Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 26, 2026, noon

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
219641 4.3 警告 VideoWhisper.com - Drupal 用 VideoWhisper Webcam プラグインにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2014-2715 2014-05-1 18:10 2014-04-25 Show GitHub Exploit DB Packet Storm
219642 6.8 警告 Ubercart - Drupal 用 Ubercart モジュールにおける Web セッションをハイジャックされる脆弱性 CWE-287
不適切な認証 		CVE-2013-7302 2014-05-1 18:09 2013-12-17 Show GitHub Exploit DB Packet Storm
219643 4.3 警告 Gizra - Drupal 用 Entity reference モジュールにおけるプライベートノードのタイトルを読まれる脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2013-7066 2014-05-1 18:08 2013-11-20 Show GitHub Exploit DB Packet Storm
219644 4.9 警告 Gizra - Drupal 用 Organic Groups モジュールにおけるノード上のグループの制限を回避される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2013-7068 2014-05-1 18:07 2013-11-20 Show GitHub Exploit DB Packet Storm
219645 5.8 警告 Gizra - Drupal 用 Organic Groups モジュールにおけるアクセス制限を回避される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2013-7065 2014-05-1 18:07 2013-11-20 Show GitHub Exploit DB Packet Storm
219646 2.1 注意 Marcin Pajdzik - Drupal 用 EU Cookie Compliance モジュールにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2013-7064 2014-05-1 18:06 2013-11-20 Show GitHub Exploit DB Packet Storm
219647 5 警告 PlusFront - Drupal 用 Invitation モジュールにおける重要な情報を取得される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2013-7063 2014-05-1 18:05 2013-11-20 Show GitHub Exploit DB Packet Storm
219648 4.3 警告 Joachim Noreiko - Drupal 用 Flag モジュールの管理者ページにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2013-4336 2014-05-1 18:04 2013-08-28 Show GitHub Exploit DB Packet Storm
219649 5 警告 PaperCut Software International Pty - PaperCut MF および NG におけるサービス運用妨害 (DoS) の脆弱性 CWE-noinfo
情報不足 		CVE-2014-2658 2014-05-1 17:34 2014-04-10 Show GitHub Exploit DB Packet Storm
219650 7.5 危険 PaperCut Software International Pty - PaperCut MF の印刷解除機能における脆弱性 CWE-noinfo
情報不足 		CVE-2014-2657 2014-05-1 17:33 2014-04-10 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 26, 2026, 4:05 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
291871 - fedoraproject
moodle 		fedora
moodle 		user/view.php in Moodle through 2.1.10, 2.2.x before 2.2.8, 2.3.x before 2.3.5, and 2.4.x before 2.4.2 does not enforce the forceloginforprofiles setting, which allows remote attackers to obtain sens… CWE-264
Permissions, Privileges, and Access Controls 		CVE-2013-1830 2024-11-21 10:50 2013-03-26 Show GitHub Exploit DB Packet Storm
291872 - moodle moodle calendar/managesubscriptions.php in Moodle 2.4.x before 2.4.2 does not consider capability requirements before displaying calendar subscriptions, which allows remote authenticated users to obtain pot… CWE-200
Information Exposure 		CVE-2013-1829 2024-11-21 10:50 2013-03-26 Show GitHub Exploit DB Packet Storm
291873 - openstack
canonical 		folsom
ubuntu_linux 		OpenStack Keystone Folsom (2012.2) does not properly perform revocation checks for Keystone PKI tokens when done through a server, which allows remote attackers to bypass intended access restrictions… CWE-287
Improper Authentication 		CVE-2013-1865 2024-11-21 10:50 2013-03-23 Show GitHub Exploit DB Packet Storm
291874 - openstack glance The v1 API in OpenStack Glance Essex (2012.1), Folsom (2012.2), and Grizzly, when using the single-tenant Swift or S3 store, reports the location field, which allows remote authenticated users to obt… CWE-200
Information Exposure 		CVE-2013-1840 2024-11-21 10:50 2013-03-23 Show GitHub Exploit DB Packet Storm
291875 - openstack
canonical 		essex
folsom
grizzly
ubuntu_linux 		OpenStack Compute (Nova) Grizzly, Folsom (2012.2), and Essex (2012.1) does not properly implement a quota for fixed IPs, which allows remote authenticated users to cause a denial of service (resource… CWE-399
 Resource Management Errors 		CVE-2013-1838 2024-11-21 10:50 2013-03-23 Show GitHub Exploit DB Packet Storm
291876 - linux
canonical 		linux_kernel
ubuntu_linux 		Heap-based buffer overflow in the wdm_in_callback function in drivers/usb/class/cdc-wdm.c in the Linux kernel before 3.8.4 allows physically proximate attackers to cause a denial of service (system c… CWE-119
Incorrect Access of Indexable Resource ('Range Error')  		CVE-2013-1860 2024-11-21 10:50 2013-03-22 Show GitHub Exploit DB Packet Storm
291877 - linux linux_kernel fs/ext3/super.c in the Linux kernel before 3.8.4 uses incorrect arguments to functions in certain circumstances related to printk input, which allows local users to conduct format-string attacks and … CWE-20
 Improper Input Validation  		CVE-2013-1848 2024-11-21 10:50 2013-03-22 Show GitHub Exploit DB Packet Storm
291878 - linux linux_kernel The sctp_getsockopt_assoc_stats function in net/sctp/socket.c in the Linux kernel before 3.8.4 does not validate a size value before proceeding to a copy_from_user operation, which allows local users… CWE-20
 Improper Input Validation  		CVE-2013-1828 2024-11-21 10:50 2013-03-22 Show GitHub Exploit DB Packet Storm
291879 - linux linux_kernel net/dccp/ccid.h in the Linux kernel before 3.5.4 allows local users to gain privileges or cause a denial of service (NULL pointer dereference and system crash) by leveraging the CAP_NET_ADMIN capabil… NVD-CWE-Other
CVE-2013-1827 2024-11-21 10:50 2013-03-22 Show GitHub Exploit DB Packet Storm
291880 - linux linux_kernel The xfrm_state_netlink function in net/xfrm/xfrm_user.c in the Linux kernel before 3.5.7 does not properly handle error conditions in dump_one_state function calls, which allows local users to gain p… NVD-CWE-Other
CVE-2013-1826 2024-11-21 10:50 2013-03-22 Show GitHub Exploit DB Packet Storm