Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 28, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
216601 5.4 警告 9GAG - Android 用 9GAG - Funny pics and videos アプリケーションにおけるサーバになりすまされる脆弱性 CWE-310
暗号の問題 		CVE-2014-5669 2014-11-12 10:43 2014-09-3 Show GitHub Exploit DB Packet Storm
216602 5.4 警告 Camp Mobile - Android 用 BAND -Group sharing & planning アプリケーションにおけるサーバになりすまされる脆弱性 CWE-310
暗号の問題 		CVE-2014-5668 2014-11-12 10:32 2014-09-3 Show GitHub Exploit DB Packet Storm
216603 5.4 警告 Kiragames Co., Ltd. - Android 用 Unblock Me FREE アプリケーションにおけるサーバになりすまされる脆弱性 CWE-310
暗号の問題 		CVE-2014-5653 2014-11-12 10:29 2014-09-3 Show GitHub Exploit DB Packet Storm
216604 5.4 警告 Receivd, Inc. - Android 用 Kicksend Photo Prints アプリケーションにおけるサーバになりすまされる脆弱性 CWE-310
暗号の問題 		CVE-2014-5652 2014-11-12 10:23 2014-09-3 Show GitHub Exploit DB Packet Storm
216605 5.4 警告 Receivd, Inc. - Android 用 Kicksend: ワンタッチで写真共有アプリケーションにおけるサーバになりすまされる脆弱性 CWE-310
暗号の問題 		CVE-2014-5651 2014-11-12 10:17 2014-09-3 Show GitHub Exploit DB Packet Storm
216606 - - Zopim - ** 削除 ** Android 用 Zopim ライブラリにおけるサーバになりすまされる脆弱性 - CVE-2014-5530 2014-11-11 18:17 2014-09-3 Show GitHub Exploit DB Packet Storm
216607 4.9 警告 Linux - Linux Kernel の fs/dcache.c 内の d_walk 関数におけるサービス運用妨害 (DoS) の脆弱性 CWE-399
リソース管理の問題 		CVE-2014-8559 2014-11-11 18:02 2014-10-26 Show GitHub Exploit DB Packet Storm
216608 4.9 警告 Linux - Linux Kernel の KVM サブシステムの arch/x86/kvm/emulate.c におけるサービス運用妨害 (DoS) の脆弱性 CWE-399
リソース管理の問題 		CVE-2014-8481 2014-11-11 18:02 2014-10-13 Show GitHub Exploit DB Packet Storm
216609 4.9 警告 Linux - Linux Kernel の KVM サブシステムの arch/x86/kvm/emulate.c におけるサービス運用妨害 (DoS) の脆弱性 CWE-399
リソース管理の問題 		CVE-2014-8480 2014-11-11 18:01 2014-10-13 Show GitHub Exploit DB Packet Storm
216610 4.9 警告 Linux - Linux Kernel の IPv6 の実装に対する特定の Debian パッチにおけるサービス運用妨害 (DoS) の脆弱性 CWE-Other
その他 		CVE-2014-7207 2014-11-11 17:58 2014-10-27 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 28, 2026, 4:16 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
291591 - microsoft internet_explorer Use-after-free vulnerability in Microsoft Internet Explorer 9 allows remote attackers to execute arbitrary code via a crafted web site that triggers access to a deleted CMarkup object, aka "Internet … CWE-399
 Resource Management Errors 		CVE-2013-3140 2024-11-21 10:53 2013-12-17 Show GitHub Exploit DB Packet Storm
291592 - vmware esxi
workstation
esx
player
fusion 		lgtosync.sys in VMware Workstation 9.x before 9.0.3, VMware Player 5.x before 5.0.3, VMware Fusion 5.x before 5.0.4, VMware ESXi 4.0 through 5.1, and VMware ESX 4.0 and 4.1, when a 32-bit Windows gue… CWE-264
Permissions, Privileges, and Access Controls 		CVE-2013-3519 2024-11-21 10:53 2013-12-5 Show GitHub Exploit DB Packet Storm
291593 - cisco prime_network_registrar Cross-site scripting (XSS) vulnerability in the web interface in Cisco Prime Network Registrar 8.1 and earlier allows remote attackers to inject arbitrary web script or HTML via a crafted field, aka … CWE-79
Cross-site Scripting 		CVE-2013-3394 2024-11-21 10:53 2013-11-27 Show GitHub Exploit DB Packet Storm
291594 - emc rsa_data_protection_manager_appliance Cross-site scripting (XSS) vulnerability on the EMC RSA Data Protection Manager (DPM) appliance 3.2.x before 3.2.4.2 and 3.5.x before 3.5.1 allows remote attackers to inject arbitrary web script or H… CWE-79
Cross-site Scripting 		CVE-2013-3288 2024-11-21 10:53 2013-11-23 Show GitHub Exploit DB Packet Storm
291595 - cisco server_provisioner The web interface in Cisco Server Provisioner 6.4.0 Patch 5-1301292331 and earlier does not require authentication for unspecified pages, which allows remote attackers to obtain sensitive information… CWE-264
Permissions, Privileges, and Access Controls 		CVE-2013-3407 2024-11-21 10:53 2013-11-18 Show GitHub Exploit DB Packet Storm
291596 - cisco service_portal The "Files Available for Download" implementation in the Cisco Intelligent Automation for Cloud component in Cisco Services Portal 9.4(1) allows remote authenticated users to read arbitrary files via… CWE-20
 Improper Input Validation  		CVE-2013-3406 2024-11-21 10:53 2013-11-18 Show GitHub Exploit DB Packet Storm
291597 - emc documentum_eroom Multiple cross-site scripting (XSS) vulnerabilities in EMC Documentum eRoom before 7.4.4 P11 allow remote attackers to inject arbitrary web script or HTML via a crafted URL. CWE-79
Cross-site Scripting 		CVE-2013-3286 2024-11-21 10:53 2013-11-7 Show GitHub Exploit DB Packet Storm
291598 - emc documentum_taskspace
documentum_capital_projects
documentum_wdk
documentum_digital_asset_manager
documentum_administrator
documentum_webtop
documentum_web_publisher 		Cross-site scripting (XSS) vulnerability in EMC Documentum Webtop before 6.7 SP2 P07, Documentum WDK before 6.7 SP2 P07, Documentum Taskspace before 6.7 SP2 P07, Documentum Records Manager before 6.7… CWE-79
Cross-site Scripting 		CVE-2013-3281 2024-11-21 10:53 2013-11-7 Show GitHub Exploit DB Packet Storm
291599 - smackcoders wp_ultimate_email_marketer_plugin The WP Ultimate Email Marketer plugin 1.1.0 and possibly earlier for Wordpress does not properly restrict access to (1) list/edit.php and (2) campaign/editCampaign.php, which allows remote attackers … CWE-264
Permissions, Privileges, and Access Controls 		CVE-2013-3264 2024-11-21 10:53 2013-11-6 Show GitHub Exploit DB Packet Storm
291600 - smackcoders wp_ultimate_email_marketer_plugin Multiple cross-site scripting (XSS) vulnerabilities in the WP Ultimate Email Marketer plugin 1.1.0 and possibly earlier for Wordpress allow remote attackers to inject arbitrary web script or HTML via… CWE-79
Cross-site Scripting 		CVE-2013-3263 2024-11-21 10:53 2013-11-6 Show GitHub Exploit DB Packet Storm