Vulnerability Search Top

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

Vulnerability Information Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 26, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
216671	7.5	危険	Zoho Corporation	-	ZOHO ManageEngine Desktop Central におけるディレクトリトラバーサルの脆弱性	CWE-22 パス・トラバーサル	CVE-2014-5005	2014-10-28 09:49	2014-08-31	Show	GitHub Exploit DB Packet Storm

216672	6.8	警告	MRBS	-	Drupal 用 MRBS モジュールにおけるクロスサイトリクエストフォージェリの脆弱性	CWE-352 同一生成元ポリシー違反	CVE-2013-7407	2014-10-27 19:30	2013-07-17	Show	GitHub Exploit DB Packet Storm

216673	7.5	危険	MRBS	-	Drupal 用 MRBS モジュールにおける SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2013-7406	2014-10-27 19:30	2013-07-17	Show	GitHub Exploit DB Packet Storm

216674	5	警告	Websupporter	-	WordPress 用 WP AmASIN - The Amazon Affiliate Shop プラグインの reviews.php における絶対パストラバーサルの脆弱性	CWE-22 パス・トラバーサル	CVE-2014-4577	2014-10-27 18:55	2014-03-5	Show	GitHub Exploit DB Packet Storm

216675	4.3	警告	CBI Referral Manager	-	WordPress 用 CBI Referral Manager プラグインの getNetworkSites.php におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2014-4517	2014-10-27 18:55	2014-04-25	Show	GitHub Exploit DB Packet Storm

216676	4.3	警告	waisir	-	WordPress 用 Alipay プラグインの includes/api_tenpay/inc.tenpay_notify.php におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2014-4514	2014-10-27 18:54	2014-01-28	Show	GitHub Exploit DB Packet Storm

216677	6.5	警告	GB Plugins	-	WordPress 用 GB Gallery Slideshow プラグインの GBgallery.php における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2014-8375	2014-10-27 18:54	2014-08-9	Show	GitHub Exploit DB Packet Storm

216678	7.5	危険	シトリックス・システムズ	-	Citrix NetScaler Application Delivery Controller および NetScaler Gateway の管理インターフェースにおける任意のコードを実行される脆弱性	CWE-noinfo 情報不足	CVE-2014-7140	2014-10-27 18:53	2014-09-17	Show	GitHub Exploit DB Packet Storm

216679	4.3	警告	dotProject	-	dotProject におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2012-5702	2014-10-27 18:53	2012-11-15	Show	GitHub Exploit DB Packet Storm

216680	5	警告	Banana Dance	-	Banana Dance の functions/suggest.php における任意のデータベースの情報を読まれる脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2012-5243	2014-10-27 18:53	2012-12-19	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 26, 2026, 4:05 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
291691	-		nashtech	easy_php_calendar	Multiple cross-site scripting (XSS) vulnerabilities in (1) index.php and (2) datePicker.php in Easy PHP Calendar 6.x and 7.x before 7.0.13 allow remote attackers to inject arbitrary web script or HTM…	CWE-79 Cross-site Scripting	CVE-2013-1955	2024-11-21 10:50	2013-07-20	Show	GitHub Exploit DB Packet Storm

291692	-		apache	activemq	Cross-site scripting (XSS) vulnerability in scheduled.jsp in Apache ActiveMQ 5.8.0 and earlier allows remote attackers to inject arbitrary web script or HTML via vectors involving the "cron of a mess…	CWE-79 Cross-site Scripting	CVE-2013-1879	2024-11-21 10:50	2013-07-20	Show	GitHub Exploit DB Packet Storm

291693	-		chaos_tool_suite_project	ctools	The Chaos Tool Suite (ctools) module 7.x-1.x before 7.x-1.3 for Drupal does not properly restrict node access, which allows remote authenticated users with the "access content" permission to read res…	CWE-264 Permissions, Privileges, and Access Controls	CVE-2013-1925	2024-11-21 10:50	2013-07-17	Show	GitHub Exploit DB Packet Storm

291694	-		acquia commons_wikis_project	commons commons_wikis	The Commons Wikis module before 7.x-3.1 for Drupal, as used in the Commons module before 7.x-3.1, does not properly restrict access to groups, which allows remote attackers to post arbitrary content …	CWE-264 Permissions, Privileges, and Access Controls	CVE-2013-1908	2024-11-21 10:50	2013-07-17	Show	GitHub Exploit DB Packet Storm

291695	-		acquia	commons commons_group	The Commons Group module before 7.x-3.1 for Drupal, as used in the Commons module before 7.x-3.1, does not properly restrict access to groups, which allows remote attackers to post arbitrary content …	CWE-264 Permissions, Privileges, and Access Controls	CVE-2013-1907	2024-11-21 10:50	2013-07-17	Show	GitHub Exploit DB Packet Storm

291696	7.8	HIGH Local	linux redhat canonical	linux_kernel enterprise_linux enterprise_linux_eus ubuntu_linux	The KVM subsystem in the Linux kernel before 3.0 does not check whether kernel addresses are specified during allocation of memory slots for use in a guest's physical address space, which allows loca…	CWE-20 Improper Input Validation	CVE-2013-1943	2024-11-21 10:50	2013-07-16	Show	GitHub Exploit DB Packet Storm

291697	-		redhat	enterprise_linux	A certain Red Hat patch to the KVM subsystem in the kernel package before 2.6.32-358.11.1.el6 on Red Hat Enterprise Linux (RHEL) 6 does not properly implement the PV EOI feature, which allows guest O…	CWE-362 Race Condition	CVE-2013-1935	2024-11-21 10:50	2013-07-16	Show	GitHub Exploit DB Packet Storm

291698	-		ibm apache	websphere_application_server geronimo	The JMX Remoting functionality in Apache Geronimo 3.x before 3.0.1, as used in IBM WebSphere Application Server (WAS) Community Edition 3.0.0.3 and other products, does not properly implement the RMI…	CWE-94 Code Injection	CVE-2013-1777	2024-11-21 10:50	2013-07-12	Show	GitHub Exploit DB Packet Storm

291699	-		apache	openjpa	The BrokerFactory functionality in Apache OpenJPA 1.x before 1.2.3 and 2.x before 2.2.2 creates local executable JSP files containing logging trace data produced during deserialization of certain cra…	CWE-264 Permissions, Privileges, and Access Controls	CVE-2013-1768	2024-11-21 10:50	2013-07-12	Show	GitHub Exploit DB Packet Storm

291700	-		apache redhat canonical opensuse	http_server jboss_enterprise_application_platform enterprise_linux_server enterprise_linux_workstation enterprise_linux_server_aus enterprise_linux_desktop enterprise_linux_eus u…	mod_dav.c in the Apache HTTP Server before 2.2.25 does not properly determine whether DAV is enabled for a URI, which allows remote attackers to cause a denial of service (segmentation fault) via a M…	NVD-CWE-noinfo	CVE-2013-1896	2024-11-21 10:50	2013-07-11	Show	GitHub Exploit DB Packet Storm