Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 3, 2026, noon

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
216401 6.9 警告 オラクル - Oracle Java SE における Hotspot に関する脆弱性 CWE-noinfo
情報不足 		CVE-2014-6468 2014-11-21 18:01 2014-10-14 Show GitHub Exploit DB Packet Storm
216402 2.1 注意 Zarafa
Fedora Project		 - Zarafa および WebApp の WebAccess における重要な情報を取得される脆弱性 CWE-310
暗号の問題 		CVE-2014-0103 2014-11-21 18:00 2014-06-30 Show GitHub Exploit DB Packet Storm
216403 2.1 注意 Zarafa - Zarafa WebAccess および WebApp における重要な情報を取得される脆弱性 CWE-200
情報漏えい 		CVE-2014-5447 2014-11-21 17:59 2014-08-24 Show GitHub Exploit DB Packet Storm
216404 2.1 注意 Zarafa - Zarafa における重要な情報を取得される脆弱性 CWE-200
情報漏えい 		CVE-2014-5448 2014-11-21 17:59 2014-08-24 Show GitHub Exploit DB Packet Storm
216405 2.1 注意 Zarafa - Zarafa WebAccess および WebApp における重要な情報を取得される脆弱性 CWE-200
情報漏えい 		CVE-2014-5449 2014-11-21 17:59 2014-08-24 Show GitHub Exploit DB Packet Storm
216406 6.5 警告 Ward Mundy & Associates LLC. - Incredible PBX の reminders/index.php における任意のコマンドを実行される脆弱性 CWE-94
コード・インジェクション 		CVE-2014-9001 2014-11-21 14:32 2014-10-21 Show GitHub Exploit DB Packet Storm
216407 7.5 危険 DigitalVidhya - DigitalVidhya Online Examination System の Photo 機能における任意のコードを実行される脆弱性 CWE-94
コード・インジェクション 		CVE-2014-8997 2014-11-21 14:23 2014-11-13 Show GitHub Exploit DB Packet Storm
216408 4.3 警告 Nibbleblog - Nibbleblog におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2014-8996 2014-11-21 14:13 2014-07-3 Show GitHub Exploit DB Packet Storm
216409 5 警告 Maarch - Maarch LetterBox における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2014-8995 2014-11-21 14:07 2014-11-17 Show GitHub Exploit DB Packet Storm
216410 5 警告 ZTE - ZTE ZXHN H108L のファームウェアにおける CWMP 設定を変更される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2014-8493 2014-11-21 13:37 2014-11-14 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 3, 2026, 4:18 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
291431 - adobe shockwave_player Adobe Shockwave Player before 12.0.7.148 allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2013-5… CWE-119
Incorrect Access of Indexable Resource ('Range Error')  		CVE-2013-5334 2024-11-21 10:57 2013-12-12 Show GitHub Exploit DB Packet Storm
291432 - adobe shockwave_player Adobe Shockwave Player before 12.0.7.148 allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2013-5… CWE-119
Incorrect Access of Indexable Resource ('Range Error')  		CVE-2013-5333 2024-11-21 10:57 2013-12-12 Show GitHub Exploit DB Packet Storm
291433 - adobe flash_player
air
air_sdk 		Adobe Flash Player before 11.7.700.257 and 11.8.x and 11.9.x before 11.9.900.170 on Windows and Mac OS X and before 11.2.202.332 on Linux, Adobe AIR before 3.9.0.1380, Adobe AIR SDK before 3.9.0.1380… CWE-94
Code Injection 		CVE-2013-5332 2024-11-21 10:57 2013-12-12 Show GitHub Exploit DB Packet Storm
291434 - mozilla
fedoraproject
oracle
canonical
redhat
suse
opensuse 		firefox
seamonkey
fedora
solaris
ubuntu_linux
enterprise_linux_server
enterprise_linux_server_eus
enterprise_linux_workstation
enterprise_linux_server_aus
