Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 3, 2026, 10 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
216731 4 警告 トレンドマイクロ - Trend Micro InterScan Web Security Virtual Appliance の AdminUI における任意のファイルを読まれる脆弱性 CWE-20
不適切な入力確認
CVE-2014-8510 2014-11-11 12:26 2014-11-6 Show GitHub Exploit DB Packet Storm
216732 2.1 注意 Eucalyptus Systems - Eucalyptus における重要な情報を取得される脆弱性 CWE-200
情報漏えい
CVE-2014-5038 2014-11-11 12:20 2014-10-20 Show GitHub Exploit DB Packet Storm
216733 2.1 注意 Eucalyptus Systems - Eucalyptus における重要な情報を取得される脆弱性 CWE-200
情報漏えい
CVE-2014-5037 2014-11-11 12:17 2014-10-20 Show GitHub Exploit DB Packet Storm
216734 3.5 注意 IBM - IBM DB2 におけるサービス運用妨害 (DoS) の脆弱性 CWE-20
不適切な入力確認
CVE-2014-6159 2014-11-11 11:29 2014-11-4 Show GitHub Exploit DB Packet Storm
216735 1.9 注意 IBM - IBM Sterling B2B Integrator における重要な情報を取得される脆弱性 CWE-200
情報漏えい
CVE-2014-6146 2014-11-11 11:28 2014-11-5 Show GitHub Exploit DB Packet Storm
216736 4 警告 IBM - IBM DB2 におけるサービス運用妨害 (DoS) の脆弱性 CWE-20
不適切な入力確認
CVE-2014-6097 2014-11-11 11:28 2014-11-5 Show GitHub Exploit DB Packet Storm
216737 4.3 警告 アルバネットワークス株式会社 - Aruba Networks ClearPass の Insight モジュールにおけるクロスサイトリクエストフォージェリの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2014-6623 2014-11-11 11:01 2014-10-31 Show GitHub Exploit DB Packet Storm
216738 4.3 警告 アルバネットワークス株式会社 - Aruba Networks ClearPass におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2014-6620 2014-11-11 11:00 2014-10-31 Show GitHub Exploit DB Packet Storm
216739 4.3 警告 OpenStack - OpenStack Compute および Juno の api/metadata/handler.py におけるインスタンス ID の署名を推測される脆弱性 CWE-200
情報漏えい
CVE-2014-3517 2014-11-10 17:40 2014-07-23 Show GitHub Exploit DB Packet Storm
216740 6.1 警告 シマンテック - Symantec Endpoint Protection Manager のコンソールサーブレットにおける任意のファイルに書き込まれる脆弱性 CWE-noinfo
情報不足
CVE-2014-3439 2014-11-10 17:37 2014-11-5 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 3, 2026, 4:18 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
291121 - softaculous webuzo Cross-site scripting (XSS) vulnerability in filemanager/login.php in the File Manager module in Softaculous Webuzo before 2.1.4 allows remote attackers to inject arbitrary web script or HTML via the … CWE-79
Cross-site Scripting
CVE-2013-6042 2024-11-21 10:58 2013-11-19 Show GitHub Exploit DB Packet Storm
291122 - vmware workstation
player
VMware Workstation 9.x before 9.0.3 and VMware Player 5.x before 5.0.3 on Linux do not properly handle shared libraries, which allows host OS users to gain host OS privileges via unspecified vectors. CWE-264
Permissions, Privileges, and Access Controls
CVE-2013-5972 2024-11-21 10:58 2013-11-18 Show GitHub Exploit DB Packet Storm
291123 - ajaxplorer ajaxplorer Directory traversal vulnerability in plugins/editor.zoho/agent/save_zoho.php in the Zoho plugin in Pydio (formerly AjaXplorer) before 5.0.4 allows remote attackers to read or delete arbitrary files v… CWE-22
Path Traversal
CVE-2013-6226 2024-11-21 10:58 2013-11-15 Show GitHub Exploit DB Packet Storm
291124 - zikula zikula_application_framework Cross-site scripting (XSS) vulnerability in Zikula Application Framework before 1.3.6 allows remote attackers to inject arbitrary web script or HTML via the returnpage parameter to index.php. CWE-79
Cross-site Scripting
CVE-2013-6168 2024-11-21 10:58 2013-11-15 Show GitHub Exploit DB Packet Storm
291125 - projeqtor projeqtor SQL injection vulnerability in view/objectDetail.php in Project'Or RIA 3.4.0 allows remote attackers to execute arbitrary SQL commands via the objectId parameter. CWE-89
SQL Injection
CVE-2013-6164 2024-11-21 10:58 2013-11-15 Show GitHub Exploit DB Packet Storm
291126 - projeqtor projeqtor Multiple cross-site scripting (XSS) vulnerabilities in ProjeQtOr (formerly Project'Or RIA) before 4.0.0 allow remote attackers to inject arbitrary web script or HTML via the (1) type parameter to vie… CWE-79
Cross-site Scripting
CVE-2013-6163 2024-11-21 10:58 2013-11-15 Show GitHub Exploit DB Packet Storm
291127 - apprain apprain SQL injection vulnerability in appRain CMF 3.0.2 and earlier allows remote attackers to execute arbitrary SQL commands via the PATH_INFO to blog-by-cat/. CWE-89
SQL Injection
CVE-2013-6058 2024-11-21 10:58 2013-11-15 Show GitHub Exploit DB Packet Storm
291128 - justsystems ichitaro_pro
ichitaro_portable_with_oreplug
ichitaro
ichitaro_viewer
Unspecified vulnerability in JustSystems Ichitaro 2006 through 2011; Ichitaro Government 6, 7, and 2006 through 2010; Ichitaro 2011 Sou; Ichitaro 2012 Shou; Ichitaro 2013 Gen and Gen Trial Edition; I… NVD-CWE-noinfo
CVE-2013-5990 2024-11-21 10:58 2013-11-14 Show GitHub Exploit DB Packet Storm
291129 - tapbots tweetbot Tweetbot 1.3.3 for Mac, and 2.8.5 for iPad and iPhone, does not require confirmation of (1) follow or (2) favorite actions, which allows remote attackers to automatically force the user to perform un… CWE-352
 Origin Validation Error
CVE-2013-5726 2024-11-21 10:58 2013-11-13 Show GitHub Exploit DB Packet Storm
291130 - qualcomm quic_mobile_station_modem_kernel goodix_tool.c in the Goodix gt915 touchscreen driver for the Linux kernel 3.x, as used in Qualcomm Innovation Center (QuIC) Android contributions for MSM devices and other products, does not properly… CWE-20
 Improper Input Validation 
CVE-2013-6122 2024-11-21 10:58 2013-11-12 Show GitHub Exploit DB Packet Storm