Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":April 29, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
217831 10 危険 シスコシステムズ - Cisco Secure Access Control System の RMI インターフェースにおける管理アクセス権を取得される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2014-0648 2014-01-20 16:04 2014-01-15 Show GitHub Exploit DB Packet Storm
217832 4 警告 シスコシステムズ - Cisco WebEx Meetings Server における平文の管理者パスワードを取得される脆弱性 CWE-255
証明書・パスワード管理 		CVE-2013-6687 2014-01-20 16:03 2014-01-16 Show GitHub Exploit DB Packet Storm
217833 6.8 警告 マカフィー - McAfee Vulnerability Manager の Enterprise Manager におけるクロスサイトリクエストフォージェリの脆弱性 CWE-352
同一生成元ポリシー違反 		CVE-2014-1473 2014-01-20 15:26 2014-01-9 Show GitHub Exploit DB Packet Storm
217834 4.3 警告 マカフィー - McAfee Vulnerability Manager の Enterprise Manager におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2014-1472 2014-01-20 15:20 2014-01-9 Show GitHub Exploit DB Packet Storm
217835 10 危険 Sierra Wireless - Sierra Wireless AirLink Raven X EV-DO ゲートウェイにおけるファームウェアをリプログラムされる脆弱性 CWE-287
不適切な認証 		CVE-2013-2820 2014-01-20 14:39 2014-01-10 Show GitHub Exploit DB Packet Storm
217836 9.3 危険 Sierra Wireless - Sierra Wireless AirLink Raven X EV-DO ゲートウェイにおけるトロイの木馬ファームウェアをインストールされる脆弱性 CWE-255
証明書・パスワード管理 		CVE-2013-2819 2014-01-20 14:33 2014-01-10 Show GitHub Exploit DB Packet Storm
217837 5 警告 Libreswan Project - libreswan の pluto/ikev2_parent.c 内の ikev2parent_inI1outR1 関数におけるサービス運用妨害 (DoS) の脆弱性 CWE-20
不適切な入力確認 		CVE-2013-7294 2014-01-20 13:53 2013-12-11 Show GitHub Exploit DB Packet Storm
217838 10 危険 アドビシステムズ - Windows および Mac OS X 上で稼働する Adobe Reader および Acrobat における任意のコードを実行される脆弱性 CWE-399
リソース管理の問題 		CVE-2014-0496 2014-01-20 13:50 2014-01-14 Show GitHub Exploit DB Packet Storm
217839 10 危険 アドビシステムズ - Windows および Mac OS X 上で稼働する Adobe Reader および Acrobat における任意のコードを実行される脆弱性 CWE-119
バッファエラー 		CVE-2014-0495 2014-01-20 13:48 2014-01-14 Show GitHub Exploit DB Packet Storm
217840 10 危険 アドビシステムズ - Windows および Mac OS X 上で稼働する Adobe Reader および Acrobat における任意のコードを実行される脆弱性 CWE-119
バッファエラー 		CVE-2014-0493 2014-01-20 13:47 2014-01-14 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:April 29, 2026, 4:51 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
295161 - microsoft powerpoint Untrusted search path vulnerability in Microsoft PowerPoint 2007 SP2 and 2010 allows local users to gain privileges via a Trojan horse DLL in the current working directory, aka "PowerPoint Insecure L… NVD-CWE-Other
CVE-2011-3396 2024-11-21 10:30 2011-12-14 Show GitHub Exploit DB Packet Storm
295162 - redhat freeipa Cross-site request forgery (CSRF) vulnerability in the management interface in FreeIPA before 2.1.4 allows remote attackers to hijack the authentication of administrators for requests that make confi… CWE-352
 Origin Validation Error 		CVE-2011-3636 2024-11-21 10:30 2011-12-8 Show GitHub Exploit DB Packet Storm
295163 - apache http_server
http_server2.0a9
http_server2.0a7
http_server2.0a8
http_server2.0a2
http_server2.0a5
http_server2.0a3
http_server2.0a6
http_server2.0a1
http_server2.0a4 		The mod_proxy module in the Apache HTTP Server 2.0.x through 2.0.64 and 2.2.x before 2.2.18, when the Revision 1179239 patch is in place, does not properly interact with use of (1) RewriteRule and (2… CWE-20
 Improper Input Validation  		CVE-2011-3639 2024-11-21 10:30 2011-11-30 Show GitHub Exploit DB Packet Storm
295164 - arora-browser arora Arora, possibly 0.11 and other versions, does not use a certain font when rendering certificate fields in a security dialog, which allows remote attackers to spoof the common name (CN) of a certifica… CWE-20
 Improper Input Validation  		CVE-2011-3367 2024-11-21 10:30 2011-11-30 Show GitHub Exploit DB Packet Storm
295165 - adjam rekonq Rekonq 0.7.0 and earlier does not use a certain font when rendering certificate fields in a security dialog, which allows remote attackers to spoof the common name (CN) of a certificate via rich text. CWE-20
 Improper Input Validation  		CVE-2011-3366 2024-11-21 10:30 2011-11-30 Show GitHub Exploit DB Packet Storm
295166 - kde kde_sc The KDE SSL Wrapper (KSSL) API in KDE SC 4.6.0 through 4.7.1, and possibly earlier versions, does not use a certain font when rendering certificate fields in a security dialog, which allows remote at… CWE-20
 Improper Input Validation  		CVE-2011-3365 2024-11-21 10:30 2011-11-30 Show GitHub Exploit DB Packet Storm
295167 - phpmyadmin phpmyadmin phpmyadmin.css.php in phpMyAdmin 3.4.x before 3.4.6 allows remote attackers to obtain sensitive information via an array-typed js_frame parameter to phpmyadmin.css.php, which reveals the installation… CWE-20
 Improper Input Validation  		CVE-2011-3646 2024-11-21 10:30 2011-11-18 Show GitHub Exploit DB Packet Storm
295168 - clamav clamav The bytecode engine in ClamAV before 0.97.3 allows remote attackers to cause a denial of service (crash) via vectors related to "recursion level" and (1) libclamav/bytecode.c and (2) libclamav/byteco… CWE-189
Numeric Errors 		CVE-2011-3627 2024-11-21 10:30 2011-11-18 Show GitHub Exploit DB Packet Storm
295169 - xelerance openswan Openswan 2.6.29 through 2.6.35 allows remote attackers to cause a denial of service (NULL pointer dereference and pluto IKE daemon crash) via an ISAKMP message with an invalid KEY_LENGTH attribute, w… NVD-CWE-Other
CVE-2011-3380 2024-11-21 10:30 2011-11-18 Show GitHub Exploit DB Packet Storm
295170 - apache tomcat org/apache/catalina/core/DefaultInstanceManager.java in Apache Tomcat 7.x before 7.0.22 does not properly restrict ContainerServlets in the Manager application, which allows local users to gain privi… CWE-264
Permissions, Privileges, and Access Controls 		CVE-2011-3376 2024-11-21 10:30 2011-11-12 Show GitHub Exploit DB Packet Storm