Vulnerability Search Top
Show Search Menu
|
You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database). |
JVN Vulnerability Information
Update Date":June 8, 2026, 6 p.m.
| No | CVSS | Level Attach Vector |
Vendor Name | Project Name | Title | CWE | CVE | Update Date | Publication Date | Impact Show |
Exploit PoC Search |
|---|---|---|---|---|---|---|---|---|---|---|---|
| 219821 | 4.3 | 警告 | Aanyfont plugin project | - | WordPress 用 AnyFont プラグインの mce_anyfont/dialog.php におけるクロスサイトスクリプティングの脆弱性 |
CWE-79
クロスサイト・スクリプティング（XSS） |
CVE-2014-4515 | 2014-07-3 15:45 | 2014-05-28 | Show | GitHub Exploit DB Packet Storm |
| 219822 | 4.3 | 警告 | ActiveHelper | - | WordPress 用 ActiveHelper LiveHelp Live Chat プラグインの server/offline.php におけるクロスサイトスクリプティングの脆弱性 |
CWE-79
クロスサイト・スクリプティング（XSS） |
CVE-2014-4513 | 2014-07-3 15:44 | 2014-05-28 | Show | GitHub Exploit DB Packet Storm |
| 219823 | 3.5 | 注意 | DELL EMC (旧 EMC Corporation) | - | EMC Documentum eRoom におけるクロスサイトスクリプティングの脆弱性 |
CWE-79
クロスサイト・スクリプティング（XSS） |
CVE-2014-2512 | 2014-07-3 09:51 | 2014-06-30 | Show | GitHub Exploit DB Packet Storm |
| 219824 | 5.4 | 警告 | DELL EMC (旧 EMC Corporation) | - | EMC Network Configuration Manager の Report Advisor コンポーネントにおける Web セッションをハイジャックされる脆弱性 |
CWE-Other
その他 |
CVE-2014-2509 | 2014-07-3 09:47 | 2014-06-30 | Show | GitHub Exploit DB Packet Storm |
| 219825 | 4 | 警告 | 株式会社アイ・オー・データ機器 | - | RockDisk におけるクロスサイトスクリプティングの脆弱性 |
CWE-79
クロスサイト・スクリプティング（XSS） |
CVE-2013-4713 | 2014-07-2 14:08 | 2013-10-29 | Show | GitHub Exploit DB Packet Storm |
| 219826 | 9.3 | 危険 | マイクロソフト | - | Microsoft Internet Explorer 6 から 11 における任意のコードを実行される脆弱性 |
CWE-119
バッファエラー |
CVE-2014-1815 | 2014-07-2 12:52 | 2014-05-13 | Show | GitHub Exploit DB Packet Storm |
| 219827 | 8.5 | 危険 | マイクロソフト | - | Microsoft Web Applications 2010 における任意のコードを実行される脆弱性 |
CWE-94
コード・インジェクション |
CVE-2014-1813 | 2014-07-2 12:50 | 2014-05-13 | Show | GitHub Exploit DB Packet Storm |
| 219828 | 9.3 | 危険 | マイクロソフト | - | Microsoft Office における権限昇格の脆弱性 |
CWE-Other
その他 |
CVE-2014-1756 | 2014-07-2 12:49 | 2014-05-13 | Show | GitHub Exploit DB Packet Storm |
| 219829 | 6.8 | 警告 | IBM | - | IBM WebSphere Portal における重要な情報を取得される脆弱性 |
CWE-20
不適切な入力確認 |
CVE-2014-0954 | 2014-07-2 11:10 | 2014-05-13 | Show | GitHub Exploit DB Packet Storm |
| 219830 | 4.3 | 警告 | 株式会社インターコム | - | Web給金帳におけるクロスサイトスクリプティングの脆弱性 |
CWE-79
クロスサイト・スクリプティング（XSS） |
CVE-2014-2006 | 2014-07-1 17:24 | 2014-06-25 | Show | GitHub Exploit DB Packet Storm |
NVD Vulnerability Information
Update Date:June 8, 2026, 4:09 a.m.