enterprise_linux_… 		Mozilla Firefox before 26.0 and SeaMonkey before 2.23 do not properly consider the sandbox attribute of an IFRAME element during processing of a contained OBJECT element, which allows remote attacker… CWE-1021
 Improper Restriction of Rendered UI Layers or Frames 		CVE-2013-5614 2024-11-21 10:57 2013-12-12 Show GitHub Exploit DB Packet Storm
291435 9.8 CRITICAL
Network 		mozilla
fedoraproject
opensuse
suse
redhat
canonical 		firefox_esr
firefox
thunderbird
seamonkey
fedora
opensuse
suse_linux_enterprise_software_development_kit
suse_linux_enterprise_desktop
suse_linux_enterprise_server
enterpri… 		Use-after-free vulnerability in the PresShell::DispatchSynthMouseMove function in Mozilla Firefox before 26.0, Firefox ESR 24.x before 24.2, Thunderbird before 24.2, and SeaMonkey before 2.23 allows … CWE-416
 Use After Free 		CVE-2013-5613 2024-11-21 10:57 2013-12-12 Show GitHub Exploit DB Packet Storm
291436 - mozilla
fedoraproject
oracle
canonical
redhat
suse
opensuse 		firefox
seamonkey
fedora
solaris
ubuntu_linux
enterprise_linux_server
enterprise_linux_server_eus
enterprise_linux_workstation
enterprise_linux_server_aus
enterprise_linux_… 		Cross-site scripting (XSS) vulnerability in Mozilla Firefox before 26.0 and SeaMonkey before 2.23 makes it easier for remote attackers to inject arbitrary web script or HTML by leveraging a Same Orig… CWE-79
Cross-site Scripting 		CVE-2013-5612 2024-11-21 10:57 2013-12-12 Show GitHub Exploit DB Packet Storm
291437 9.8 CRITICAL
Network 		mozilla
fedoraproject
opensuse
suse
canonical
redhat 		firefox_esr
firefox
thunderbird
seamonkey
fedora
opensuse
suse_linux_enterprise_software_development_kit
suse_linux_enterprise_desktop
suse_linux_enterprise_server
ubuntu_l… 		Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 26.0, Firefox ESR 24.x before 24.2, Thunderbird before 24.2, and SeaMonkey before 2.23 allow remote attackers to c… NVD-CWE-noinfo
CVE-2013-5609 2024-11-21 10:57 2013-12-12 Show GitHub Exploit DB Packet Storm
291438 - adobe flash_player
air
air_sdk 		Adobe Flash Player before 11.7.700.257 and 11.8.x and 11.9.x before 11.9.900.170 on Windows and Mac OS X and before 11.2.202.332 on Linux, Adobe AIR before 3.9.0.1380, Adobe AIR SDK before 3.9.0.1380… CWE-94
Code Injection 		CVE-2013-5331 2024-11-21 10:57 2013-12-12 Show GitHub Exploit DB Packet Storm
291439 - ibm rational_requirements_composer
rational_quality_manager
rational_team_concert 		Cross-site scripting (XSS) vulnerability in the search implementation in IBM Rational Quality Manager (RQM) 2.0 through 2.0.1.1, 3.x before 3.0.1.6 iFix 1, and 4.x before 4.0.5, as used in Rational T… CWE-79
Cross-site Scripting 		CVE-2013-5404 2024-11-21 10:57 2013-12-11 Show GitHub Exploit DB Packet Storm
291440 - ibm forms_viewer Stack-based buffer overflow in IBM Forms Viewer 4.x before 4.0.0.3 and 8.x before 8.0.1.1 allows remote attackers to execute arbitrary code via an XFDL form with a long fontname value. CWE-119
Incorrect Access of Indexable Resource ('Range Error')  		CVE-2013-5447 2024-11-21 10:57 2013-12-10 Show GitHub Exploit DB Packet Storm