Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 5, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
217151 5.4 警告 Doraemon Labs - Android 用 PopU 2: Get Likes on Instagram アプリケーションにおけるサーバになりすまされる脆弱性 CWE-310
暗号の問題 		CVE-2014-5679 2014-11-12 11:27 2014-09-3 Show GitHub Exploit DB Packet Storm
217152 5.4 警告 Mercadolibre - Android 用 MercadoLibre アプリケーションにおけるサーバになりすまされる脆弱性 CWE-310
暗号の問題 		CVE-2014-5658 2014-11-12 11:21 2014-09-3 Show GitHub Exploit DB Packet Storm
217153 5.4 警告 Pop-Hub Limited - Android 用 IQテストアプリケーションにおけるサーバになりすまされる脆弱性 CWE-310
暗号の問題 		CVE-2014-5678 2014-11-12 11:19 2014-09-3 Show GitHub Exploit DB Packet Storm
217154 5.4 警告 Matthew Saavedra - Android 用 CA Lottery Results アプリケーションにおけるサーバになりすまされる脆弱性 CWE-310
暗号の問題 		CVE-2014-5657 2014-11-12 11:19 2014-09-3 Show GitHub Exploit DB Packet Storm
217155 5.4 警告 TRA Mobile Apps - Android 用 TRA Auctions for Buyers アプリケーションにおけるサーバになりすまされる脆弱性 CWE-310
暗号の問題 		CVE-2014-5656 2014-11-12 11:17 2014-09-3 Show GitHub Exploit DB Packet Storm
217156 5.4 警告 #1 deals and maps app - Android 用 Point Inside Shopping & Travel アプリケーションにおけるサーバになりすまされる脆弱性 CWE-310
暗号の問題 		CVE-2014-5677 2014-11-12 11:17 2014-09-3 Show GitHub Exploit DB Packet Storm
217157 5.4 警告 Cheetah Mobile - Android 用 CM Browser - Fast & Secure アプリケーションにおけるサーバになりすまされる脆弱性 CWE-310
暗号の問題 		CVE-2014-5655 2014-11-12 11:15 2014-09-3 Show GitHub Exploit DB Packet Storm
217158 5.4 警告 カスペルスキー - Android 用 Kaspersky Internet Security アプリケーションにおけるサーバになりすまされる脆弱性 CWE-310
暗号の問題 		CVE-2014-5654 2014-11-12 11:13 2014-09-3 Show GitHub Exploit DB Packet Storm
217159 5.4 警告 Playrix Games - Android 用 Township アプリケーションにおけるサーバになりすまされる脆弱性 CWE-310
暗号の問題 		CVE-2014-5676 2014-11-12 11:13 2014-09-3 Show GitHub Exploit DB Packet Storm
217160 5.4 警告 Safeway Inc. - Android 用 Safeway アプリケーションにおけるサーバになりすまされる脆弱性 CWE-310
暗号の問題 		CVE-2014-5692 2014-11-12 11:11 2014-09-3 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 5, 2026, 4:11 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
290931 - ibm maximo_asset_management
change_and_configuration_management_database
tivoli_asset_management_for_it
tivoli_it_asset_management_for_it
tivoli_service_request_manager
maximo_service_desk… 		IBM Maximo Asset Management 7.x before 7.1.1.7 LAFIX.20140319-0837 and 7.5.x before 7.5.0.5 IFIX006; SmartCloud Control Desk 7.x before 7.5.0.3 and 7.5.1.x before 7.5.1.2; and Tivoli IT Asset Managem… CWE-200
Information Exposure 		CVE-2013-6741 2024-11-21 10:59 2014-05-27 Show GitHub Exploit DB Packet Storm
290932 - opentext exceed_ondemand The client in OpenText Exceed OnDemand (EoD) 8 supports anonymous ciphers by default, which allows man-in-the-middle attackers to bypass server certificate validation, redirect a connection, and obta… CWE-310
Cryptographic Issues 		CVE-2013-6807 2024-11-21 10:59 2014-05-19 Show GitHub Exploit DB Packet Storm
290933 - opentext exceed_ondemand OpenText Exceed OnDemand (EoD) 8 allows man-in-the-middle attackers to disable bidirectional authentication and obtain sensitive information via a crafted string in a response, which triggers a downg… CWE-287
Improper Authentication 		CVE-2013-6806 2024-11-21 10:59 2014-05-19 Show GitHub Exploit DB Packet Storm
290934 - opentext exceed_ondemand OpenText Exceed OnDemand (EoD) 8 uses weak encryption for passwords, which makes it easier for (1) remote attackers to discover credentials by sniffing the network or (2) local users to discover cred… CWE-310
Cryptographic Issues 		CVE-2013-6805 2024-11-21 10:59 2014-05-19 Show GitHub Exploit DB Packet Storm
290935 - openvas openvas_administrator OpenVAS Administrator 1.2 before 1.2.2 and 1.3 before 1.3.2 allows remote attackers to bypass the OAP authentication restrictions and execute OAP commands via a crafted OAP request for version inform… CWE-287
Improper Authentication 		CVE-2013-6766 2024-11-21 10:59 2014-05-19 Show GitHub Exploit DB Packet Storm
290936 - openvas openvas_manager OpenVAS Manager 3.0 before 3.0.7 and 4.0 before 4.0.4 allows remote attackers to bypass the OMP authentication restrictions and execute OMP commands via a crafted OMP request for version information,… CWE-287
Improper Authentication 		CVE-2013-6765 2024-11-21 10:59 2014-05-19 Show GitHub Exploit DB Packet Storm
290937 - unrealircd unrealircd Use-after-free vulnerability in UnrealIRCd 3.2.10 before 3.2.10.2 allows remote attackers to cause a denial of service (crash) via unspecified vectors. NOTE: this identifier was SPLIT per ADT2 due t… CWE-399
 Resource Management Errors 		CVE-2013-6413 2024-11-21 10:59 2014-05-19 Show GitHub Exploit DB Packet Storm
290938 - mediawiki mediawiki MediaWiki before 1.19.10, 1.2x before 1.21.4, and 1.22.x before 1.22.1 allows remote attackers to obtain information about deleted page via the (1) log API, (2) enhanced RecentChanges, and (3) user w… CWE-200
Information Exposure 		CVE-2013-6472 2024-11-21 10:59 2014-05-12 Show GitHub Exploit DB Packet Storm
290939 - mediawiki mediawiki Cross-site scripting (XSS) vulnerability in MediaWiki before 1.19.10, 1.2x before 1.21.4, and 1.22.x before 1.22.1 allows remote attackers to inject arbitrary web script or HTML via a -o-link attribu… CWE-79
Cross-site Scripting 		CVE-2013-6454 2024-11-21 10:59 2014-05-12 Show GitHub Exploit DB Packet Storm
290940 - mediawiki mediawiki MediaWiki before 1.19.10, 1.2x before 1.21.4, and 1.22.x before 1.22.1 does not properly sanitize SVG files, which allows remote attackers to have unspecified impact via invalid XML. CWE-20
 Improper Input Validation  		CVE-2013-6453 2024-11-21 10:59 2014-05-12 Show GitHub Exploit DB Packet Storm