Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 27, 2026, 2:01 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
216031 6.8 警告 Huawei - 複数の Huawei 製品におけるクロスサイトリクエストフォージェリの脆弱性 CWE-352
同一生成元ポリシー違反 		CVE-2014-5395 2014-11-25 16:18 2014-08-6 Show GitHub Exploit DB Packet Storm
216032 6.8 警告 オラクル - Oracle Database Server の JPublisher コンポーネントにおける機密性に影響のある脆弱性 CWE-200
情報漏えい 		CVE-2014-6477 2014-11-25 15:56 2014-11-6 Show GitHub Exploit DB Packet Storm
216033 5 警告 Wireshark - Wireshark の TN5250 ディセクタの epan/dissectors/packet-tn5250.c におけるサービス運用妨害 (DoS) の脆弱性 CWE-399
リソース管理の問題 		CVE-2014-8714 2014-11-25 15:50 2014-11-12 Show GitHub Exploit DB Packet Storm
216034 5 警告 Wireshark - Wireshark の NCP ディセクタの epan/dissectors/packet-ncp2222.inc におけるスタックベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2014-8713 2014-11-25 15:49 2014-11-12 Show GitHub Exploit DB Packet Storm
216035 5 警告 Wireshark - Wireshark の NCP ディセクタの epan/dissectors/packet-ncp2222.inc におけるサービス運用妨害 (DoS) の脆弱性 CWE-399
リソース管理の問題 		CVE-2014-8712 2014-11-25 15:49 2014-11-12 Show GitHub Exploit DB Packet Storm
216036 5 警告 Wireshark - Wireshark の AMQP ディセクタの epan/dissectors/packet-amqp.c における整数オーバーフローの脆弱性 CWE-189
数値処理の問題 		CVE-2014-8711 2014-11-25 15:48 2014-11-12 Show GitHub Exploit DB Packet Storm
216037 7.2 危険 アドバンテック株式会社 - Advantech WebAccess におけるスタックベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2014-8388 2014-11-25 15:43 2014-11-20 Show GitHub Exploit DB Packet Storm
216038 5 警告 シスコシステムズ - Cisco Unified Communications Manager IM and Presence Service におけるユーザアカウントを列挙される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2014-8000 2014-11-25 15:30 2014-11-19 Show GitHub Exploit DB Packet Storm
216039 4 警告 TIBCO Software - 複数の TIBCO Spotfire 製品の TIBCO Spotfire Web Player における重要な情報を取得される脆弱性 CWE-200
情報漏えい 		CVE-2014-7195 2014-11-25 14:50 2014-11-12 Show GitHub Exploit DB Packet Storm
216040 6.4 警告 TIBCO Software - 複数の TIBCO 製品における重要な情報を取得される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2014-7194 2014-11-25 14:49 2014-10-29 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 27, 2026, 4:52 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
292401 - apache
opensuse 		subversion
opensuse 		The mod_dav_svn Apache HTTPD server module in Subversion 1.6.x before 1.6.21 and 1.7.0 through 1.7.8 allows remote authenticated users to cause a denial of service (memory consumption) by (1) setting… CWE-119
Incorrect Access of Indexable Resource ('Range Error')  		CVE-2013-1845 2024-11-21 10:50 2013-05-2 Show GitHub Exploit DB Packet Storm
292402 - haxx
canonical 		curl
libcurl
ubuntu_linux 		The tailMatch function in cookie.c in cURL and libcurl before 7.30.0 does not properly match the path domain when sending cookies, which allows remote attackers to steal cookies via a matching suffix… CWE-200
Information Exposure 		CVE-2013-1944 2024-11-21 10:50 2013-04-30 Show GitHub Exploit DB Packet Storm
292403 - redhat
canonical
opensuse 		icedtea-web
ubuntu_linux
opensuse 		The IcedTea-Web plugin before 1.2.3 and 1.3.x before 1.3.2 allows remote attackers to execute arbitrary code via a crafted file that validates as both a GIF and a Java JAR file, aka "GIFAR." NVD-CWE-noinfo
CVE-2013-1927 2024-11-21 10:50 2013-04-30 Show GitHub Exploit DB Packet Storm
292404 - redhat
canonical
opensuse 		icedtea-web
ubuntu_linux
opensuse 		The IcedTea-Web plugin before 1.2.3 and 1.3.x before 1.3.2 uses the same class loader for applets with the same codebase path but from different domains, which allows remote attackers to obtain sensi… NVD-CWE-noinfo
CVE-2013-1926 2024-11-21 10:50 2013-04-30 Show GitHub Exploit DB Packet Storm
292405 - gnu glibc Stack-based buffer overflow in the getaddrinfo function in sysdeps/posix/getaddrinfo.c in GNU C Library (aka glibc or libc6) 2.17 and earlier allows remote attackers to cause a denial of service (cra… CWE-119
Incorrect Access of Indexable Resource ('Range Error')  		CVE-2013-1914 2024-11-21 10:50 2013-04-30 Show GitHub Exploit DB Packet Storm
292406 - linux
redhat 		linux_kernel
enterprise_linux
enterprise_mrg 		The ext4_orphan_del function in fs/ext4/namei.c in the Linux kernel before 3.7.3 does not properly handle orphan-list entries for non-journal filesystems, which allows physically proximate attackers … CWE-399
 Resource Management Errors 		CVE-2013-2015 2024-11-21 10:50 2013-04-29 Show GitHub Exploit DB Packet Storm
292407 - linux
redhat 		linux_kernel
enterprise_linux 		The do_video_set_spu_palette function in fs/compat_ioctl.c in the Linux kernel before 3.6.5 on unspecified architectures lacks a certain error check, which might allow local users to obtain sensitive… CWE-200
Information Exposure 		CVE-2013-1928 2024-11-21 10:50 2013-04-29 Show GitHub Exploit DB Packet Storm
292408 - xmlsoft libxml2 Multiple use-after-free vulnerabilities in libxml2 2.9.0 and possibly other versions might allow context-dependent attackers to cause a denial of service (crash) and possibly execute arbitrary code v… CWE-399
 Resource Management Errors 		CVE-2013-1969 2024-11-21 10:50 2013-04-26 Show GitHub Exploit DB Packet Storm
292409 - blinkwebeffects social-media-widget Social Media Widget (social-media-widget) plugin 4.0 for WordPress contains an externally introduced modification (Trojan Horse), which allows remote attackers to force the upload of arbitrary files. NVD-CWE-noinfo
CVE-2013-1949 2024-11-21 10:50 2013-04-26 Show GitHub Exploit DB Packet Storm
292410 - rob_westgeest md2pdf converter.rb in the md2pdf gem 0.0.1 for Ruby allows context-dependent attackers to execute arbitrary commands via shell metacharacters in a filename. NVD-CWE-noinfo
CVE-2013-1948 2024-11-21 10:50 2013-04-26 Show GitHub Exploit DB Packet Storm