Vulnerability Search Top

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

Vulnerability Information Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 29, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
218831	5	警告	サイレックス・テクノロジー株式会社	-	SX-2000WG におけるサービス運用妨害 (DoS) の脆弱性	CWE-20 不適切な入力確認	CVE-2014-3889	2014-07-7 18:34	2014-07-2	Show	GitHub Exploit DB Packet Storm

218832	4.3	警告	Verification Code for Comments project	-	WordPress 用 Verification Code for Comments プラグインの vcc.js.php におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2014-4565	2014-07-7 18:26	2014-06-12	Show	GitHub Exploit DB Packet Storm

218833	4.3	警告	WP-Picasa-Image project	-	WordPress 用 WP-Picasa-Image プラグインの picasa_upload.php におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2014-4591	2014-07-7 18:26	2014-06-12	Show	GitHub Exploit DB Packet Storm

218834	4.3	警告	LetsFX	-	WordPress 用 URL Cloak & Encrypt プラグインの go.php におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2014-4563	2014-07-7 18:26	2014-04-25	Show	GitHub Exploit DB Packet Storm

218835	4.3	警告	VN-Calendar project	-	WordPress 用 VN-Calendar プラグインの vncal.js.php におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2014-4571	2014-07-7 18:26	2014-06-12	Show	GitHub Exploit DB Packet Storm

218836	4.3	警告	Thomas Doki-Thonon	-	WordPress 用 WPCB プラグインの facture.php におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2014-4581	2014-07-7 18:26	2014-06-4	Show	GitHub Exploit DB Packet Storm

218837	4.3	警告	Yahoo! Updates for WordPress plugin project	-	WordPress 用 Yahoo! Updates for WordPress プラグインにおけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2014-4603	2014-07-7 18:26	2014-05-28	Show	GitHub Exploit DB Packet Storm

218838	4.3	警告	Style It project	-	WordPress 用 Style It プラグインの fonts/font-form.php におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2014-4555	2014-07-7 18:26	2014-04-25	Show	GitHub Exploit DB Packet Storm

218839	4.3	警告	Alipay	-	WordPress 用 Wu-Rating プラグインの wu-ratepost.php におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2014-4601	2014-07-7 18:26	2014-06-12	Show	GitHub Exploit DB Packet Storm

218840	4.3	警告	WP Timersys	-	WordPress 用 WP Social Invitations プラグインの test.php におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2014-4597	2014-07-7 18:26	2014-01-30	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 29, 2026, 4:16 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
291031	9.8	CRITICAL Network	apache	httpclient	http/impl/client/HttpClientBuilder.java in Apache HttpClient 4.3.x before 4.3.1 does not ensure that X509HostnameVerifier is not null, which allows attackers to have unspecified impact via vectors in…	CWE-20 Improper Input Validation	CVE-2013-4366	2024-11-21 10:55	2017-10-31	Show	GitHub Exploit DB Packet Storm

291032	8.8	HIGH Network	apache	subversion	libsvn_fs_fs/fs_fs.c in Apache Subversion 1.8.x before 1.8.2 might allow remote authenticated users with commit access to corrupt FSFS repositories and cause a denial of service or obtain sensitive i…	CWE-284 Improper Access Control	CVE-2013-4246	2024-11-21 10:55	2017-10-30	Show	GitHub Exploit DB Packet Storm

291033	6.2	MEDIUM Local	oracle linux	linux linux_kernel	The Linux kernel before 4.4.1 allows local users to bypass file-descriptor limits and cause a denial of service (memory consumption) by sending each descriptor over a UNIX socket before closing it, r…	CWE-119 Incorrect Access of Indexable Resource ('Range Error')	CVE-2013-4312	2024-11-21 10:55	2016-02-8	Show	GitHub Exploit DB Packet Storm

291034	-		pwgen_project	pwgen	Password Generator (aka Pwgen) before 2.07 uses weak pseudo generated numbers when /dev/urandom is unavailable, which makes it easier for context-dependent attackers to guess the numbers.	CWE-310 Cryptographic Issues	CVE-2013-4442	2024-11-21 10:55	2014-12-20	Show	GitHub Exploit DB Packet Storm

291035	-		pwgen_project	pwgen	Password Generator (aka Pwgen) before 2.07 generates weak non-tty passwords, which makes it easier for context-dependent attackers to guess the password via a brute-force attack.	CWE-255 Credentials Management	CVE-2013-4440	2024-11-21 10:55	2014-12-20	Show	GitHub Exploit DB Packet Storm

291036	-		redhat	libvirt	The remoteClientFreeFunc function in daemon/remote.c in libvirt before 1.1.3, when ACLs are used, does not set an identity, which causes event handler removal to be denied and remote attackers to cau…	NVD-CWE-Other	CVE-2013-4399	2024-11-21 10:55	2014-12-13	Show	GitHub Exploit DB Packet Storm

291037	-		qemu	qemu	The virtio_scsi_load_request function in hw/scsi/scsi-bus.c in QEMU before 1.7.2 might allow remote attackers to execute arbitrary code via a crafted savevm image, which triggers an out-of-bounds arr…	CWE-119 Incorrect Access of Indexable Resource ('Range Error')	CVE-2013-4542	2024-11-21 10:55	2014-11-5	Show	GitHub Exploit DB Packet Storm

291038	-		qemu	qemu	The usb_device_post_load function in hw/usb/bus.c in QEMU before 1.7.2 might allow remote attackers to execute arbitrary code via a crafted savevm image, related to a negative setup_len or setup_inde…	CWE-119 Incorrect Access of Indexable Resource ('Range Error')	CVE-2013-4541	2024-11-21 10:55	2014-11-5	Show	GitHub Exploit DB Packet Storm

291039	-		qemu opensuse	qemu opensuse	Buffer overflow in scoop_gpio_handler_update in QEMU before 1.7.2 might allow remote attackers to execute arbitrary code via a large (1) prev_level, (2) gpio_level, or (3) gpio_dir value in a savevm …	CWE-119 Incorrect Access of Indexable Resource ('Range Error')	CVE-2013-4540	2024-11-21 10:55	2014-11-5	Show	GitHub Exploit DB Packet Storm

291040	-		qemu	qemu	Multiple buffer overflows in the tsc210x_load function in hw/input/tsc210x.c in QEMU before 1.7.2 might allow remote attackers to execute arbitrary code via a crafted (1) precision, (2) nextprecision…	CWE-119 Incorrect Access of Indexable Resource ('Range Error')	CVE-2013-4539	2024-11-21 10:55	2014-11-5	Show	GitHub Exploit DB Packet Storm