Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 20, 2026, 6 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
216631 4.3 警告 ContactUs.com, Inc. - WordPress 用 Contact Form 7 Integrations プラグインの includes/toAdmin.php におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2014-6445 2014-10-1 15:03 2014-09-18 Show GitHub Exploit DB Packet Storm
216632 4.3 警告 YIKES, Inc. - WordPress 用 Easy MailChimp Forms プラグインにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2014-7152 2014-10-1 15:02 2014-09-19 Show GitHub Exploit DB Packet Storm
216633 9 危険 OpenMediaVault - OpenMediaVault の rpc.php の Cron サービスにおける任意のユーザとして cron ジョブを実行される脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2013-3632 2014-10-1 14:42 2013-10-30 Show GitHub Exploit DB Packet Storm
216634 4.3 警告 Apache Friends - XAMPP における xampp/lang.tmp を変更される脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2013-2586 2014-10-1 14:35 2013-09-26 Show GitHub Exploit DB Packet Storm
216635 7.1 危険 シスコシステムズ (Linksys) - Linksys EA6500 のファームウェアにおける重要な情報を取得される脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2013-3066 2014-10-1 14:26 2013-04-13 Show GitHub Exploit DB Packet Storm
216636 3.5 注意 シスコシステムズ (Linksys) - Linksys EA6500 のファームウェアの Parental Controls セクションにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2013-3065 2014-10-1 14:26 2013-04-13 Show GitHub Exploit DB Packet Storm
216637 6.8 警告 シスコシステムズ (Linksys) - Linksys EA6500 のファームウェアの ui/dynamic/unsecured.html におけるオープンリダイレクトの脆弱性 CWE-Other
その他
CVE-2013-3064 2014-10-1 14:25 2013-04-13 Show GitHub Exploit DB Packet Storm
216638 5.4 警告 iLeaf Solutions - Android 用 Cloud Manager アプリケーションにおけるサーバになりすまされる脆弱性 CWE-310
暗号の問題
CVE-2014-5641 2014-09-30 16:51 2014-09-3 Show GitHub Exploit DB Packet Storm
216639 5.4 警告 Huntington National Bank - Android 用 Huntington Mobile アプリケーションにおけるサーバになりすまされる脆弱性 CWE-310
暗号の問題
CVE-2014-5638 2014-09-30 16:51 2014-09-3 Show GitHub Exploit DB Packet Storm
216640 5.4 警告 Cheetah Mobile - Android 用 CM Backup -Restore,Cloud,Photo アプリケーションにおけるサーバになりすまされる脆弱性 CWE-310
暗号の問題
CVE-2014-5640 2014-09-30 16:51 2014-09-3 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 20, 2026, 4:14 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
292031 - apple quicktime
mac_os_x
Buffer overflow in Apple QuickTime before 7.7.4 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via crafted enof atoms in a movie file. CWE-119
Incorrect Access of Indexable Resource ('Range Error') 
CVE-2013-0986 2024-11-21 10:48 2013-05-25 Show GitHub Exploit DB Packet Storm
292032 - emc rsa_authentication_agent Cross-site scripting (XSS) vulnerability in EMC RSA Authentication Agent 7.1 before 7.1.1 for Web for Internet Information Services, and 7.1 before 7.1.1 for Web for Apache, allows remote attackers t… CWE-79
Cross-site Scripting
CVE-2013-0942 2024-11-21 10:48 2013-05-22 Show GitHub Exploit DB Packet Storm
292033 - rsa authentication_api
securid_web_agent
pluggable_authentication_module_agent
authentication_agent
EMC RSA Authentication API before 8.1 SP1, RSA Web Agent before 5.3.5 for Apache Web Server, RSA Web Agent before 5.3.5 for IIS, RSA PAM Agent before 7.0, and RSA Agent before 6.1.4 for Microsoft Win… CWE-310
Cryptographic Issues
CVE-2013-0941 2024-11-21 10:48 2013-05-22 Show GitHub Exploit DB Packet Storm
292034 - apple itunes Apple iTunes before 11.0.3 does not properly verify X.509 certificates, which allows man-in-the-middle attackers to spoof HTTPS servers via an arbitrary valid certificate. CWE-20
 Improper Input Validation 
CVE-2013-1014 2024-11-21 10:48 2013-05-20 Show GitHub Exploit DB Packet Storm
292035 - apple itunes WebKit, as used in Apple iTunes before 11.0.3, allows man-in-the-middle attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via vectors related … CWE-399
 Resource Management Errors
CVE-2013-1011 2024-11-21 10:48 2013-05-20 Show GitHub Exploit DB Packet Storm
292036 - apple iphone_os
itunes
WebKit, as used in Apple iTunes before 11.0.3, allows man-in-the-middle attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via vectors related … CWE-399
 Resource Management Errors
CVE-2013-1010 2024-11-21 10:48 2013-05-20 Show GitHub Exploit DB Packet Storm
292037 - apple iphone_os
itunes
WebKit, as used in Apple iTunes before 11.0.3, allows man-in-the-middle attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via vectors related … CWE-399
 Resource Management Errors
CVE-2013-1008 2024-11-21 10:48 2013-05-20 Show GitHub Exploit DB Packet Storm
292038 - apple itunes
iphone_os
WebKit, as used in Apple iTunes before 11.0.3, allows man-in-the-middle attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via vectors related … CWE-399
 Resource Management Errors
CVE-2013-1007 2024-11-21 10:48 2013-05-20 Show GitHub Exploit DB Packet Storm
292039 - apple iphone_os
itunes
WebKit, as used in Apple iTunes before 11.0.3, allows man-in-the-middle attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via vectors related … CWE-399
 Resource Management Errors
CVE-2013-1006 2024-11-21 10:48 2013-05-20 Show GitHub Exploit DB Packet Storm
292040 - apple itunes
iphone_os
WebKit, as used in Apple iTunes before 11.0.3, allows man-in-the-middle attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via vectors related … CWE-399
 Resource Management Errors
CVE-2013-1005 2024-11-21 10:48 2013-05-20 Show GitHub Exploit DB Packet Storm