Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 15, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
219151 10 危険 ソフォス - Sophos Web Appliance の /opt/ws/bin/sblistpack の get_referers 関数における任意のコマンドを実行される脆弱性 CWE-78
OSコマンド・インジェクション 		CVE-2013-4983 2014-03-20 15:25 2013-09-9 Show GitHub Exploit DB Packet Storm
219152 2.6 注意 Mozilla Foundation - Mozilla Firefox および SeaMonkey のセッション復元機能におけるクロスサイトスクリプティングの脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2014-1504 2014-03-20 14:36 2014-03-18 Show GitHub Exploit DB Packet Storm
219153 6.8 警告 Mozilla Foundation - Mozilla Firefox および SeaMonkey における同一生成元ポリシーを回避される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2014-1502 2014-03-20 14:36 2014-03-18 Show GitHub Exploit DB Packet Storm
219154 5.8 警告 Mozilla Foundation - Android 上で稼働する Mozilla Firefox における同一生成元ポリシーを回避される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2014-1501 2014-03-20 14:36 2014-03-18 Show GitHub Exploit DB Packet Storm
219155 5 警告 Mozilla Foundation - Mozilla Firefox および SeaMonkey におけるサービス運用妨害 (DoS) の脆弱性 CWE-noinfo
情報不足 		CVE-2014-1500 2014-03-20 14:36 2014-03-18 Show GitHub Exploit DB Packet Storm
219156 5.8 警告 Mozilla Foundation - Mozilla Firefox および SeaMonkey におけるドメイン名を偽装される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2014-1499 2014-03-20 14:36 2014-03-18 Show GitHub Exploit DB Packet Storm
219157 5 警告 Mozilla Foundation - Mozilla Firefox および SeaMonkey の crypto.generateCRMFRequest メソッドにおけるサービス運用妨害 (DoS) の脆弱性 CWE-20
CWE-310
CVE-2014-1498 2014-03-20 14:36 2014-03-18 Show GitHub Exploit DB Packet Storm
219158 9.3 危険 Mozilla Foundation - Mozilla Firefox OS の DeviceStorage API におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2014-1507 2014-03-20 14:36 2014-03-18 Show GitHub Exploit DB Packet Storm
219159 6.4 警告 Mozilla Foundation - Android 上で稼働する Mozilla Firefox の Android 版クラッシュレポーターにおけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2014-1506 2014-03-20 14:36 2014-03-18 Show GitHub Exploit DB Packet Storm
219160 6.9 警告 Mozilla Foundation - 複数の Mozilla 製品における権限を取得される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2014-1496 2014-03-20 14:36 2014-03-18 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 15, 2026, 4:28 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
292301 - ibm maximo_asset_management_essentials
smartcloud_control_desk
maximo_asset_management 		IBM Maximo Asset Management 7.5, Maximo Asset Management Essentials 7.5, and SmartCloud Control Desk 7.5 allow remote authenticated users to gain privileges via vectors related to an import operation. CWE-264
Permissions, Privileges, and Access Controls 		CVE-2012-6356 2024-11-21 10:46 2013-02-20 Show GitHub Exploit DB Packet Storm
292302 - ibm maximo_asset_management
maximo_asset_management_essentials
tivoli_asset_management_for_it
tivoli_service_request_manager
maximo_service_desk
change_and_configuration_management_databas… 		IBM Maximo Asset Management 6.2 through 7.5, Maximo Asset Management Essentials 6.2 through 7.5, Tivoli Asset Management for IT 6.2 through 7.2, Tivoli Service Request Manager 7.1 and 7.2, Maximo Ser… CWE-264
Permissions, Privileges, and Access Controls 		CVE-2012-6355 2024-11-21 10:46 2013-02-20 Show GitHub Exploit DB Packet Storm
292303 - ibm storwize_v7000
san_volume_controller_software 		The management GUI on the IBM SAN Volume Controller and Storwize V7000 6.x before 6.4.1.3 allows remote attackers to bypass authentication and obtain superuser access via IP packets. CWE-287
Improper Authentication 		CVE-2012-6354 2024-11-21 10:46 2013-02-20 Show GitHub Exploit DB Packet Storm
292304 - symantec pgp_desktop
encryption_desktop 		Buffer overflow in pgpwded.sys in Symantec PGP Desktop 10.x and Encryption Desktop 10.3.0 before MP1 on Windows XP and Server 2003 allows local users to gain privileges via a crafted application. CWE-119
Incorrect Access of Indexable Resource ('Range Error')  		CVE-2012-6533 2024-11-21 10:46 2013-02-18 Show GitHub Exploit DB Packet Storm
292305 - linux linux_kernel The Linux kernel through 3.7.9 allows local users to obtain sensitive information about keystroke timing by using the inotify API on the /dev/ptmx device. CWE-200
Information Exposure 		CVE-2013-0160 2024-11-21 10:46 2013-02-18 Show GitHub Exploit DB Packet Storm
292306 - xen xen The AMD IOMMU support in Xen 4.2.x, 4.1.x, 3.3, and other versions, when using AMD-Vi for PCI passthrough, uses the same interrupt remapping table for the host and all guests, which allows guests to … NVD-CWE-noinfo
CVE-2013-0153 2024-11-21 10:46 2013-02-15 Show GitHub Exploit DB Packet Storm
292307 - zend zend_framework (1) Zend_Dom, (2) Zend_Feed, (3) Zend_Soap, and (4) Zend_XmlRpc in Zend Framework 1.x before 1.11.13 and 1.12.x before 1.12.0 allow remote attackers to cause a denial of service (CPU consumption) via… CWE-399
 Resource Management Errors 		CVE-2012-6532 2024-11-21 10:46 2013-02-14 Show GitHub Exploit DB Packet Storm
292308 - zend zend_framework (1) Zend_Dom, (2) Zend_Feed, and (3) Zend_Soap in Zend Framework 1.x before 1.11.13 and 1.12.x before 1.12.0 do not properly handle SimpleXMLElement classes, which allow remote attackers to read arbi… CWE-20
 Improper Input Validation  		CVE-2012-6531 2024-11-21 10:46 2013-02-14 Show GitHub Exploit DB Packet Storm
292309 - microsoft windows_server_2008
windows_xp
windows_server_2003
windows_vista 		Quartz.dll in DirectShow in Microsoft Windows XP SP2 and SP3, Server 2003 SP2, Vista SP2, and Server 2008 SP2 allows remote attackers to execute arbitrary code via crafted media content in (1) a medi… CWE-94
Code Injection 		CVE-2013-0077 2024-11-21 10:46 2013-02-13 Show GitHub Exploit DB Packet Storm
292310 - microsoft windows_server_2008
windows_7 		The Client/Server Run-time Subsystem (CSRSS) in Microsoft Windows Server 2008 R2 and R2 SP1 and Windows 7 Gold and SP1 does not properly handle objects in memory, which allows local users to gain pri… CWE-399
 Resource Management Errors 		CVE-2013-0076 2024-11-21 10:46 2013-02-13 Show GitHub Exploit DB Packet Storm