Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 4, 2026, 4 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
220031 2.6 注意 Dan Wilga - Monster Menus モジュールにおける任意のノードコメントを読まれる脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2013-4504 2014-05-16 11:05 2013-10-29 Show GitHub Exploit DB Packet Storm
220032 2.1 注意 Alex Barth - Drupal 用 Feed Element Mapper モジュールにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2013-4503 2014-05-16 11:03 2013-10-30 Show GitHub Exploit DB Packet Storm
220033 4 警告 Nathan Haug - Drupal 用 FileField Sources モジュールにおける任意のファイルを読まれる脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2013-4502 2014-05-16 11:03 2013-10-30 Show GitHub Exploit DB Packet Storm
220034 5 警告 Quiz Module Project - Drupal 用 Quiz モジュールのデフォルトの View における重要なクイズ結果を取得される脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2013-4501 2014-05-16 11:02 2013-10-30 Show GitHub Exploit DB Packet Storm
220035 4.9 警告 Quiz Module Project - Drupal 用 Quiz モジュールにおける任意のクイズ結果を削除される脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2013-4500 2014-05-16 11:02 2013-10-30 Show GitHub Exploit DB Packet Storm
220036 6.8 警告 madeofcode - omniauth-facebook gem におけるクロスサイトリクエストフォージェリ攻撃を実行される脆弱性 CWE-352
同一生成元ポリシー違反
CVE-2013-4562 2014-05-16 10:14 2013-11-12 Show GitHub Exploit DB Packet Storm
220037 6.8 警告 Atlassian - Atlassian Confluence の logout.action におけるクロスサイトリクエストフォージェリの脆弱性 CWE-352
同一生成元ポリシー違反
CVE-2012-6342 2014-05-15 17:17 2012-09-19 Show GitHub Exploit DB Packet Storm
220038 6.5 警告 Open Dynamics - Collabtive における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2014-3246 2014-05-15 16:50 2014-05-8 Show GitHub Exploit DB Packet Storm
220039 4.3 警告 GitLab.org - GitLab Enterprise Edition におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2014-3456 2014-05-15 16:37 2014-02-27 Show GitHub Exploit DB Packet Storm
220040 6.5 警告 GitLab.org - GitLab で使用される gitlab-shell のリポジトリのインポート機能における任意のコマンドを実行される脆弱性 CWE-Other
その他
CVE-2013-4546 2014-05-15 16:36 2013-11-8 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 4, 2026, 4:17 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
291541 9.1 CRITICAL
Network
yingzhipython_project yingzhipython Vulnerability in YingZhi Python Programming Language v1.9 allows arbitrary anonymous uploads to the phone's storage CWE-284
Improper Access Control
CVE-2013-5654 2024-11-21 10:57 2019-02-16 Show GitHub Exploit DB Packet Storm
291542 8.8 HIGH
Network
ibm endpoint_manager_for_remote_control
tivoli_remote_control
IBM Endpoint Manager for Remote Control 9.0.0 and 9.0.1 and Tivoli Remote Control 5.1.2 store multiple hashes of partial passwords, which makes it easier for remote attackers to decrypt passwords by … CWE-255
Credentials Management
CVE-2013-5461 2024-11-21 10:57 2018-04-28 Show GitHub Exploit DB Packet Storm
291543 5.3 MEDIUM
Network
ibm worklight
mobile_foundation
IBM Worklight Consumer and Enterprise Editions 5.0.x before 5.0.6 Fix Pack 2 and 6.0.x before 6.0.0 Fix Pack 2, and Mobile Foundation Consumer and Enterprise Editions 5.0.x before 5.0.6 Fix Pack 2 an… CWE-310
Cryptographic Issues
CVE-2013-5391 2024-11-21 10:57 2018-04-28 Show GitHub Exploit DB Packet Storm
291544 5.5 MEDIUM
Local
artifex
debian
afpl_ghostscript
debian_linux
The getenv and filenameforall functions in Ghostscript 9.10 ignore the "-dSAFER" argument, which allows remote attackers to read data via a crafted postscript file. CWE-200
Information Exposure
CVE-2013-5653 2024-11-21 10:57 2017-03-8 Show GitHub Exploit DB Packet Storm
291545 - apple mac_os_x
apple_remote_desktop
The Remote Desktop full-screen feature in Apple OS X before 10.9 and Apple Remote Desktop before 3.7 sends dialog-box text to a connected remote host upon being woken from sleep, which allows physica… CWE-254
 7PK - Security Features
CVE-2013-5229 2024-11-21 10:57 2015-11-14 Show GitHub Exploit DB Packet Storm
291546 - cisco adaptive_security_appliance_software The Proxy Bypass Content Rewriter feature in the WebVPN subsystem in Cisco Adaptive Security Appliance (ASA) Software 9.1(.2) and earlier allows remote authenticated users to cause a denial of servic… NVD-CWE-noinfo
CVE-2013-5557 2024-11-21 10:57 2015-02-7 Show GitHub Exploit DB Packet Storm
291547 - ibm monitoring_agent_for_unix_logs
monitoring_server_\(ms\)_and_shared_libraries_\(ax\)
Monitoring Agent for UNIX Logs 6.2.0 through FP03, 6.2.1 through FP04, 6.2.2 through FP09, and 6.2.3 through FP04 and Monitoring Server (ms) and Shared Libraries (ax) 6.2.0 through FP03, 6.2.1 throug… CWE-264
Permissions, Privileges, and Access Controls
CVE-2013-5467 2024-11-21 10:57 2014-08-29 Show GitHub Exploit DB Packet Storm
291548 - ibm infosphere_optim_data_growth_solution_for_siebel_crm The Data Growth Solution for JD Edwards EnterpriseOne in IBM InfoSphere Optim 3.0 through 9.1 has hardcoded database credentials, which allows remote authenticated users to obtain sensitive informati… CWE-255
Credentials Management
CVE-2013-5433 2024-11-21 10:57 2014-08-12 Show GitHub Exploit DB Packet Storm
291549 - cisco adaptive_security_appliance_software Cisco Adaptive Security Appliance (ASA) Software 8.4(.6) and earlier, when using an unsupported configuration with overlapping criteria for filtering and inspection, allows remote attackers to cause … CWE-400
 Uncontrolled Resource Consumption
CVE-2013-5567 2024-11-21 10:57 2014-07-15 Show GitHub Exploit DB Packet Storm
291550 - ibm flex_system_manager IBM Flex System Manager (FSM) 1.1 through 1.3 before 1.3.2.0 allows remote attackers to enumerate user accounts via unspecified vectors. CWE-200
Information Exposure
CVE-2013-5423 2024-11-21 10:57 2014-07-7 Show GitHub Exploit DB Packet Storm