Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 30, 2026, 2 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
217181 7.2 危険 マイクロソフト - 複数の Microsoft Windows 製品のカーネルモードドライバの fastfat.sys における任意のコードを実行される脆弱性 CWE-399
リソース管理の問題
CVE-2014-4115 2014-10-21 11:51 2014-10-14 Show GitHub Exploit DB Packet Storm
217182 5.8 警告 オラクル - Oracle Identity Manager におけるオープンリダイレクトの脆弱性 CWE-20
不適切な入力確認
CVE-2014-2880 2014-10-21 11:01 2014-04-3 Show GitHub Exploit DB Packet Storm
217183 5 警告 IBM
Apache Software Foundation
オラクル
- Apache Tomcat の java/org/apache/coyote/ajp/AbstractAjpProcessor.java におけるサービス運用妨害 (DoS) の脆弱性 CWE-20
不適切な入力確認
CVE-2014-0095 2014-10-21 10:50 2014-03-27 Show GitHub Exploit DB Packet Storm
217184 4.3 警告 IBM
Apache Software Foundation
オラクル
- Apache Tomcat の org/apache/catalina/connector/CoyoteAdapter.java におけるセッション固定攻撃を実行される脆弱性 CWE-20
不適切な入力確認
CVE-2014-0033 2014-10-21 10:43 2014-01-31 Show GitHub Exploit DB Packet Storm
217185 7.5 危険 Epicor Software - Epicor Procurement における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2014-4313 2014-10-20 18:33 2014-10-3 Show GitHub Exploit DB Packet Storm
217186 4.3 警告 Epicor Software - Epicor Enterprise におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2014-4312 2014-10-20 18:33 2014-09-30 Show GitHub Exploit DB Packet Storm
217187 4.3 警告 CloudBees - CloudBees Jenkins 用 Monitoring プラグインにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2014-3678 2014-10-20 18:18 2014-10-1 Show GitHub Exploit DB Packet Storm
217188 4 警告 IBM - IBM WebSphere Portal における認証情報を取得される脆弱性 CWE-200
情報漏えい
CVE-2014-4761 2014-10-20 18:17 2014-10-7 Show GitHub Exploit DB Packet Storm
217189 4.3 警告 Textpattern - Textpattern CMS におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2014-4737 2014-10-20 18:14 2014-09-20 Show GitHub Exploit DB Packet Storm
217190 4.9 警告 Linux - Linux Kernel の fs/namespace.c の pivot_root の実装におけるサービス運用妨害 (DoS) の脆弱性 CWE-399
リソース管理の問題
CVE-2014-7970 2014-10-20 18:12 2014-10-9 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 30, 2026, 4:16 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
291131 - eucalyptus eucalyptus The web services APIs in Eucalyptus 2.0 through 3.4.1 allow remote attackers to cause a denial of service via vectors related to the "network connection clean up code" and (1) Cloud Controller (CLC),… CWE-20
 Improper Input Validation 
CVE-2013-4768 2024-11-21 10:56 2014-04-16 Show GitHub Exploit DB Packet Storm
291132 - reviewboard review_board Cross-site scripting (XSS) vulnerability in the Submitters list in Review Board 1.6.x before 1.6.18 and 1.7.x before 1.7.12 allows remote attackers to inject arbitrary web script or HTML via a user f… CWE-79
Cross-site Scripting
CVE-2013-4795 2024-11-21 10:56 2014-04-11 Show GitHub Exploit DB Packet Storm
291133 - puppet puppet_enterprise Multiple cross-site request forgery (CSRF) vulnerabilities in Puppet Enterprise (PE) before 3.0.1 allow remote attackers to hijack the authentication of users for requests that deleting a (1) report,… CWE-352
 Origin Validation Error
CVE-2013-4963 2024-11-21 10:56 2014-03-15 Show GitHub Exploit DB Packet Storm
291134 - hp system_management_homepage Unspecified vulnerability in HP System Management Homepage (SMH) before 7.3 allows remote attackers to obtain sensitive information via unknown vectors. NVD-CWE-noinfo
CVE-2013-4846 2024-11-21 10:56 2014-03-14 Show GitHub Exploit DB Packet Storm
291135 - puppet puppet_enterprise Puppet Enterprise before 3.2.0 does not properly restrict access to node endpoints in the console, which allows remote attackers to obtain sensitive information via unspecified vectors. CWE-264
Permissions, Privileges, and Access Controls
CVE-2013-4971 2024-11-21 10:56 2014-03-9 Show GitHub Exploit DB Packet Storm
291136 - puppet puppet_enterprise The master external node classification script in Puppet Enterprise before 3.2.0 does not verify the identity of consoles, which allows remote attackers to create arbitrary classifications on the mas… CWE-287
Improper Authentication
CVE-2013-4966 2024-11-21 10:56 2014-03-9 Show GitHub Exploit DB Packet Storm
291137 - avtech avn801_dvr_firmware
avn801_dvr
Buffer overflow in cgi-bin/user/Config.cgi in AVTECH AVN801 DVR with firmware 1017-1003-1009-1003 and earlier, and possibly other devices, allows remote attackers to cause a denial of service (device… CWE-119
Incorrect Access of Indexable Resource ('Range Error') 
CVE-2013-4981 2024-11-21 10:56 2014-03-4 Show GitHub Exploit DB Packet Storm
291138 - avtech avn801_dvr_firmware
avn801_dvr
Buffer overflow in the RTSP Packet Handler in AVTECH AVN801 DVR with firmware 1017-1003-1009-1003 and earlier, and possibly other devices, allows remote attackers to cause a denial of service (device… CWE-119
Incorrect Access of Indexable Resource ('Range Error') 
CVE-2013-4980 2024-11-21 10:56 2014-03-4 Show GitHub Exploit DB Packet Storm
291139 - hikvision ds-2cd7153-e_firmware
ds-2cd7153-e
Buffer overflow in the RTSP Packet Handler in Hikvision DS-2CD7153-E IP camera with firmware 4.1.0 b130111 (Jan 2013), and possibly other devices, allows remote attackers to cause a denial of service… CWE-119
Incorrect Access of Indexable Resource ('Range Error') 
CVE-2013-4977 2024-11-21 10:56 2014-03-4 Show GitHub Exploit DB Packet Storm
291140 - google android Android 3.0 through 4.1.x on Disney Mobile, eAccess, KDDI, NTT DOCOMO, SoftBank, and other devices does not properly implement the WebView class, which allows remote attackers to execute arbitrary me… CWE-20
 Improper Input Validation 
CVE-2013-4710 2024-11-21 10:56 2014-03-3 Show GitHub Exploit DB Packet Storm