Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 5, 2026, 6 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
218621 4 警告 株式会社サイバーエージェント - Android 版 Ameba における SSL サーバ証明書の検証不備の脆弱性 CWE-Other
その他
CVE-2014-3902 2014-08-18 12:16 2014-08-14 Show GitHub Exploit DB Packet Storm
218622 6.5 警告 TestLink Development Team - TestLink における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2012-0939 2014-08-18 12:08 2012-02-20 Show GitHub Exploit DB Packet Storm
218623 6.5 警告 TestLink Development Team - TestLink における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2012-0938 2014-08-18 12:06 2012-02-20 Show GitHub Exploit DB Packet Storm
218624 4 警告 Outlook.com - Android 版 Outlook.com における SSL サーバ証明書の検証不備の脆弱性 CWE-Other
その他
CVE-2014-5239 2014-08-18 10:09 2014-07-30 Show GitHub Exploit DB Packet Storm
218625 4.3 警告 富士通 - ServerView Operations Manager におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2014-3898 2014-08-18 10:04 2014-08-1 Show GitHub Exploit DB Packet Storm
218626 7.8 危険 ラリタン・ジャパン株式会社 - Dominion KX2-101 におけるサービス運用妨害 (DoS) の脆弱性 CWE-20
不適切な入力確認
CVE-2014-3901 2014-08-18 09:43 2014-08-12 Show GitHub Exploit DB Packet Storm
218627 7.5 危険 ZPanel Project - ZPanel における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2012-6654 2014-08-15 18:48 2012-11-4 Show GitHub Exploit DB Packet Storm
218628 7.5 危険 ZPanel Project - ZPanel における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2012-5685 2014-08-15 18:47 2012-11-4 Show GitHub Exploit DB Packet Storm
218629 4.3 警告 ZPanel Project - ZPanel におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2012-5684 2014-08-15 18:46 2012-11-4 Show GitHub Exploit DB Packet Storm
218630 6.8 警告 ZPanel Project - ZPanel におけるクロスサイトリクエストフォージェリの脆弱性 CWE-352
同一生成元ポリシー違反
CVE-2012-5683 2014-08-15 18:46 2012-11-4 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 6, 2026, 4:18 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
290731 7.0 HIGH
Local
redhat
qemu
enterprise_linux
qemu
Multiple integer overflows in the block drivers in QEMU, possibly before 2.0.0, allow local users to cause a denial of service (crash) via a crafted catalog size in (1) the parallels_open function in… CWE-190
 Integer Overflow or Wraparound
CVE-2014-0143 2024-11-21 11:01 2017-08-11 Show GitHub Exploit DB Packet Storm
290732 8.8 HIGH
Network
pivotal_software
vmware
spring_framework When processing user provided XML documents, the Spring Framework 4.0.0 to 4.0.4, 3.0.0 to 3.2.8, and possibly earlier unsupported versions did not disable by default the resolution of URI references… CWE-611
XXE
CVE-2014-0225 2024-11-21 11:01 2017-05-26 Show GitHub Exploit DB Packet Storm
290733 7.3 HIGH
Network
vmware spring_security The ActiveDirectoryLdapAuthenticator in Spring Security 3.2.0 to 3.2.1 and 3.1.0 to 3.1.5 does not check the password length. If the directory allows anonymous binds then it may incorrectly authentic… CWE-287
Improper Authentication
CVE-2014-0097 2024-11-21 11:01 2017-05-26 Show GitHub Exploit DB Packet Storm
290734 7.5 HIGH
Network
aescrypt_project aescrypt The aescrypt gem 1.0.0 for Ruby does not randomize the CBC IV for use with the AESCrypt.encrypt and AESCrypt.decrypt functions, which allows attackers to defeat cryptographic protection mechanisms vi… CWE-330
 Use of Insufficiently Random Values
CVE-2013-7463 2024-11-21 11:01 2017-04-20 Show GitHub Exploit DB Packet Storm
290735 7.5 HIGH
Network
pulpproject pulp Pulp before 2.3.0 uses the same the same certificate authority key and certificate for all installations. CWE-295
Improper Certificate Validation 
CVE-2013-7450 2024-11-21 11:01 2017-04-4 Show GitHub Exploit DB Packet Storm
290736 6.5 MEDIUM
Network
cloudera
apache
cdh
hadoop
Apache Hadoop 0.23.x before 0.23.11 and 2.x before 2.4.1, as used in Cloudera CDH 5.0.x before 5.0.2, do not check authorization for the (1) refreshNamenodes, (2) deleteBlockPool, and (3) shutdownDat… CWE-264
Permissions, Privileges, and Access Controls
CVE-2014-0229 2024-11-21 11:01 2017-03-24 Show GitHub Exploit DB Packet Storm
290737 7.5 HIGH
Network
mcafee saas_control_console_platform A directory traversal vulnerability in the web application in McAfee (now Intel Security) SaaS Control Console (SCC) Platform 6.14 before patch 1070, and 6.15 before patch 1076 allows unauthenticated… CWE-22
Path Traversal
CVE-2013-7462 2024-11-21 11:01 2017-03-15 Show GitHub Exploit DB Packet Storm
290738 5.5 MEDIUM
Local
mcafee change_control
application_control
A write protection and execution bypass vulnerability in McAfee (now Intel Security) Change Control (MCC) 6.1.0 for Linux and earlier allows authenticated users to change files that are part of write… CWE-284
Improper Access Control
CVE-2013-7461 2024-11-21 11:01 2017-03-15 Show GitHub Exploit DB Packet Storm
290739 5.5 MEDIUM
Local
mcafee change_control
application_control
A write protection and execution bypass vulnerability in McAfee (now Intel Security) Application Control (MAC) 6.1.0 for Linux and earlier allows authenticated users to change binaries that are part … CWE-284
Improper Access Control
CVE-2013-7460 2024-11-21 11:01 2017-03-15 Show GitHub Exploit DB Packet Storm
290740 9.8 CRITICAL
Network
dlitz
fedoraproject
pycrypto
fedora
Heap-based buffer overflow in the ALGnew function in block_templace.c in Python Cryptography Toolkit (aka pycrypto) allows remote attackers to execute arbitrary code as demonstrated by a crafted iv p… CWE-119
Incorrect Access of Indexable Resource ('Range Error') 
CVE-2013-7459 2024-11-21 11:01 2017-02-16 Show GitHub Exploit DB Packet Storm