Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 23, 2026, 10 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
219201 7.6 危険 Marc Lehmann - rxvt-unicode における任意の X Window のプロパティを操作される脆弱性 CWE-78
OSコマンド・インジェクション 		CVE-2014-3121 2014-05-16 15:29 2014-04-26 Show GitHub Exploit DB Packet Storm
219202 10 危険 オラクル - Debian GNU/Linux および Ubuntu 上で稼動する OpenJDK における脆弱性 CWE-noinfo
情報不足 		CVE-2014-2405 2014-05-16 15:09 2014-04-24 Show GitHub Exploit DB Packet Storm
219203 10 危険 オラクル - Debian GNU/Linux および Ubuntu 上で稼動する OpenJDK における脆弱性 CWE-noinfo
情報不足 		CVE-2014-0462 2014-05-16 15:09 2014-04-24 Show GitHub Exploit DB Packet Storm
219204 6.8 警告 レッドハット - IcedTea6 および IcedTea-Web の Java Network Launching Protocol の実装におけるローカルファイルへのアクセスを許可される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2011-2514 2014-05-16 14:47 2011-07-27 Show GitHub Exploit DB Packet Storm
219205 5 警告 レッドハット - IcedTea6 および IcedTea-Web の Java Network Launching Protocol の実装におけるユーザ名などを取得される脆弱性 CWE-200
情報漏えい 		CVE-2011-2513 2014-05-16 14:47 2011-07-27 Show GitHub Exploit DB Packet Storm
219206 6.9 警告 BMC Software - BMC PATROL for AIX における権限を取得される脆弱性 CWE-Other
その他 		CVE-2014-2591 2014-05-16 14:12 2014-04-9 Show GitHub Exploit DB Packet Storm
219207 6.8 警告 Open Assessment Technologies S.A. - Open Assessment Technologies TAO におけるクロスサイトリクエストフォージェリの脆弱性 CWE-352
同一生成元ポリシー違反 		CVE-2014-2989 2014-05-16 12:24 2014-05-7 Show GitHub Exploit DB Packet Storm
219208 10 危険 ShenZhen Foscam Intelligent Technology - Foscam IP camera における任意のカメラを偽装またはハイジャックされる脆弱性 CWE-255
証明書・パスワード管理 		CVE-2014-1849 2014-05-16 12:19 2014-05-8 Show GitHub Exploit DB Packet Storm
219209 6.8 警告 OpenVPN Technologies - OpenVPN Access Server の管理 Web インターフェースにおけるクロスサイトリクエストフォージェリの脆弱性 CWE-352
同一生成元ポリシー違反 		CVE-2013-2692 2014-05-16 12:18 2013-05-8 Show GitHub Exploit DB Packet Storm
219210 6.8 警告 Tips and Tricks HQ - WordPress 用 WordPress Simple Paypal Shopping Cart プラグインにおけるクロスサイトリクエストフォージェリの脆弱性 CWE-352
同一生成元ポリシー違反 		CVE-2013-2705 2014-05-16 12:11 2013-06-5 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 23, 2026, 4:08 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
291811 - linux linux_kernel The create_user_ns function in kernel/user_namespace.c in the Linux kernel before 3.8.6 does not check whether a chroot directory exists that differs from the namespace root directory, which allows l… CWE-264
Permissions, Privileges, and Access Controls 		CVE-2013-1956 2024-11-21 10:50 2013-04-25 Show GitHub Exploit DB Packet Storm
291812 - chatelao php_address_book Cross-site scripting (XSS) vulnerability in edit.php in PHP Address Book 8.2.5 allows user-assisted remote attackers to inject arbitrary web script or HTML via the Address field. CWE-79
Cross-site Scripting 		CVE-2013-1749 2024-11-21 10:50 2013-04-18 Show GitHub Exploit DB Packet Storm
291813 - chatelao php_address_book Multiple SQL injection vulnerabilities in PHP Address Book 8.2.5 allow remote attackers to execute arbitrary SQL commands via unspecified parameters to (1) edit.php or (2) import.php. NOTE: the view… CWE-89
SQL Injection 		CVE-2013-1748 2024-11-21 10:50 2013-04-18 Show GitHub Exploit DB Packet Storm
291814 6.1 MEDIUM
Network 		phpmyadmin phpmyadmin Multiple cross-site scripting (XSS) vulnerabilities in tbl_gis_visualization.php in phpMyAdmin 3.5.x before 3.5.8 might allow remote attackers to inject arbitrary web script or HTML via the (1) visua… CWE-79
Cross-site Scripting 		CVE-2013-1937 2024-11-21 10:50 2013-04-16 Show GitHub Exploit DB Packet Storm
291815 - xen xen Xen 4.2.x, 4.1.x, and earlier, when the hypervisor is running "under memory pressure" and the Xen Security Module (XSM) is enabled, uses the wrong ordering of operations when extending the per-domain… CWE-264
Permissions, Privileges, and Access Controls 		CVE-2013-1920 2024-11-21 10:50 2013-04-13 Show GitHub Exploit DB Packet Storm
291816 - haproxy haproxy Buffer overflow in HAProxy 1.4 through 1.4.22 and 1.5-dev through 1.5-dev17, when HTTP keep-alive is enabled, using HTTP keywords in TCP inspection rules, and running with rewrite rules that appends … CWE-119
Incorrect Access of Indexable Resource ('Range Error')  		CVE-2013-1912 2024-11-21 10:50 2013-04-11 Show GitHub Exploit DB Packet Storm
291817 - redhat packstack
openstack_folsom
openstack_essex 		PackStack 2012.2.3 in Red Hat OpenStack Essex and Folsom can create the answer file in insecure directories such as /tmp or the current working directory, which allows local users to modify deployed … CWE-255
Credentials Management 		CVE-2013-1815 2024-11-21 10:50 2013-04-11 Show GitHub Exploit DB Packet Storm
291818 - ruby-lang ruby lib/rexml/text.rb in the REXML parser in Ruby before 1.9.3-p392 allows remote attackers to cause a denial of service (memory consumption and crash) via crafted text nodes in an XML document, aka an X… CWE-20
 Improper Input Validation  		CVE-2013-1821 2024-11-21 10:50 2013-04-10 Show GitHub Exploit DB Packet Storm
291819 - digineo thumbshooter lib/thumbshooter.rb in the Thumbshooter 0.1.5 gem for Ruby allows remote attackers to execute arbitrary commands via shell metacharacters in a URL. CWE-94
Code Injection 		CVE-2013-1898 2024-11-21 10:50 2013-04-10 Show GitHub Exploit DB Packet Storm
291820 - dan_kubb extlib The extlib gem 0.9.15 and earlier for Ruby does not properly restrict casts of string values, which might allow remote attackers to conduct object-injection attacks and execute arbitrary code, or cau… CWE-264
Permissions, Privileges, and Access Controls 		CVE-2013-1802 2024-11-21 10:50 2013-04-10 Show GitHub Exploit DB Packet Storm