Vulnerability Search Top

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

Vulnerability Information Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 24, 2026, 4 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
219241	7.2	危険	マイクロソフト	-	複数の Microsoft Windows 製品の ShellExecute API における権限昇格の脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2014-1807	2014-05-15 14:27	2014-05-13	Show	GitHub Exploit DB Packet Storm

219242	10	危険	マイクロソフト	-	Microsoft .NET Framework の .NET Remoting の実装における任意のコードを実行される脆弱性	CWE-94 コード・インジェクション	CVE-2014-1806	2014-05-15 14:26	2014-05-13	Show	GitHub Exploit DB Packet Storm

219243	6.8	警告	マイクロソフト	-	複数の Microsoft Windows 製品のグループポリシーの実装における重要な認証情報を取得される脆弱性	CWE-255 証明書・パスワード管理	CVE-2014-1812	2014-05-15 14:25	2014-05-13	Show	GitHub Exploit DB Packet Storm

219244	6.8	警告	マイクロソフト	-	Microsoft Office の MSCOMCTL ライブラリにおける ASLR 保護メカニズムを回避される脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2014-1809	2014-05-15 14:25	2014-05-13	Show	GitHub Exploit DB Packet Storm

219245	4.3	警告	マイクロソフト	-	Microsoft Office 2013 における重要なトークン情報を取得される脆弱性	CWE-200 情報漏えい	CVE-2014-1808	2014-05-15 14:24	2014-05-13	Show	GitHub Exploit DB Packet Storm

219246	4.3	警告	マイクロソフト	-	複数の Microsoft 製品におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2014-1754	2014-05-15 14:21	2014-05-13	Show	GitHub Exploit DB Packet Storm

219247	9	危険	マイクロソフト	-	複数の Microsoft 製品における任意のコードを実行される脆弱性	CWE-94 コード・インジェクション	CVE-2014-0251	2014-05-15 14:21	2014-05-13	Show	GitHub Exploit DB Packet Storm

219248	5	警告	Haxx アップル Canonical	-	cURL および libcurl の cookie.c における Cookie を盗まれる脆弱性	CWE-200 情報漏えい	CVE-2013-1944	2014-05-14 18:45	2013-04-12	Show	GitHub Exploit DB Packet Storm

219249	4.3	警告	FreeType Project	-	FreeType の _bdf_parse_glyphs 関数におけるサービス運用妨害 (DoS) の脆弱性	CWE-119 バッファエラー	CVE-2012-5670	2014-05-14 18:44	2012-12-20	Show	GitHub Exploit DB Packet Storm

219250	4.3	警告	FreeType Project	-	FreeType の _bdf_parse_glyphs 関数におけるサービス運用妨害 (DoS) の脆弱性	CWE-119 バッファエラー	CVE-2012-5669	2014-05-14 18:43	2012-12-20	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 24, 2026, 4:05 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
291691	-		nashtech	easy_php_calendar	Multiple cross-site scripting (XSS) vulnerabilities in (1) index.php and (2) datePicker.php in Easy PHP Calendar 6.x and 7.x before 7.0.13 allow remote attackers to inject arbitrary web script or HTM…	CWE-79 Cross-site Scripting	CVE-2013-1955	2024-11-21 10:50	2013-07-20	Show	GitHub Exploit DB Packet Storm

291692	-		apache	activemq	Cross-site scripting (XSS) vulnerability in scheduled.jsp in Apache ActiveMQ 5.8.0 and earlier allows remote attackers to inject arbitrary web script or HTML via vectors involving the "cron of a mess…	CWE-79 Cross-site Scripting	CVE-2013-1879	2024-11-21 10:50	2013-07-20	Show	GitHub Exploit DB Packet Storm

291693	-		chaos_tool_suite_project	ctools	The Chaos Tool Suite (ctools) module 7.x-1.x before 7.x-1.3 for Drupal does not properly restrict node access, which allows remote authenticated users with the "access content" permission to read res…	CWE-264 Permissions, Privileges, and Access Controls	CVE-2013-1925	2024-11-21 10:50	2013-07-17	Show	GitHub Exploit DB Packet Storm

291694	-		acquia commons_wikis_project	commons commons_wikis	The Commons Wikis module before 7.x-3.1 for Drupal, as used in the Commons module before 7.x-3.1, does not properly restrict access to groups, which allows remote attackers to post arbitrary content …	CWE-264 Permissions, Privileges, and Access Controls	CVE-2013-1908	2024-11-21 10:50	2013-07-17	Show	GitHub Exploit DB Packet Storm

291695	-		acquia	commons commons_group	The Commons Group module before 7.x-3.1 for Drupal, as used in the Commons module before 7.x-3.1, does not properly restrict access to groups, which allows remote attackers to post arbitrary content …	CWE-264 Permissions, Privileges, and Access Controls	CVE-2013-1907	2024-11-21 10:50	2013-07-17	Show	GitHub Exploit DB Packet Storm

291696	7.8	HIGH Local	linux redhat canonical	linux_kernel enterprise_linux enterprise_linux_eus ubuntu_linux	The KVM subsystem in the Linux kernel before 3.0 does not check whether kernel addresses are specified during allocation of memory slots for use in a guest's physical address space, which allows loca…	CWE-20 Improper Input Validation	CVE-2013-1943	2024-11-21 10:50	2013-07-16	Show	GitHub Exploit DB Packet Storm

291697	-		redhat	enterprise_linux	A certain Red Hat patch to the KVM subsystem in the kernel package before 2.6.32-358.11.1.el6 on Red Hat Enterprise Linux (RHEL) 6 does not properly implement the PV EOI feature, which allows guest O…	CWE-362 Race Condition	CVE-2013-1935	2024-11-21 10:50	2013-07-16	Show	GitHub Exploit DB Packet Storm

291698	-		ibm apache	websphere_application_server geronimo	The JMX Remoting functionality in Apache Geronimo 3.x before 3.0.1, as used in IBM WebSphere Application Server (WAS) Community Edition 3.0.0.3 and other products, does not properly implement the RMI…	CWE-94 Code Injection	CVE-2013-1777	2024-11-21 10:50	2013-07-12	Show	GitHub Exploit DB Packet Storm

291699	-		apache	openjpa	The BrokerFactory functionality in Apache OpenJPA 1.x before 1.2.3 and 2.x before 2.2.2 creates local executable JSP files containing logging trace data produced during deserialization of certain cra…	CWE-264 Permissions, Privileges, and Access Controls	CVE-2013-1768	2024-11-21 10:50	2013-07-12	Show	GitHub Exploit DB Packet Storm

291700	-		apache redhat canonical opensuse	http_server jboss_enterprise_application_platform enterprise_linux_server enterprise_linux_workstation enterprise_linux_server_aus enterprise_linux_desktop enterprise_linux_eus u…	mod_dav.c in the Apache HTTP Server before 2.2.25 does not properly determine whether DAV is enabled for a URI, which allows remote attackers to cause a denial of service (segmentation fault) via a M…	NVD-CWE-noinfo	CVE-2013-1896	2024-11-21 10:50	2013-07-11	Show	GitHub Exploit DB Packet Storm