Vulnerability Search Top

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

Vulnerability Information Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 27, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
220111	6.2	警告	Linux	-	Linux Kernel の fs/cifs/file.c 内の cifs_iovec_write 関数における重要な情報を取得される脆弱性	CWE-119 バッファエラー	CVE-2014-0069	2014-04-8 15:52	2014-02-14	Show	GitHub Exploit DB Packet Storm

220112	4.3	警告	Ruby on Rails project	-	Ruby on Rails の actionview/lib/action_view/helpers/number_helper.rb におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2014-0081	2014-04-8 15:48	2014-02-18	Show	GitHub Exploit DB Packet Storm

220113	4.3	警告	Horde	-	Horde Groupware Webmail Edition で使用される Horde Internet Mail Program におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2012-6640	2014-04-8 14:40	2012-06-26	Show	GitHub Exploit DB Packet Storm

220114	4.3	警告	Horde	-	Horde Groupware Webmail Edition で使用される Horde Kronolith Calendar Application H4 におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2012-5567	2014-04-8 14:39	2012-11-14	Show	GitHub Exploit DB Packet Storm

220115	4.3	警告	Horde	-	Horde Groupware Webmail Edition で使用される Horde Kronolith Calendar Application H4 におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2012-5566	2014-04-8 14:33	2012-05-29	Show	GitHub Exploit DB Packet Storm

220116	4.3	警告	Horde	-	Horde Groupware Webmail Edition で使用される Horde Internet Mail Program におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2012-5565	2014-04-8 14:32	2012-11-14	Show	GitHub Exploit DB Packet Storm

220117	4	警告	シスコシステムズ	-	Cisco Unity Connection のメッセージング API におけるディレクトリトラバーサルの脆弱性	CWE-22 パス・トラバーサル	CVE-2014-2145	2014-04-8 14:30	2014-04-7	Show	GitHub Exploit DB Packet Storm

220118	6.1	警告	シスコシステムズ	-	Cisco IOS XR におけるサービス運用妨害 (DoS) の脆弱性	CWE-20 不適切な入力確認	CVE-2014-2144	2014-04-8 14:30	2014-04-4	Show	GitHub Exploit DB Packet Storm

220119	6.8	警告	Lee Howard	-	HylaFAX+ の hfaxd におけるヒープベースのバッファオーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2013-5680	2014-04-8 13:59	2013-08-6	Show	GitHub Exploit DB Packet Storm

220120	4.3	警告	Klaus Purer	-	Drupal 用 RESTful Web Services モジュールにおけるサービス運用妨害 (DoS) の脆弱性	CWE-20 不適切な入力確認	CVE-2013-1946	2014-04-8 13:36	2013-04-10	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 27, 2026, 4:52 a.m.

No	CVSS	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
292981	-	dell	openmanage_server_administrator	Open redirect vulnerability in Dell OpenManage Server Administrator (OMSA) before 7.3.0 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a URL in the …	CWE-20 Improper Input Validation	CVE-2013-0740	2024-11-21 10:48	2014-04-11	Show	GitHub Exploit DB Packet Storm

292982	-	cartpauj	mingle-forum	Multiple SQL injection vulnerabilities in wpf.class.php in the Mingle Forum plugin before 1.0.34 for WordPress allow remote attackers to execute arbitrary SQL commands via the id parameter in a viewt…	CWE-89 SQL Injection	CVE-2013-0735	2024-11-21 10:48	2014-04-3	Show	GitHub Exploit DB Packet Storm

292983	-	tracker-software	pdf-xchange_viewer	Heap-based buffer overflow in Tracker Software PDF-XChange before 2.5.208 allows remote attackers to execute arbitrary code via a crafted Define Huffman Table header in a JPEG image file stream in a …	CWE-119 Incorrect Access of Indexable Resource ('Range Error')	CVE-2013-0729	2024-11-21 10:48	2014-04-3	Show	GitHub Exploit DB Packet Storm

292984	-	gpeasy	gpeasy_cms	Cross-site scripting (XSS) vulnerability in the NewSectionPrompt function in include/tool/editing_page.php in gpEasy CMS 3.5.2 and earlier allows remote attackers to inject arbitrary web script or HT…	CWE-79 Cross-site Scripting	CVE-2013-0807	2024-11-21 10:48	2014-03-29	Show	GitHub Exploit DB Packet Storm

292985	-	cartpauj	mingle-forum	Multiple cross-site scripting (XSS) vulnerabilities in the Mingle Forum plugin before 1.0.34 for WordPress allow remote attackers to inject arbitrary web script or HTML via the (1) search_words param…	CWE-79 Cross-site Scripting	CVE-2013-0734	2024-11-21 10:48	2014-03-29	Show	GitHub Exploit DB Packet Storm

292986	-	nuance	pdf_reader	Heap-based buffer overflow in PDFCore8.dll in Nuance PDF Reader before 8.1 allows remote attackers to execute arbitrary code via crafted font table directory values in a TTF file, related to naming t…	CWE-119 Incorrect Access of Indexable Resource ('Range Error')	CVE-2013-0732	2024-11-21 10:48	2014-03-28	Show	GitHub Exploit DB Packet Storm

292987	-	combodo	itop	Multiple cross-site scripting (XSS) vulnerabilities in the search feature in iTop (aka IT Operations Portal) 2.0, 1.2.1, 1.2, and earlier allow remote attackers to inject arbitrary web script or HTML…	CWE-79 Cross-site Scripting	CVE-2013-0805	2024-11-21 10:48	2014-03-21	Show	GitHub Exploit DB Packet Storm

292988	-	ubuntu	metal_as_a_service	Cross-site scripting (XSS) vulnerability in the API in Ubuntu Metal as a Service (MaaS) 1.2 and 1.4 allows remote attackers to inject arbitrary web script or HTML via the op parameter to nodes/.	CWE-79 Cross-site Scripting	CVE-2013-1070	2024-11-21 10:48	2014-02-18	Show	GitHub Exploit DB Packet Storm

292989	-	ubuntu	metal_as_a_service	Ubuntu Metal as a Service (MaaS) 1.2 and 1.4 uses world-readable permissions for txlongpoll.yaml, which allows local users to obtain RabbitMQ authentication credentials by reading the file.	CWE-264 Permissions, Privileges, and Access Controls	CVE-2013-1069	2024-11-21 10:48	2014-02-18	Show	GitHub Exploit DB Packet Storm

292990	-	novell	identity_manager_roles_based_provisioning_module	Cross-site scripting (XSS) vulnerability in the Roles Based Provisioning Module 4.0.2 before Field Patch D for Novell Identity Manager (aka IDM) allows remote attackers to inject arbitrary web script…	CWE-79 Cross-site Scripting	CVE-2013-1096	2024-11-21 10:48	2013-12-28	Show	GitHub Exploit DB Packet Storm