Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 28, 2026, 2:01 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
219201 10 危険 Mozilla Foundation - 複数の Mozilla 製品の libxul.so の nsHostResolver::ConditionallyRefreshRecord 関数における任意のコードを実行される脆弱性 CWE-399
リソース管理の問題
CVE-2014-1532 2014-05-27 17:38 2014-04-29 Show GitHub Exploit DB Packet Storm
219202 10 危険 Mozilla Foundation - 複数の Mozilla 製品の nsGenericHTMLElement::GetWidthHeightForImage 関数における任意のコードを実行される脆弱性 CWE-399
リソース管理の問題
CVE-2014-1531 2014-05-27 17:37 2014-04-29 Show GitHub Exploit DB Packet Storm
219203 4.3 警告 Mozilla Foundation - 複数の Mozilla 製品の docshell 実装における偽装された baseURI プロパティで URL の読み込みを誘発される脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2014-1530 2014-05-27 17:36 2014-04-29 Show GitHub Exploit DB Packet Storm
219204 9.3 危険 Mozilla Foundation - 複数の Mozilla 製品の Web Notification API におけるソースコンポーネントの制限を回避される脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2014-1529 2014-05-27 17:34 2014-04-29 Show GitHub Exploit DB Packet Storm
219205 10 危険 Mozilla Foundation - 複数の Mozilla 製品の nsXBLProtoImpl::InstallImplementation 関数における任意のコードを実行される脆弱性 CWE-119
バッファエラー
CVE-2014-1524 2014-05-27 17:32 2014-04-29 Show GitHub Exploit DB Packet Storm
219206 4.3 警告 Mozilla Foundation - 複数の Mozilla 製品の read_u32 関数におけるヒープベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー
CVE-2014-1523 2014-05-27 16:43 2014-04-29 Show GitHub Exploit DB Packet Storm
219207 10 危険 Mozilla Foundation - 複数の Mozilla 製品のブラウザエンジンにおけるサービス運用妨害 (DoS) の脆弱性 CWE-noinfo
情報不足
CVE-2014-1518 2014-05-27 16:41 2014-04-29 Show GitHub Exploit DB Packet Storm
219208 6.5 警告 PostgreSQL.org - PostgreSQL の contrib/hstore/hstore_io.c における整数オーバーフローの脆弱性 CWE-189
数値処理の問題
CVE-2014-2669 2014-05-26 18:17 2014-02-20 Show GitHub Exploit DB Packet Storm
219209 - - アドビシステムズ - Adobe Shockwave Player に旧バージョンの Flash ランタイムが同梱されている問題 - - 2014-05-26 18:10 2012-12-19 Show GitHub Exploit DB Packet Storm
219210 5.8 警告 Ruby-lang.org - Ruby の openssl 拡張機能における Ruby スクリプトのコンテキスト中の署名を偽装される脆弱性 CWE-399
リソース管理の問題
CVE-2014-2734 2014-05-26 18:09 2014-04-16 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 28, 2026, 4:16 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
291361 - ibm infosphere_biginsights IBM InfoSphere BigInsights 1.1 through 2.1 does not properly handle FRAME elements, which makes it easier for remote authenticated users to conduct phishing attacks via a crafted web site. CWE-20
 Improper Input Validation 
CVE-2013-3996 2024-11-21 10:54 2013-08-6 Show GitHub Exploit DB Packet Storm
291362 - ibm infosphere_biginsights Cross-site scripting (XSS) vulnerability in IBM InfoSphere BigInsights 1.1 through 2.1 allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors. CWE-79
Cross-site Scripting
CVE-2013-3995 2024-11-21 10:54 2013-08-6 Show GitHub Exploit DB Packet Storm
291363 - ibm infosphere_biginsights Cross-site request forgery (CSRF) vulnerability in IBM InfoSphere BigInsights 2.0 through 2.1 allows remote authenticated users to hijack the authentication of unspecified victims via unknown vectors. CWE-352
 Origin Validation Error
CVE-2013-3992 2024-11-21 10:54 2013-08-6 Show GitHub Exploit DB Packet Storm
291364 - canonical
redhat
fedoraproject
samba
opensuse
ubuntu_linux
enterprise_linux
fedora
samba
opensuse
Integer overflow in the read_nttrans_ea_list function in nttrans.c in smbd in Samba 3.x before 3.5.22, 3.6.x before 3.6.17, and 4.x before 4.0.8 allows remote attackers to cause a denial of service (… CWE-189
Numeric Errors
CVE-2013-4124 2024-11-21 10:54 2013-08-6 Show GitHub Exploit DB Packet Storm
291365 - monkey-project monkey The mk_request_header_process function in mk_request.c in Monkey 1.1.1 allows remote attackers to cause a denial of service (thread crash and service outage) via a '\0' character in an HTTP request. CWE-20
 Improper Input Validation 
CVE-2013-3724 2024-11-21 10:54 2013-08-1 Show GitHub Exploit DB Packet Storm
291366 - apache openoffice Apache OpenOffice.org (OOo) before 4.0 allows remote attackers to cause a denial of service (memory corruption) or possibly have unspecified other impact via a crafted element in an OOXML document fi… CWE-787
 Out-of-bounds Write
CVE-2013-4156 2024-11-21 10:54 2013-07-31 Show GitHub Exploit DB Packet Storm
291367 - apache subversion The mod_dav_svn Apache HTTPD server module in Subversion 1.7.0 through 1.7.10 and 1.8.x before 1.8.1 allows remote authenticated users to cause a denial of service (assertion failure or out-of-bounds… CWE-119
Incorrect Access of Indexable Resource ('Range Error') 
CVE-2013-4131 2024-11-21 10:54 2013-07-31 Show GitHub Exploit DB Packet Storm
291368 - novell client The NICM.SYS kernel driver 3.1.11.0 in Novell Client 4.91 SP5 on Windows XP and Windows Server 2003; Novell Client 2 SP2 on Windows Vista and Windows Server 2008; and Novell Client 2 SP3 on Windows S… CWE-264
Permissions, Privileges, and Access Controls
CVE-2013-3956 2024-11-21 10:54 2013-07-31 Show GitHub Exploit DB Packet Storm
291369 - novell client Integer overflow in the NWFS.SYS kernel driver 4.91.5.8 in Novell Client 4.91 SP5 on Windows XP and Windows Server 2003 and the NCPL.SYS kernel driver in Novell Client 2 SP2 on Windows Vista and Wind… CWE-189
Numeric Errors
CVE-2013-3697 2024-11-21 10:54 2013-07-31 Show GitHub Exploit DB Packet Storm
291370 - drupalisme tinybox Cross-site scripting (XSS) vulnerability in the TinyBox (Simple Splash) module before 7.x-2.2 for Drupal allows remote authenticated users with the "administer tinybox" permission to inject arbitrary… CWE-79
Cross-site Scripting
CVE-2013-4140 2024-11-21 10:54 2013-07-30 Show GitHub Exploit DB Packet Storm