Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 23, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
219861 7.5 危険 SAP - SAP ERP 用 SAP エンハンスメントパッケージのセキュリティ監査ログ機能における任意のログクラスを変更される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2014-2748 2014-04-14 17:21 2014-03-9 Show GitHub Exploit DB Packet Storm
219862 4.3 警告 フォーティネット - Fortinet FortiADC にクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2014-0331 2014-04-14 15:53 2014-04-11 Show GitHub Exploit DB Packet Storm
219863 9.3 危険 マイクロソフト - Microsoft Word および Office 互換機能パックにおける任意のコードを実行される脆弱性 CWE-119
バッファエラー 		CVE-2014-1757 2014-04-11 15:54 2014-04-8 Show GitHub Exploit DB Packet Storm
219864 4.3 警告 マイクロソフト
アドビシステムズ
Google		 - Adobe Flash Player および Adobe AIR におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2014-0509 2014-04-11 15:46 2014-04-8 Show GitHub Exploit DB Packet Storm
219865 5 警告 マイクロソフト
アドビシステムズ
Google		 - Adobe Flash Player および Adobe AIR におけるアクセス制限を回避される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2014-0508 2014-04-11 15:45 2014-04-8 Show GitHub Exploit DB Packet Storm
219866 9.3 危険 マイクロソフト
アドビシステムズ
Google		 - Adobe Flash Player および Adobe AIR におけるバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2014-0507 2014-04-11 15:44 2014-04-8 Show GitHub Exploit DB Packet Storm
219867 10 危険 マイクロソフト
アドビシステムズ
Google		 - Windows 上で稼働する Adobe Flash Player における任意のコードを実行される脆弱性 CWE-399
リソース管理の問題 		CVE-2014-0506 2014-04-11 15:44 2014-03-13 Show GitHub Exploit DB Packet Storm
219868 6.4 警告 WordPress.org - WordPress の wp-includes/pluggable.php 内の wp_validate_auth_cookie 関数におけるアクセス権を取得される脆弱性 CWE-287
不適切な認証 		CVE-2014-0166 2014-04-11 15:33 2014-04-6 Show GitHub Exploit DB Packet Storm
219869 4 警告 WordPress.org - WordPress における投稿を公開される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2014-0165 2014-04-11 15:32 2014-04-8 Show GitHub Exploit DB Packet Storm
219870 7.5 危険 Google - Google Chrome で使用される Free(b)soft Laboratory Speech Dispatcher におけるサービス運用妨害 (DoS) の脆弱性 CWE-399
リソース管理の問題 		CVE-2014-1724 2014-04-11 14:58 2014-04-8 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 24, 2026, 4:05 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
292801 - wp_php_widget_project wp_php_widget wp-php-widget.php in the WP PHP widget plugin 1.0.2 for WordPress allows remote attackers to obtain sensitive information via a direct request, which reveals the full path in an error message. CWE-200
Information Exposure 		CVE-2013-0721 2024-11-21 10:48 2013-01-2 Show GitHub Exploit DB Packet Storm
292802 7.8 HIGH
Local 		ibm sterling_external_authentication_server A Command Execution Vulnerability exists in IBM Sterling External Authentication Server 2.2.0, 2.3.01, 2.4.0, and 2.4.1 via an unspecified OS command, which could let a local malicious user execute a… CWE-78
OS Command  		CVE-2013-0517 2024-11-21 10:47 2020-02-12 Show GitHub Exploit DB Packet Storm
292803 4.9 MEDIUM
Network 		simplemachines simple_machines_forum File Disclosure in SMF (SimpleMachines Forum) <= 2.0.3: Forum admin can read files such as the database config. CWE-200
Information Exposure 		CVE-2013-0192 2024-11-21 10:47 2020-02-7 Show GitHub Exploit DB Packet Storm
292804 8.1 HIGH
Network 		ibm infosphere_information_server IBM InfoSphere Information Server 8.1, 8.5, 8.7, 9.1 has a Session Fixation Vulnerability CWE-384
 Session Fixation 		CVE-2013-0507 2024-11-21 10:47 2020-02-6 Show GitHub Exploit DB Packet Storm
292805 7.5 HIGH
Network 		imagely nextgen_gallery NextGEN Gallery Plugin for WordPress 1.9.10 and 1.9.11 has a Path Disclosure Vulnerability CWE-200
Information Exposure 		CVE-2013-0291 2024-11-21 10:47 2020-01-30 Show GitHub Exploit DB Packet Storm
292806 5.9 MEDIUM
Network 		pyrad_project
fedoraproject 		pyrad
fedora 		packet.py in pyrad before 2.1 uses weak random numbers to generate RADIUS authenticators and hash passwords, which makes it easier for remote attackers to obtain sensitive information via a brute for… CWE-330
 Use of Insufficiently Random Values 		CVE-2013-0294 2024-11-21 10:47 2020-01-29 Show GitHub Exploit DB Packet Storm
292807 5.4 MEDIUM
Network 		pinboard_project pinboard Pinboard 1.0.6 theme for Wordpress has XSS. CWE-79
Cross-site Scripting 		CVE-2013-0286 2024-11-21 10:47 2020-01-28 Show GitHub Exploit DB Packet Storm
292808 7.5 HIGH
Network 		redhat mrg_management_console An import error was introduced in Cumin in the code refactoring in r5310. Server certificate validation is always disabled when connecting to Aviary servers, even if the installed packages on a syste… CWE-295
Improper Certificate Validation  		CVE-2013-0264 2024-11-21 10:47 2019-12-31 Show GitHub Exploit DB Packet Storm
292809 6.5 MEDIUM
Network 		redhat openshift A CSRF issue was found in OpenShift Enterprise 1.2. The web console is using 'Basic authentication' and the REST API has no CSRF attack protection mechanism. This can allow an attacker to obtain the … CWE-352
 Origin Validation Error 		CVE-2013-0196 2024-11-21 10:47 2019-12-31 Show GitHub Exploit DB Packet Storm
292810 6.1 MEDIUM
Network 		owncloud owncloud Cross-site scripting (XSS) vulnerability in ownCloud 4.5.5, 4.0.10, and earlier allows remote attackers to inject arbitrary web script or HTML via the action parameter to core/ajax/sharing.php. CWE-79
Cross-site Scripting 		CVE-2013-0202 2024-11-21 10:47 2019-12-18 Show GitHub Exploit DB Packet Storm