Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 6, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
217011 6 警告 iMember360 - WordPress 用 iMember360 プラグインにおける任意のコマンドを実行される脆弱性 CWE-94
コード・インジェクション 		CVE-2014-8949 2014-11-19 11:37 2014-04-24 Show GitHub Exploit DB Packet Storm
217012 4.3 警告 Pricop - phpSound におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2014-8954 2014-11-19 11:25 2014-08-10 Show GitHub Exploit DB Packet Storm
217013 4.3 警告 phpMemcachedAdmin project - phpMemcachedAdmin におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2014-8732 2014-11-19 11:15 2014-11-12 Show GitHub Exploit DB Packet Storm
217014 6.2 警告 F5 Networks - F5 BIG-IP におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2014-8727 2014-11-19 10:58 2014-09-16 Show GitHub Exploit DB Packet Storm
217015 7.5 危険 PHP-Fusion - PHP-Fusion における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2014-8596 2014-11-19 10:35 2014-08-6 Show GitHub Exploit DB Packet Storm
217016 6.5 警告 Zoho Corporation - ManageEngine Password Manager Pro および Password Manager Pro Managed Service Providers における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2014-8499 2014-11-18 19:25 2014-11-8 Show GitHub Exploit DB Packet Storm
217017 6.5 警告 Zoho Corporation - ManageEngine Password Manager Pro および Password Manager Pro Managed Service Providers の BulkEditSearchResult.cc における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2014-8498 2014-11-18 19:24 2014-11-8 Show GitHub Exploit DB Packet Storm
217018 5 警告 Docker - Docker および docker-py におけるダウングレード攻撃される脆弱性 CWE-Other
その他 		CVE-2014-5277 2014-11-18 18:34 2014-10-30 Show GitHub Exploit DB Packet Storm
217019 5 警告 独立行政法人情報処理推進機構 (IPA) - iLogScanner におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2014-7248 2014-11-18 18:21 2014-11-14 Show GitHub Exploit DB Packet Storm
217020 7.1 危険 チェック・ポイント・ソフトウェア・テクノロジーズ - Check Point Security Gateway におけるサービス運用妨害 (DoS) の脆弱性 CWE-noinfo
情報不足 		CVE-2014-8952 2014-11-18 18:19 2014-05-19 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 7, 2026, 4:13 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
290841 6.1 MEDIUM
Network 		nodejs node.js The validator module before 1.1.0 for Node.js allows remote attackers to bypass the cross-site scripting (XSS) filter via vectors related to UI redressing. CWE-79
Cross-site Scripting 		CVE-2013-7453 2024-11-21 11:01 2017-01-24 Show GitHub Exploit DB Packet Storm
290842 6.1 MEDIUM
Network 		nodejs node.js The validator module before 1.1.0 for Node.js allows remote attackers to bypass the cross-site scripting (XSS) filter via a crafted javascript URI. CWE-79
Cross-site Scripting 		CVE-2013-7452 2024-11-21 11:01 2017-01-24 Show GitHub Exploit DB Packet Storm
290843 6.1 MEDIUM
Network 		nodejs node.js The validator module before 1.1.0 for Node.js allows remote attackers to bypass the XSS filter via a nested tag. CWE-79
Cross-site Scripting 		CVE-2013-7451 2024-11-21 11:01 2017-01-24 Show GitHub Exploit DB Packet Storm
290844 3.3 LOW
Local 		redislabs
debian 		redis
debian_linux 		linenoise, as used in Redis before 3.2.3, uses world-readable permissions for .rediscli_history, which allows local users to obtain sensitive information by reading the file. CWE-200
Information Exposure 		CVE-2013-7458 2024-11-21 11:01 2016-08-10 Show GitHub Exploit DB Packet Storm
290845 7.6 HIGH
Network 		libgd libgd gd_interpolation.c in the GD Graphics Library (aka libgd) before 2.1.1, as used in PHP before 5.5.36, 5.6.x before 5.6.22, and 7.x before 7.0.7, allows remote attackers to cause a denial of service (… CWE-125
Out-of-bounds Read 		CVE-2013-7456 2024-11-21 11:01 2016-08-7 Show GitHub Exploit DB Packet Storm
290846 7.8 HIGH
Local 		google android Unspecified vulnerability in the Qualcomm components in Android before 2016-07-05 allows attackers to gain privileges via a crafted application. NVD-CWE-noinfo
CVE-2013-7457 2024-11-21 11:01 2016-07-11 Show GitHub Exploit DB Packet Storm
290847 5.9 MEDIUM
Network 		python python The ssl.match_hostname function in CPython (aka Python) before 2.7.9 and 3.x before 3.3.3 does not properly handle wildcards in hostnames, which might allow man-in-the-middle attackers to spoof serve… CWE-19
 Data Processing Errors 		CVE-2013-7440 2024-11-21 11:01 2016-06-8 Show GitHub Exploit DB Packet Storm
290848 7.5 HIGH
Network 		php php file before 5.18, as used in the Fileinfo component in PHP before 5.6.0, allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via a zero root_storage … NVD-CWE-Other
CVE-2014-0236 2024-11-21 11:01 2016-05-16 Show GitHub Exploit DB Packet Storm
290849 9.8 CRITICAL
Network 		littlecms little_cms_color_engine Double free vulnerability in the DefaultICCintents function in cmscnvrt.c in liblcms2 in Little CMS 2.x before 2.6 allows remote attackers to execute arbitrary code via a malformed ICC profile that t… NVD-CWE-Other
CVE-2013-7455 2024-11-21 11:01 2016-05-7 Show GitHub Exploit DB Packet Storm
290850 6.5 MEDIUM
Network 		canonical
xchat
hexchat_project 		ubuntu_linux
xchat
xchat_gnome
hexchat 		The ssl_do_connect function in common/server.c in HexChat before 2.10.2, XChat, and XChat-GNOME does not verify that the server hostname matches a domain name in the X.509 certificate, which allows m… CWE-310
Cryptographic Issues 		CVE-2013-7449 2024-11-21 11:01 2016-04-21 Show GitHub Exploit DB Packet Storm