Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 17, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
217091	4.9	警告	シトリックス・システムズ	-	Citrix XenDesktop における他のユーザのデスクトップへのアクセス権を取得される脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2014-4700	2014-07-14 17:31	2014-07-10	Show	GitHub Exploit DB Packet Storm

217092	3.5	注意	OpenStack Canonical	-	OpenStack Neutron の L3-agent におけるサービス運用妨害 (DoS) の脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2014-4167	2014-07-14 17:30	2014-06-7	Show	GitHub Exploit DB Packet Storm

217093	5	警告	Apache Software Foundation	-	Apache Syncope におけるパスワードを推測される脆弱性	CWE-310 暗号の問題	CVE-2014-3503	2014-07-14 17:29	2014-05-21	Show	GitHub Exploit DB Packet Storm

217094	7.2	危険	Docker Fedora Project	-	Docker における権限を取得される脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2014-3499	2014-07-14 17:28	2014-07-1	Show	GitHub Exploit DB Packet Storm

217095	4.3	警告	PNP4Nagios	-	PNP4Nagios におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2014-4908	2014-07-14 16:21	2014-06-12	Show	GitHub Exploit DB Packet Storm

217096	4.3	警告	op5 PNP4Nagios	-	PNP4Nagios の share/pnp/application/views/kohana_error_page.php におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2014-4907	2014-07-14 16:20	2014-04-6	Show	GitHub Exploit DB Packet Storm

217097	4.3	警告	Polldaddy Polls & Ratings plugin project	-	WordPress 用 Polldaddy Polls & Ratings プラグインにおけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2014-4856	2014-07-14 15:53	2014-07-2	Show	GitHub Exploit DB Packet Storm

217098	4.3	警告	Polylang project	-	WordPress 用 Polylang プラグインにおけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2014-4855	2014-07-14 15:50	2014-06-24	Show	GitHub Exploit DB Packet Storm

217099	4.3	警告	Ottawa PC & Mobile	-	WordPress 用 WP Construction Mode プラグインにおけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2014-4854	2014-07-14 15:50	2014-06-28	Show	GitHub Exploit DB Packet Storm

217100	6.5	警告	Dolibarr ERP & CRM	-	Dolibarr ERP/CRM における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2014-3992	2014-07-14 14:02	2014-07-8	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 17, 2026, 4:15 a.m.

No	CVSS	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
291631	-	canonical michael_vogt	ubuntu_linux ubuntu-system-service	ubuntu-system-service 0.2.4 before 0.2.4.1. 0.2.3 before 0.2.3.1, and 0.2.2 before 0.2.2.1 does not properly use D-Bus for communication with a polkit authority, which allows local users to bypass in…	CWE-264 Permissions, Privileges, and Access Controls	CVE-2013-1062	2024-11-21 10:48	2013-10-4	Show	GitHub Exploit DB Packet Storm

291632	-	marc_deslauriers canonical	software-properties ubuntu_linux	dbus/SoftwarePropertiesDBus.py in Software Properties 0.92.17 before 0.92.17.3, 0.92.9 before 0.92.9.3, and 0.82.7 before 0.82.7.5 does not properly use D-Bus for communication with a polkit authorit…	CWE-264 Permissions, Privileges, and Access Controls	CVE-2013-1061	2024-11-21 10:48	2013-10-4	Show	GitHub Exploit DB Packet Storm

291633	-	enea emerson	ose dl_8000_remote_terminal_unit roc_800l_remote_terminal_unit roc_800_remote_terminal_unit	The Emerson Process Management ROC800 RTU with software 3.50 and earlier, DL8000 RTU with software 2.30 and earlier, and ROC800L RTU with software 1.20 and earlier have hardcoded credentials in a ROM…	CWE-255 Credentials Management	CVE-2013-0694	2024-11-21 10:48	2013-10-3	Show	GitHub Exploit DB Packet Storm

291634	-	enea emerson	ose roc_800l_remote_terminal_unit dl_8000_remote_terminal_unit roc_800_remote_terminal_unit	The kernel in ENEA OSE on the Emerson Process Management ROC800 RTU with software 3.50 and earlier, DL8000 RTU with software 2.30 and earlier, and ROC800L RTU with software 1.20 and earlier performs …	CWE-200 Information Exposure	CVE-2013-0693	2024-11-21 10:48	2013-10-3	Show	GitHub Exploit DB Packet Storm

291635	-	enea emerson	ose roc_800l_remote_terminal_unit roc_800_remote_terminal_unit dl_8000_remote_terminal_unit	The kernel in ENEA OSE on the Emerson Process Management ROC800 RTU with software 3.50 and earlier, DL8000 RTU with software 2.30 and earlier, and ROC800L RTU with software 1.20 and earlier allows re…	CWE-264 Permissions, Privileges, and Access Controls	CVE-2013-0692	2024-11-21 10:48	2013-10-3	Show	GitHub Exploit DB Packet Storm

291636	-	enea emerson	ose roc_800l_remote_terminal_unit roc_800_remote_terminal_unit dl_8000_remote_terminal_unit	The TFTP server on the Emerson Process Management ROC800 RTU with software 3.50 and earlier, DL8000 RTU with software 2.30 and earlier, and ROC800L RTU with software 1.20 and earlier allows remote at…	CWE-94 Code Injection	CVE-2013-0689	2024-11-21 10:48	2013-10-3	Show	GitHub Exploit DB Packet Storm

291637	-	canonical	ubuntu_linux	A certain Ubuntu build procedure for perf, as distributed in the Linux kernel packages in Ubuntu 10.04 LTS, 12.04 LTS, 12.10, 13.04, and 13.10, sets the HOME environment variable to the ~buildd direc…	CWE-264 Permissions, Privileges, and Access Controls	CVE-2013-1060	2024-11-21 10:48	2013-09-25	Show	GitHub Exploit DB Packet Storm

291638	-	cisco	anyconnect_secure_mobility_client	Cisco AnyConnect Secure Mobility Client on Mac OS X uses weak permissions for a library directory, which allows local users to gain privileges via a crafted library file, aka Bug ID CSCue33619.	CWE-264 Permissions, Privileges, and Access Controls	CVE-2013-1130	2024-11-21 10:48	2013-09-21	Show	GitHub Exploit DB Packet Storm

291639	-	cisco	nx-os	The regex engine in the BGP implementation in Cisco NX-OS, when a complex regular expression is configured for inbound routes, allows remote attackers to cause a denial of service (device reload) via…	CWE-399 Resource Management Errors	CVE-2013-1121	2024-11-21 10:48	2013-09-20	Show	GitHub Exploit DB Packet Storm

291640	-	apple	iphone_os safari itunes	WebKit, as used in Apple iOS before 7, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site, a different vul…	CWE-119 Incorrect Access of Indexable Resource ('Range Error')	CVE-2013-1047	2024-11-21 10:48	2013-09-19	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed