Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 17, 2026, 4 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
219121 3.5 注意 IBM - IBM QuickFile におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2013-6729 2014-03-24 17:50 2013-11-8 Show GitHub Exploit DB Packet Storm
219122 5 警告 IBM - IBM WebSphere MQ Internet Pass-Thru におけるサービス運用妨害 (DoS) の脆弱性 CWE-noinfo
情報不足
CVE-2013-5401 2014-03-24 17:50 2013-08-22 Show GitHub Exploit DB Packet Storm
219123 6.5 警告 SIR - GNUboard の bbs/ajax.autosave.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2014-2339 2014-03-24 17:41 2014-03-14 Show GitHub Exploit DB Packet Storm
219124 4.3 警告 Purple Beanie - Joomla! 用 PBBooking コンポーネントの manage.php におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2013-5955 2014-03-24 17:41 2013-09-27 Show GitHub Exploit DB Packet Storm
219125 4.3 警告 CodePeople - Joomla! 用 Multi Calendar コンポーネントの tmpl/layout_editevent.php におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2013-5953 2014-03-24 17:41 2013-09-27 Show GitHub Exploit DB Packet Storm
219126 4.3 警告 Codologic.com - Joomla! 用 FreiChat コンポーネントにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2013-5952 2014-03-24 17:40 2013-09-27 Show GitHub Exploit DB Packet Storm
219127 7.5 危険 MantisBT Group - MantisBT における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2014-1609 2014-03-24 17:39 2014-02-7 Show GitHub Exploit DB Packet Storm
219128 7.5 危険 MantisBT Group - MantisBT の api/soap/mc_file_api.php の the mci_file_get 関数における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2014-1608 2014-03-24 17:38 2014-02-7 Show GitHub Exploit DB Packet Storm
219129 6.8 警告 FreeType Project - FreeType の cff/cf2ft.c におけるサービス運用妨害 (DoS) の脆弱性 CWE-20
不適切な入力確認
CVE-2014-2241 2014-03-24 17:23 2014-02-28 Show GitHub Exploit DB Packet Storm
219130 9.3 危険 Free Download Manager.ORG - Free Download Manager の Downloads_Deleted.cpp におけるスタックベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー
CVE-2014-2087 2014-03-24 17:07 2014-02-21 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 17, 2026, 4:15 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
292071 - ibm websphere_application_server Cross-site scripting (XSS) vulnerability in IBM WebSphere Application Server (WAS) 7.0 before 7.0.0.29, 8.0 before 8.0.0.7, and 8.5 before 8.5.5.0, when OAuth is used, allows remote authenticated use… CWE-79
Cross-site Scripting
CVE-2013-0597 2024-11-21 10:47 2013-08-22 Show GitHub Exploit DB Packet Storm
292072 - ibm global_console_manager_16_firmware
global_console_manager_32_firmware
ping.php in Global Console Manager 16 (GCM16) and Global Console Manager 32 (GCM32) before 1.20.0.22575 on the IBM Avocent 1754 KVM switch allows remote authenticated users to execute arbitrary comma… CWE-20
 Improper Input Validation 
CVE-2013-0526 2024-11-21 10:47 2013-08-22 Show GitHub Exploit DB Packet Storm
292073 - ibm websphere_portal Multiple cross-site scripting (XSS) vulnerabilities in IBM WebSphere Portal before 8.0.0.1 CF07 allow remote attackers to inject arbitrary web script or HTML via vectors involving the (1) Portal, (2)… CWE-79
Cross-site Scripting
CVE-2013-0587 2024-11-21 10:47 2013-08-16 Show GitHub Exploit DB Packet Storm
292074 - ibm infosphere_information_server Multiple cross-site scripting (XSS) vulnerabilities in IBM InfoSphere Information Server through 8.5 FP3, 8.7 through FP2, and 9.1 allow remote authenticated users to inject arbitrary web script or H… CWE-79
Cross-site Scripting
CVE-2013-0585 2024-11-21 10:47 2013-08-16 Show GitHub Exploit DB Packet Storm
292075 - ibm sterling_b2b_integrator IBM Sterling B2B Integrator 5.0 and 5.1 allows remote attackers to cause a denial of service (memory and CPU consumption) via a crafted HTTP (1) Range or (2) Request-Range header. CWE-399
 Resource Management Errors
CVE-2013-0494 2024-11-21 10:47 2013-08-10 Show GitHub Exploit DB Packet Storm
292076 - ibm informix_open_admin_tool Cross-site scripting (XSS) vulnerability in IBM Informix Open Admin Tool (OAT) 2.x and 3.x before 3.11.1 allows remote authenticated users to inject arbitrary web script or HTML via a crafted URL. CWE-79
Cross-site Scripting
CVE-2013-0492 2024-11-21 10:47 2013-08-10 Show GitHub Exploit DB Packet Storm
292077 - ibm api_management Unspecified vulnerability in IBM API Management 2.0 before 2.0.0.1 allows remote attackers to access tenant APIs, and consequently obtain sensitive information or modify data, via unknown vectors. NVD-CWE-noinfo
CVE-2013-0559 2024-11-21 10:47 2013-07-19 Show GitHub Exploit DB Packet Storm
292078 - sun sunos Unspecified vulnerability in Oracle Solaris 8, 9, 10, and 11 allows remote attackers to affect confidentiality via unknown vectors related to Utility/Remote Execution Server (in.rexecd). NVD-CWE-noinfo
CVE-2013-0398 2024-11-21 10:47 2013-07-17 Show GitHub Exploit DB Packet Storm
292079 - drupal drupal The Image module in Drupal 7.x before 7.19, when a private file system is used, does not properly restrict access to derivative images, which allows remote attackers to read derivative images of othe… CWE-264
Permissions, Privileges, and Access Controls
CVE-2013-0246 2024-11-21 10:47 2013-07-17 Show GitHub Exploit DB Packet Storm
292080 - drupal drupal The printer friendly version functionality in the Book module in Drupal 6.x before 6.28 and 7.x before 7.19 does not properly restrict access to node that are part of a book outline, which allows rem… CWE-264
Permissions, Privileges, and Access Controls
CVE-2013-0245 2024-11-21 10:47 2013-07-17 Show GitHub Exploit DB Packet Storm