Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 26, 2026, 10 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
219371 4.3 警告 smart-flv Plugin project - WordPress 用 smart-flv プラグインの jwplayer.swf におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2013-1765 2014-05-16 16:42 2013-02-25 Show GitHub Exploit DB Packet Storm
219372 9.7 危険 Broadcom - Broadcom Ltd PIPA C211 の Web インターフェースにおける認証情報などの重要な情報を取得される脆弱性 CWE-310
暗号の問題 		CVE-2014-2046 2014-05-16 16:17 2014-05-9 Show GitHub Exploit DB Packet Storm
219373 7.5 危険 Google
Novell		 - Android SDK Platform-tools の Android 用 Android Debug Bridge における整数符号エラーの脆弱性 CWE-189
数値処理の問題 		CVE-2014-1909 2014-05-16 15:59 2014-05-13 Show GitHub Exploit DB Packet Storm
219374 4 警告 Cobbler project - Cobbler の Web インターフェースにおける絶対パストラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2014-3225 2014-05-16 15:56 2014-05-8 Show GitHub Exploit DB Packet Storm
219375 4.3 警告 Novell
phpPgAdmin		 - phpPgAdmin の function.php におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2012-1600 2014-05-16 15:52 2012-02-28 Show GitHub Exploit DB Packet Storm
219376 4.3 警告 Canonical - Software Properties の ppa.py におけるパッケージリポジトリのGPG 鍵を偽装される脆弱性 CWE-20
不適切な入力確認 		CVE-2011-4407 2014-05-16 15:40 2011-11-7 Show GitHub Exploit DB Packet Storm
219377 7.6 危険 Marc Lehmann - rxvt-unicode における任意の X Window のプロパティを操作される脆弱性 CWE-78
OSコマンド・インジェクション 		CVE-2014-3121 2014-05-16 15:29 2014-04-26 Show GitHub Exploit DB Packet Storm
219378 10 危険 オラクル - Debian GNU/Linux および Ubuntu 上で稼動する OpenJDK における脆弱性 CWE-noinfo
情報不足 		CVE-2014-2405 2014-05-16 15:09 2014-04-24 Show GitHub Exploit DB Packet Storm
219379 10 危険 オラクル - Debian GNU/Linux および Ubuntu 上で稼動する OpenJDK における脆弱性 CWE-noinfo
情報不足 		CVE-2014-0462 2014-05-16 15:09 2014-04-24 Show GitHub Exploit DB Packet Storm
219380 6.8 警告 レッドハット - IcedTea6 および IcedTea-Web の Java Network Launching Protocol の実装におけるローカルファイルへのアクセスを許可される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2011-2514 2014-05-16 14:47 2011-07-27 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 26, 2026, 4:05 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
291691 - nashtech easy_php_calendar Multiple cross-site scripting (XSS) vulnerabilities in (1) index.php and (2) datePicker.php in Easy PHP Calendar 6.x and 7.x before 7.0.13 allow remote attackers to inject arbitrary web script or HTM… CWE-79
Cross-site Scripting 		CVE-2013-1955 2024-11-21 10:50 2013-07-20 Show GitHub Exploit DB Packet Storm
291692 - apache activemq Cross-site scripting (XSS) vulnerability in scheduled.jsp in Apache ActiveMQ 5.8.0 and earlier allows remote attackers to inject arbitrary web script or HTML via vectors involving the "cron of a mess… CWE-79
Cross-site Scripting 		CVE-2013-1879 2024-11-21 10:50 2013-07-20 Show GitHub Exploit DB Packet Storm
291693 - chaos_tool_suite_project ctools The Chaos Tool Suite (ctools) module 7.x-1.x before 7.x-1.3 for Drupal does not properly restrict node access, which allows remote authenticated users with the "access content" permission to read res… CWE-264
Permissions, Privileges, and Access Controls 		CVE-2013-1925 2024-11-21 10:50 2013-07-17 Show GitHub Exploit DB Packet Storm
291694 - acquia
commons_wikis_project 		commons
commons_wikis 		The Commons Wikis module before 7.x-3.1 for Drupal, as used in the Commons module before 7.x-3.1, does not properly restrict access to groups, which allows remote attackers to post arbitrary content … CWE-264
Permissions, Privileges, and Access Controls 		CVE-2013-1908 2024-11-21 10:50 2013-07-17 Show GitHub Exploit DB Packet Storm
291695 - acquia commons
commons_group 		The Commons Group module before 7.x-3.1 for Drupal, as used in the Commons module before 7.x-3.1, does not properly restrict access to groups, which allows remote attackers to post arbitrary content … CWE-264
Permissions, Privileges, and Access Controls 		CVE-2013-1907 2024-11-21 10:50 2013-07-17 Show GitHub Exploit DB Packet Storm
291696 7.8 HIGH
Local 		linux
redhat
canonical 		linux_kernel
enterprise_linux
enterprise_linux_eus
ubuntu_linux 		The KVM subsystem in the Linux kernel before 3.0 does not check whether kernel addresses are specified during allocation of memory slots for use in a guest's physical address space, which allows loca… CWE-20
 Improper Input Validation  		CVE-2013-1943 2024-11-21 10:50 2013-07-16 Show GitHub Exploit DB Packet Storm
291697 - redhat enterprise_linux A certain Red Hat patch to the KVM subsystem in the kernel package before 2.6.32-358.11.1.el6 on Red Hat Enterprise Linux (RHEL) 6 does not properly implement the PV EOI feature, which allows guest O… CWE-362
Race Condition 		CVE-2013-1935 2024-11-21 10:50 2013-07-16 Show GitHub Exploit DB Packet Storm
291698 - ibm
apache 		websphere_application_server
geronimo 		The JMX Remoting functionality in Apache Geronimo 3.x before 3.0.1, as used in IBM WebSphere Application Server (WAS) Community Edition 3.0.0.3 and other products, does not properly implement the RMI… CWE-94
Code Injection 		CVE-2013-1777 2024-11-21 10:50 2013-07-12 Show GitHub Exploit DB Packet Storm
291699 - apache openjpa The BrokerFactory functionality in Apache OpenJPA 1.x before 1.2.3 and 2.x before 2.2.2 creates local executable JSP files containing logging trace data produced during deserialization of certain cra… CWE-264
Permissions, Privileges, and Access Controls 		CVE-2013-1768 2024-11-21 10:50 2013-07-12 Show GitHub Exploit DB Packet Storm
291700 - apache
redhat
canonical
opensuse 		http_server
jboss_enterprise_application_platform
enterprise_linux_server
enterprise_linux_workstation
enterprise_linux_server_aus
enterprise_linux_desktop
enterprise_linux_eus
u… 		mod_dav.c in the Apache HTTP Server before 2.2.25 does not properly determine whether DAV is enabled for a URI, which allows remote attackers to cause a denial of service (segmentation fault) via a M… NVD-CWE-noinfo
CVE-2013-1896 2024-11-21 10:50 2013-07-11 Show GitHub Exploit DB Packet Storm