Vulnerability Search Top
Show Search Menu
|
You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database). |
JVN Vulnerability Information
Update Date":June 1, 2026, noon
| No | CVSS | Level Attach Vector |
Vendor Name | Project Name | Title | CWE | CVE | Update Date | Publication Date | Impact Show |
Exploit PoC Search |
|---|---|---|---|---|---|---|---|---|---|---|---|
| 218371 | 7.5 | 危険 | SAP | - | SAP Solution Manager の License Measurement サーブレットにおける認証を回避される脆弱性 |
CWE-287
不適切な認証 |
CVE-2014-5175 | 2014-08-4 13:44 | 2014-04-8 | Show | GitHub Exploit DB Packet Storm |
| 218372 | 3.5 | 注意 | SAP | - | SAP Netweaver Business Warehouse コンポーネントにおける重要な情報を取得される脆弱性 |
CWE-264
認可・権限・アクセス制御 |
CVE-2014-5174 | 2014-08-4 13:44 | 2014-04-8 | Show | GitHub Exploit DB Packet Storm |
| 218373 | 5 | 警告 | SAP | - | SAP HANA Extend Application Services におけるアクセス制限を回避される脆弱性 |
CWE-264
認可・権限・アクセス制御 |
CVE-2014-5173 | 2014-08-4 13:43 | 2014-03-11 | Show | GitHub Exploit DB Packet Storm |
| 218374 | 4.3 | 警告 | SAP | - | SAP HANA の XS Administration Tool におけるクロスサイトスクリプティングの脆弱性 |
CWE-79
クロスサイト・スクリプティング（XSS） |
CVE-2014-5172 | 2014-08-4 13:43 | 2014-04-8 | Show | GitHub Exploit DB Packet Storm |
| 218375 | 2.9 | 注意 | SAP | - | SAP HANA Extend Application Services における認証情報およびその他の重要な情報を取得される脆弱性 |
CWE-310
暗号の問題 |
CVE-2014-5171 | 2014-08-4 13:42 | 2014-03-11 | Show | GitHub Exploit DB Packet Storm |
| 218376 | 6.8 | 警告 | Jiri Pirko | - | libndp の ndp_msg_opt_dnssl_domain 関数におけるバッファオーバーフローの脆弱性 |
CWE-119
バッファエラー |
CVE-2014-3554 | 2014-08-4 13:34 | 2014-07-11 | Show | GitHub Exploit DB Packet Storm |
| 218377 | 5 | 警告 | The Netty project | - | Netty の SslHandler におけるサービス運用妨害 (DoS) の脆弱性 |
CWE-119
バッファエラー |
CVE-2014-3488 | 2014-08-4 13:33 | 2014-06-11 | Show | GitHub Exploit DB Packet Storm |
| 218378 | 5 | 警告 | SEO Peter | - | WordPress 用 Vitamin プラグインにおけるディレクトリトラバーサルの脆弱性 |
CWE-22
パス・トラバーサル |
CVE-2012-6651 | 2014-08-4 13:33 | 2012-08-6 | Show | GitHub Exploit DB Packet Storm |
| 218379 | 4.3 | 警告 | ホームページの飾り職人 | - | PerlMailer におけるクロスサイトスクリプティングの脆弱性 |
CWE-79
クロスサイト・スクリプティング（XSS） |
CVE-2014-3897 | 2014-08-1 18:27 | 2014-07-29 | Show | GitHub Exploit DB Packet Storm |
| 218380 | 5.1 | 警告 | 株式会社シーズ | - | acmailer におけるクロスサイトリクエストフォージェリの脆弱性 |
CWE-352
同一生成元ポリシー違反 |
CVE-2014-3896 | 2014-08-1 18:25 | 2014-07-29 | Show | GitHub Exploit DB Packet Storm |
NVD Vulnerability Information
Update Date:June 1, 2026, 4:12 a.m.
