Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 19, 2026, 6 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
219371 6.4 警告 Apache Software Foundation - Apache Solr の DocumentAnalysisRequestHandler における脆弱性 CWE-noinfo
情報不足
CVE-2013-6408 2014-04-7 17:57 2013-05-30 Show GitHub Exploit DB Packet Storm
219372 6.4 警告 Apache Software Foundation - Apache Solr の XML 用 UpdateRequestHandler における脆弱性 CWE-noinfo
情報不足
CVE-2013-6407 2014-04-7 17:56 2013-12-9 Show GitHub Exploit DB Packet Storm
219373 4.3 警告 Apache Software Foundation - Apache Solr の SolrResourceLoader におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル
CVE-2013-6397 2014-04-7 17:55 2013-09-21 Show GitHub Exploit DB Packet Storm
219374 5.7 警告 Linux
レッドハット
- Linux Kernel の KVM サブシステムの arch/x86/kvm/lapic.c におけるサービス運用妨害 (DoS) の脆弱性 CWE-189
数値処理の問題
CVE-2013-6367 2014-04-7 17:54 2013-12-12 Show GitHub Exploit DB Packet Storm
219375 1.9 注意 LIGHTTPD - Debian GNU/Linux 上の lighthttpd における PHP 制御ソケットを乗っ取られる脆弱性 CWE-DesignError
CVE-2013-1427 2014-04-7 17:49 2013-03-15 Show GitHub Exploit DB Packet Storm
219376 5 警告 LIGHTTPD
オラクル
- lighttpd におけるサービス運用妨害 (DoS) の脆弱性 CWE-399
リソース管理の問題
CVE-2010-0295 2014-04-7 17:47 2010-02-3 Show GitHub Exploit DB Packet Storm
219377 5 警告 The PHP Group - PHP の SQLite における open_basedir 保護機能を回避される脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2012-3365 2014-04-7 17:46 2012-07-19 Show GitHub Exploit DB Packet Storm
219378 10 危険 The PHP Group
アップル
- PHP の stream の実装における脆弱性 - CVE-2012-2688 2014-04-7 17:45 2012-07-19 Show GitHub Exploit DB Packet Storm
219379 4.3 警告 The PHP Group - PHP の Fileinfo コンポーネントの libmagic/softmagic.c におけるサービス運用妨害 (DoS) の脆弱性 CWE-20
不適切な入力確認
CVE-2013-4636 2014-04-7 17:44 2013-06-20 Show GitHub Exploit DB Packet Storm
219380 5 警告 The PHP Group - PHP の Calendar コンポーネントの jewish.c における整数オーバーフローの脆弱性 CWE-189
数値処理の問題
CVE-2013-4635 2014-04-7 17:43 2013-06-20 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 19, 2026, 4:16 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
292181 - owncloud owncloud Multiple cross-site request forgery (CSRF) vulnerabilities in ownCloud before 4.0.12 and 4.5.x before 4.5.7 allow remote attackers to hijack the authentication of users for requests that (1) change t… CWE-352
 Origin Validation Error
CVE-2013-0299 2024-11-21 10:47 2014-03-15 Show GitHub Exploit DB Packet Storm
292182 - owncloud owncloud Cross-site scripting (XSS) vulnerability in settings.php in ownCloud before 4.0.12 and 4.5.x before 4.5.7 allows remote administrators to inject arbitrary web script or HTML via the group input field… CWE-79
Cross-site Scripting
CVE-2013-0307 2024-11-21 10:47 2014-03-15 Show GitHub Exploit DB Packet Storm
292183 - owncloud owncloud Multiple cross-site scripting (XSS) vulnerabilities in ownCloud 4.5.x before 4.5.7 allow remote attackers to inject arbitrary web script or HTML via (1) a crafted iCalendar file to the calendar appli… CWE-79
Cross-site Scripting
CVE-2013-0298 2024-11-21 10:47 2014-03-15 Show GitHub Exploit DB Packet Storm
292184 - owncloud owncloud Multiple cross-site scripting (XSS) vulnerabilities in ownCloud before 4.0.12 and 4.5.x before 4.5.7 allow remote authenticated administrators to inject arbitrary web script or HTML via the (1) site_… CWE-79
Cross-site Scripting
CVE-2013-0297 2024-11-21 10:47 2014-03-15 Show GitHub Exploit DB Packet Storm
292185 - apache tomcat Apache Tomcat 7.x uses world-readable permissions for the log directory and its files, which might allow local users to obtain sensitive information by reading a file. NOTE: One Tomcat distributor ha… CWE-264
Permissions, Privileges, and Access Controls
CVE-2013-0346 2024-11-21 10:47 2014-02-15 Show GitHub Exploit DB Packet Storm
292186 - elgg elgg Cross-site scripting (XSS) vulnerability in the Twitter widget in Elgg before 1.7.17 and 1.8.x before 1.8.13 allows remote attackers to inject arbitrary web script or HTML via the params[twitter_user… CWE-79
Cross-site Scripting
CVE-2013-0234 2024-11-21 10:47 2014-02-3 Show GitHub Exploit DB Packet Storm
292187 - apache ofbiz Multiple cross-site scripting (XSS) vulnerabilities in widget/screen/ModelScreenWidget.java in Apache Open For Business Project (aka OFBiz) 10.04.x before 10.04.05, 11.04.01, and possibly 09.04.x all… CWE-79
Cross-site Scripting
CVE-2013-0177 2024-11-21 10:47 2014-01-31 Show GitHub Exploit DB Packet Storm
292188 - ibm java Unspecified vulnerability in IBM Java SDK 7 before SR4-FP1, 6 before SR13-FP1, 5.0 before SR16-FP1, and 1.4.2 before SR13-FP16 has unknown impact and attack vectors related to Class Libraries. NVD-CWE-noinfo
CVE-2013-0485 2024-11-21 10:47 2014-01-22 Show GitHub Exploit DB Packet Storm
292189 - libexpat_project
python
apple
libexpat
python
ipados
iphone_os
macos
watchos
tvos
expat 2.1.0 and earlier does not properly handle entities expansion unless an application developer uses the XML_SetEntityDeclHandler function, which allows remote attackers to cause a denial of serv… CWE-611
XXE
CVE-2013-0340 2024-11-21 10:47 2014-01-22 Show GitHub Exploit DB Packet Storm
292190 - xmlsoft
canonical
debian
suse
libxml2
ubuntu_linux
debian_linux
linux_enterprise_server
libxml2 through 2.9.1 does not properly handle external entities expansion unless an application developer uses the xmlSAX2ResolveEntity or xmlSetExternalEntityLoader function, which allows remote at… CWE-264
Permissions, Privileges, and Access Controls
CVE-2013-0339 2024-11-21 10:47 2014-01-22 Show GitHub Exploit DB Packet Storm