Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 20, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
216151 4.3 警告 timrohrer - WordPress 用 WordPress Spreadsheet プラグインの ss_handler.php におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2014-8364 2014-10-27 18:08 2014-08-5 Show GitHub Exploit DB Packet Storm
216152 7.5 危険 timrohrer - WordPress 用 WordPress Spreadsheet プラグインの ss_handler.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2014-8363 2014-10-27 18:08 2014-08-5 Show GitHub Exploit DB Packet Storm
216153 3.5 注意 Pro Chat Rooms - Pro Chat Rooms Text Chat Rooms におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2014-5276 2014-10-27 17:45 2014-08-5 Show GitHub Exploit DB Packet Storm
216154 6.5 警告 Pro Chat Rooms - Pro Chat Rooms Text Chat Rooms の includes/functions.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2014-5275 2014-10-27 17:45 2014-08-5 Show GitHub Exploit DB Packet Storm
216155 6.5 警告 TomatoCart - TomatoCart における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2014-3978 2014-10-27 17:35 2014-08-5 Show GitHub Exploit DB Packet Storm
216156 4.3 警告 TomatoCart - TomatoCart の info.php におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2014-3830 2014-10-27 17:34 2014-08-5 Show GitHub Exploit DB Packet Storm
216157 3.5 注意 Date project - Drupal 用 Date モジュールにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2014-5169 2014-10-27 17:28 2014-07-29 Show GitHub Exploit DB Packet Storm
216158 3.5 注意 The Cacti Group - Cacti におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2014-5026 2014-10-27 17:21 2014-07-4 Show GitHub Exploit DB Packet Storm
216159 3.5 注意 The Cacti Group - Cacti の data_sources.php におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2014-5025 2014-10-27 17:20 2014-07-4 Show GitHub Exploit DB Packet Storm
216160 4.6 警告 Bulb Security LLC - Bulb Security Smartphone Pentest Framework における重要な情報を取得される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2012-5697 2014-10-27 16:50 2012-11-15 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 20, 2026, 4:14 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
292601 - linux linux_kernel The __skb_recv_datagram function in net/core/datagram.c in the Linux kernel before 3.8 does not properly handle the MSG_PEEK flag with zero-length data, which allows local users to cause a denial of … CWE-20
 Improper Input Validation  		CVE-2013-0290 2024-11-21 10:47 2013-02-20 Show GitHub Exploit DB Packet Storm
292602 - linux linux_kernel The msr_open function in arch/x86/kernel/msr.c in the Linux kernel before 3.7.6 allows local users to bypass intended capability restrictions by executing a crafted application as root, as demonstrat… CWE-264
Permissions, Privileges, and Access Controls 		CVE-2013-0268 2024-11-21 10:47 2013-02-18 Show GitHub Exploit DB Packet Storm
292603 - linux linux_kernel Memory leak in drivers/net/xen-netback/netback.c in the Xen netback functionality in the Linux kernel before 3.7.8 allows guest OS users to cause a denial of service (memory consumption) by triggerin… CWE-399
 Resource Management Errors 		CVE-2013-0217 2024-11-21 10:47 2013-02-18 Show GitHub Exploit DB Packet Storm
292604 - linux linux_kernel The Xen netback functionality in the Linux kernel before 3.7.8 allows guest OS users to cause a denial of service (loop) by triggering ring pointer corruption. CWE-20
 Improper Input Validation  		CVE-2013-0216 2024-11-21 10:47 2013-02-18 Show GitHub Exploit DB Packet Storm
292605 - pidgin pidgin upnp.c in libpurple in Pidgin before 2.10.7 does not properly terminate long strings in UPnP responses, which allows remote attackers to cause a denial of service (application crash) by leveraging ac… NVD-CWE-noinfo
CVE-2013-0274 2024-11-21 10:47 2013-02-17 Show GitHub Exploit DB Packet Storm
292606 - pidgin pidgin sametime.c in the Sametime protocol plugin in libpurple in Pidgin before 2.10.7 does not properly terminate long user IDs, which allows remote servers to cause a denial of service (application crash)… NVD-CWE-noinfo
CVE-2013-0273 2024-11-21 10:47 2013-02-17 Show GitHub Exploit DB Packet Storm
292607 - pidgin pidgin Buffer overflow in http.c in the MXit protocol plugin in libpurple in Pidgin before 2.10.7 allows remote servers to execute arbitrary code via a long HTTP header. CWE-119
Incorrect Access of Indexable Resource ('Range Error')  		CVE-2013-0272 2024-11-21 10:47 2013-02-17 Show GitHub Exploit DB Packet Storm
292608 - pidgin pidgin The MXit protocol plugin in libpurple in Pidgin before 2.10.7 might allow remote attackers to create or overwrite files via a crafted (1) mxit or (2) mxit/imagestrips pathname. NVD-CWE-noinfo
CVE-2013-0271 2024-11-21 10:47 2013-02-17 Show GitHub Exploit DB Packet Storm
292609 - schneider-electric accutech_manager Heap-based buffer overflow in RFManagerService.exe in Schneider Electric Accutech Manager 2.00.1 and earlier allows remote attackers to execute arbitrary code via a crafted HTTP request. CWE-119
Incorrect Access of Indexable Resource ('Range Error')  		CVE-2013-0658 2024-11-21 10:47 2013-02-15 Show GitHub Exploit DB Packet Storm
292610 - adobe shockwave_player Stack-based buffer overflow in Adobe Shockwave Player before 12.0.0.112 allows attackers to execute arbitrary code via unspecified vectors. CWE-119
Incorrect Access of Indexable Resource ('Range Error')  		CVE-2013-0636 2024-11-21 10:47 2013-02-14 Show GitHub Exploit DB Packet Storm