Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 3, 2026, 4:05 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
216841 5 警告 Ruby on Rails project
RubyGems.org
- Ruby on Rails に同梱されている Sprockets の server.rb におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル
CVE-2014-7819 2014-11-11 13:55 2014-10-15 Show GitHub Exploit DB Packet Storm
216842 4.3 警告 Ruby on Rails project - Ruby on Rails の Action Pack の actionpack/lib/action_dispatch/middleware/static.rb におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル
CVE-2014-7818 2014-11-11 13:54 2014-10-10 Show GitHub Exploit DB Packet Storm
216843 4.3 警告 The phpMyAdmin Project - phpMyAdmin の micro history の実装におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2014-6300 2014-11-11 13:54 2014-09-13 Show GitHub Exploit DB Packet Storm
216844 4.9 警告 シトリックス・システムズ - Citrix NetScaler Application Delivery Controller および NetScaler Gateway における他のユーザのネットワークリソースにアクセスされる脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2014-8580 2014-11-11 13:33 2014-10-24 Show GitHub Exploit DB Packet Storm
216845 4 警告 トレンドマイクロ - Trend Micro InterScan Web Security Virtual Appliance の AdminUI における任意のファイルを読まれる脆弱性 CWE-20
不適切な入力確認
CVE-2014-8510 2014-11-11 12:26 2014-11-6 Show GitHub Exploit DB Packet Storm
216846 2.1 注意 Eucalyptus Systems - Eucalyptus における重要な情報を取得される脆弱性 CWE-200
情報漏えい
CVE-2014-5038 2014-11-11 12:20 2014-10-20 Show GitHub Exploit DB Packet Storm
216847 2.1 注意 Eucalyptus Systems - Eucalyptus における重要な情報を取得される脆弱性 CWE-200
情報漏えい
CVE-2014-5037 2014-11-11 12:17 2014-10-20 Show GitHub Exploit DB Packet Storm
216848 3.5 注意 IBM - IBM DB2 におけるサービス運用妨害 (DoS) の脆弱性 CWE-20
不適切な入力確認
CVE-2014-6159 2014-11-11 11:29 2014-11-4 Show GitHub Exploit DB Packet Storm
216849 1.9 注意 IBM - IBM Sterling B2B Integrator における重要な情報を取得される脆弱性 CWE-200
情報漏えい
CVE-2014-6146 2014-11-11 11:28 2014-11-5 Show GitHub Exploit DB Packet Storm
216850 4 警告 IBM - IBM DB2 におけるサービス運用妨害 (DoS) の脆弱性 CWE-20
不適切な入力確認
CVE-2014-6097 2014-11-11 11:28 2014-11-5 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 3, 2026, 4:18 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
291131 - isc bind The Winsock WSAIoctl API in Microsoft Windows Server 2008, as used in ISC BIND 9.6-ESV before 9.6-ESV-R10-P1, 9.8 before 9.8.6-P1, 9.9 before 9.9.4-P1, 9.9.3-S1, 9.9.4-S1, and other products, does no… CWE-264
Permissions, Privileges, and Access Controls
CVE-2013-6230 2024-11-21 10:58 2013-11-8 Show GitHub Exploit DB Packet Storm
291132 - roundcube webmail steps/utils/save_pref.inc in Roundcube webmail before 0.8.7 and 0.9.x before 0.9.5 allows remote attackers to modify configuration settings via the _session parameter, which can be leveraged to read … CWE-89
SQL Injection
CVE-2013-6172 2024-11-21 10:58 2013-11-6 Show GitHub Exploit DB Packet Storm
291133 - citrix xendesktop Citrix XenDesktop 7.0, when upgraded from XenDesktop 5.x, does not properly enforce policy rule permissions, which allows remote attackers to bypass intended restrictions. CWE-264
Permissions, Privileges, and Access Controls
CVE-2013-6077 2024-11-21 10:58 2013-11-6 Show GitHub Exploit DB Packet Storm
291134 - apple motion Integer overflow in the OZDocument::parseElement function in Apple Motion 5.0.7 allows remote attackers to cause a denial of service (application crash) via a (1) large or (2) small value in the subv… CWE-190
 Integer Overflow or Wraparound
CVE-2013-6114 2024-11-21 10:58 2013-11-5 Show GitHub Exploit DB Packet Storm
291135 - modpagespeed mod_pagespeed Cross-site scripting (XSS) vulnerability in the mod_pagespeed module 0.x, 1.0.22.7, 1.1.x, 1.24.1, 1.3.25.1 through 1.3.25.4, 1.4.26.1 through 1.4.26.4, 1.5.27.1 through 1.5.27.3, and 1.6.29.1 throug… CWE-79
Cross-site Scripting
CVE-2013-6111 2024-11-21 10:58 2013-11-3 Show GitHub Exploit DB Packet Storm
291136 - tvt dvr
dvr_firmware
Directory traversal vulnerability in the TVT TD-2308SS-B DVR with firmware 3.2.0.P-3520A-00 and earlier allows remote attackers to read arbitrary files via .. (dot dot) in the URI. CWE-22
Path Traversal
CVE-2013-6023 2024-11-21 10:58 2013-11-3 Show GitHub Exploit DB Packet Storm
291137 - strongswan strongswan strongSwan 5.0.2 through 5.1.0 allows remote attackers to cause a denial of service (NULL pointer dereference and charon daemon crash) via a crafted IKEv1 fragmentation packet. NVD-CWE-Other
CVE-2013-6076 2024-11-21 10:58 2013-11-3 Show GitHub Exploit DB Packet Storm
291138 - strongswan strongswan The compare_dn function in utils/identification.c in strongSwan 4.3.3 through 5.1.1 allows (1) remote attackers to cause a denial of service (out-of-bounds read, NULL pointer dereference, and daemon … CWE-119
Incorrect Access of Indexable Resource ('Range Error') 
CVE-2013-6075 2024-11-21 10:58 2013-11-3 Show GitHub Exploit DB Packet Storm
291139 - cart66 cart66_lite_plugin Cross-site request forgery (CSRF) vulnerability in Cart66Product.php in the Cart66 Lite plugin before 1.5.1.15 for WordPress allows remote attackers to hijack the authentication of administrators for… CWE-352
 Origin Validation Error
CVE-2013-5977 2024-11-21 10:58 2013-11-2 Show GitHub Exploit DB Packet Storm
291140 - ca
broadcom
web_agents
siteminder
Cross-site scripting (XSS) vulnerability in CA SiteMinder 12.0 through 12.51, and SiteMinder 6 Web Agents, allows remote attackers to inject arbitrary web script or HTML via vectors involving a " (do… CWE-79
Cross-site Scripting
CVE-2013-5968 2024-11-21 10:58 2013-10-29 Show GitHub Exploit DB Packet Storm