Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 21, 2026, 4 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
219621 6.8 警告 elfutils Project - elfutils で使用される libdw ライブラリの dwarf_begin_elf.c 内の check_section 関数における整数オーバーフローの脆弱性 CWE-189
数値処理の問題
CVE-2014-0172 2014-04-16 10:52 2014-04-9 Show GitHub Exploit DB Packet Storm
219622 7.8 危険 Erlang Solutions - Erlang Solutions MongooseIM におけるサービス運用妨害 (DoS) の脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2014-2829 2014-04-16 10:48 2014-04-9 Show GitHub Exploit DB Packet Storm
219623 7.8 危険 Tigase - Tigase の net/IOService.java におけるサービス運用妨害 (DoS) の脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2014-2746 2014-04-16 10:33 2014-03-30 Show GitHub Exploit DB Packet Storm
219624 7.8 危険 Isode - Isode M-Link におけるサービス運用妨害 (DoS) の脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2014-2742 2014-04-16 10:23 2014-03-31 Show GitHub Exploit DB Packet Storm
219625 7.8 危険 The Prosody Team - Prosody におけるサービス運用妨害 (DoS) の脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2014-2745 2014-04-15 19:44 2014-04-2 Show GitHub Exploit DB Packet Storm
219626 7.8 危険 The Prosody Team
Lightwitch
- Prosody および Lightwitch Metronome の plugins/mod_compression.lua におけるサービス運用妨害 (DoS) の脆弱性 CWE-20
不適切な入力確認
CVE-2014-2744 2014-04-15 19:41 2014-04-2 Show GitHub Exploit DB Packet Storm
219627 7.8 危険 Lightwitch - Lightwitch Metronome の plugins/mod_compression.lua におけるサービス運用妨害 (DoS) の脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2014-2743 2014-04-15 19:34 2014-04-4 Show GitHub Exploit DB Packet Storm
219628 10 危険 Alex Saveliev - J2K-Codec に複数の脆弱性 - CVE-2014-0349 2014-04-15 18:51 2014-04-8 Show GitHub Exploit DB Packet Storm
219629 3.5 注意 ウェブセンス - Websense TRITON Unified Security Center に情報漏えいの脆弱性 CWE-200
情報漏えい
CVE-2014-0347 2014-04-15 18:50 2014-04-7 Show GitHub Exploit DB Packet Storm
219630 6 警告 IBM - IBM Business Process Manager のユーザ属性の実装における重要な情報を取得される脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2014-0908 2014-04-15 18:27 2014-04-4 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 21, 2026, 4:10 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
292591 - ibm infosphere_information_server Multiple cross-site scripting (XSS) vulnerabilities in IBM InfoSphere Information Server through 8.5 FP3, 8.7 through FP2, and 9.1 allow remote authenticated users to inject arbitrary web script or H… CWE-79
Cross-site Scripting
CVE-2013-0585 2024-11-21 10:47 2013-08-16 Show GitHub Exploit DB Packet Storm
292592 - ibm sterling_b2b_integrator IBM Sterling B2B Integrator 5.0 and 5.1 allows remote attackers to cause a denial of service (memory and CPU consumption) via a crafted HTTP (1) Range or (2) Request-Range header. CWE-399
 Resource Management Errors
CVE-2013-0494 2024-11-21 10:47 2013-08-10 Show GitHub Exploit DB Packet Storm
292593 - ibm informix_open_admin_tool Cross-site scripting (XSS) vulnerability in IBM Informix Open Admin Tool (OAT) 2.x and 3.x before 3.11.1 allows remote authenticated users to inject arbitrary web script or HTML via a crafted URL. CWE-79
Cross-site Scripting
CVE-2013-0492 2024-11-21 10:47 2013-08-10 Show GitHub Exploit DB Packet Storm
292594 - ibm api_management Unspecified vulnerability in IBM API Management 2.0 before 2.0.0.1 allows remote attackers to access tenant APIs, and consequently obtain sensitive information or modify data, via unknown vectors. NVD-CWE-noinfo
CVE-2013-0559 2024-11-21 10:47 2013-07-19 Show GitHub Exploit DB Packet Storm
292595 - sun sunos Unspecified vulnerability in Oracle Solaris 8, 9, 10, and 11 allows remote attackers to affect confidentiality via unknown vectors related to Utility/Remote Execution Server (in.rexecd). NVD-CWE-noinfo
CVE-2013-0398 2024-11-21 10:47 2013-07-17 Show GitHub Exploit DB Packet Storm
292596 - drupal drupal The Image module in Drupal 7.x before 7.19, when a private file system is used, does not properly restrict access to derivative images, which allows remote attackers to read derivative images of othe… CWE-264
Permissions, Privileges, and Access Controls
CVE-2013-0246 2024-11-21 10:47 2013-07-17 Show GitHub Exploit DB Packet Storm
292597 - drupal drupal The printer friendly version functionality in the Book module in Drupal 6.x before 6.28 and 7.x before 7.19 does not properly restrict access to node that are part of a book outline, which allows rem… CWE-264
Permissions, Privileges, and Access Controls
CVE-2013-0245 2024-11-21 10:47 2013-07-17 Show GitHub Exploit DB Packet Storm
292598 - moxiecode
wordpress
fedoraproject
plupload
wordpress
fedora
Cross-site scripting (XSS) vulnerability in Plupload.as in Moxiecode plupload before 1.5.5, as used in WordPress before 3.5.1 and other products, allows remote attackers to inject arbitrary web scrip… CWE-79
Cross-site Scripting
CVE-2013-0237 2024-11-21 10:47 2013-07-9 Show GitHub Exploit DB Packet Storm
292599 - wordpress wordpress Multiple cross-site scripting (XSS) vulnerabilities in WordPress before 3.5.1 allow remote attackers to inject arbitrary web script or HTML via vectors involving (1) gallery shortcodes or (2) the con… CWE-79
Cross-site Scripting
CVE-2013-0236 2024-11-21 10:47 2013-07-9 Show GitHub Exploit DB Packet Storm
292600 - wordpress wordpress The XMLRPC API in WordPress before 3.5.1 allows remote attackers to send HTTP requests to intranet servers, and conduct port-scanning attacks, by specifying a crafted source URL for a pingback, relat… NVD-CWE-Other
CVE-2013-0235 2024-11-21 10:47 2013-07-9 Show GitHub Exploit DB Packet Storm