Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 2, 2026, 2 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
218471 7.5 危険 OleumTech - OleumTech WIO DH2 Wireless Gateway および Sensor Wireless I/O Module における任意のコードを実行される脆弱性 CWE-20
不適切な入力確認
CVE-2014-2360 2014-07-25 14:32 2014-07-21 Show GitHub Exploit DB Packet Storm
218472 3.5 注意 オムロン株式会社 - Omron NS シリーズの HMI ターミナルの Web アプリケーションにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2014-2370 2014-07-25 12:44 2014-07-22 Show GitHub Exploit DB Packet Storm
218473 6 警告 オムロン株式会社 - Omron NS シリーズの HMI ターミナルの Web アプリケーションにおけるクロスサイトリクエストフォージェリの脆弱性 CWE-352
同一生成元ポリシー違反
CVE-2014-2369 2014-07-25 12:44 2014-07-22 Show GitHub Exploit DB Packet Storm
218474 8.5 危険 Canary Labs - TrendLink の ActiveX コントロールにおける任意のプログラムが実行される脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2012-3022 2014-07-25 12:10 2013-04-8 Show GitHub Exploit DB Packet Storm
218475 10 危険 Attachmate - Attachmate Verastream Process Designer における任意のコードを実行される脆弱性 CWE-Other
その他
CVE-2014-0607 2014-07-25 11:50 2014-07-18 Show GitHub Exploit DB Packet Storm
218476 5 警告 Tenable, Inc. - Nessus用 Tenable Web UI の /server/properties リソースにおける重要な情報を取得される脆弱性 CWE-200
情報漏えい
CVE-2014-4980 2014-07-25 11:38 2014-06-27 Show GitHub Exploit DB Packet Storm
218477 8.3 危険 Hanvon Technology Co.,Ltd - Hanvon Face ID に認証欠如の問題 CWE-287
CWE-Other
CVE-2014-2938 2014-07-24 18:15 2014-05-20 Show GitHub Exploit DB Packet Storm
218478 4.3 警告 Con Kolivas
sgminer project
- sgminer および cgminer の util.c の parse_notify 関数におけるサービス運用妨害 (DoS) の脆弱性 CWE-20
不適切な入力確認
CVE-2014-4503 2014-07-24 18:01 2014-06-6 Show GitHub Exploit DB Packet Storm
218479 10 危険 Con Kolivas
sgminer project
BFGMiner project
- sgminer などの製品の parse_notify 関数におけるヒープベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー
CVE-2014-4502 2014-07-24 18:00 2014-06-6 Show GitHub Exploit DB Packet Storm
218480 10 危険 Con Kolivas
sgminer project
BFGMiner project
- sgminer などの製品におけるスタックベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー
CVE-2014-4501 2014-07-24 17:59 2014-06-6 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 2, 2026, 4:18 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
290821 - dhtmlx dhtmlxspreadsheet Cross-site scripting (XSS) vulnerability in codebase/spreadsheet.php in the Spreadsheet (dhtmlxSpreadsheet) plugin 2.0 for WordPress allows remote attackers to inject arbitrary web script or HTML via… CWE-79
Cross-site Scripting
CVE-2013-6281 2024-11-21 10:58 2013-10-25 Show GitHub Exploit DB Packet Storm
290822 - linksalpha social_sharing_toolkit_plugin Cross-site scripting (XSS) vulnerability in Social Sharing Toolkit plugin before 2.1.2 for WordPress allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. CWE-79
Cross-site Scripting
CVE-2013-6280 2024-11-21 10:58 2013-10-25 Show GitHub Exploit DB Packet Storm
290823 - dell quest_one_password_manager The Dell Quest One Password Manager, possibly 5.0, allows remote attackers to bypass CAPTCHA protections and obtain sensitive information (user's full name) by sending a login request with a valid do… CWE-264
Permissions, Privileges, and Access Controls
CVE-2013-6246 2024-11-21 10:58 2013-10-24 Show GitHub Exploit DB Packet Storm
290824 - sybase adaptive_server_enterprise Unspecified vulnerability in SAP Sybase Adaptive Server Enterprise (ASE) before 15.0.3 ESD#4.3. 15.5 before 15.5 ESD#5.3, and 15.7 before 15.7 SP50 or 15.7 SP100 allows remote authenticated users to … NVD-CWE-noinfo
CVE-2013-6245 2024-11-21 10:58 2013-10-24 Show GitHub Exploit DB Packet Storm
290825 - sap netweaver The Live Update webdynpro application (webdynpro/dispatcher/sap.com/tc~slm~ui_lup/LUP) in SAP NetWeaver 7.31 and earlier allows remote attackers to read arbitrary files and directories via an XML doc… NVD-CWE-noinfo
CVE-2013-6244 2024-11-21 10:58 2013-10-24 Show GitHub Exploit DB Packet Storm
290826 - landing_pages_project landing_pages_plugin SQL injection vulnerability in the Landing Pages plugin 1.2.3, before 20131009, and earlier for WordPress allows remote attackers to execute arbitrary SQL commands via the "post" parameter to index.p… CWE-89
SQL Injection
CVE-2013-6243 2024-11-21 10:58 2013-10-24 Show GitHub Exploit DB Packet Storm
290827 - vmware vcenter_server Session fixation vulnerability in the vSphere Web Client Server in VMware vCenter Server 5.0 before Update 3 allows remote attackers to hijack web sessions and gain privileges via unspecified vectors. CWE-264
Permissions, Privileges, and Access Controls
CVE-2013-5971 2024-11-21 10:58 2013-10-21 Show GitHub Exploit DB Packet Storm
290828 - vmware esx
esxi
hostd-vmdb in VMware ESXi 4.0 through 5.0 and ESX 4.0 through 4.1 allows remote attackers to cause a denial of service (hostd-vmdb service outage) by modifying management traffic. CWE-20
 Improper Input Validation 
CVE-2013-5970 2024-11-21 10:58 2013-10-21 Show GitHub Exploit DB Packet Storm
290829 - vbulletin vbulletin The install/upgrade.php scripts in vBulletin 4.1 and 5 allow remote attackers to create administrative accounts via the customerid, htmldata[password], htmldata[confirmpassword], and htmldata[email] … CWE-264
Permissions, Privileges, and Access Controls
CVE-2013-6129 2024-11-21 10:58 2013-10-19 Show GitHub Exploit DB Packet Storm
290830 - dlink dir-100 Stack-based buffer overflow in the RuntimeDiagnosticPing function in /bin/webs on D-Link DIR-100 routers might allow remote authenticated administrators to execute arbitrary commands via a long set/r… CWE-119
Incorrect Access of Indexable Resource ('Range Error') 
CVE-2013-6027 2024-11-21 10:58 2013-10-19 Show GitHub Exploit DB Packet Storm