Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 21, 2026, 12:08 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
217101 4.3 警告 Synology Inc. - Synology DiskStation Manager 用 Photo Station におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2012-1556 2014-09-16 15:15 2012-06-3 Show GitHub Exploit DB Packet Storm
217102 5 警告 mPAY24 - PrestaShop 用 mPAY24 支払いモジュールにおける認証情報などの重要な情報を取得される脆弱性 CWE-200
情報漏えい 		CVE-2014-2009 2014-09-16 14:52 2014-09-3 Show GitHub Exploit DB Packet Storm
217103 7.5 危険 mPAY24 - PrestaShop 用 mPAY24 支払いモジュール の confirm.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2014-2008 2014-09-16 14:51 2014-09-3 Show GitHub Exploit DB Packet Storm
217104 7.5 危険 IBM - 複数の IBM Storwize デバイスおよび SAN ボリューム・コントローラーにおける管理者のスーパーユーザパスワードをデフォルト値にリセットされる脆弱性 CWE-255
証明書・パスワード管理 		CVE-2014-4811 2014-09-16 14:51 2014-06-11 Show GitHub Exploit DB Packet Storm
217105 4 警告 IBM - IBM WebSphere Portal におけるサービス運用妨害 (DoS) の脆弱性 CWE-399
リソース管理の問題 		CVE-2014-4792 2014-09-16 14:51 2014-09-15 Show GitHub Exploit DB Packet Storm
217106 3.5 注意 IBM - IBM WebSphere Portal におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2014-4762 2014-09-16 14:48 2014-09-15 Show GitHub Exploit DB Packet Storm
217107 5 警告 Ecava - Ecava IntegraXor SCADA サーバにおけるフルパス名を取得される脆弱性 CWE-200
情報漏えい 		CVE-2014-2377 2014-09-16 14:35 2014-09-11 Show GitHub Exploit DB Packet Storm
217108 7.5 危険 Ecava - Ecava IntegraXor SCADA サーバにおける SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2014-2376 2014-09-16 14:34 2014-09-11 Show GitHub Exploit DB Packet Storm
217109 9 危険 Ecava - Ecava IntegraXor SCADA サーバにおける任意のファイルを読まれる脆弱性 CWE-200
情報漏えい 		CVE-2014-2375 2014-09-16 14:34 2014-09-11 Show GitHub Exploit DB Packet Storm
217110 4.3 警告 Avolve Software - Avolve Software ProjectDox におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2014-5129 2014-09-16 11:07 2014-09-3 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 21, 2026, 4:10 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
291501 - xen xen Xen 4.2.x and 4.1.x does not properly restrict access to IRQs, which allows local stub domain clients to gain access to IRQs and cause a denial of service via vectors related to "passed-through IRQs … CWE-264
Permissions, Privileges, and Access Controls 		CVE-2013-1919 2024-11-21 10:50 2013-05-14 Show GitHub Exploit DB Packet Storm
291502 - xen xen Certain page table manipulation operations in Xen 4.1.x, 4.2.x, and earlier are not preemptible, which allows local PV kernels to cause a denial of service via vectors related to "deep page table tra… CWE-119
Incorrect Access of Indexable Resource ('Range Error')  		CVE-2013-1918 2024-11-21 10:50 2013-05-14 Show GitHub Exploit DB Packet Storm
291503 - xen xen Xen 3.1 through 4.x, when running 64-bit hosts on Intel CPUs, does not clear the NT flag when using an IRET after a SYSENTER instruction, which allows PV guest users to cause a denial of service (hyp… CWE-20
 Improper Input Validation  		CVE-2013-1917 2024-11-21 10:50 2013-05-14 Show GitHub Exploit DB Packet Storm
291504 - fedoraproject 389_directory_server The do_search function in ldap/servers/slapd/search.c in 389 Directory Server 1.2.x before 1.2.11.20 and 1.3.x before 1.3.0.5 does not properly restrict access to entries when the nsslapd-allow-anony… CWE-264
Permissions, Privileges, and Access Controls 		CVE-2013-1897 2024-11-21 10:50 2013-05-14 Show GitHub Exploit DB Packet Storm
291505 - linux linux_kernel The veth (aka virtual Ethernet) driver in the Linux kernel before 2.6.34 does not properly manage skbs during congestion, which allows remote attackers to cause a denial of service (system crash) by … CWE-399
 Resource Management Errors 		CVE-2013-2017 2024-11-21 10:50 2013-05-3 Show GitHub Exploit DB Packet Storm
291506 - linux linux_kernel The scm_set_cred function in include/net/scm.h in the Linux kernel before 3.8.11 uses incorrect uid and gid values during credentials passing, which allows local users to gain privileges via a crafte… CWE-264
Permissions, Privileges, and Access Controls 		CVE-2013-1979 2024-11-21 10:50 2013-05-3 Show GitHub Exploit DB Packet Storm
291507 - linux linux_kernel kernel/user_namespace.c in the Linux kernel before 3.8.9 does not have appropriate capability requirements for the uid_map and gid_map files, which allows local users to gain privileges by opening a … CWE-264
Permissions, Privileges, and Access Controls 		CVE-2013-1959 2024-11-21 10:50 2013-05-3 Show GitHub Exploit DB Packet Storm
291508 - apache subversion The mod_dav_svn Apache HTTPD server module in Subversion 1.7.0 through 1.7.8 allows remote attackers to cause a denial of service (segmentation fault and crash) via a log REPORT request with an inval… CWE-119
Incorrect Access of Indexable Resource ('Range Error')  		CVE-2013-1884 2024-11-21 10:50 2013-05-2 Show GitHub Exploit DB Packet Storm
291509 - apache subversion The mod_dav_svn Apache HTTPD server module in Subversion 1.6.x through 1.6.20 and 1.7.0 through 1.7.8 allows remote attackers to cause a denial of service (NULL pointer dereference and crash) via a P… NVD-CWE-Other
CVE-2013-1849 2024-11-21 10:50 2013-05-2 Show GitHub Exploit DB Packet Storm
291510 - apache subversion The mod_dav_svn Apache HTTPD server module in Subversion 1.6.0 through 1.6.20 and 1.7.0 through 1.7.8 allows remote attackers to cause a denial of service (NULL pointer dereference and crash) via an … NVD-CWE-Other
CVE-2013-1847 2024-11-21 10:50 2013-05-2 Show GitHub Exploit DB Packet Storm