Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 15, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
216591	7.5	危険	Google	-	Google Chrome で使用される Blink の Web Sockets の実装におけるサービス運用妨害 (DoS) の脆弱性	CWE-Other その他	CVE-2014-3165	2014-08-15 10:46	2014-08-12	Show	GitHub Exploit DB Packet Storm

216592	6.8	警告	マイクロソフト	-	Microsoft Windows Media Center の MCPlayer.dll における任意のコードを実行される脆弱性	CWE-399 リソース管理の問題	CVE-2014-4060	2014-08-15 10:33	2014-08-12	Show	GitHub Exploit DB Packet Storm

216593	7.5	危険	マイクロソフト	-	複数の Microsoft Windows 製品の Local RPC サーバの実装におけるサービス運用妨害 (DoS) の脆弱性	CWE-399 リソース管理の問題	CVE-2014-0316	2014-08-15 09:52	2014-08-12	Show	GitHub Exploit DB Packet Storm

216594	7.2	危険	マイクロソフト	-	複数の Microsoft Windows 製品の Windows Installer における権限昇格の脆弱性	CWE-399 リソース管理の問題	CVE-2014-1814	2014-08-15 09:44	2014-08-12	Show	GitHub Exploit DB Packet Storm

216595	4.3	警告	マイクロソフト	-	Microsoft .NET Framework における重要なアドレス情報を取得される脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2014-4062	2014-08-14 18:00	2014-08-12	Show	GitHub Exploit DB Packet Storm

216596	9.3	危険	マイクロソフト	-	Microsoft OneNote 2007 における任意のコードを実行される脆弱性	CWE-20 不適切な入力確認	CVE-2014-2815	2014-08-14 17:53	2014-08-12	Show	GitHub Exploit DB Packet Storm

216597	9.3	危険	マイクロソフト	-	Microsoft SharePoint Server 2013 および SharePoint Foundation 2013 における権限昇格の脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2014-2816	2014-08-14 17:49	2014-08-12	Show	GitHub Exploit DB Packet Storm

216598	4.3	警告	Splunk	-	Splunk Enterprise の Splunk Web におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2014-5198	2014-08-14 17:15	2014-08-4	Show	GitHub Exploit DB Packet Storm

216599	4	警告	Splunk	-	Splunk Enterprise におけるディレクトリトラバーサルの脆弱性	CWE-22 パス・トラバーサル	CVE-2014-5197	2014-08-14 17:15	2014-08-4	Show	GitHub Exploit DB Packet Storm

216600	7.5	危険	WordPress Gallery Objects	-	WordPress 用 Gallery Objects プラグインにおける SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2014-5201	2014-08-14 17:14	2014-07-18	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 15, 2026, 4:28 a.m.

No	CVSS	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
292381	-	hp	pki_activex_control	The KillProcess method in the HP PKI ActiveX control (HPPKI.ocx) before 1.2.0.1 allows remote attackers to cause a denial of service (kill process) via the partial or full name of a process.	CWE-20 Improper Input Validation	CVE-2012-6501	2024-11-21 10:46	2013-01-12	Show	GitHub Exploit DB Packet Storm

292382	-	pragyan_cms_project	pragyan_cms	Directory traversal vulnerability in download.lib.php in Pragyan CMS 3.0 and earlier allows remote attackers to read arbitrary files via a .. (dot dot) in the fileget parameter in a profile action to…	CWE-22 Path Traversal	CVE-2012-6500	2024-11-21 10:46	2013-01-12	Show	GitHub Exploit DB Packet Storm

292383	-	age_verification_project	age_verification	Open redirect vulnerability in age-verification.php in the Age Verification plugin 0.4 and earlier for WordPress allows remote attackers to redirect users to arbitrary web sites and conduct phishing …	CWE-20 Improper Input Validation	CVE-2012-6499	2024-11-21 10:46	2013-01-12	Show	GitHub Exploit DB Packet Storm

292384	-	microsoft	windows_server_2008 windows_rt windows_8 windows_7 windows_vista windows_server_2012	The SSL provider component in Microsoft Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1, Windows 7 Gold and SP1, Windows 8, Windows Server 2012, and Windows RT does not properly handle enc…	CWE-264 Permissions, Privileges, and Access Controls	CVE-2013-0013	2024-11-21 10:46	2013-01-10	Show	GitHub Exploit DB Packet Storm

292385	-	microsoft	windows_server_2008 windows_7	The Print Spooler in Microsoft Windows Server 2008 R2 and R2 SP1 and Windows 7 Gold and SP1 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a cr…	CWE-119 Incorrect Access of Indexable Resource ('Range Error')	CVE-2013-0011	2024-11-21 10:46	2013-01-10	Show	GitHub Exploit DB Packet Storm

292386	-	microsoft	system_center_operations_manager	Cross-site scripting (XSS) vulnerability in Microsoft System Center Operations Manager 2007 SP1 and R2 allows remote attackers to inject arbitrary web script or HTML via crafted input, aka "System Ce…	CWE-79 Cross-site Scripting	CVE-2013-0010	2024-11-21 10:46	2013-01-10	Show	GitHub Exploit DB Packet Storm

292387	-	microsoft	system_center_operations_manager	Cross-site scripting (XSS) vulnerability in Microsoft System Center Operations Manager 2007 SP1 and R2 allows remote attackers to inject arbitrary web script or HTML via crafted input, aka "System Ce…	CWE-79 Cross-site Scripting	CVE-2013-0009	2024-11-21 10:46	2013-01-10	Show	GitHub Exploit DB Packet Storm

292388	-	microsoft	windows_vista windows_server_2008 windows_7 windows_8 windows_server_2012 windows_rt	win32k.sys in the kernel-mode drivers in Microsoft Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1, Windows 7 Gold and SP1, Windows 8, Windows Server 2012, and Windows RT does not properly…	CWE-264 Permissions, Privileges, and Access Controls	CVE-2013-0008	2024-11-21 10:46	2013-01-10	Show	GitHub Exploit DB Packet Storm

292389	-	microsoft	xml_core_services windows_7 windows_8 windows_server_2003 windows_server_2008 windows_server_2012 windows_vista windows_xp windows_rt expression_web groove_server off…	Microsoft XML Core Services (aka MSXML) 4.0, 5.0, and 6.0 does not properly parse XML content, which allows remote attackers to execute arbitrary code via a crafted web page, aka "MSXML XSLT Vulnerab…	CWE-94 Code Injection	CVE-2013-0007	2024-11-21 10:46	2013-01-10	Show	GitHub Exploit DB Packet Storm

292390	-	microsoft	xml_core_services windows_7 windows_8 windows_server_2003 windows_server_2008 windows_server_2012 windows_vista windows_xp windows_rt expression_web groove_server off…	Microsoft XML Core Services (aka MSXML) 3.0, 5.0, and 6.0 does not properly parse XML content, which allows remote attackers to execute arbitrary code via a crafted web page, aka "MSXML Integer Trunc…	CWE-189 Numeric Errors	CVE-2013-0006	2024-11-21 10:46	2013-01-10	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed