Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 17, 2026, 6 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
216521 5 警告 OpenStack
Canonical
レッドハット
- 複数の OpenStack 製品の通知ミドルウェアにおける X_AUTH_TOKEN 値を取得される脆弱性 CWE-200
情報漏えい
CVE-2014-4615 2014-08-21 17:47 2014-08-11 Show GitHub Exploit DB Packet Storm
216522 5 警告 BitDefender - Bitdefender GravityZone におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル
CVE-2014-5350 2014-08-21 16:49 2014-05-22 Show GitHub Exploit DB Packet Storm
216523 5 警告 Baidu, Inc. - Baidu Spark Browser におけるスタックベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー
CVE-2014-5349 2014-08-21 16:49 2014-06-30 Show GitHub Exploit DB Packet Storm
216524 4.3 警告 リバーベッドテクノロジー株式会社 - Riverbed Stingray Traffic Manager Virtual Appliance の apps/zxtm/locallog.cgi におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2014-5348 2014-08-21 15:26 2014-08-15 Show GitHub Exploit DB Packet Storm
216525 2.9 注意 IBM - IBM PowerVC Express Edition における認証情報を取得される脆弱性 CWE-200
情報漏えい
CVE-2014-4750 2014-08-21 14:43 2014-08-18 Show GitHub Exploit DB Packet Storm
216526 4.3 警告 IBM - IBM PowerVC における SSH サーバを偽装される脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2014-4749 2014-08-21 14:40 2014-08-18 Show GitHub Exploit DB Packet Storm
216527 6.8 警告 Disqus - WordPress 用 Disqus Comment System プラグインにおけるクロスサイトリクエストフォージェリの脆弱性 CWE-352
同一生成元ポリシー違反
CVE-2014-5347 2014-08-21 14:37 2014-06-24 Show GitHub Exploit DB Packet Storm
216528 6.8 警告 Disqus - WordPress 用 Disqus Comment System プラグインにおけるクロスサイトリクエストフォージェリの脆弱性 CWE-352
同一生成元ポリシー違反
CVE-2014-5346 2014-08-21 14:36 2014-08-16 Show GitHub Exploit DB Packet Storm
216529 4.3 警告 Disqus - WordPress 用 Disqus Comment System プラグインの upgrade.php におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2014-5345 2014-08-21 14:35 2014-06-24 Show GitHub Exploit DB Packet Storm
216530 4.3 警告 Mobiloud - WordPress 用 Mobiloud プラグインにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2014-5344 2014-08-21 14:34 2014-08-11 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 18, 2026, 4:12 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
292331 - linux linux_kernel The Xen netback functionality in the Linux kernel before 3.7.8 allows guest OS users to cause a denial of service (loop) by triggering ring pointer corruption. CWE-20
 Improper Input Validation 
CVE-2013-0216 2024-11-21 10:47 2013-02-18 Show GitHub Exploit DB Packet Storm
292332 - pidgin pidgin upnp.c in libpurple in Pidgin before 2.10.7 does not properly terminate long strings in UPnP responses, which allows remote attackers to cause a denial of service (application crash) by leveraging ac… NVD-CWE-noinfo
CVE-2013-0274 2024-11-21 10:47 2013-02-17 Show GitHub Exploit DB Packet Storm
292333 - pidgin pidgin sametime.c in the Sametime protocol plugin in libpurple in Pidgin before 2.10.7 does not properly terminate long user IDs, which allows remote servers to cause a denial of service (application crash)… NVD-CWE-noinfo
CVE-2013-0273 2024-11-21 10:47 2013-02-17 Show GitHub Exploit DB Packet Storm
292334 - pidgin pidgin Buffer overflow in http.c in the MXit protocol plugin in libpurple in Pidgin before 2.10.7 allows remote servers to execute arbitrary code via a long HTTP header. CWE-119
Incorrect Access of Indexable Resource ('Range Error') 
CVE-2013-0272 2024-11-21 10:47 2013-02-17 Show GitHub Exploit DB Packet Storm
292335 - pidgin pidgin The MXit protocol plugin in libpurple in Pidgin before 2.10.7 might allow remote attackers to create or overwrite files via a crafted (1) mxit or (2) mxit/imagestrips pathname. NVD-CWE-noinfo
CVE-2013-0271 2024-11-21 10:47 2013-02-17 Show GitHub Exploit DB Packet Storm
292336 - schneider-electric accutech_manager Heap-based buffer overflow in RFManagerService.exe in Schneider Electric Accutech Manager 2.00.1 and earlier allows remote attackers to execute arbitrary code via a crafted HTTP request. CWE-119
Incorrect Access of Indexable Resource ('Range Error') 
CVE-2013-0658 2024-11-21 10:47 2013-02-15 Show GitHub Exploit DB Packet Storm
292337 - adobe shockwave_player Stack-based buffer overflow in Adobe Shockwave Player before 12.0.0.112 allows attackers to execute arbitrary code via unspecified vectors. CWE-119
Incorrect Access of Indexable Resource ('Range Error') 
CVE-2013-0636 2024-11-21 10:47 2013-02-14 Show GitHub Exploit DB Packet Storm
292338 - adobe shockwave_player Adobe Shockwave Player before 12.0.0.112 allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors. CWE-119
Incorrect Access of Indexable Resource ('Range Error') 
CVE-2013-0635 2024-11-21 10:47 2013-02-14 Show GitHub Exploit DB Packet Storm
292339 - openstack
canonical
essex
folsom
ubuntu_linux
The boot-from-volume feature in OpenStack Compute (Nova) Folsom and Essex, when using nova-volumes, allows remote authenticated users to boot from other users' volumes via a volume id in the block_de… CWE-264
Permissions, Privileges, and Access Controls
CVE-2013-0208 2024-11-21 10:47 2013-02-14 Show GitHub Exploit DB Packet Storm
292340 - rubyonrails ruby_on_rails
rails
ActiveRecord in Ruby on Rails before 2.3.17 and 3.x before 3.1.0 allows remote attackers to cause a denial of service or execute arbitrary code via crafted serialized attributes that cause the +seria… NVD-CWE-noinfo
CVE-2013-0277 2024-11-21 10:47 2013-02-13 Show GitHub Exploit DB Packet Storm