Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 19, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
218781	5.8	警告	PyWBEM Project	-	PyWBEM における SSL サーバになりすまされる脆弱性	CWE-20 不適切な入力確認	CVE-2013-6444	2014-05-8 14:32	2013-12-16	Show	GitHub Exploit DB Packet Storm

218782	5.8	警告	PyWBEM Project	-	PyWBEM におけるピアに偽装される脆弱性	CWE-20 不適切な入力確認	CVE-2013-6418	2014-05-8 14:32	2013-12-16	Show	GitHub Exploit DB Packet Storm

218783	9	危険	F5 Networks	-	F5 BIG-IQ における任意のユーザのパスワードを変更される脆弱性	CWE-255 証明書・パスワード管理	CVE-2014-3220	2014-05-8 14:26	2014-05-1	Show	GitHub Exploit DB Packet Storm

218784	2.1	注意	レッドハット	-	Red Hat OpenShift Enterprise で使用される openshift-origin-broker-util における資格情報を取得される脆弱性	CWE-310 暗号の問題	CVE-2014-0164	2014-05-8 14:21	2014-05-1	Show	GitHub Exploit DB Packet Storm

218785	4.3	警告	レッドハット	-	Red Hat JBoss Web Framework Kit におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2014-0149	2014-05-8 14:17	2014-05-1	Show	GitHub Exploit DB Packet Storm

218786	6.5	警告	Skyphe.org	-	WordPress 用 File Gallery プラグインにおける任意の PHP コードを実行される脆弱性	CWE-94 コード・インジェクション	CVE-2014-2558	2014-05-8 14:05	2014-04-13	Show	GitHub Exploit DB Packet Storm

218787	4.4	警告	Nagios Enterprises, LLC	-	Nagios Plugins の contrib/check_ipxping.c の IPXPING_COMMAND における権限を取得される脆弱性	CWE-59 リンク解釈の問題	CVE-2013-4215	2014-05-8 14:04	2013-04-28	Show	GitHub Exploit DB Packet Storm

218788	4.3	警告	Best Practical Solutions	-	Request Tracker の MobileUI におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2013-3736	2014-05-8 13:53	2013-06-12	Show	GitHub Exploit DB Packet Storm

218789	7.5	危険	PHP-Fusion	-	PHP-Fusion の includes/classes/Authenticate.class.php における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2013-7375	2014-05-8 12:21	2013-02-16	Show	GitHub Exploit DB Packet Storm

218790	7.5	危険	PHP-Fusion	-	PHP-Fusion における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2013-1803	2014-05-8 12:20	2013-01-27	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 20, 2026, 4:14 a.m.

No	CVSS	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
291501	-	debian marc_vertes	txt2man	A certain Debian patch for txt2man 1.5.5, as used in txt2man 1.5.5-2, 1.5.5-4, and others, allows local users to overwrite arbitrary files via a symlink attack on /tmp/2222.	CWE-59 Link Following	CVE-2013-1444	2024-11-21 10:49	2013-10-1	Show	GitHub Exploit DB Packet Storm

291502	-	xen	xen	Xen 4.0 through 4.3.x, when using AVX or LWP capable CPUs, does not properly clear previous data from registers when using an XSAVE or XRSTOR to extend the state components of a saved or restored vCP…	CWE-200 Information Exposure	CVE-2013-1442	2024-11-21 10:49	2013-10-1	Show	GitHub Exploit DB Packet Storm

291503	-	djangoproject	django	The authentication framework (django.contrib.auth) in Django 1.4.x before 1.4.8, 1.5.x before 1.5.4, and 1.6.x before 1.6 beta 4 allows remote attackers to cause a denial of service (CPU consumption)…	CWE-287 Improper Authentication	CVE-2013-1443	2024-11-21 10:49	2013-09-24	Show	GitHub Exploit DB Packet Storm

291504	-	simon_mcvittie	telepathy_gabble	The Wocky module in Telepathy Gabble before 0.16.6 and 0.17.x before 0.17.4, when connecting to a "legacy Jabber server," does not properly enforce the WockyConnector:tls-required flag, which allows …	CWE-20 Improper Input Validation	CVE-2013-1431	2024-11-21 10:49	2013-09-24	Show	GitHub Exploit DB Packet Storm

291505	-	exactcode	exactimage	econvert in ExactImage 0.8.9 and earlier does not properly initialize the setjmp variable, which allows context-dependent users to cause a denial of service (crash) via a crafted image file.	CWE-20 Improper Input Validation	CVE-2013-1441	2024-11-21 10:49	2013-09-17	Show	GitHub Exploit DB Packet Storm

291506	-	libraw	libraw	The "faster LJPEG decoder" in libraw 0.13.x, 0.14.x, and 0.15.x before 0.15.4 allows context-dependent attackers to cause a denial of service (NULL pointer dereference) via a crafted photo file.	NVD-CWE-Other	CVE-2013-1439	2024-11-21 10:49	2013-09-17	Show	GitHub Exploit DB Packet Storm

291507	-	microsoft	windows_server_2008 windows_2003_server windows_rt windows_xp windows_8 windows_7 windows_vista windows_server_2012	win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows Server 201…	CWE-119 Incorrect Access of Indexable Resource ('Range Error')	CVE-2013-1344	2024-11-21 10:49	2013-09-11	Show	GitHub Exploit DB Packet Storm

291508	-	microsoft	windows_server_2008 windows_2003_server windows_rt windows_xp windows_8 windows_7 windows_vista windows_server_2012	win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows Server 201…	CWE-119 Incorrect Access of Indexable Resource ('Range Error')	CVE-2013-1343	2024-11-21 10:49	2013-09-11	Show	GitHub Exploit DB Packet Storm

291509	-	microsoft	windows_server_2008 windows_2003_server windows_rt windows_xp windows_8 windows_7 windows_vista windows_server_2012	win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows Server 201…	CWE-119 Incorrect Access of Indexable Resource ('Range Error')	CVE-2013-1342	2024-11-21 10:49	2013-09-11	Show	GitHub Exploit DB Packet Storm

291510	-	microsoft	windows_server_2008 windows_2003_server windows_xp windows_8 windows_7 windows_vista	win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, and Windows 8 allows local us…	CWE-119 Incorrect Access of Indexable Resource ('Range Error')	CVE-2013-1341	2024-11-21 10:49	2013-09-11	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed