Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 31, 2026, 6 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
216901 4.3 警告 シスコシステムズ - Cisco Unified Communications Manager のサーバの CCM reports インターフェースにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2014-3372 2014-11-4 15:29 2014-11-3 Show GitHub Exploit DB Packet Storm
216902 6.5 警告 シスコシステムズ - Cisco Unified Communications Manager の管理 Web インターフェースにおける SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2014-3366 2014-11-4 15:29 2014-11-3 Show GitHub Exploit DB Packet Storm
216903 6.8 警告 Adaptive Computing - Terascale Open-Source Resource and Queue Manager の lib/Libifl/tm.c における任意のプロセスを強制終了される脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2014-3684 2014-11-4 14:46 2014-10-2 Show GitHub Exploit DB Packet Storm
216904 7.5 危険 BSS - BSS Continuity CMS の wcm/system/pages/admin/getnode.aspx における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2014-3446 2014-11-4 13:53 2013-10-24 Show GitHub Exploit DB Packet Storm
216905 5 警告 デル - Dell EqualLogic PS4000 のファームウェアにおけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル
CVE-2013-3304 2014-11-4 13:48 2013-09-1 Show GitHub Exploit DB Packet Storm
216906 5.1 警告 drchrono Inc. - drchrono Electronic Health Record (EHR) のウェブアプリケーションに複数の脆弱性 - - 2014-10-31 15:57 2014-10-29 Show GitHub Exploit DB Packet Storm
216907 4.9 警告 ヒューレット・パッカード - HP HP-UX のkernel におけるサービス運用妨害 (DoS) の脆弱性 CWE-noinfo
情報不足
CVE-2014-7877 2014-10-31 14:44 2014-10-28 Show GitHub Exploit DB Packet Storm
216908 2.1 注意 マカフィー - McAfee Network Data Loss Prevention における重要な情報を取得される脆弱性 CWE-200
情報漏えい
CVE-2014-8537 2014-10-31 14:43 2014-10-3 Show GitHub Exploit DB Packet Storm
216909 2.1 注意 マカフィー - McAfee Network Data Loss Prevention における重要な情報を取得される脆弱性 CWE-200
情報漏えい
CVE-2014-8536 2014-10-31 14:43 2014-10-3 Show GitHub Exploit DB Packet Storm
216910 4.6 警告 マカフィー - McAfee Network Data Loss Prevention における不特定の機能の制限を回避される脆弱性 CWE-noinfo
情報不足
CVE-2014-8535 2014-10-31 14:43 2014-10-3 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 31, 2026, 4:16 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
291251 - puppet puppet_enterprise The master external node classification script in Puppet Enterprise before 3.2.0 does not verify the identity of consoles, which allows remote attackers to create arbitrary classifications on the mas… CWE-287
Improper Authentication
CVE-2013-4966 2024-11-21 10:56 2014-03-9 Show GitHub Exploit DB Packet Storm
291252 - avtech avn801_dvr_firmware
avn801_dvr
Buffer overflow in cgi-bin/user/Config.cgi in AVTECH AVN801 DVR with firmware 1017-1003-1009-1003 and earlier, and possibly other devices, allows remote attackers to cause a denial of service (device… CWE-119
Incorrect Access of Indexable Resource ('Range Error') 
CVE-2013-4981 2024-11-21 10:56 2014-03-4 Show GitHub Exploit DB Packet Storm
291253 - avtech avn801_dvr_firmware
avn801_dvr
Buffer overflow in the RTSP Packet Handler in AVTECH AVN801 DVR with firmware 1017-1003-1009-1003 and earlier, and possibly other devices, allows remote attackers to cause a denial of service (device… CWE-119
Incorrect Access of Indexable Resource ('Range Error') 
CVE-2013-4980 2024-11-21 10:56 2014-03-4 Show GitHub Exploit DB Packet Storm
291254 - hikvision ds-2cd7153-e_firmware
ds-2cd7153-e
Buffer overflow in the RTSP Packet Handler in Hikvision DS-2CD7153-E IP camera with firmware 4.1.0 b130111 (Jan 2013), and possibly other devices, allows remote attackers to cause a denial of service… CWE-119
Incorrect Access of Indexable Resource ('Range Error') 
CVE-2013-4977 2024-11-21 10:56 2014-03-4 Show GitHub Exploit DB Packet Storm
291255 - google android Android 3.0 through 4.1.x on Disney Mobile, eAccess, KDDI, NTT DOCOMO, SoftBank, and other devices does not properly implement the WebView class, which allows remote attackers to execute arbitrary me… CWE-20
 Improper Input Validation 
CVE-2013-4710 2024-11-21 10:56 2014-03-3 Show GitHub Exploit DB Packet Storm
291256 - hp lefthand
storevirtual_virtual_storage_appliance
storevirtual_4000
Unspecified vulnerability in dbd_manager in LeftHand OS before 11.0 in HP StoreVirtual 4000 and StoreVirtual VSA Software (formerly LeftHand Virtual SAN Appliance) allows remote attackers to execute … NVD-CWE-noinfo
CVE-2013-4841 2024-11-21 10:56 2014-02-26 Show GitHub Exploit DB Packet Storm
291257 - qualcomm quic_mobile_station_modem_kernel The CONFIG_STRICT_MEMORY_RWX implementation for the Linux kernel 3.x, as used in Qualcomm Innovation Center (QuIC) Android contributions for MSM devices and other products, does not properly consider… CWE-264
Permissions, Privileges, and Access Controls
CVE-2013-4737 2024-11-21 10:56 2014-02-15 Show GitHub Exploit DB Packet Storm
291258 - symantec protection_center
endpoint_protection_manager
SQL injection vulnerability in the management console in Symantec Endpoint Protection Manager (SEPM) 11.0 before 11.0.7405.1424 and 12.1 before 12.1.4023.4080, and Symantec Protection Center Small Bu… CWE-89
SQL Injection
CVE-2013-5015 2024-11-21 10:56 2014-02-14 Show GitHub Exploit DB Packet Storm
291259 - symantec protection_center
endpoint_protection_manager
The management console in Symantec Endpoint Protection Manager (SEPM) 11.0 before 11.0.7405.1424 and 12.1 before 12.1.4023.4080, and Symantec Protection Center Small Business Edition 12.x before 12.1… NVD-CWE-Other
CVE-2013-5014 2024-11-21 10:56 2014-02-14 Show GitHub Exploit DB Packet Storm
291260 - symantec web_gateway Multiple cross-site scripting (XSS) vulnerabilities in the management console on the Symantec Web Gateway (SWG) appliance before 5.2 allow remote attackers to inject arbitrary web script or HTML via … CWE-79
Cross-site Scripting
CVE-2013-5013 2024-11-21 10:56 2014-02-11 Show GitHub Exploit DB Packet Storm