| No | CVSS | Level Attach Vector |
Vendor Name | Project Name | Title | CWE | CVE | Update Date | Publication Date | Show Affected | Exploit PoC Search |
|---|---|---|---|---|---|---|---|---|---|---|---|
| 290801 | 7.5 |
HIGH
Network |
aultware | pwstore | AultWare pwStore 2010.8.30.0 has DoS via an empty HTTP request |
NVD-CWE-Other
|
CVE-2013-5657 | 2024-11-21 10:57 | 2020-01-8 | Show | GitHub Exploit DB Packet Storm |
| 290802 | 7.8 |
HIGH
Local |
fuzezip_project | fuzezip | FuzeZip 1.0.0.131625 has a Local Buffer Overflow vulnerability |
CWE-787
Out-of-bounds Write |
CVE-2013-5656 | 2024-11-21 10:57 | 2020-01-8 | Show | GitHub Exploit DB Packet Storm |
| 290803 | 5.4 |
MEDIUM
Network |
transcend-info | wifisd_firmware | Transcend WiFiSD 1.8 has persistent XSS |
CWE-79
Cross-site Scripting |
CVE-2013-5638 | 2024-11-21 10:57 | 2020-01-8 | Show | GitHub Exploit DB Packet Storm |
| 290804 | 5.4 |
MEDIUM
Network |
pqigroup | air_card_firmware | PQI AirCard has persistent XSS |
CWE-79
Cross-site Scripting |
CVE-2013-5637 | 2024-11-21 10:57 | 2020-01-8 | Show | GitHub Exploit DB Packet Storm |
| 290805 | 5.9 |
MEDIUM
Network |
hmailserver | hmailserver | HMailServer 5.3.x and prior: Memory Corruption which could cause DOS |
CWE-119
Incorrect Access of Indexable Resource ('Range Error') |
CVE-2013-5571 | 2024-11-21 10:57 | 2020-01-7 | Show | GitHub Exploit DB Packet Storm |
| 290806 | 9.8 |
CRITICAL
Network |
cisco |
linksys_ea2700_firmware linksys_ea3500_firmware linksys_e4200_firmware linksys_ea4500_firmware |
Cisco Linksys Routers EA2700, EA3500, E4200, EA4500: A bug can cause an unsafe TCP port to open which leads to unauthenticated access |
CWE-287
Improper Authentication |
CVE-2013-5122 | 2024-11-21 10:57 | 2020-01-7 | Show | GitHub Exploit DB Packet Storm |
| 290807 | 5.9 |
MEDIUM
Network |
pypa virtualenv fedoraproject redhat debian |
pip virtualenv fedora openshift software_collections debian_linux |
The mirroring support (-M, --use-mirrors) in Python Pip before 1.5 uses insecure DNS querying and authenticity checks which allows attackers to perform man-in-the-middle attacks. |
CWE-287
Improper Authentication |
CVE-2013-5123 | 2024-11-21 10:57 | 2019-11-6 | Show | GitHub Exploit DB Packet Storm |
| 290808 | 5.9 |
MEDIUM
Network |
isc nlnetlabs nic redhat |
bind nsd knot_resolver enterprise_linux |
Cache Poisoning issue exists in DNS Response Rate Limiting. |
CWE-290
Authentication Bypass by Spoofing |
CVE-2013-5661 | 2024-11-21 10:57 | 2019-11-6 | Show | GitHub Exploit DB Packet Storm |
| 290809 | 9.1 |
CRITICAL
Network |
yingzhipython_project | yingzhipython | Vulnerability in YingZhi Python Programming Language v1.9 allows arbitrary anonymous uploads to the phone's storage |
CWE-284
Improper Access Control |
CVE-2013-5654 | 2024-11-21 10:57 | 2019-02-16 | Show | GitHub Exploit DB Packet Storm |
| 290810 | 8.8 |
HIGH
Network |
ibm |
endpoint_manager_for_remote_control tivoli_remote_control |
IBM Endpoint Manager for Remote Control 9.0.0 and 9.0.1 and Tivoli Remote Control 5.1.2 store multiple hashes of partial passwords, which makes it easier for remote attackers to decrypt passwords by … |
CWE-255
Credentials Management |
CVE-2013-5461 | 2024-11-21 10:57 | 2018-04-28 | Show | GitHub Exploit DB Packet Storm |