Vulnerability Search Top

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

Vulnerability Information Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":June 14, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
219001	10	危険	マイクロソフトアドビシステムズ Google	-	Adobe Flash Player および Adobe AIR における任意のコードを実行される脆弱性	CWE-94 コード・インジェクション	CVE-2014-0558	2014-10-21 12:28	2014-10-14	Show	GitHub Exploit DB Packet Storm

219002	7.2	危険	マイクロソフト	-	Microsoft Windows XP および Microsoft Windows Server 2003 における任意のメモリ領域にデータを書き込まれる脆弱性	CWE-Other その他	CVE-2014-4971	2014-10-21 11:56	2014-07-18	Show	GitHub Exploit DB Packet Storm

219003	7.2	危険	マイクロソフト	-	複数の Microsoft Windows 製品のカーネルモードドライバの fastfat.sys における任意のコードを実行される脆弱性	CWE-399 リソース管理の問題	CVE-2014-4115	2014-10-21 11:51	2014-10-14	Show	GitHub Exploit DB Packet Storm

219004	5.8	警告	オラクル	-	Oracle Identity Manager におけるオープンリダイレクトの脆弱性	CWE-20 不適切な入力確認	CVE-2014-2880	2014-10-21 11:01	2014-04-3	Show	GitHub Exploit DB Packet Storm

219005	5	警告	IBM Apache Software Foundation オラクル	-	Apache Tomcat の java/org/apache/coyote/ajp/AbstractAjpProcessor.java におけるサービス運用妨害 (DoS) の脆弱性	CWE-20 不適切な入力確認	CVE-2014-0095	2014-10-21 10:50	2014-03-27	Show	GitHub Exploit DB Packet Storm

219006	4.3	警告	IBM Apache Software Foundation オラクル	-	Apache Tomcat の org/apache/catalina/connector/CoyoteAdapter.java におけるセッション固定攻撃を実行される脆弱性	CWE-20 不適切な入力確認	CVE-2014-0033	2014-10-21 10:43	2014-01-31	Show	GitHub Exploit DB Packet Storm

219007	7.5	危険	Epicor Software	-	Epicor Procurement における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2014-4313	2014-10-20 18:33	2014-10-3	Show	GitHub Exploit DB Packet Storm

219008	4.3	警告	Epicor Software	-	Epicor Enterprise におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2014-4312	2014-10-20 18:33	2014-09-30	Show	GitHub Exploit DB Packet Storm

219009	4.3	警告	CloudBees	-	CloudBees Jenkins 用 Monitoring プラグインにおけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2014-3678	2014-10-20 18:18	2014-10-1	Show	GitHub Exploit DB Packet Storm

219010	4	警告	IBM	-	IBM WebSphere Portal における認証情報を取得される脆弱性	CWE-200 情報漏えい	CVE-2014-4761	2014-10-20 18:17	2014-10-7	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:June 14, 2026, 4:12 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
297371	-		apache	activemq	Cross-site scripting (XSS) vulnerability in scheduled.jsp in Apache ActiveMQ 5.8.0 and earlier allows remote attackers to inject arbitrary web script or HTML via vectors involving the "cron of a mess…	CWE-79 Cross-site Scripting	CVE-2013-1879	2024-11-21 10:50	2013-07-20	Show	GitHub Exploit DB Packet Storm

297372	-		chaos_tool_suite_project	ctools	The Chaos Tool Suite (ctools) module 7.x-1.x before 7.x-1.3 for Drupal does not properly restrict node access, which allows remote authenticated users with the "access content" permission to read res…	CWE-264 Permissions, Privileges, and Access Controls	CVE-2013-1925	2024-11-21 10:50	2013-07-17	Show	GitHub Exploit DB Packet Storm

297373	-		acquia commons_wikis_project	commons commons_wikis	The Commons Wikis module before 7.x-3.1 for Drupal, as used in the Commons module before 7.x-3.1, does not properly restrict access to groups, which allows remote attackers to post arbitrary content …	CWE-264 Permissions, Privileges, and Access Controls	CVE-2013-1908	2024-11-21 10:50	2013-07-17	Show	GitHub Exploit DB Packet Storm

297374	-		acquia	commons commons_group	The Commons Group module before 7.x-3.1 for Drupal, as used in the Commons module before 7.x-3.1, does not properly restrict access to groups, which allows remote attackers to post arbitrary content …	CWE-264 Permissions, Privileges, and Access Controls	CVE-2013-1907	2024-11-21 10:50	2013-07-17	Show	GitHub Exploit DB Packet Storm

297375	7.8	HIGH Local	linux redhat canonical	linux_kernel enterprise_linux enterprise_linux_eus ubuntu_linux	The KVM subsystem in the Linux kernel before 3.0 does not check whether kernel addresses are specified during allocation of memory slots for use in a guest's physical address space, which allows loca…	CWE-20 Improper Input Validation	CVE-2013-1943	2024-11-21 10:50	2013-07-16	Show	GitHub Exploit DB Packet Storm

297376	-		redhat	enterprise_linux	A certain Red Hat patch to the KVM subsystem in the kernel package before 2.6.32-358.11.1.el6 on Red Hat Enterprise Linux (RHEL) 6 does not properly implement the PV EOI feature, which allows guest O…	CWE-362 Race Condition	CVE-2013-1935	2024-11-21 10:50	2013-07-16	Show	GitHub Exploit DB Packet Storm

297377	-		ibm apache	websphere_application_server geronimo	The JMX Remoting functionality in Apache Geronimo 3.x before 3.0.1, as used in IBM WebSphere Application Server (WAS) Community Edition 3.0.0.3 and other products, does not properly implement the RMI…	CWE-94 Code Injection	CVE-2013-1777	2024-11-21 10:50	2013-07-12	Show	GitHub Exploit DB Packet Storm

297378	-		apache	openjpa	The BrokerFactory functionality in Apache OpenJPA 1.x before 1.2.3 and 2.x before 2.2.2 creates local executable JSP files containing logging trace data produced during deserialization of certain cra…	CWE-264 Permissions, Privileges, and Access Controls	CVE-2013-1768	2024-11-21 10:50	2013-07-12	Show	GitHub Exploit DB Packet Storm

297379	-		apache redhat canonical opensuse	http_server jboss_enterprise_application_platform enterprise_linux_server enterprise_linux_workstation enterprise_linux_server_aus enterprise_linux_desktop enterprise_linux_eus u…	mod_dav.c in the Apache HTTP Server before 2.2.25 does not properly determine whether DAV is enabled for a URI, which allows remote attackers to cause a denial of service (segmentation fault) via a M…	NVD-CWE-noinfo	CVE-2013-1896	2024-11-21 10:50	2013-07-11	Show	GitHub Exploit DB Packet Storm

297380	-		apache	struts	Apache Struts 2 before 2.3.14.2 allows remote attackers to execute arbitrary OGNL code via a crafted request that is not properly handled when using the includeParams attribute in the (1) URL or (2) …	CWE-94 Code Injection	CVE-2013-1966	2024-11-21 10:50	2013-07-11	Show	GitHub Exploit DB Packet Storm