Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 24, 2026, 6 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
216601 5 警告 CloudBees - CloudBees Jenkins の PasswordParameterDefinition の入力制御におけるパスワードを取得される脆弱性 CWE-310
暗号の問題
CVE-2014-2061 2014-10-23 17:31 2014-02-8 Show GitHub Exploit DB Packet Storm
216602 7.5 危険 CloudBees - CloudBees Jenkins の Winstone サーブレットコンテナにおけるセッションをハイジャックされる脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2014-2060 2014-10-23 17:31 2014-02-15 Show GitHub Exploit DB Packet Storm
216603 6.5 警告 CloudBees - CloudBees Jenkins の BuildTrigger におけるアクセス制限を回避される脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2014-2058 2014-10-23 17:30 2014-02-11 Show GitHub Exploit DB Packet Storm
216604 4 警告 CloudBees - CloudBees Jenkins における制限されているプロジェクト以外のプロジェクトを構築される脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2013-7330 2014-10-23 17:30 2013-02-14 Show GitHub Exploit DB Packet Storm
216605 4.3 警告 C97net - C97net Cart Engine の skins/default/outline.tpl におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2014-8307 2014-10-23 16:58 2014-08-21 Show GitHub Exploit DB Packet Storm
216606 7.5 危険 C97net - C97net Cart Engine の cart.php 内の sql_query 関数における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2014-8306 2014-10-23 16:58 2014-08-21 Show GitHub Exploit DB Packet Storm
216607 7.5 危険 Splunk - Splunk Enterprise の Splunk Web におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2014-8303 2014-10-23 16:57 2014-09-30 Show GitHub Exploit DB Packet Storm
216608 6.5 警告 Splunk - Splunk Enterprise の Splunk Web におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2014-8302 2014-10-23 16:57 2014-09-30 Show GitHub Exploit DB Packet Storm
216609 4.3 警告 Splunk - Splunk Enterprise の Splunk Web におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2014-8301 2014-10-23 16:56 2014-09-30 Show GitHub Exploit DB Packet Storm
216610 2.6 注意 Max Foundry, LLC. - WordPress 用 Max Foundry MaxButtons プラグインにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2014-7181 2014-10-23 16:55 2014-10-2 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 24, 2026, 4:05 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
291801 - linux linux_kernel The veth (aka virtual Ethernet) driver in the Linux kernel before 2.6.34 does not properly manage skbs during congestion, which allows remote attackers to cause a denial of service (system crash) by … CWE-399
 Resource Management Errors
CVE-2013-2017 2024-11-21 10:50 2013-05-3 Show GitHub Exploit DB Packet Storm
291802 - linux linux_kernel The scm_set_cred function in include/net/scm.h in the Linux kernel before 3.8.11 uses incorrect uid and gid values during credentials passing, which allows local users to gain privileges via a crafte… CWE-264
Permissions, Privileges, and Access Controls
CVE-2013-1979 2024-11-21 10:50 2013-05-3 Show GitHub Exploit DB Packet Storm
291803 - linux linux_kernel kernel/user_namespace.c in the Linux kernel before 3.8.9 does not have appropriate capability requirements for the uid_map and gid_map files, which allows local users to gain privileges by opening a … CWE-264
Permissions, Privileges, and Access Controls
CVE-2013-1959 2024-11-21 10:50 2013-05-3 Show GitHub Exploit DB Packet Storm
291804 - apache subversion The mod_dav_svn Apache HTTPD server module in Subversion 1.7.0 through 1.7.8 allows remote attackers to cause a denial of service (segmentation fault and crash) via a log REPORT request with an inval… CWE-119
Incorrect Access of Indexable Resource ('Range Error') 
CVE-2013-1884 2024-11-21 10:50 2013-05-2 Show GitHub Exploit DB Packet Storm
291805 - apache subversion The mod_dav_svn Apache HTTPD server module in Subversion 1.6.x through 1.6.20 and 1.7.0 through 1.7.8 allows remote attackers to cause a denial of service (NULL pointer dereference and crash) via a P… NVD-CWE-Other
CVE-2013-1849 2024-11-21 10:50 2013-05-2 Show GitHub Exploit DB Packet Storm
291806 - apache subversion The mod_dav_svn Apache HTTPD server module in Subversion 1.6.0 through 1.6.20 and 1.7.0 through 1.7.8 allows remote attackers to cause a denial of service (NULL pointer dereference and crash) via an … NVD-CWE-Other
CVE-2013-1847 2024-11-21 10:50 2013-05-2 Show GitHub Exploit DB Packet Storm
291807 - apache
opensuse
subversion
opensuse
The mod_dav_svn Apache HTTPD server module in Subversion 1.6.x before 1.6.21 and 1.7.0 through 1.7.8 allows remote authenticated users to cause a denial of service (NULL pointer dereference and crash… CWE-119
Incorrect Access of Indexable Resource ('Range Error') 
CVE-2013-1846 2024-11-21 10:50 2013-05-2 Show GitHub Exploit DB Packet Storm
291808 - apache
opensuse
subversion
opensuse
The mod_dav_svn Apache HTTPD server module in Subversion 1.6.x before 1.6.21 and 1.7.0 through 1.7.8 allows remote authenticated users to cause a denial of service (memory consumption) by (1) setting… CWE-119
Incorrect Access of Indexable Resource ('Range Error') 
CVE-2013-1845 2024-11-21 10:50 2013-05-2 Show GitHub Exploit DB Packet Storm
291809 - haxx
canonical
curl
libcurl
ubuntu_linux
The tailMatch function in cookie.c in cURL and libcurl before 7.30.0 does not properly match the path domain when sending cookies, which allows remote attackers to steal cookies via a matching suffix… CWE-200
Information Exposure
CVE-2013-1944 2024-11-21 10:50 2013-04-30 Show GitHub Exploit DB Packet Storm
291810 - redhat
canonical
opensuse
icedtea-web
ubuntu_linux
opensuse
The IcedTea-Web plugin before 1.2.3 and 1.3.x before 1.3.2 allows remote attackers to execute arbitrary code via a crafted file that validates as both a GIF and a Java JAR file, aka "GIFAR." NVD-CWE-noinfo
CVE-2013-1927 2024-11-21 10:50 2013-04-30 Show GitHub Exploit DB Packet Storm