Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 29, 2026, 6 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
220151 7.5 危険 Fedora Project
Digium
- Asterisk Open Source および Certified Asterisk の main/http.c におけるサービス運用妨害 (DoS) の脆弱性 CWE-20
不適切な入力確認
CVE-2014-2286 2014-04-23 15:52 2014-03-10 Show GitHub Exploit DB Packet Storm
220152 3.5 注意 エフ・セキュア - F-Secure Messaging Secure Gateway におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2014-2844 2014-04-22 19:44 2014-04-16 Show GitHub Exploit DB Packet Storm
220153 7.5 危険 エフ・セキュア - 複数の F-Secure 製品における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2013-7369 2014-04-22 19:40 2013-04-24 Show GitHub Exploit DB Packet Storm
220154 2.1 注意 エフ・セキュア - Mac OS X 用の複数の F-Secure 製品におけるファイアーウォールを無効にされる脆弱性 CWE-noinfo
情報不足
CVE-2012-6646 2014-04-22 19:18 2012-12-12 Show GitHub Exploit DB Packet Storm
220155 6.3 警告 Novell
Lennart Poettering
- systemd の session_link_x11_socket 関数における任意のファイルを作成される脆弱性 CWE-59
リンク解釈の問題
CVE-2012-0871 2014-04-22 18:57 2012-02-29 Show GitHub Exploit DB Packet Storm
220156 4.3 警告 デル - Dell SonicWALL Email Security におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2014-2879 2014-04-22 18:42 2014-03-26 Show GitHub Exploit DB Packet Storm
220157 5 警告 オラクル - Oracle Sun Solaris の Lighthttpd におけるサービス運用妨害 (DoS) の脆弱性 CWE-noinfo
情報不足
CVE-2014-2469 2014-04-22 16:19 2014-04-1 Show GitHub Exploit DB Packet Storm
220158 5 警告 Net-SNMP - Net-SNMP の AgentX サブエージェントにおけるサービス運用妨害 (DoS) の脆弱性 CWE-20
不適切な入力確認
CVE-2014-2310 2014-04-22 16:11 2014-04-14 Show GitHub Exploit DB Packet Storm
220159 4.3 警告 SAP - SAProuter の passwordCheck 関数におけるパスワードを取得される脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2014-0984 2014-04-22 14:59 2014-04-15 Show GitHub Exploit DB Packet Storm
220160 6.5 警告 Apache Software Foundation - Apache Syncope における任意の Java コードを実行される脆弱性 CWE-94
コード・インジェクション
CVE-2014-0111 2014-04-22 14:21 2014-04-10 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 29, 2026, 4:16 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
292841 - phusion
redhat
passenger
openshift
Phusion Passenger gem before 3.0.21 and 4.0.x before 4.0.5 for Ruby allows local users to cause a denial of service (prevent application start) or gain privileges by pre-creating a temporary "config"… CWE-264
Permissions, Privileges, and Access Controls
CVE-2013-2119 2024-11-21 10:51 2014-01-4 Show GitHub Exploit DB Packet Storm
292842 - matrix42 service_store Cross-site scripting (XSS) vulnerability in SPS/Portal/default.aspx in Service Desk in Matrix42 Service Store 5.3 SP3 (aka 5.33.946.0) allows remote attackers to inject arbitrary web script or HTML v… CWE-79
Cross-site Scripting
CVE-2013-2504 2024-11-21 10:51 2013-12-29 Show GitHub Exploit DB Packet Storm
292843 - x x_display_manager X.Org xdm 1.1.10, 1.1.11, and possibly other versions, when performing authentication using certain implementations of the crypt API function that can return NULL, allows remote attackers to cause a … CWE-310
Cryptographic Issues
CVE-2013-2179 2024-11-21 10:51 2013-12-27 Show GitHub Exploit DB Packet Storm
292844 - redhat jboss_enterprise_application_platform
enterprise_linux
The EJB invocation handler implementation in Red Hat JBossWS, as used in JBoss Enterprise Application Platform (EAP) before 6.2.0, does not properly enforce the method level restrictions for JAX-WS S… CWE-264
Permissions, Privileges, and Access Controls
CVE-2013-2133 2024-11-21 10:51 2013-12-7 Show GitHub Exploit DB Packet Storm
292845 - redhat
openfabrics
enterprise_linux
ibutils
OpenFabrics ibutils 1.5.7 allows local users to overwrite arbitrary files via a symlink attack on (1) ibdiagnet.db, (2) ibdiagnet.fdbs, (3) ibdiagnet_ibis.log, (4) ibdiagnet.log, (5) ibdiagnet.lst, (… CWE-59
Link Following
CVE-2013-2561 2024-11-21 10:51 2013-11-24 Show GitHub Exploit DB Packet Storm
292846 - dlink dsl-2740b_firmware
dsl-2740b
The D-Link DSL-2740B Gateway with firmware EU_1.0, when an active administrator session exists, allows remote attackers to bypass authentication and gain administrator access via a request to login.c… CWE-264
Permissions, Privileges, and Access Controls
CVE-2013-2271 2024-11-21 10:51 2013-11-19 Show GitHub Exploit DB Packet Storm
292847 - mediawiki mediawiki Unrestricted file upload vulnerability in the chunk upload API in MediaWiki 1.19 through 1.19.6 and 1.20.x before 1.20.6 allows remote attackers to execute arbitrary code by uploading a file with an … NVD-CWE-Other
CVE-2013-2114 2024-11-21 10:51 2013-11-18 Show GitHub Exploit DB Packet Storm
292848 - openvz vzkernel vzkernel before 042stab080.2 in the OpenVZ modification for the Linux kernel 2.6.32 does not initialize certain length variables, which allows local users to obtain sensitive information from kernel … CWE-264
Permissions, Privileges, and Access Controls
CVE-2013-2239 2024-11-21 10:51 2013-11-12 Show GitHub Exploit DB Packet Storm
292849 - andreas_krennmair tpp tpp 1.3.1 allows remote attackers to execute arbitrary commands via a --exec command in a TPP template file. CWE-94
Code Injection
CVE-2013-2208 2024-11-21 10:51 2013-10-29 Show GitHub Exploit DB Packet Storm
292850 - redhat
ubuntu
jboss_enterprise_portal_platform
openshift
jboss_enterprise_brms_platform
jboss_enterprise_web_server
ubuntu
The DiskFileItem class in Apache Commons FileUpload, as used in Red Hat JBoss BRMS 5.3.1; JBoss Portal 4.3 CP07, 5.2.2, and 6.0.0; and Red Hat JBoss Web Server 1.0.2 allows remote attackers to write … CWE-20
 Improper Input Validation 
CVE-2013-2186 2024-11-21 10:51 2013-10-29 Show GitHub Exploit DB Packet Storm