Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 4, 2026, 4 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
219931 4.3 警告 シスコシステムズ - Cisco Security Manager の Auto Update Server の Web フレームワークにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2014-3265 2014-05-21 15:10 2014-05-19 Show GitHub Exploit DB Packet Storm
219932 6.3 警告 シスコシステムズ - Cisco Adaptive Security Appliance ソフトウェアにおけるサービス運用妨害 (DoS) の脆弱性 CWE-20
不適切な入力確認 		CVE-2014-3264 2014-05-21 15:09 2014-05-19 Show GitHub Exploit DB Packet Storm
219933 5 警告 シスコシステムズ - 複数の Cisco WebEx 製品の meetinginfo.do における重要なミーティング情報を取得される脆弱性 CWE-200
情報漏えい 		CVE-2014-2199 2014-05-21 15:08 2014-05-15 Show GitHub Exploit DB Packet Storm
219934 4.3 警告 シスコシステムズ - 複数の Cisco セキュリティ アプライアンス上で稼働する Cisco AsyncOS におけるロールの権限を取得される脆弱性 CWE-20
不適切な入力確認 		CVE-2014-2195 2014-05-21 15:07 2014-05-20 Show GitHub Exploit DB Packet Storm
219935 6.8 警告 シスコシステムズ - Cisco Unified Web and E-mail Interaction Manager における脆弱性 CWE-20
不適切な入力確認 		CVE-2014-2194 2014-05-21 15:06 2014-05-19 Show GitHub Exploit DB Packet Storm
219936 4.3 警告 シスコシステムズ - Cisco Unified Web and E-mail Interaction Manager における会話テキストを挿入される脆弱性 CWE-20
不適切な入力確認 		CVE-2014-2193 2014-05-21 15:05 2014-05-20 Show GitHub Exploit DB Packet Storm
219937 4.3 警告 シスコシステムズ - Cisco Unified Web and E-mail Interaction Manager におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2014-2192 2014-05-21 15:05 2014-05-19 Show GitHub Exploit DB Packet Storm
219938 4.6 警告 シスコシステムズ - Cisco NX-OS のコマンドラインインターフェースにおけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2013-6975 2014-05-21 15:04 2013-12-5 Show GitHub Exploit DB Packet Storm
219939 7.5 危険 OpenVAS - OpenVAS Administrator における OAP 認証制限を回避される脆弱性 CWE-287
不適切な認証 		CVE-2013-6766 2014-05-21 14:57 2013-11-8 Show GitHub Exploit DB Packet Storm
219940 3.3 注意 Xen プロジェクト - Xen におけるシステムメモリを読まれる脆弱性 CWE-20
不適切な入力確認 		CVE-2014-3717 2014-05-21 14:50 2014-05-14 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 4, 2026, 4:17 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
291501 - friends_of_symfony_project fosuserbundle The login form in the FriendsOfSymfony FOSUserBundle bundle before 1.3.3 for Symfony allows remote attackers to cause a denial of service (CPU consumption) via a long password that triggers an expens… CWE-399
 Resource Management Errors 		CVE-2013-5750 2024-11-21 10:58 2013-09-25 Show GitHub Exploit DB Packet Storm
291502 - tenable securitycenter Cross-site scripting (XSS) vulnerability in devform.php in Tenable SecurityCenter 4.6 through 4.7 allows remote attackers to inject arbitrary web script or HTML via the message parameter. CWE-79
Cross-site Scripting 		CVE-2013-5911 2024-11-21 10:58 2013-09-24 Show GitHub Exploit DB Packet Storm
291503 - sophos unified_threat_management_software Unspecified vulnerability in WebAdmin in Sophos UTM (aka Astaro Security Gateway) before 9.105 has unknown impact and attack vectors. NVD-CWE-noinfo
CVE-2013-5932 2024-11-21 10:58 2013-09-24 Show GitHub Exploit DB Packet Storm
291504 - real-estate-php-script real_estate_php_script SQL injection vulnerability in property_listings_detail.php in Real Estate PHP Script allows remote attackers to execute arbitrary SQL commands via the listingid parameter. CWE-89
SQL Injection 		CVE-2013-5931 2024-11-21 10:58 2013-09-24 Show GitHub Exploit DB Packet Storm
291505 - real-estate-php-script real_estate_php_script Cross-site scripting (XSS) vulnerability in search_residential.php in Real Estate PHP Script allows remote attackers to inject arbitrary web script or HTML via the bos parameter. CWE-79
Cross-site Scripting 		CVE-2013-5930 2024-11-21 10:58 2013-09-24 Show GitHub Exploit DB Packet Storm
291506 - platinum_seo_project platinum_seo_plugin Cross-site scripting (XSS) vulnerability in platinum_seo_pack.php in the Platinum SEO plugin before 1.3.8 for WordPress allows remote attackers to inject arbitrary web script or HTML via the s parame… CWE-79
Cross-site Scripting 		CVE-2013-5918 2024-11-21 10:58 2013-09-23 Show GitHub Exploit DB Packet Storm
291507 - rodrigo_coimbra nospam_pti SQL injection vulnerability in wp-comments-post.php in the NOSpam PTI plugin 2.1 for WordPress allows remote attackers to execute arbitrary SQL commands via the comment_post_ID parameter. CWE-89
SQL Injection 		CVE-2013-5917 2024-11-21 10:58 2013-09-23 Show GitHub Exploit DB Packet Storm
291508 - dahuasecurity dvr2104h
dvr0404hd-a
dvr1604hd-l
dvr2104hc
dvr5216a
dvr5104he
dvr3204lf-al
dvr5204a
dvr3204hf-s
dvr0404hd-s
dvr0804
dvr5104h
dvr5804
dvr2116h
dvr2404lf-al 		The authorization implementation on Dahua DVR appliances accepts a hash string representing the current date for the role of a master password, which makes it easier for remote attackers to obtain ad… CWE-264
Permissions, Privileges, and Access Controls 		CVE-2013-5754 2024-11-21 10:58 2013-09-17 Show GitHub Exploit DB Packet Storm
291509 - sap netweaver Directory traversal vulnerability in SAP NetWeaver 7.x allows remote attackers to read arbitrary files via unspecified vectors. CWE-22
Path Traversal 		CVE-2013-5751 2024-11-21 10:58 2013-09-17 Show GitHub Exploit DB Packet Storm
291510 - wireshark wireshark The dissect_mq_rr function in epan/dissectors/packet-mq.c in the MQ dissector in Wireshark 1.8.x before 1.8.10 and 1.10.x before 1.10.2 does not properly determine when to enter a certain loop, which… CWE-20
 Improper Input Validation  		CVE-2013-5721 2024-11-21 10:58 2013-09-16 Show GitHub Exploit DB Packet Storm