exploit DB Packet Storm
292492 - dell powerconnect_3524p
powerconnect_3348
powerconnect_5324
The login page in the GoAhead web server on Dell PowerConnect 3348 1.2.1.3, 3524p 2.0.0.48, and 5324 2.0.1.4 switches allows remote attackers to cause a denial of service (device outage) via a long u… CWE-20
 Improper Input Validation 
CVE-2013-3606 2024-11-21 10:53 2014-01-20 Show GitHub Exploit DB Packet Storm
292493 - dell powerconnect_3524p
powerconnect_3348
powerconnect_5324
The OpenManage web application 2.5 build 1.19 on Dell PowerConnect 3348 1.2.1.3, 3524p 2.0.0.48, and 5324 2.0.1.4 switches allows remote authenticated users to cause a denial of service (device reset… CWE-20
 Improper Input Validation 
CVE-2013-3595 2024-11-21 10:53 2014-01-20 Show GitHub Exploit DB Packet Storm
292494 - dell powerconnect_3524p
powerconnect_3348
powerconnect_5324
The SSH service on Dell PowerConnect 3348 1.2.1.3, 3524p 2.0.0.48, and 5324 2.0.1.4 switches allows remote attackers to cause a denial of service (device reset) or possibly execute arbitrary code by … CWE-20
 Improper Input Validation 
CVE-2013-3594 2024-11-21 10:53 2014-01-20 Show GitHub Exploit DB Packet Storm
292495 - hexagon erdas_er_viewer Stack-based buffer overflow in ermapper_u.dll in Intergraph ERDAS ER Viewer before 13.0.1.1301 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a… CWE-119
Incorrect Access of Indexable Resource ('Range Error') 
CVE-2013-3483 2024-11-21 10:53 2014-01-20 Show GitHub Exploit DB Packet Storm
292496 - hexagon erdas_er_viewer Stack-based buffer overflow in the rf_report_error function in ermapper_u.dll in Intergraph ERDAS ER Viewer before 13.0.1.1301 allows remote attackers to execute arbitrary code or cause a denial of s… CWE-119
Incorrect Access of Indexable Resource ('Range Error') 
CVE-2013-3482 2024-11-21 10:53 2014-01-20 Show GitHub Exploit DB Packet Storm
292497 - ui unifi Cross-site scripting (XSS) vulnerability in the administer interface in the UniFi Controller in Ubiquiti Networks UniFi 2.3.5 and earlier allows remote attackers to inject arbitrary web script or HTM… CWE-79
Cross-site Scripting
CVE-2013-3572 2024-11-21 10:53 2014-01-1 Show GitHub Exploit DB Packet Storm
292498 - microsoft internet_explorer Use-after-free vulnerability in Microsoft Internet Explorer 9 allows remote attackers to execute arbitrary code via a crafted web site that triggers access to a deleted CMarkup object, aka "Internet … CWE-399
 Resource Management Errors
CVE-2013-3140 2024-11-21 10:53 2013-12-17 Show GitHub Exploit DB Packet Storm
292499 - vmware esxi
workstation
esx
player
fusion
lgtosync.sys in VMware Workstation 9.x before 9.0.3, VMware Player 5.x before 5.0.3, VMware Fusion 5.x before 5.0.4, VMware ESXi 4.0 through 5.1, and VMware ESX 4.0 and 4.1, when a 32-bit Windows gue… CWE-264
Permissions, Privileges, and Access Controls
CVE-2013-3519 2024-11-21 10:53 2013-12-5 Show GitHub Exploit DB Packet Storm
292500 - cisco prime_network_registrar Cross-site scripting (XSS) vulnerability in the web interface in Cisco Prime Network Registrar 8.1 and earlier allows remote attackers to inject arbitrary web script or HTML via a crafted field, aka … CWE-79
Cross-site Scripting
CVE-2013-3394 2024-11-21 10:53 2013-11-27 Show GitHub Exploit DB Packet Storm