Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 24, 2026, 6 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
219631 7.5 危険 Protected Pages project - Drupal 用 Protected Pages モジュールにおけるパスワード保護を回避される脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2014-9024 2014-11-21 19:08 2014-10-9 Show GitHub Exploit DB Packet Storm
219632 5.5 警告 Twilio, Inc. - Drupal 用 Twilio モジュールにおける認証トークンを読まれる脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2014-9023 2014-11-21 19:07 2014-09-12 Show GitHub Exploit DB Packet Storm
219633 6.4 警告 Web Component Roles project - Drupal 用 Webform Component Roles モジュールにおける disabled 制限を回避される脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2014-9022 2014-11-21 19:07 2014-11-11 Show GitHub Exploit DB Packet Storm
219634 6.8 警告 ZTE - ZTE ZXDSL 831CII におけるクロスサイトリクエストフォージェリの脆弱性 CWE-352
同一生成元ポリシー違反
CVE-2014-9027 2014-11-21 18:28 2014-11-6 Show GitHub Exploit DB Packet Storm
219635 4.3 警告 ZTE - ZTE ZXDSL 831 におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2014-9021 2014-11-21 18:27 2014-11-6 Show GitHub Exploit DB Packet Storm
219636 4.3 警告 ZTE - ZTE ZXDSL 831 および 831CII の Quick Stats ページにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2014-9020 2014-11-21 18:27 2014-11-6 Show GitHub Exploit DB Packet Storm
219637 6.8 警告 ZTE - ZTE ZXDSL 831CII におけるクロスサイトリクエストフォージェリの脆弱性 CWE-352
同一生成元ポリシー違反
CVE-2014-9019 2014-11-21 18:24 2014-11-6 Show GitHub Exploit DB Packet Storm
219638 4 警告 OpenStack
Canonical
- OpenStack Image Registry and Delivery Service におけるサービス運用妨害 (DoS) の脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2014-5356 2014-11-21 18:17 2014-05-22 Show GitHub Exploit DB Packet Storm
219639 6.9 警告 Linux - Linux Kernel の Magic Mouse HID ドライバにおけるスタックベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー
CVE-2014-3181 2014-11-21 18:16 2014-08-27 Show GitHub Exploit DB Packet Storm
219640 6.9 警告 Linux - Linux Kernel の drivers/hid/hid-logitech-dj.c の logi_dj_raw_event 関数における任意のコードを実行される脆弱性 CWE-119
バッファエラー
CVE-2014-3182 2014-11-21 18:16 2014-09-5 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 24, 2026, 4 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
297191 - ibm sterling_connect The file-copying functionality in IBM Sterling Connect:Direct 3.8.00, 4.0.00, and 4.1.0 for UNIX on AIX 6.1 through 7.1 uses incorrect privileges, which allows local users to bypass filesystem read p… CWE-264
Permissions, Privileges, and Access Controls
CVE-2013-2989 2024-11-21 10:52 2013-05-29 Show GitHub Exploit DB Packet Storm
297192 - ibm infosphere_optim_data_growth_for_oracle_e-business_suite The Console in IBM InfoSphere Optim Data Growth for Oracle E-Business Suite 6.x, 7.x, and 9.x before 9.1.0.3 does not provide an encrypted session for transmitting login credentials, which allows rem… CWE-255
Credentials Management
CVE-2013-2959 2024-11-21 10:52 2013-05-27 Show GitHub Exploit DB Packet Storm
297193 - ibm infosphere_optim_data_growth_for_oracle_e-business_suite Cross-site scripting (XSS) vulnerability in IBM InfoSphere Optim Data Growth for Oracle E-Business Suite 6.x, 7.x, and 9.x before 9.1.0.3 allows remote authenticated users to inject arbitrary web scr… CWE-79
Cross-site Scripting
CVE-2013-2957 2024-11-21 10:52 2013-05-27 Show GitHub Exploit DB Packet Storm
297194 - ibm infosphere_optim_data_growth_for_oracle_e-business_suite SQL injection vulnerability in the Console in IBM InfoSphere Optim Data Growth for Oracle E-Business Suite 6.x, 7.x, and 9.x before 9.1.0.3 allows remote attackers to execute arbitrary SQL commands v… CWE-89
SQL Injection
CVE-2013-2956 2024-11-21 10:52 2013-05-27 Show GitHub Exploit DB Packet Storm
297195 - ibm infosphere_optim_data_growth_for_oracle_e-business_suite Cross-site scripting (XSS) vulnerability in IBM InfoSphere Optim Data Growth for Oracle E-Business Suite 6.x, 7.x, and 9.x before 9.1.0.3 allows remote authenticated users to inject arbitrary web scr… CWE-79
Cross-site Scripting
CVE-2013-2955 2024-11-21 10:52 2013-05-27 Show GitHub Exploit DB Packet Storm
297196 - ibm infosphere_optim_data_growth_for_oracle_e-business_suite The login page in the Console in IBM InfoSphere Optim Data Growth for Oracle E-Business Suite 6.x, 7.x, and 9.x before 9.1.0.3 does not limit the number of incorrect authentication attempts, which ma… CWE-287
Improper Authentication
CVE-2013-2954 2024-11-21 10:52 2013-05-27 Show GitHub Exploit DB Packet Storm
297197 - ibm infosphere_optim_data_growth_for_oracle_e-business_suite IBM InfoSphere Optim Data Growth for Oracle E-Business Suite 6.x, 7.x, and 9.x before 9.1.0.3 relies on the MD5 algorithm for signatures in X.509 certificates, which makes it easier for man-in-the-mi… CWE-310
Cryptographic Issues
CVE-2013-2953 2024-11-21 10:52 2013-05-27 Show GitHub Exploit DB Packet Storm
297198 - 3s-software codesys_gateway-server Use-after-free vulnerability in the server application in 3S CODESYS Gateway 2.3.9.27 allows remote attackers to cause a denial of service (daemon crash) or possibly execute arbitrary code via unspec… CWE-399
 Resource Management Errors
CVE-2013-2781 2024-11-21 10:52 2013-05-23 Show GitHub Exploit DB Packet Storm
297199 - google chrome Multiple cross-site scripting (XSS) vulnerabilities in Google Chrome before 27.0.1453.93 allow user-assisted remote attackers to inject arbitrary web script or HTML via vectors involving a (1) drag-a… CWE-79
Cross-site Scripting
CVE-2013-2849 2024-11-21 10:52 2013-05-22 Show GitHub Exploit DB Packet Storm
297200 - google chrome The XSS Auditor in Google Chrome before 27.0.1453.93 might allow remote attackers to obtain sensitive information via unspecified vectors. CWE-200
Information Exposure
CVE-2013-2848 2024-11-21 10:52 2013-05-22 Show GitHub Exploit DB Packet Storm