Vulnerability Search Top

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

Vulnerability Information Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 28, 2026, 2:01 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
216861	3.5	注意	Drupal	-	Drupal 用 Nivo Slider モジュールにおけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2014-8744	2014-10-20 17:04	2014-03-18	Show	GitHub Exploit DB Packet Storm

216862	3.5	注意	Nextide	-	Drupal 用 Maestro モジュールにおけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2014-8743	2014-10-20 17:04	2014-06-6	Show	GitHub Exploit DB Packet Storm

216863	3.5	注意	オラクル	-	Oracle MySQL の MySQL Server における SERVER:MEMCACHED に関する脆弱性	CWE-noinfo 情報不足	CVE-2014-6474	2014-10-20 14:24	2014-10-14	Show	GitHub Exploit DB Packet Storm

216864	5.5	警告	オラクル	-	Oracle MySQL の MySQL Server における SERVER:SP に関する脆弱性	CWE-noinfo 情報不足	CVE-2014-6489	2014-10-20 14:24	2014-10-14	Show	GitHub Exploit DB Packet Storm

216865	4	警告	オラクル	-	Oracle MySQL の MySQL Server における SERVER:INNODB FULLTEXT SEARCH DML に関する脆弱性	CWE-noinfo 情報不足	CVE-2014-6564	2014-10-20 14:24	2014-10-14	Show	GitHub Exploit DB Packet Storm

216866	4.9	警告	オラクル	-	Oracle Enterprise Manager Grid Control の Application Performance Management における End User Experience Management に関する脆弱性	CWE-noinfo 情報不足	CVE-2014-6557	2014-10-20 10:13	2014-10-14	Show	GitHub Exploit DB Packet Storm

216867	2.1	注意	オラクル	-	Oracle Enterprise Manager Grid Control の Enterprise Manager for Oracle Database における Content Management に関する脆弱性	CWE-noinfo 情報不足	CVE-2014-6488	2014-10-20 10:12	2014-10-14	Show	GitHub Exploit DB Packet Storm

216868	5	警告	シスコシステムズ	-	Cisco Intrusion Detection System の Cisco Intrusion Prevention System の Web フレームワークにおけるサービス運用妨害 (DoS) の脆弱性	CWE-287 不適切な認証	CVE-2014-3402	2014-10-17 17:53	2014-10-8	Show	GitHub Exploit DB Packet Storm

216869	6.8	警告	オラクル	-	Oracle Sun Solaris における Hermon HCA PCIe driver に関する脆弱性	CWE-noinfo 情報不足	CVE-2014-6529	2014-10-17 16:11	2014-10-14	Show	GitHub Exploit DB Packet Storm

216870	7.8	危険	オラクル	-	Oracle Sun Solaris における iSCSI Data Mover に関する脆弱性	CWE-noinfo 情報不足	CVE-2014-6508	2014-10-17 16:11	2014-10-14	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 28, 2026, 4:16 a.m.

No	CVSS	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
291341	-	stage_file_proxy_project	stage_file_proxy	The Stage File Proxy module 7.x-1.x before 7.x-1.4 for Drupal allows remote attackers to cause a denial of service (file operations performance degradation and failure) via a large number of requests.	NVD-CWE-noinfo	CVE-2013-4139	2024-11-21 10:54	2013-08-29	Show	GitHub Exploit DB Packet Storm

291342	-	alienwp	hatch	Cross-site scripting (XSS) vulnerability in the Hatch theme 7.x-1.x before 7.x-1.4 for Drupal allows remote authenticated users with the "Administer content," "Create new article," or "Edit any artic…	CWE-79 Cross-site Scripting	CVE-2013-4138	2024-11-21 10:54	2013-08-29	Show	GitHub Exploit DB Packet Storm

291343	-	openstack opensuse	python_glanceclient opensuse	The Python client library for Glance (python-glanceclient) before 0.10.0 does not properly check the preverify_ok value, which prevents the server hostname from being verified with a domain name in t…	CWE-20 Improper Input Validation	CVE-2013-4111	2024-11-21 10:54	2013-08-29	Show	GitHub Exploit DB Packet Storm

291344	-	ibm	websphere_extended_deployment_compute_grid	IBM WebSphere Extended Deployment Compute Grid 8.0 before 8.0.0.3 allows remote authenticated users to obtain sensitive information, and consequently bypass intended access restrictions on jobs, via …	CWE-200 Information Exposure	CVE-2013-4039	2024-11-21 10:54	2013-08-28	Show	GitHub Exploit DB Packet Storm

291345	-	ibm	db2_connect db2	IBM DB2 and DB2 Connect 9.7 through FP8, 9.8 through FP5, 10.1 through FP2, and 10.5 through FP1 allow remote authenticated users to execute DML statements by leveraging EXPLAIN authority.	CWE-264 Permissions, Privileges, and Access Controls	CVE-2013-4033	2024-11-21 10:54	2013-08-28	Show	GitHub Exploit DB Packet Storm

291346	-	ibm	websphere_application_server	Cross-site scripting (XSS) vulnerability in the Administrative console in IBM WebSphere Application Server (WAS) 6.1 before 6.1.0.47, 7.0 before 7.0.0.31, 8.0 before 8.0.0.7, and 8.5 before 8.5.5.1 a…	CWE-79 Cross-site Scripting	CVE-2013-4005	2024-11-21 10:54	2013-08-22	Show	GitHub Exploit DB Packet Storm

291347	-	ibm	websphere_application_server	Cross-site scripting (XSS) vulnerability in the Administrative console in IBM WebSphere Application Server (WAS) 8.0 before 8.0.0.7 and 8.5 before 8.5.5.1 allows remote authenticated users to inject …	CWE-79 Cross-site Scripting	CVE-2013-4004	2024-11-21 10:54	2013-08-22	Show	GitHub Exploit DB Packet Storm

291348	-	openstack	swift havana grizzly folsom	OpenStack Swift before 1.9.1 in Folsom, Grizzly, and Havana allows authenticated users to cause a denial of service ("superfluous" tombstone consumption and Swift cluster slowdown) via a DELETE reque…	CWE-119 Incorrect Access of Indexable Resource ('Range Error')	CVE-2013-4155	2024-11-21 10:54	2013-08-21	Show	GitHub Exploit DB Packet Storm

291349	-	spice_project canonical	spice ubuntu_linux	The (1) red_channel_pipes_add_type and (2) red_channel_pipes_add_empty_msg functions in server/red_channel.c in SPICE before 0.12.4 do not properly perform ring loops, which might allow remote attack…	CWE-399 Resource Management Errors	CVE-2013-4130	2024-11-21 10:54	2013-08-21	Show	GitHub Exploit DB Packet Storm

291350	-	ruby-lang	ruby	The OpenSSL::SSL.verify_certificate_identity function in lib/openssl/ssl.rb in Ruby 1.8 before 1.8.7-p374, 1.9 before 1.9.3-p448, and 2.0 before 2.0.0-p247 does not properly handle a '\0' character i…	CWE-310 Cryptographic Issues	CVE-2013-4073	2024-11-21 10:54	2013-08-18	Show	GitHub Exploit DB Packet Storm