Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 24, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
219421 7.5 危険 Apache Software Foundation - Apache Camel の XSLT コンポーネントにおける任意のファイルを読まれる脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2014-0002 2014-05-2 18:10 2014-02-28 Show GitHub Exploit DB Packet Storm
219422 5 警告 PHP-Fusion - PHP-Fusion における重要な情報を取得される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2013-1807 2014-05-2 16:47 2013-01-27 Show GitHub Exploit DB Packet Storm
219423 6.5 警告 PHP-Fusion - PHP-Fusion におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2013-1806 2014-05-2 16:46 2013-01-27 Show GitHub Exploit DB Packet Storm
219424 4.3 警告 PHP-Fusion - PHP-Fusion におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2013-1804 2014-05-2 16:46 2013-01-27 Show GitHub Exploit DB Packet Storm
219425 7.5 危険 Google - Android における暗号保護メカニズムを破られる脆弱性 CWE-200
情報漏えい 		CVE-2013-7373 2014-05-2 16:45 2013-08-14 Show GitHub Exploit DB Packet Storm
219426 5 警告 Google
Apache Software Foundation		 - Android の Java Cryptography Architecture で使用される Apache Harmony における暗号保護メカニズムを破られる脆弱性 CWE-310
暗号の問題 		CVE-2013-7372 2014-05-2 16:45 2013-08-14 Show GitHub Exploit DB Packet Storm
219427 7.5 危険 シトリックス・システムズ - Citrix NetScaler Application Delivery Controller および NetScaler Gateway の管理 GUI における脆弱性 CWE-noinfo
情報不足 		CVE-2014-2882 2014-05-2 16:35 2014-04-28 Show GitHub Exploit DB Packet Storm
219428 7.5 危険 シトリックス・システムズ - Citrix NetScaler Application Delivery Controller および NetScaler Gateway の管理 GUI の Java アプレットにおける脆弱性 CWE-noinfo
情報不足 		CVE-2014-2881 2014-05-2 16:34 2014-04-28 Show GitHub Exploit DB Packet Storm
219429 6.5 警告 フォーティネット - FortiGuard FortiWeb における権限を取得される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2014-1957 2014-05-2 16:33 2014-02-13 Show GitHub Exploit DB Packet Storm
219430 7.5 危険 フォーティネット - FortiGuard FortiWeb における CRLF インジェクションの脆弱性 CWE-Other
その他 		CVE-2014-1956 2014-05-2 16:32 2014-02-13 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 25, 2026, 4:01 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
291781 - mozilla firefox
thunderbird
thunderbird_esr 		Use-after-free vulnerability in the nsFrameList::FirstChild function in Mozilla Firefox before 21.0, Firefox ESR 17.x before 17.0.6, Thunderbird before 17.0.6, and Thunderbird ESR 17.x before 17.0.6 … CWE-119
Incorrect Access of Indexable Resource ('Range Error')  		CVE-2013-1680 2024-11-21 10:50 2013-05-16 Show GitHub Exploit DB Packet Storm
291782 - mozilla firefox
thunderbird
thunderbird_esr 		Use-after-free vulnerability in the mozilla::plugins::child::_geturlnotify function in Mozilla Firefox before 21.0, Firefox ESR 17.x before 17.0.6, Thunderbird before 17.0.6, and Thunderbird ESR 17.x… CWE-399
 Resource Management Errors 		CVE-2013-1679 2024-11-21 10:50 2013-05-16 Show GitHub Exploit DB Packet Storm
291783 - mozilla firefox
thunderbird
thunderbird_esr 		The _cairo_xlib_surface_add_glyph function in Mozilla Firefox before 21.0, Firefox ESR 17.x before 17.0.6, Thunderbird before 17.0.6, and Thunderbird ESR 17.x before 17.0.6 allows remote attackers to… CWE-119
Incorrect Access of Indexable Resource ('Range Error')  		CVE-2013-1678 2024-11-21 10:50 2013-05-16 Show GitHub Exploit DB Packet Storm
291784 - mozilla firefox
thunderbird
thunderbird_esr 		The gfxSkipCharsIterator::SetOffsets function in Mozilla Firefox before 21.0, Firefox ESR 17.x before 17.0.6, Thunderbird before 17.0.6, and Thunderbird ESR 17.x before 17.0.6 allows remote attackers… CWE-399
 Resource Management Errors 		CVE-2013-1677 2024-11-21 10:50 2013-05-16 Show GitHub Exploit DB Packet Storm
291785 - mozilla firefox
thunderbird
thunderbird_esr 		The SelectionIterator::GetNextSegment function in Mozilla Firefox before 21.0, Firefox ESR 17.x before 17.0.6, Thunderbird before 17.0.6, and Thunderbird ESR 17.x before 17.0.6 allows remote attacker… CWE-119
Incorrect Access of Indexable Resource ('Range Error')  		CVE-2013-1676 2024-11-21 10:50 2013-05-16 Show GitHub Exploit DB Packet Storm
291786 - mozilla firefox
thunderbird
thunderbird_esr 		Use-after-free vulnerability in Mozilla Firefox before 21.0, Firefox ESR 17.x before 17.0.6, Thunderbird before 17.0.6, and Thunderbird ESR 17.x before 17.0.6 allows remote attackers to execute arbit… CWE-399
 Resource Management Errors 		CVE-2013-1674 2024-11-21 10:50 2013-05-16 Show GitHub Exploit DB Packet Storm
291787 - mozilla firefox The Mozilla Updater in Mozilla Firefox before 21.0 on Windows does not properly maintain Mozilla Maintenance Service registry entries in certain situations involving upgrades from older Firefox versi… CWE-264
Permissions, Privileges, and Access Controls 		CVE-2013-1673 2024-11-21 10:50 2013-05-16 Show GitHub Exploit DB Packet Storm
291788 - mozilla firefox
thunderbird
thunderbird_esr 		The Mozilla Maintenance Service in Mozilla Firefox before 21.0, Firefox ESR 17.x before 17.0.6, Thunderbird before 17.0.6, and Thunderbird ESR 17.x before 17.0.6 on Windows allows local users to bypa… CWE-264
Permissions, Privileges, and Access Controls 		CVE-2013-1672 2024-11-21 10:50 2013-05-16 Show GitHub Exploit DB Packet Storm
291789 - mozilla firefox Mozilla Firefox before 21.0 does not properly implement the INPUT element, which allows remote attackers to obtain the full pathname via a crafted web site. CWE-20
 Improper Input Validation  		CVE-2013-1671 2024-11-21 10:50 2013-05-16 Show GitHub Exploit DB Packet Storm
291790 - mozilla firefox
thunderbird
thunderbird_esr 		The Chrome Object Wrapper (COW) implementation in Mozilla Firefox before 21.0, Firefox ESR 17.x before 17.0.6, Thunderbird before 17.0.6, and Thunderbird ESR 17.x before 17.0.6 does not prevent acqui… CWE-264
CWE-79
Permissions, Privileges, and Access Controls
Cross-site Scripting 		CVE-2013-1670 2024-11-21 10:50 2013-05-16 Show GitHub Exploit DB Packet Storm