| No | CVSS | Level Attach Vector |
Vendor Name | Project Name | Title | CWE | CVE | Update Date | Publication Date | Show Affected | Exploit PoC Search |
|---|---|---|---|---|---|---|---|---|---|---|---|
| 296701 | - |
mozilla suse opensuse canonical |
seamonkey thunderbird firefox thunderbird_esr linux_enterprise_server linux_enterprise_desktop opensuse linux_enterprise_software_development_kit ubuntu_linux |
The AutoWrapperChanger class in Mozilla Firefox before 18.0, Firefox ESR 17.x before 17.0.2, Thunderbird before 17.0.2, Thunderbird ESR 17.x before 17.0.2, and SeaMonkey before 2.15 does not properly… |
CWE-94
Code Injection |
CVE-2013-0745 | 2024-11-21 10:48 | 2013-01-14 | Show | GitHub Exploit DB Packet Storm | |
| 296702 | - |
mozilla suse opensuse redhat canonical |
seamonkey thunderbird_esr thunderbird firefox linux_enterprise_server linux_enterprise_desktop opensuse linux_enterprise_software_development_kit enterprise_linux_server en… |
Integer overflow in the JavaScript implementation in Mozilla Firefox before 18.0, Firefox ESR 10.x before 10.0.12 and 17.x before 17.0.2, Thunderbird before 17.0.2, Thunderbird ESR 10.x before 10.0.1… |
CWE-190
Integer Overflow or Wraparound |
CVE-2013-0750 | 2024-11-21 10:48 | 2013-01-14 | Show | GitHub Exploit DB Packet Storm | |
| 296703 | - |
mozilla suse opensuse redhat canonical |
seamonkey thunderbird_esr thunderbird firefox linux_enterprise_server linux_enterprise_desktop opensuse linux_enterprise_software_development_kit enterprise_linux_server en… |
The XBL.__proto__.toString implementation in Mozilla Firefox before 18.0, Firefox ESR 10.x before 10.0.12 and 17.x before 17.0.2, Thunderbird before 17.0.2, Thunderbird ESR 10.x before 10.0.12 and 17… |
CWE-200
Information Exposure |
CVE-2013-0748 | 2024-11-21 10:48 | 2013-01-14 | Show | GitHub Exploit DB Packet Storm | |
| 296704 | - |
mozilla suse opensuse redhat canonical |
seamonkey thunderbird_esr thunderbird firefox linux_enterprise_server linux_enterprise_desktop opensuse linux_enterprise_software_development_kit enterprise_linux_server en… |
Mozilla Firefox before 18.0, Firefox ESR 10.x before 10.0.12 and 17.x before 17.0.2, Thunderbird before 17.0.2, Thunderbird ESR 10.x before 10.0.12 and 17.x before 17.0.2, and SeaMonkey before 2.15 d… |
NVD-CWE-noinfo
|
CVE-2013-0746 | 2024-11-21 10:48 | 2013-01-14 | Show | GitHub Exploit DB Packet Storm | |
| 296705 | - |
mozilla suse opensuse redhat canonical |
seamonkey thunderbird_esr thunderbird firefox linux_enterprise_server linux_enterprise_desktop opensuse linux_enterprise_software_development_kit enterprise_linux_server en… |
Use-after-free vulnerability in the TableBackgroundPainter::TableBackgroundData::Destroy function in Mozilla Firefox before 18.0, Firefox ESR 10.x before 10.0.12 and 17.x before 17.0.2, Thunderbird b… |
CWE-416
Use After Free |
CVE-2013-0744 | 2024-11-21 10:48 | 2013-01-14 | Show | GitHub Exploit DB Packet Storm | |
| 296706 | - | ettercap-project | ettercap | Stack-based buffer overflow in the scan_load_hosts function in ec_scan.c in Ettercap 0.7.5.1 and earlier might allow local users to gain privileges via a Trojan horse hosts list containing a long lin… |
CWE-119
Incorrect Access of Indexable Resource ('Range Error') |
CVE-2013-0722 | 2024-11-21 10:48 | 2013-01-12 | Show | GitHub Exploit DB Packet Storm | |
| 296707 | - | wp_php_widget_project | wp_php_widget | wp-php-widget.php in the WP PHP widget plugin 1.0.2 for WordPress allows remote attackers to obtain sensitive information via a direct request, which reveals the full path in an error message. |
CWE-200
Information Exposure |
CVE-2013-0721 | 2024-11-21 10:48 | 2013-01-2 | Show | GitHub Exploit DB Packet Storm | |
| 296708 | 7.8 |
HIGH
Local |
ibm | sterling_external_authentication_server | A Command Execution Vulnerability exists in IBM Sterling External Authentication Server 2.2.0, 2.3.01, 2.4.0, and 2.4.1 via an unspecified OS command, which could let a local malicious user execute a… |
CWE-78
OS Command |
CVE-2013-0517 | 2024-11-21 10:47 | 2020-02-12 | Show | GitHub Exploit DB Packet Storm |
| 296709 | 4.9 |
MEDIUM
Network |
simplemachines | simple_machines_forum | File Disclosure in SMF (SimpleMachines Forum) <= 2.0.3: Forum admin can read files such as the database config. |
CWE-200
Information Exposure |
CVE-2013-0192 | 2024-11-21 10:47 | 2020-02-7 | Show | GitHub Exploit DB Packet Storm |
| 296710 | 8.1 |
HIGH
Network |
ibm | infosphere_information_server | IBM InfoSphere Information Server 8.1, 8.5, 8.7, 9.1 has a Session Fixation Vulnerability |
CWE-384
Session Fixation |
CVE-2013-0507 | 2024-11-21 10:47 | 2020-02-6 | Show | GitHub Exploit DB Packet Storm |