Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 17, 2026, 6 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
217081 5 警告 Level Four Development - WordPress 用 EasyCart プラグインにおける設定情報を取得される脆弱性 CWE-200
情報漏えい
CVE-2014-4942 2014-07-15 18:24 2014-05-28 Show GitHub Exploit DB Packet Storm
217082 5 警告 Cross-RSS plugin project - WordPress 用 Cross-RSS プラグインにおける絶対パストラバーサルの脆弱性 CWE-22
パス・トラバーサル
CVE-2014-4941 2014-07-15 18:23 2014-05-29 Show GitHub Exploit DB Packet Storm
217083 5 警告 tera-charts project - WordPress 用 Tera Charts プラグインにおけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル
CVE-2014-4940 2014-07-15 18:22 2014-05-28 Show GitHub Exploit DB Packet Storm
217084 6.5 警告 Darell Sun - WordPress 用 ENL Newsletter プラグインにおける SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2014-4939 2014-07-15 18:21 2014-05-28 Show GitHub Exploit DB Packet Storm
217085 7.5 危険 Darell Sun - WordPress 用 WP Rss Poster プラグインにおける SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2014-4938 2014-07-15 18:19 2014-05-28 Show GitHub Exploit DB Packet Storm
217086 5 警告 BookX plugin project - WordPress 用 includes/bookx_export.php の BookX プラグインにおけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル
CVE-2014-4937 2014-07-15 18:18 2014-05-28 Show GitHub Exploit DB Packet Storm
217087 4.9 警告 アルバネットワークス株式会社 - Aruba Networks ClearPass の Policy Manager における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2014-4013 2014-07-15 15:34 2014-07-3 Show GitHub Exploit DB Packet Storm
217088 4.3 警告 フォーティネット - FortiGuard FortiWeb におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2014-4738 2014-07-15 15:27 2014-07-10 Show GitHub Exploit DB Packet Storm
217089 7.5 危険 Dahua Technology Co., Ltd - Dahua DVR における認証を回避される脆弱性 CWE-287
不適切な認証
CVE-2013-6117 2014-07-15 13:54 2013-11-13 Show GitHub Exploit DB Packet Storm
217090 7.5 危険 特定非営利活動法人 Seasar ファウンデーション - S2Struts において ClassLoader が操作可能な脆弱性 CWE-DesignError
CVE-2014-3893 2014-07-15 12:17 2014-07-15 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 17, 2026, 4:15 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
291651 - apple iphone_os Safari in Apple iOS before 7 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted XML document. CWE-119
Incorrect Access of Indexable Resource ('Range Error') 
CVE-2013-1036 2024-11-21 10:48 2013-09-19 Show GitHub Exploit DB Packet Storm
291652 - apple itunes The iTunes ActiveX control in Apple iTunes before 11.1 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site. CWE-119
Incorrect Access of Indexable Resource ('Range Error') 
CVE-2013-1035 2024-11-21 10:48 2013-09-19 Show GitHub Exploit DB Packet Storm
291653 - apple os_x_server Multiple cross-site scripting (XSS) vulnerabilities in Wiki Server in Apple Mac OS X Server before 2.2.2 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors. CWE-79
Cross-site Scripting
CVE-2013-1034 2024-11-21 10:48 2013-09-19 Show GitHub Exploit DB Packet Storm
291654 - apple iphone_os Data Protection in Apple iOS before 7 allows attackers to bypass intended limits on incorrect passcode entry, and consequently avoid a configured Erase Data setting, by leveraging the presence of an … CWE-264
Permissions, Privileges, and Access Controls
CVE-2013-0957 2024-11-21 10:48 2013-09-19 Show GitHub Exploit DB Packet Storm
291655 - apple mac_os_x Screen Lock in Apple Mac OS X before 10.8.5 does not properly track sessions, which allows remote authenticated users to bypass locking by leveraging screen-sharing access. CWE-264
Permissions, Privileges, and Access Controls
CVE-2013-1033 2024-11-21 10:48 2013-09-16 Show GitHub Exploit DB Packet Storm
291656 - apple mac_os_x
quicktime
QuickTime in Apple Mac OS X before 10.8.5 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted idsc atom in a QuickTi… CWE-119
Incorrect Access of Indexable Resource ('Range Error') 
CVE-2013-1032 2024-11-21 10:48 2013-09-16 Show GitHub Exploit DB Packet Storm
291657 - apple mac_os_x Power Management in Apple Mac OS X before 10.8.5 does not properly perform locking upon occurrences of a power assertion, which allows physically proximate attackers to bypass intended access restric… CWE-264
Permissions, Privileges, and Access Controls
CVE-2013-1031 2024-11-21 10:48 2013-09-16 Show GitHub Exploit DB Packet Storm
291658 - apple mac_os_x mdmclient in Mobile Device Management in Apple Mac OS X before 10.8.5 places a password on the command line, which allows local users to obtain sensitive information by listing the process. CWE-200
Information Exposure
CVE-2013-1030 2024-11-21 10:48 2013-09-16 Show GitHub Exploit DB Packet Storm
291659 - apple mac_os_x The kernel in Apple Mac OS X before 10.8.5 allows remote attackers to cause a denial of service (panic) via crafted IGMP packets that leverage incorrect, extraneous code in the IGMP parser. CWE-20
 Improper Input Validation 
CVE-2013-1029 2024-11-21 10:48 2013-09-16 Show GitHub Exploit DB Packet Storm
291660 - apple iphone_os
mac_os_x
The IPSec implementation in Apple Mac OS X before 10.8.5, when Hybrid Auth is used, does not verify X.509 certificates from security gateways, which allows man-in-the-middle attackers to spoof securi… CWE-20
 Improper Input Validation 
CVE-2013-1028 2024-11-21 10:48 2013-09-16 Show GitHub Exploit DB Packet Storm