Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 29, 2026, 6 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
216141 7.2 危険 Huawei - Huawei P2-6011 の hx170dec デバイスドライバにおける任意のメモリ領域を読まれる脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2014-2273 2014-12-8 14:09 2014-12-2 Show GitHub Exploit DB Packet Storm
216142 7.5 危険 PBBoard - PBBoard の includes/functions.class.php の CheckEmail 関数における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2014-9215 2014-12-8 14:02 2014-11-28 Show GitHub Exploit DB Packet Storm
216143 4.3 警告 Altitude Software - Altitude uCI の Altitude uAgent におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2014-9212 2014-12-8 13:47 2014-12-3 Show GitHub Exploit DB Packet Storm
216144 6.8 警告 CreativeMinds - WordPress 用 CreativeMinds CM Downloads Manager プラグインにおけるクロスサイトリクエストフォージェリの脆弱性 CWE-352
同一生成元ポリシー違反
CVE-2014-9129 2014-12-8 13:38 2014-12-1 Show GitHub Exploit DB Packet Storm
216145 4.3 警告 Nextend - WordPress 用 Nextend Facebook Connect プラグインの nextend-facebook-settings.php におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2014-8800 2014-12-8 13:38 2014-11-24 Show GitHub Exploit DB Packet Storm
216146 7.5 危険 Technicolor - Technicolor ルータ TD5130 のファームウェアにおける任意のコマンドを実行される脆弱性 CWE-Other
その他
CVE-2014-9144 2014-12-8 12:14 2014-12-3 Show GitHub Exploit DB Packet Storm
216147 4.3 警告 Technicolor - Technicolor ルータ TD5130 のファームウェアにおけるオープンリダイレクトの脆弱性 CWE-Other
その他
CVE-2014-9143 2014-12-8 12:14 2014-12-3 Show GitHub Exploit DB Packet Storm
216148 4.3 警告 Technicolor - Technicolor ルータ TD5130 のファームウェアにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2014-9142 2014-12-8 12:14 2014-12-3 Show GitHub Exploit DB Packet Storm
216149 7.5 危険 Zoho Corporation - 複数の ManageEngine 製品の MetadataServlet サーブレットにおける SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2014-3997 2014-12-8 11:31 2014-08-19 Show GitHub Exploit DB Packet Storm
216150 7.5 危険 Zoho Corporation - 複数の ManageEngine 製品の LinkViewFetchServlet サーブレットにおける SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2014-3996 2014-12-8 11:30 2014-08-19 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 30, 2026, 4:16 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
292081 - ibm maximo_asset_management IBM Maximo Asset Management 6.2 through 6.2.8, 7.1 through 7.1.1.12, and 7.5 before 7.5.0.3 allows remote authenticated users to bypass intended access restrictions via unspecified vectors. NVD-CWE-noinfo
CVE-2013-4020 2024-11-21 10:54 2013-10-1 Show GitHub Exploit DB Packet Storm
292082 - ibm maximo_asset_management Cross-site scripting (XSS) vulnerability in IBM Maximo Asset Management 6.2 through 6.2.8 and 7.1 before 7.1.1.12 allows remote authenticated users to inject arbitrary web script or HTML via unspecif… CWE-79
Cross-site Scripting
CVE-2013-4019 2024-11-21 10:54 2013-10-1 Show GitHub Exploit DB Packet Storm
292083 - ibm maximo_asset_management IBM Maximo Asset Management 6.2 through 6.2.8, 7.1 before 7.1.1.12, and 7.5 before 7.5.0.5 allows remote authenticated users to obtain sensitive information via unspecified vectors. NVD-CWE-noinfo
CVE-2013-4018 2024-11-21 10:54 2013-10-1 Show GitHub Exploit DB Packet Storm
292084 - ibm maximo_asset_management SQL injection vulnerability in IBM Maximo Asset Management 7.1 before 7.1.1.12 allows remote attackers to execute arbitrary SQL commands via unspecified vectors. CWE-89
SQL Injection
CVE-2013-4017 2024-11-21 10:54 2013-10-1 Show GitHub Exploit DB Packet Storm
292085 - ibm maximo_asset_management Cross-site scripting (XSS) vulnerability in IBM Maximo Asset Management 6.2 through 6.2.8, 7.1 before 7.1.1.12, and 7.5 before 7.5.0.5 allows remote attackers to inject arbitrary web script or HTML v… CWE-79
Cross-site Scripting
CVE-2013-4014 2024-11-21 10:54 2013-10-1 Show GitHub Exploit DB Packet Storm
292086 - ibm maximo_asset_management IBM Maximo Asset Management 6.2 through 6.2.8, 7.1 through 7.1.1.12, and 7.5 before 7.5.0.2 allows remote attackers to obtain sensitive information via unspecified vectors. NVD-CWE-noinfo
CVE-2013-4013 2024-11-21 10:54 2013-10-1 Show GitHub Exploit DB Packet Storm
292087 - ibm maximo_asset_management SQL injection vulnerability in IBM Maximo Asset Management 7.1 before 7.1.1.12 and 7.5 before 7.5.0.5 allows remote authenticated users to execute arbitrary SQL commands via unspecified vectors. CWE-89
SQL Injection
CVE-2013-3973 2024-11-21 10:54 2013-10-1 Show GitHub Exploit DB Packet Storm
292088 - ibm maximo_asset_management IBM Maximo Asset Management 7.1 before 7.1.1.12 and 7.5 before 7.5.0.5 allows remote authenticated users to obtain sensitive information via unspecified vectors. CWE-200
Information Exposure
CVE-2013-3972 2024-11-21 10:54 2013-10-1 Show GitHub Exploit DB Packet Storm
292089 - ibm maximo_asset_management IBM Maximo Asset Management 7.1 through 7.1.1.12 and 7.5 before 7.5.0.5 allows remote authenticated users to bypass intended access restrictions via unspecified vectors, a different vulnerability tha… CWE-264
Permissions, Privileges, and Access Controls
CVE-2013-3971 2024-11-21 10:54 2013-10-1 Show GitHub Exploit DB Packet Storm
292090 - ibm spss_collaboration_and_deployment_services Unspecified vulnerability in IBM SPSS Collaboration and Deployment Services 4.2.1 and 5.0 through FP2 allows remote attackers to execute arbitrary code via unknown vectors, a different vulnerability … NVD-CWE-noinfo
CVE-2013-4042 2024-11-21 10:54 2013-10-1 Show GitHub Exploit DB Packet Storm