Vulnerability Search Top

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

Vulnerability Information Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 6, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
217061	6.8	警告	FFmpeg	-	FFmpeg の libavcodec/dsputil.c における整数符号エラーの脆弱性	CWE-189 数値処理の問題	CVE-2013-7010	2014-04-8 09:42	2013-08-30	Show	GitHub Exploit DB Packet Storm

217062	2.6	注意	オラクル	-	Oracle Java SE および JavaFX における脆弱性	CWE-noinfo 情報不足	CVE-2013-5854	2014-04-7 18:06	2013-10-15	Show	GitHub Exploit DB Packet Storm

217063	5	警告	マイクロソフトアドビシステムズ Google	-	Adobe Flash Player におけるクリップボードを読まれる脆弱性	CWE-200 情報漏えい	CVE-2014-0504	2014-04-7 18:06	2014-03-11	Show	GitHub Exploit DB Packet Storm

217064	6.9	警告	freedesktop.org Canonical	-	udisks におけるスタックベースのバッファオーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2014-0004	2014-04-7 18:05	2014-03-10	Show	GitHub Exploit DB Packet Storm

217065	6.4	警告	マイクロソフトアドビシステムズ Google	-	Adobe Flash Player における同一生成元ポリシーを回避される脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2014-0503	2014-04-7 18:04	2014-03-11	Show	GitHub Exploit DB Packet Storm

217066	7.6	危険	サン・マイクロシステムズオラクル	-	Oracle Java SE および Java SE Embedded における Deployment に関する脆弱性	CWE-noinfo 情報不足	CVE-2013-5852	2014-04-7 18:03	2013-10-15	Show	GitHub Exploit DB Packet Storm

217067	5	警告	Mutt	-	Mutt の copy.c におけるバッファオーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2014-0467	2014-04-7 18:02	2014-03-12	Show	GitHub Exploit DB Packet Storm

217068	9.3	危険	オラクル	-	Oracle Java SE および JavaFX における JavaFX に関する脆弱性	CWE-noinfo 情報不足	CVE-2013-5846	2014-04-7 18:02	2013-10-15	Show	GitHub Exploit DB Packet Storm

217069	9.3	危険	Mozilla Foundation	-	複数の Mozilla 製品における任意のコードを実行される脆弱性	CWE-94 コード・インジェクション	CVE-2013-6671	2014-04-7 18:01	2013-12-10	Show	GitHub Exploit DB Packet Storm

217070	6.4	警告	Apache Software Foundation	-	Apache Solr の DocumentAnalysisRequestHandler における脆弱性	CWE-noinfo 情報不足	CVE-2013-6408	2014-04-7 17:57	2013-05-30	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 6, 2026, 4:08 a.m.

No	CVSS	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
294921	-	vbulletin	vbulletin	Open redirect vulnerability in forum/login.php in vBulletin 4.1.3 and earlier allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via the url parameter in a …	CWE-20 Improper Input Validation	CVE-2011-5251	2024-11-21 10:33	2013-01-1	Show	GitHub Exploit DB Packet Storm

294922	-	redhat	resteasy	The readFrom function in providers.jaxb.JAXBXmlTypeProvider in RESTEasy before 2.3.2 allows remote attackers to read arbitrary files via an external entity reference in a Java Architecture for XML Bi…	CWE-200 Information Exposure	CVE-2011-5245	2024-11-21 10:33	2012-11-24	Show	GitHub Exploit DB Packet Storm

294923	-	tetex gnome t1lib	tetex evince t1lib	Multiple off-by-one errors in the (1) token and (2) linetoken functions in backend/dvi/mdvi-lib/afmparse.c in t1lib, as used in teTeX 3.0.x, GNOME evince, and possibly other products, allow remote at…	CWE-189 Numeric Errors	CVE-2011-5244	2024-11-21 10:33	2012-11-19	Show	GitHub Exploit DB Packet Storm

294924	-	abraham_williams	twitteroauth	TwitterOAuth does not verify that the server hostname matches a domain name in the subject's Common Name (CN) or subjectAltName field of the X.509 certificate, which allows man-in-the-middle attacker…	CWE-20 Improper Input Validation	CVE-2011-5243	2024-11-21 10:33	2012-11-6	Show	GitHub Exploit DB Packet Storm

294925	-	themattharris	tmhoauth	tmhOAuth before 0.61 does not verify that the server hostname matches a domain name in the subject's Common Name (CN) or subjectAltName field of the X.509 certificate, which allows man-in-the-middle …	CWE-20 Improper Input Validation	CVE-2011-5242	2024-11-21 10:33	2012-11-6	Show	GitHub Exploit DB Packet Storm

294926	-	services_twitter_group	services_twitter	Services_Twitter 0.6.3 does not verify that the server hostname matches a domain name in the subject's Common Name (CN) or subjectAltName field of the X.509 certificate, which allows man-in-the-middl…	CWE-20 Improper Input Validation	CVE-2011-5241	2024-11-21 10:33	2012-11-6	Show	GitHub Exploit DB Packet Storm

294927	-	magentocommerce	magento	Magento 1.5 and 1.6.2 does not verify that the server hostname matches a domain name in the subject's Common Name (CN) or subjectAltName field of the X.509 certificate, which allows man-in-the-middle…	CWE-20 Improper Input Validation	CVE-2011-5240	2024-11-21 10:33	2012-11-6	Show	GitHub Exploit DB Packet Storm

294928	-	civicrm	civicrm	CiviCRM 4.0.5 and 4.1.1 does not verify that the server hostname matches a domain name in the subject's Common Name (CN) or subjectAltName field of the X.509 certificate, which allows man-in-the-midd…	CWE-20 Improper Input Validation	CVE-2011-5239	2024-11-21 10:33	2012-11-6	Show	GitHub Exploit DB Packet Storm

294929	-	google	checkout-php	google-checkout-php-sample-code before 1.3.2 does not verify that the server hostname matches a domain name in the subject's Common Name (CN) or subjectAltName field of the X.509 certificate, which a…	CWE-20 Improper Input Validation	CVE-2011-5238	2024-11-21 10:33	2012-11-6	Show	GitHub Exploit DB Packet Storm

294930	-	paypal	wps_toolkit	PayPal WPS ToolKit does not verify that the server hostname matches a domain name in the subject's Common Name (CN) or subjectAltName field of the X.509 certificate, which allows man-in-the-middle at…	CWE-20 Improper Input Validation	CVE-2011-5237	2024-11-21 10:33	2012-11-6	Show	GitHub Exploit DB Packet Storm