Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 27, 2026, 6 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
220121 4 警告 ヒューレット・パッカード - HP IceWall Identity Manager および IceWall SSO パスワードリセットオプションにおけるサービス運用妨害 (DoS) の脆弱性 CWE-noinfo
情報不足
CVE-2014-2600 2014-04-8 12:27 2014-04-3 Show GitHub Exploit DB Packet Storm
220122 2.1 注意 GNU Project - spy_user 関数およびその他の関数で使用される a2ps の lib/routines.h 内の tempname_ensure 関数における任意のファイルを変更される脆弱性 CWE-59
リンク解釈の問題
CVE-2001-1593 2014-04-8 12:04 2001-02-12 Show GitHub Exploit DB Packet Storm
220123 5 警告 マイクロソフト - Microsoft Office 2007 から 2013 におけるサービス運用妨害 (DoS) の脆弱性 CWE-399
リソース管理の問題
CVE-2014-2730 2014-04-8 11:26 2014-04-3 Show GitHub Exploit DB Packet Storm
220124 4.3 警告 IBM - IBM InfoSphere Optim Workload Replay におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2014-0827 2014-04-8 10:22 2014-04-7 Show GitHub Exploit DB Packet Storm
220125 6.8 警告 FFmpeg - FFmpeg の libavcodec/pngdsp.c の add_bytes_l2_c 関数における整数符号エラーの脆弱性 CWE-189
数値処理の問題
CVE-2013-7014 2014-04-8 09:43 2013-08-30 Show GitHub Exploit DB Packet Storm
220126 6.8 警告 FFmpeg - FFmpeg の libavcodec/dsputil.c における整数符号エラーの脆弱性 CWE-189
数値処理の問題
CVE-2013-7010 2014-04-8 09:42 2013-08-30 Show GitHub Exploit DB Packet Storm
220127 2.6 注意 オラクル - Oracle Java SE および JavaFX における脆弱性 CWE-noinfo
情報不足
CVE-2013-5854 2014-04-7 18:06 2013-10-15 Show GitHub Exploit DB Packet Storm
220128 5 警告 マイクロソフト
アドビシステムズ
Google
- Adobe Flash Player におけるクリップボードを読まれる脆弱性 CWE-200
情報漏えい
CVE-2014-0504 2014-04-7 18:06 2014-03-11 Show GitHub Exploit DB Packet Storm
220129 6.9 警告 freedesktop.org
Canonical
- udisks におけるスタックベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー
CVE-2014-0004 2014-04-7 18:05 2014-03-10 Show GitHub Exploit DB Packet Storm
220130 6.4 警告 マイクロソフト
アドビシステムズ
Google
- Adobe Flash Player における同一生成元ポリシーを回避される脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2014-0503 2014-04-7 18:04 2014-03-11 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 28, 2026, 4:16 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
293021 - redhat satellite The Inter-Satellite Sync (ISS) operation in Red Hat Network (RHN) Satellite 5.3, 5.4, and 5.5 does not properly check client "authenticity," which allows remote attackers to obtain channel content by… CWE-287
Improper Authentication
CVE-2013-2056 2024-11-21 10:50 2013-07-31 Show GitHub Exploit DB Packet Storm
293022 - apache
collabnet
canonical
opensuse
subversion
ubuntu_linux
opensuse
Subversion before 1.6.23 and 1.7.x before 1.7.10 allows remote authenticated users to cause a denial of service (FSFS repository corruption) via a newline character in a file name. NVD-CWE-noinfo
CVE-2013-1968 2024-11-21 10:50 2013-07-31 Show GitHub Exploit DB Packet Storm
293023 - f5
debian
nginx
debian_linux
http/modules/ngx_http_proxy_module.c in nginx 1.1.4 through 1.2.8 and 1.3.0 through 1.4.0, when proxy_pass is used with untrusted HTTP servers, allows remote attackers to cause a denial of service (c… NVD-CWE-noinfo
CVE-2013-2070 2024-11-21 10:50 2013-07-20 Show GitHub Exploit DB Packet Storm
293024 - f5
fedoraproject
nginx
fedora
The ngx_http_parse_chunked function in http/ngx_http_parse.c in nginx 1.3.9 through 1.4.0 allows remote attackers to cause a denial of service (crash) and execute arbitrary code via a chunked Transfe… CWE-787
 Out-of-bounds Write
CVE-2013-2028 2024-11-21 10:50 2013-07-20 Show GitHub Exploit DB Packet Storm
293025 - nashtech easy_php_calendar Multiple cross-site scripting (XSS) vulnerabilities in (1) index.php and (2) datePicker.php in Easy PHP Calendar 6.x and 7.x before 7.0.13 allow remote attackers to inject arbitrary web script or HTM… CWE-79
Cross-site Scripting
CVE-2013-1955 2024-11-21 10:50 2013-07-20 Show GitHub Exploit DB Packet Storm
293026 - apache activemq Cross-site scripting (XSS) vulnerability in scheduled.jsp in Apache ActiveMQ 5.8.0 and earlier allows remote attackers to inject arbitrary web script or HTML via vectors involving the "cron of a mess… CWE-79
Cross-site Scripting
CVE-2013-1879 2024-11-21 10:50 2013-07-20 Show GitHub Exploit DB Packet Storm
293027 - chaos_tool_suite_project ctools The Chaos Tool Suite (ctools) module 7.x-1.x before 7.x-1.3 for Drupal does not properly restrict node access, which allows remote authenticated users with the "access content" permission to read res… CWE-264
Permissions, Privileges, and Access Controls
CVE-2013-1925 2024-11-21 10:50 2013-07-17 Show GitHub Exploit DB Packet Storm
293028 - acquia
commons_wikis_project
commons
commons_wikis
The Commons Wikis module before 7.x-3.1 for Drupal, as used in the Commons module before 7.x-3.1, does not properly restrict access to groups, which allows remote attackers to post arbitrary content … CWE-264
Permissions, Privileges, and Access Controls
CVE-2013-1908 2024-11-21 10:50 2013-07-17 Show GitHub Exploit DB Packet Storm
293029 - acquia commons
commons_group
The Commons Group module before 7.x-3.1 for Drupal, as used in the Commons module before 7.x-3.1, does not properly restrict access to groups, which allows remote attackers to post arbitrary content … CWE-264
Permissions, Privileges, and Access Controls
CVE-2013-1907 2024-11-21 10:50 2013-07-17 Show GitHub Exploit DB Packet Storm
293030 7.8 HIGH
Local
linux
redhat
canonical
linux_kernel
enterprise_linux
enterprise_linux_eus
ubuntu_linux
The KVM subsystem in the Linux kernel before 3.0 does not check whether kernel addresses are specified during allocation of memory slots for use in a guest's physical address space, which allows loca… CWE-20
 Improper Input Validation 
CVE-2013-1943 2024-11-21 10:50 2013-07-16 Show GitHub Exploit DB Packet Storm