Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 29, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
215831 5.4 警告 ocshield - Android 用 DataGard VPN + AV アプリケーションにおけるサーバになりすまされる脆弱性 CWE-310
暗号の問題 		CVE-2014-5801 2014-12-17 09:57 2014-09-3 Show GitHub Exploit DB Packet Storm
215832 5.4 警告 nonghyup - Android 用 smart.nhibzbanking アプリケーションにおけるサーバになりすまされる脆弱性 CWE-310
暗号の問題 		CVE-2014-5800 2014-12-17 09:57 2014-09-3 Show GitHub Exploit DB Packet Storm
215833 5.4 警告 nonghyup - Android 用 smart.card アプリケーションにおけるサーバになりすまされる脆弱性 CWE-310
暗号の問題 		CVE-2014-5799 2014-12-17 09:57 2014-09-3 Show GitHub Exploit DB Packet Storm
215834 5.4 警告 nonghyup - Android 用 smart.calculator アプリケーションにおけるサーバになりすまされる脆弱性 CWE-310
暗号の問題 		CVE-2014-5798 2014-12-17 09:57 2014-09-3 Show GitHub Exploit DB Packet Storm
215835 5.4 警告 nonghyup - Android 用 smart アプリケーションにおけるサーバになりすまされる脆弱性 CWE-310
暗号の問題 		CVE-2014-5797 2014-12-17 09:57 2014-09-3 Show GitHub Exploit DB Packet Storm
215836 5.4 警告 passion4profession - Android 用 Chest Workout アプリケーションにおけるサーバになりすまされる脆弱性 CWE-310
暗号の問題 		CVE-2014-5796 2014-12-17 09:57 2014-09-3 Show GitHub Exploit DB Packet Storm
215837 5.4 警告 passion4profession - Android 用 8 Minutes Abs Workout アプリケーションにおけるサーバになりすまされる脆弱性 CWE-310
暗号の問題 		CVE-2014-5794 2014-12-17 09:57 2014-09-3 Show GitHub Exploit DB Packet Storm
215838 5.4 警告 mobilecraft - Android 用 Bilgi Yarisi アプリケーションにおけるサーバになりすまされる脆弱性 CWE-310
暗号の問題 		CVE-2014-5793 2014-12-17 09:57 2014-09-3 Show GitHub Exploit DB Packet Storm
215839 5.4 警告 drecom - Android 用 Reign of Dragons: Build-Battle アプリケーションにおけるサーバになりすまされる脆弱性 CWE-310
暗号の問題 		CVE-2014-5792 2014-12-17 09:57 2014-09-3 Show GitHub Exploit DB Packet Storm
215840 5.4 警告 Daum Communications - Android 用 Daum Cloud アプリケーションにおけるサーバになりすまされる脆弱性 CWE-310
暗号の問題 		CVE-2014-5791 2014-12-17 09:57 2014-09-3 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 30, 2026, 4:16 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
292741 - gwos groundwork_monitor GroundWork Monitor Enterprise 6.7.0 performs authentication on the basis of the HTTP Referer header, which allows remote attackers to obtain administrative privileges or access files via a crafted he… CWE-264
Permissions, Privileges, and Access Controls 		CVE-2013-3499 2024-11-21 10:53 2013-05-8 Show GitHub Exploit DB Packet Storm
292742 - joomla joomla\! Cross-site scripting (XSS) vulnerability in the highlighter plugin in Joomla! 2.5.x before 2.5.10 and 3.0.x before 3.0.4 allows remote attackers to inject arbitrary web script or HTML via unspecified… CWE-79
Cross-site Scripting 		CVE-2013-3267 2024-11-21 10:53 2013-05-3 Show GitHub Exploit DB Packet Storm
292743 - joomla joomla\! plugins/system/remember/remember.php in Joomla! 2.5.x before 2.5.10 and 3.0.x before 3.0.4 does not properly handle an object obtained by unserializing a cookie, which allows remote authenticated use… CWE-20
 Improper Input Validation  		CVE-2013-3242 2024-11-21 10:53 2013-05-3 Show GitHub Exploit DB Packet Storm
292744 - freebsd freebsd The nfsrvd_readdir function in sys/fs/nfsserver/nfs_nfsdport.c in the new NFS server in FreeBSD 8.0 through 9.1-RELEASE-p3 does not verify that a READDIR request is for a directory node, which allows… CWE-20
 Improper Input Validation  		CVE-2013-3266 2024-11-21 10:53 2013-05-2 Show GitHub Exploit DB Packet Storm
292745 - vmware vcenter_server_appliance VMware vCenter Server 5.1 before Update 1, when anonymous LDAP binding for Active Directory is enabled, allows remote attackers to bypass authentication by providing a valid username in conjunction w… CWE-264
Permissions, Privileges, and Access Controls 		CVE-2013-3107 2024-11-21 10:53 2013-05-1 Show GitHub Exploit DB Packet Storm
292746 - linux linux_kernel Race condition in the smb_send_rqst function in fs/cifs/transport.c in the Linux kernel before 3.7.2 allows local users to cause a denial of service (NULL pointer dereference and OOPS) or possibly ha… CWE-362
Race Condition 		CVE-2013-3302 2024-11-21 10:53 2013-04-29 Show GitHub Exploit DB Packet Storm
292747 - linux
redhat
suse 		linux_kernel
enterprise_linux
enterprise_mrg
linux_enterprise_desktop
linux_enterprise_server
linux_enterprise_high_availability_extension 		The ftrace implementation in the Linux kernel before 3.8.8 allows local users to cause a denial of service (NULL pointer dereference and system crash) or possibly have unspecified other impact by lev… NVD-CWE-Other
CVE-2013-3301 2024-11-21 10:53 2013-04-29 Show GitHub Exploit DB Packet Storm
292748 - phpmyadmin phpmyadmin export.php (aka the export script) in phpMyAdmin 4.x before 4.0.0-rc3 overwrites global variables on the basis of the contents of the POST superglobal array, which allows remote authenticated users t… NVD-CWE-noinfo
CVE-2013-3241 2024-11-21 10:53 2013-04-26 Show GitHub Exploit DB Packet Storm
292749 - phpmyadmin phpmyadmin Directory traversal vulnerability in the Export feature in phpMyAdmin 4.x before 4.0.0-rc3 allows remote authenticated users to read arbitrary files or possibly have unspecified other impact via a pa… CWE-22
Path Traversal 		CVE-2013-3240 2024-11-21 10:53 2013-04-26 Show GitHub Exploit DB Packet Storm
292750 - phpmyadmin phpmyadmin phpMyAdmin 3.5.x before 3.5.8 and 4.x before 4.0.0-rc3, when a SaveDir directory is configured, allows remote authenticated users to execute arbitrary code by using a double extension in the filename… CWE-94
Code Injection 		CVE-2013-3239 2024-11-21 10:53 2013-04-26 Show GitHub Exploit DB Packet Storm