Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 1, 2026, 6 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
218711 7.5 危険 Another Awesome Stuff - ZeroCMS の zero_transact_article.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2014-4194 2014-07-11 11:33 2014-06-20 Show GitHub Exploit DB Packet Storm
218712 5.8 警告 FoeCMS - FoeCMS の msg.php におけるオープンリダイレクトの脆弱性 CWE-Other
その他
CVE-2014-4851 2014-07-11 11:27 2014-07-4 Show GitHub Exploit DB Packet Storm
218713 4.3 警告 FoeCMS - FoeCMS の msg.php におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2014-4849 2014-07-11 11:26 2014-07-4 Show GitHub Exploit DB Packet Storm
218714 7.5 危険 FoeCMS - FoeCMS の index.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2014-4850 2014-07-11 11:25 2014-07-4 Show GitHub Exploit DB Packet Storm
218715 4.3 警告 シスコシステムズ - Cisco Small Business SPA300 および SPA500 シリーズの IP phone の Web ユーザインターフェースにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2014-3313 2014-07-10 18:21 2014-07-9 Show GitHub Exploit DB Packet Storm
218716 6.9 警告 シスコシステムズ - Cisco Small Business SPA300 および SPA500 phone のデバッグコンソールインターフェースにおける任意の debug シェルコマンドを実行される脆弱性 CWE-287
不適切な認証
CVE-2014-3312 2014-07-10 18:20 2014-07-9 Show GitHub Exploit DB Packet Storm
218717 5 警告 シスコシステムズ - Cisco IOS および IOS XE の NTP の実装における時刻同期の制限を回避される脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2014-3309 2014-07-10 18:19 2014-07-9 Show GitHub Exploit DB Packet Storm
218718 7.8 危険 ネットギア - Netgear GS105PE Prosafe Plus Switch に認証情報がハードコードされている問題 CWE-255
CWE-Other
CVE-2014-2969 2014-07-10 17:10 2014-07-3 Show GitHub Exploit DB Packet Storm
218719 5.1 警告 リムアーツ - Becky! Internet Mail におけるバッファオーバーフローの脆弱性 CWE-119
バッファエラー
CVE-2014-3891 2014-07-10 17:06 2014-07-8 Show GitHub Exploit DB Packet Storm
218720 2.7 注意 Xen プロジェクト - Xen の arch/arm/domain.c 内の alloc_domain_struct 関数における重要な情報を取得される脆弱性 CWE-200
情報漏えい
CVE-2014-4022 2014-07-10 16:50 2014-06-25 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 1, 2026, 4:12 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
290861 - hot hotbox_router_firmware
hotbox_router
goform/login on the HOT HOTBOX router with software 2.1.11 allows remote attackers to cause a denial of service (device crash) via crafted HTTP POST data. CWE-20
 Improper Input Validation 
CVE-2013-5220 2024-11-21 10:57 2013-12-30 Show GitHub Exploit DB Packet Storm
290862 - hot hotbox_router_firmware
hotbox_router
Directory traversal vulnerability on the HOT HOTBOX router with software 2.1.11 allows remote attackers to read arbitrary files via a .. (dot dot) in a URI, as demonstrated by a request for /etc/pass… CWE-22
Path Traversal
CVE-2013-5219 2024-11-21 10:57 2013-12-30 Show GitHub Exploit DB Packet Storm
290863 - hot hotbox_router_firmware
hotbox_router
Cross-site scripting (XSS) vulnerability on the HOT HOTBOX router with software 2.1.11 allows remote attackers to inject arbitrary web script or HTML via a crafted DHCP Host Name option, which is not… CWE-79
Cross-site Scripting
CVE-2013-5218 2024-11-21 10:57 2013-12-30 Show GitHub Exploit DB Packet Storm
290864 - adtran aos
netvanta_7060
netvanta_7100
Cross-site scripting (XSS) vulnerability in the GUI login page in ADTRAN AOS before R10.8.1 on the NetVanta 7100 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. CWE-79
Cross-site Scripting
CVE-2013-5210 2024-11-21 10:57 2013-12-30 Show GitHub Exploit DB Packet Storm
290865 - joomla joomla\! Cross-site scripting (XSS) vulnerability in libraries/idna_convert/example.php in Joomla! 3.1.5 allows remote attackers to inject arbitrary web script or HTML via the lang parameter. CWE-79
Cross-site Scripting
CVE-2013-5583 2024-11-21 10:57 2013-12-29 Show GitHub Exploit DB Packet Storm
290866 - ibm security_access_manager_for_enterprise_single_sign-on The IMS server before Ifix 6 in IBM Security Access Manager for Enterprise Single Sign-On (ISAM ESSO) 8.2 allows remote authenticated users to read log files by leveraging helpdesk privileges for a d… CWE-264
Permissions, Privileges, and Access Controls
CVE-2013-5420 2024-11-21 10:57 2013-12-24 Show GitHub Exploit DB Packet Storm
290867 - ibm security_access_manager_for_enterprise_single_sign-on Cross-site scripting (XSS) vulnerability in the IMS server before Ifix 6 in IBM Security Access Manager for Enterprise Single Sign-On (ISAM ESSO) 8.2 allows remote attackers to inject arbitrary web s… CWE-79
Cross-site Scripting
CVE-2013-5421 2024-11-21 10:57 2013-12-23 Show GitHub Exploit DB Packet Storm
290868 - ibm sterling_b2b_integrator
sterling_file_gateway
IBM Sterling B2B Integrator 5.2 and Sterling File Gateway 2.2 do not invalidate a session upon a logout action, which allows remote attackers to bypass authentication by leveraging an unattended work… CWE-287
Improper Authentication
CVE-2013-5413 2024-11-21 10:57 2013-12-21 Show GitHub Exploit DB Packet Storm
290869 - ibm sterling_b2b_integrator
sterling_file_gateway
IBM Sterling B2B Integrator 5.2 and Sterling File Gateway 2.2 allow remote attackers to inject links and trigger unintended navigation or actions via unspecified vectors. CWE-20
 Improper Input Validation 
CVE-2013-5411 2024-11-21 10:57 2013-12-21 Show GitHub Exploit DB Packet Storm
290870 - ibm sterling_b2b_integrator
sterling_file_gateway
Multiple SQL injection vulnerabilities in IBM Sterling B2B Integrator 5.2 and Sterling File Gateway 2.2 allow remote authenticated users to execute arbitrary SQL commands via unspecified vectors. CWE-89
SQL Injection
CVE-2013-5409 2024-11-21 10:57 2013-12-21 Show GitHub Exploit DB Packet Storm