Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":June 2, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
220071	7.5	危険	The Cacti Group	-	Cacti の lib/rrd.php における任意のコマンドを実行される脆弱性	CWE-Other その他	CVE-2014-2709	2014-04-28 11:57	2014-03-30	Show	GitHub Exploit DB Packet Storm

220072	6.5	警告	The Cacti Group	-	Cacti の lib/graph_export.php における任意のコマンドを実行される脆弱性	CWE-Other その他	CVE-2014-2328	2014-04-28 11:56	2014-03-30	Show	GitHub Exploit DB Packet Storm

220073	4.3	警告	Drupal	-	Drupal における中間フォームの重要な入力情報を取得される脆弱性	CWE-200 情報漏えい	CVE-2014-2983	2014-04-25 19:18	2014-04-16	Show	GitHub Exploit DB Packet Storm

220074	6.8	警告	アップル	-	Apple Mac OS X の CoreGraphics におけるバッファアンダーフローの脆弱性	CWE-119 バッファエラー	CVE-2013-5170	2014-04-25 17:50	2013-10-22	Show	GitHub Exploit DB Packet Storm

220075	2.6	注意	シマンテック	-	Symantec PGP Desktop および Encryption Desktop Professional におけるサービス運用妨害 (DoS) の脆弱性	CWE-119 バッファエラー	CVE-2014-1647	2014-04-25 16:30	2014-04-23	Show	GitHub Exploit DB Packet Storm

220076	2.6	注意	シマンテック	-	Symantec PGP Desktop および Encryption Desktop Professional におけるサービス運用妨害 (DoS) の脆弱性	CWE-119 バッファエラー	CVE-2014-1646	2014-04-25 16:28	2014-04-23	Show	GitHub Exploit DB Packet Storm

220077	1.9	注意	LLVM	-	Clang の scan-build ユーティリティの GetHTMLRunDir 関数における重要な情報を取得される脆弱性	CWE-59 リンク解釈の問題	CVE-2014-2893	2014-04-25 16:23	2014-04-14	Show	GitHub Exploit DB Packet Storm

220078	7.5	危険	Herry	-	Ruby 用 sfpagent gem における任意のコマンドを実行される脆弱性	CWE-Other その他	CVE-2014-2888	2014-04-25 16:16	2014-04-16	Show	GitHub Exploit DB Packet Storm

220079	6.4	警告	マイクロソフト	-	Windows NT および Windows 2000 上で稼動する Microsoft Internet Information Services における CRLF インジェクションの脆弱性	CWE-Other その他	CVE-2011-5279	2014-04-25 15:44	2014-04-10	Show	GitHub Exploit DB Packet Storm

220080	7.5	危険	libmms project	-	libmms の mmsh.c 内の get_answer 関数におけるヒープベースのバッファオーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2014-2892	2014-04-25 15:25	2014-04-8	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:June 2, 2026, 4:18 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
292231	7.8	HIGH Local	extensis	mrsid	Heap-based buffer overflow in the MrSID plugin (MrSID.dll) before 4.37 for IrfanView allows remote attackers to execute arbitrary code via a levels header.	CWE-787 Out-of-bounds Write	CVE-2013-3946	2024-11-21 10:54	2020-01-3	Show	GitHub Exploit DB Packet Storm

292232	7.8	HIGH Local	extensis	mrsid	The MrSID plugin (MrSID.dll) before 4.37 for IrfanView allows remote attackers to execute arbitrary code via a nband tag.	CWE-20 Improper Input Validation	CVE-2013-3945	2024-11-21 10:54	2020-01-3	Show	GitHub Exploit DB Packet Storm

292233	7.8	HIGH Local	extensis	mrsid	Stack-based buffer overflow in the MrSID plugin (MrSID.dll) before 4.37 for IrfanView allows remote attackers to execute arbitrary code via an IMAGE tag.	CWE-787 Out-of-bounds Write	CVE-2013-3944	2024-11-21 10:54	2020-01-3	Show	GitHub Exploit DB Packet Storm

292234	7.5	HIGH Network	supermicro citrix	smt_x9_firmware smt_x8_firmware netscaler_sdx_firmware netscaler_firmware netscaler_sd-wan_firmware	Hardcoded WSMan credentials in Intelligent Platform Management Interface (IPMI) with firmware for Supermicro X9 generation motherboards before 3.15 (SMT_X9_315) and firmware for Supermicro X8 generat…	CWE-522 Insufficiently Protected Credentials	CVE-2013-3620	2024-11-21 10:54	2020-01-3	Show	GitHub Exploit DB Packet Storm

292235	6.1	MEDIUM Network	opsview	opsview opsview_core	Multiple cross-site scripting (XSS) vulnerabilities in Opsview before 4.4.1 and Opsview Core before 20130522 allow remote attackers to inject arbitrary web script or HTML.	CWE-79 Cross-site Scripting	CVE-2013-3936	2024-11-21 10:54	2020-01-3	Show	GitHub Exploit DB Packet Storm

292236	8.8	HIGH Network	opsview	opsview opsview_core	Cross-site request forgery (CSRF) vulnerability in Opsview before 4.4.1 and Opsview Core before 20130522 allows remote attackers to hijack the authentication of administrators for requests that chang…	CWE-352 Origin Validation Error	CVE-2013-3935	2024-11-21 10:54	2020-01-3	Show	GitHub Exploit DB Packet Storm

292237	7.8	HIGH Local	gksu-polkit_project fedoraproject	gksu-polkit fedora	gksu-polkit-0.0.3-6.fc18 was reported as fixing the issue in CVE-2012-5617 but the patch was improperly applied and it did not fixed the security issue.	CWE-269 Improper Privilege Management	CVE-2013-4161	2024-11-21 10:54	2020-01-1	Show	GitHub Exploit DB Packet Storm

292238	7.5	HIGH Network	ovislink	airlive_poe2600hd_firmware	AirLive POE-2600HD allows remote attackers to cause a denial of service (device reset) via a long URL.	CWE-400 Uncontrolled Resource Consumption	CVE-2013-3691	2024-11-21 10:54	2019-12-12	Show	GitHub Exploit DB Packet Storm

292239	6.1	MEDIUM Network	smokeping debian fedoraproject	smokeping debian_linux fedora	smokeping before 2.6.9 has XSS (incomplete fix for CVE-2012-0790)	CWE-79 Cross-site Scripting	CVE-2013-4158	2024-11-21 10:54	2019-12-11	Show	GitHub Exploit DB Packet Storm

292240	7.5	HIGH Network	kde debian	kde-workspace debian_linux	kde-workspace before 4.10.5 has a memory leak in plasma desktop	CWE-404 Improper Resource Shutdown or Release	CVE-2013-4133	2024-11-21 10:54	2019-12-11	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed