Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 20, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
218361 4.3 警告 ULTRAPOP.JP - i-HTTPD におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2014-7263 2014-12-15 18:02 2014-12-9 Show GitHub Exploit DB Packet Storm
218362 4.3 警告 Intelliants - Subrion CMS におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2014-9120 2014-12-15 17:06 2014-12-8 Show GitHub Exploit DB Packet Storm
218363 4.6 警告 Xiph.Org - Icecast における権限を取得される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2014-9091 2014-12-15 17:02 2014-05-6 Show GitHub Exploit DB Packet Storm
218364 7.5 危険 Zoho Corporation - 複数の ZOHO 製品におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2014-7866 2014-12-15 16:33 2014-09-27 Show GitHub Exploit DB Packet Storm
218365 7.5 危険 NVIDIA - NVIDIA ドライバにおけるサービス運用妨害 (DoS) の脆弱性 CWE-Other
その他 		CVE-2014-8298 2014-12-15 16:17 2014-12-9 Show GitHub Exploit DB Packet Storm
218366 6.4 警告 Scalix.com - Scalix Web Access における XML 外部エンティティの脆弱性 CWE-Other
その他 		CVE-2014-9360 2014-12-15 15:39 2014-10-31 Show GitHub Exploit DB Packet Storm
218367 4.3 警告 chad phillips - Drupal 用 LoginToboggan モジュールの Unified Login フォームにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2014-9364 2014-12-15 14:31 2014-07-8 Show GitHub Exploit DB Packet Storm
218368 5.5 警告 valthebald - Drupal 用 Meta tags quick モジュールの path-based メタタグ編集フォームにおけるオープンリダイレクトの脆弱性 CWE-Other
その他 		CVE-2014-9363 2014-12-15 14:31 2014-07-1 Show GitHub Exploit DB Packet Storm
218369 3.5 注意 valthebald - Drupal 用 Meta tags quick モジュールの path-based メタタグ編集フォームにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2014-9362 2014-12-15 14:31 2014-07-1 Show GitHub Exploit DB Packet Storm
218370 4.3 警告 chad phillips - Drupal 用 LoginToboggan モジュールにおける権限を取得される脆弱性 CWE-200
情報漏えい 		CVE-2014-9361 2014-12-15 14:30 2014-07-8 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 20, 2026, 4:01 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
297911 - symantec web_gateway
web_gateway_appliance_8450
web_gateway_appliance_8490 		Multiple SQL injection vulnerabilities in the management console on the Symantec Web Gateway (SWG) appliance before 5.1.1 allow remote authenticated administrators to execute arbitrary SQL commands v… CWE-89
SQL Injection 		CVE-2013-1617 2024-11-21 10:50 2013-08-1 Show GitHub Exploit DB Packet Storm
297912 - symantec web_gateway
web_gateway_appliance_8450
web_gateway_appliance_8490 		The management console on the Symantec Web Gateway (SWG) appliance before 5.1.1 allows remote attackers to execute arbitrary commands by injecting a command into an application script. CWE-78
OS Command  		CVE-2013-1616 2024-11-21 10:50 2013-08-1 Show GitHub Exploit DB Packet Storm
297913 - redhat satellite The Inter-Satellite Sync (ISS) operation in Red Hat Network (RHN) Satellite 5.3, 5.4, and 5.5 does not properly check client "authenticity," which allows remote attackers to obtain channel content by… CWE-287
Improper Authentication 		CVE-2013-2056 2024-11-21 10:50 2013-07-31 Show GitHub Exploit DB Packet Storm
297914 - apache
collabnet
canonical
opensuse 		subversion
ubuntu_linux
opensuse 		Subversion before 1.6.23 and 1.7.x before 1.7.10 allows remote authenticated users to cause a denial of service (FSFS repository corruption) via a newline character in a file name. NVD-CWE-noinfo
CVE-2013-1968 2024-11-21 10:50 2013-07-31 Show GitHub Exploit DB Packet Storm
297915 - f5
debian 		nginx
debian_linux 		http/modules/ngx_http_proxy_module.c in nginx 1.1.4 through 1.2.8 and 1.3.0 through 1.4.0, when proxy_pass is used with untrusted HTTP servers, allows remote attackers to cause a denial of service (c… NVD-CWE-noinfo
CVE-2013-2070 2024-11-21 10:50 2013-07-20 Show GitHub Exploit DB Packet Storm
297916 - f5
fedoraproject 		nginx
fedora 		The ngx_http_parse_chunked function in http/ngx_http_parse.c in nginx 1.3.9 through 1.4.0 allows remote attackers to cause a denial of service (crash) and execute arbitrary code via a chunked Transfe… CWE-787
 Out-of-bounds Write 		CVE-2013-2028 2024-11-21 10:50 2013-07-20 Show GitHub Exploit DB Packet Storm
297917 - nashtech easy_php_calendar Multiple cross-site scripting (XSS) vulnerabilities in (1) index.php and (2) datePicker.php in Easy PHP Calendar 6.x and 7.x before 7.0.13 allow remote attackers to inject arbitrary web script or HTM… CWE-79
Cross-site Scripting 		CVE-2013-1955 2024-11-21 10:50 2013-07-20 Show GitHub Exploit DB Packet Storm
297918 - apache activemq Cross-site scripting (XSS) vulnerability in scheduled.jsp in Apache ActiveMQ 5.8.0 and earlier allows remote attackers to inject arbitrary web script or HTML via vectors involving the "cron of a mess… CWE-79
Cross-site Scripting 		CVE-2013-1879 2024-11-21 10:50 2013-07-20 Show GitHub Exploit DB Packet Storm
297919 - chaos_tool_suite_project ctools The Chaos Tool Suite (ctools) module 7.x-1.x before 7.x-1.3 for Drupal does not properly restrict node access, which allows remote authenticated users with the "access content" permission to read res… CWE-264
Permissions, Privileges, and Access Controls 		CVE-2013-1925 2024-11-21 10:50 2013-07-17 Show GitHub Exploit DB Packet Storm
297920 - acquia
commons_wikis_project 		commons
commons_wikis 		The Commons Wikis module before 7.x-3.1 for Drupal, as used in the Commons module before 7.x-3.1, does not properly restrict access to groups, which allows remote attackers to post arbitrary content … CWE-264
Permissions, Privileges, and Access Controls 		CVE-2013-1908 2024-11-21 10:50 2013-07-17 Show GitHub Exploit DB Packet Storm