Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 23, 2026, noon

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
216111 7.1 危険 マイクロソフト - 複数の Microsoft Windows 製品のカーネルモードドライバの win32k.sys におけるサービス運用妨害 (DoS) の脆弱性 CWE-399
リソース管理の問題 		CVE-2014-6317 2014-11-13 16:55 2014-11-11 Show GitHub Exploit DB Packet Storm
216112 5 警告 マイクロソフト - Microsoft Active Directory フェデレーションサービスにおけるアクセス権を取得される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2014-6331 2014-11-13 16:50 2014-11-11 Show GitHub Exploit DB Packet Storm
216113 9.3 危険 マイクロソフト - 複数の Microsoft Windows 製品におけるサンドボックス保護メカニズムを回避される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2014-4077 2014-11-13 16:47 2014-11-11 Show GitHub Exploit DB Packet Storm
216114 5 警告 マイクロソフト - 複数の Microsoft Windows 製品のリモートデスクトッププロトコルの監査ログオン機能におけるアクセス制限を回避される脆弱性 CWE-287
不適切な認証 		CVE-2014-6318 2014-11-13 15:49 2014-11-11 Show GitHub Exploit DB Packet Storm
216115 4.3 警告 マイクロソフト - Microsoft SharePoint Foundation 2010 におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2014-4116 2014-11-13 14:29 2014-11-11 Show GitHub Exploit DB Packet Storm
216116 9.3 危険 マイクロソフト - Microsoft .NET Framework における任意のコードを実行される脆弱性 CWE-20
不適切な入力確認 		CVE-2014-4149 2014-11-13 14:25 2014-11-11 Show GitHub Exploit DB Packet Storm
216117 4.3 警告 マイクロソフト - 複数の Microsoft Windows 製品 の Windows オーディオサービスにおける権限昇格の脆弱性 CWE-20
不適切な入力確認 		CVE-2014-6322 2014-11-13 14:19 2014-11-11 Show GitHub Exploit DB Packet Storm
216118 7.2 危険 マイクロソフト - Microsoft Windows Server 2003 における権限昇格の脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2014-4076 2014-11-13 14:02 2014-11-11 Show GitHub Exploit DB Packet Storm
216119 9.3 危険 マイクロソフト - 複数の Microsoft 製品における任意のコードを実行される脆弱性 CWE-94
コード・インジェクション 		CVE-2014-6335 2014-11-13 13:49 2014-11-11 Show GitHub Exploit DB Packet Storm
216120 9.3 危険 マイクロソフト - 複数の Microsoft 製品における任意のコードを実行される脆弱性 CWE-94
コード・インジェクション 		CVE-2014-6334 2014-11-13 13:48 2014-11-11 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 23, 2026, 4:08 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
292861 - ibm infosphere_optim_data_growth_for_oracle_e-business_suite The Optim E-Business Console in IBM Data Growth Solution for Oracle E-business Suite 6.0 through 9.1 allows remote authenticated users to bypass intended access restrictions and create, modify, or de… CWE-264
Permissions, Privileges, and Access Controls 		CVE-2013-0577 2024-11-21 10:47 2013-10-10 Show GitHub Exploit DB Packet Storm
292862 - ibm maximo_asset_management SQL injection vulnerability in IBM Maximo Asset Management 6.2 through 6.2.8 and 7.1 through 7.1.1.12 allows remote authenticated users to execute arbitrary SQL commands via unspecified vectors. CWE-89
SQL Injection 		CVE-2013-0451 2024-11-21 10:47 2013-10-1 Show GitHub Exploit DB Packet Storm
292863 - libarchive
canonical
opensuse
fedoraproject
freebsd 		libarchive
ubuntu_linux
opensuse
fedora
freebsd 		Integer signedness error in the archive_write_zip_data function in archive_write_set_format_zip.c in libarchive 3.1.2 and earlier, when running on 64-bit machines, allows context-dependent attackers … CWE-189
Numeric Errors 		CVE-2013-0211 2024-11-21 10:47 2013-10-1 Show GitHub Exploit DB Packet Storm
292864 - ibm rational_clearquest Cross-site request forgery (CSRF) vulnerability in the Web Client in IBM Rational ClearQuest 7.1 before 7.1.2.12, 8.0 before 8.0.0.8, and 8.0.1 before 8.0.1.1 allows remote attackers to hijack the au… CWE-352
 Origin Validation Error 		CVE-2013-0598 2024-11-21 10:47 2013-09-28 Show GitHub Exploit DB Packet Storm
292865 - ibm websphere_application_server Cross-site scripting (XSS) vulnerability in the Administrative console in IBM WebSphere Application Server (WAS) 6.1 before 6.1.0.47 allows remote attackers to inject arbitrary web script or HTML via… CWE-79
Cross-site Scripting 		CVE-2013-0596 2024-11-21 10:47 2013-09-21 Show GitHub Exploit DB Packet Storm
292866 - ibm security_appscan The SSL implementation in IBM Security AppScan Enterprise before 8.7.0.1 enables cipher suites with weak encryption algorithms, which makes it easier for remote attackers to obtain sensitive informat… CWE-310
Cryptographic Issues 		CVE-2013-0531 2024-11-21 10:47 2013-09-9 Show GitHub Exploit DB Packet Storm
292867 - ibm lotus_inotes
lotus_domino 		Multiple cross-site scripting (XSS) vulnerabilities in iNotes 8.5.x in IBM Lotus Domino 8.5 before 8.5.3 FP5 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors, aka… CWE-79
Cross-site Scripting 		CVE-2013-0595 2024-11-21 10:47 2013-08-27 Show GitHub Exploit DB Packet Storm
292868 - ibm lotus_inotes
lotus_domino 		Cross-site scripting (XSS) vulnerability in iNotes 8.5.x in IBM Lotus Domino 8.5 before 8.5.3 FP5 allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors, aka… CWE-79
Cross-site Scripting 		CVE-2013-0591 2024-11-21 10:47 2013-08-27 Show GitHub Exploit DB Packet Storm
292869 - ibm lotus_inotes
lotus_domino 		Cross-site scripting (XSS) vulnerability in iNotes 8.5.x in IBM Lotus Domino 8.5 before 8.5.3 FP5 allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors, aka… CWE-79
Cross-site Scripting 		CVE-2013-0590 2024-11-21 10:47 2013-08-27 Show GitHub Exploit DB Packet Storm
292870 - ibm cognos_business_intelligence Cross-site scripting (XSS) vulnerability in the server in IBM Cognos Business Intelligence (BI) 8.4.1, 10.1, 10.1.1, 10.2, and 10.2.1 allows remote authenticated users to inject arbitrary web script … CWE-79
Cross-site Scripting 		CVE-2013-0586 2024-11-21 10:47 2013-08-27 Show GitHub Exploit DB Packet Storm