Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 23, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
216021 4.3 警告 Star Host Design, LLC - phpMoneyBooks の index.php におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2012-1669 2014-11-19 12:20 2012-03-16 Show GitHub Exploit DB Packet Storm
216022 6.8 警告 Php Scriptlerim. - Php Scriptlerim Who's Who スクリプトにおけるクロスサイトリクエストフォージェリの脆弱性 CWE-352
同一生成元ポリシー違反 		CVE-2014-8953 2014-11-19 12:13 2014-10-30 Show GitHub Exploit DB Packet Storm
216023 4.3 警告 Meg Nicholas - WordPress 用 Contact Form Clean and Simple プラグインにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2014-8955 2014-11-19 11:37 2014-11-4 Show GitHub Exploit DB Packet Storm
216024 6 警告 iMember360 - WordPress 用 iMember360 プラグインにおける任意のコマンドを実行される脆弱性 CWE-94
コード・インジェクション 		CVE-2014-8949 2014-11-19 11:37 2014-04-24 Show GitHub Exploit DB Packet Storm
216025 4.3 警告 Pricop - phpSound におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2014-8954 2014-11-19 11:25 2014-08-10 Show GitHub Exploit DB Packet Storm
216026 4.3 警告 phpMemcachedAdmin project - phpMemcachedAdmin におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2014-8732 2014-11-19 11:15 2014-11-12 Show GitHub Exploit DB Packet Storm
216027 6.2 警告 F5 Networks - F5 BIG-IP におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2014-8727 2014-11-19 10:58 2014-09-16 Show GitHub Exploit DB Packet Storm
216028 7.5 危険 PHP-Fusion - PHP-Fusion における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2014-8596 2014-11-19 10:35 2014-08-6 Show GitHub Exploit DB Packet Storm
216029 6.5 警告 Zoho Corporation - ManageEngine Password Manager Pro および Password Manager Pro Managed Service Providers における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2014-8499 2014-11-18 19:25 2014-11-8 Show GitHub Exploit DB Packet Storm
216030 6.5 警告 Zoho Corporation - ManageEngine Password Manager Pro および Password Manager Pro Managed Service Providers の BulkEditSearchResult.cc における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2014-8498 2014-11-18 19:24 2014-11-8 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 23, 2026, 4:08 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
292611 - apple iphone_os
tvos 		The IOUSBDeviceFamily driver in the USB implementation in the kernel in Apple iOS before 6.1.3 and Apple TV before 5.2.1 accesses pipe object pointers that originated in userspace, which allows local… NVD-CWE-noinfo
CVE-2013-0981 2024-11-21 10:48 2013-03-20 Show GitHub Exploit DB Packet Storm
292612 - apple iphone_os The Passcode Lock implementation in Apple iOS before 6.1.3 does not properly manage the lock state, which allows physically proximate attackers to bypass an intended passcode requirement by leveragin… CWE-264
Permissions, Privileges, and Access Controls 		CVE-2013-0980 2024-11-21 10:48 2013-03-20 Show GitHub Exploit DB Packet Storm
292613 - apple iphone_os lockdownd in Lockdown in Apple iOS before 6.1.3 does not properly consider file types during the permission-setting step of a backup restoration, which allows local users to change the permissions of… CWE-264
Permissions, Privileges, and Access Controls 		CVE-2013-0979 2024-11-21 10:48 2013-03-20 Show GitHub Exploit DB Packet Storm
292614 - apple iphone_os
tvos 		The ARM prefetch abort handler in the kernel in Apple iOS before 6.1.3 and Apple TV before 5.2.1 does not ensure that it has been invoked in an abort context, which makes it easier for local users to… CWE-200
Information Exposure 		CVE-2013-0978 2024-11-21 10:48 2013-03-20 Show GitHub Exploit DB Packet Storm
292615 - apple iphone_os
tvos 		dyld in Apple iOS before 6.1.3 and Apple TV before 5.2.1 does not properly manage the state of file loading for Mach-O executable files, which allows local users to bypass intended code-signing requi… NVD-CWE-noinfo
CVE-2013-0977 2024-11-21 10:48 2013-03-20 Show GitHub Exploit DB Packet Storm
292616 - nec atermwm3600r
atermwr8160n
atermwr9500n
atermwr8370n
atermwm3450rn
atermwr8600n 		Multiple cross-site request forgery (CSRF) vulnerabilities in the web-based management utility on the NEC AtermWR9500N, AtermWR8600N, AtermWR8370N, AtermWR8160N, AtermWM3600R, and AtermWM3450RN route… CWE-352
 Origin Validation Error 		CVE-2013-0717 2024-11-21 10:48 2013-03-20 Show GitHub Exploit DB Packet Storm
292617 - google chrome_os The GPU process in Google Chrome OS before 25.0.1364.173 allows attackers to cause a denial of service or possibly have unspecified other impact via vectors related to an "overflow." CWE-119
Incorrect Access of Indexable Resource ('Range Error')  		CVE-2013-0915 2024-11-21 10:48 2013-03-19 Show GitHub Exploit DB Packet Storm
292618 - linux
opensuse 		linux_kernel
opensuse 		Integer overflow in drivers/gpu/drm/i915/i915_gem_execbuffer.c in the i915 driver in the Direct Rendering Manager (DRM) subsystem in the Linux kernel through 3.8.3, as used in Google Chrome OS before… CWE-189
Numeric Errors 		CVE-2013-0913 2024-11-21 10:48 2013-03-19 Show GitHub Exploit DB Packet Storm
292619 - apple mac_os_x IOAcceleratorFamily in Apple Mac OS X before 10.8.3 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted graphics image. CWE-119
Incorrect Access of Indexable Resource ('Range Error')  		CVE-2013-0976 2024-11-21 10:48 2013-03-16 Show GitHub Exploit DB Packet Storm
292620 - apple mac_os_x
mac_os_x_server 		Software Update in Apple Mac OS X through 10.7.5 does not prevent plugin loading within the marketing-text WebView, which allows man-in-the-middle attackers to execute plugin code by modifying the cl… NVD-CWE-noinfo
CVE-2013-0973 2024-11-21 10:48 2013-03-16 Show GitHub Exploit DB Packet Storm