Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 4, 2026, 4 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
220231 4.3 警告 Core FTP - Core FTP Server におけるサービス運用妨害 (DoS) の脆弱性 CWE-362
競合状態
CVE-2014-1441 2014-05-7 14:56 2014-01-30 Show GitHub Exploit DB Packet Storm
220232 6.9 警告 DELL EMC (旧 EMC Corporation) - EMC RSA Access Manager のサーバのランタイム WS コンポーネントにおける平文のパスワードを取得される脆弱性 CWE-310
暗号の問題
CVE-2014-0646 2014-05-7 14:15 2014-04-30 Show GitHub Exploit DB Packet Storm
220233 3.5 注意 IBM - IBM Netcool/OMNIbus の Web GUI の webtop/eventviewer/eventViewer.jsp におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2014-0942 2014-05-7 14:07 2014-04-24 Show GitHub Exploit DB Packet Storm
220234 3.5 注意 IBM - IBM Netcool/OMNIbus の Web GUI の webtop/eventviewer/eventViewer.jsp におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2014-0941 2014-05-7 14:06 2014-04-24 Show GitHub Exploit DB Packet Storm
220235 4.3 警告 IBM - IBM WebSphere Application Server Liberty Profile における重要な情報を取得される脆弱性 CWE-200
情報漏えい
CVE-2014-0896 2014-05-7 14:05 2014-04-28 Show GitHub Exploit DB Packet Storm
220236 7.1 危険 Amtelco - Amtelco miSecureMessages に認証不備の脆弱性 CWE-287
不適切な認証
CVE-2014-0357 2014-05-7 10:46 2014-04-11 Show GitHub Exploit DB Packet Storm
220237 5.5 警告 レッドハット - Red Hat Enterprise Linux 上で稼働する Linux Kernel パッケージにおけるサービス運用妨害 (DoS) の脆弱性 CWE-noinfo
情報不足
CVE-2014-0055 2014-05-2 18:12 2014-03-25 Show GitHub Exploit DB Packet Storm
220238 7.5 危険 Apache Software Foundation - Apache Camel の XSLT コンポーネントにおける任意の Java メソッドを実行される脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2014-0003 2014-05-2 18:11 2014-02-28 Show GitHub Exploit DB Packet Storm
220239 7.5 危険 Apache Software Foundation - Apache Camel の XSLT コンポーネントにおける任意のファイルを読まれる脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2014-0002 2014-05-2 18:10 2014-02-28 Show GitHub Exploit DB Packet Storm
220240 5 警告 PHP-Fusion - PHP-Fusion における重要な情報を取得される脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2013-1807 2014-05-2 16:47 2013-01-27 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 5, 2026, 4:11 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
292501 6.5 MEDIUM
Network
drupal authenticated_user_page_caching The Authenticated User Page Caching (Authcache) module 7.x-1.x before 7.x-1.5 for Drupal does not properly restrict access to cached pages, which allows remote attackers with the same role-combinatio… CWE-862
 Missing Authorization
CVE-2013-4226 2024-11-21 10:55 2020-02-19 Show GitHub Exploit DB Packet Storm
292502 8.8 HIGH
Network
mozilla persona Cross-site request forgery (CSRF) vulnerability in the persona_xsrf_token function in persona.module in the Mozilla Persona module 7.x-1.x before 7.x-1.11 for Drupal allows remote attackers to hijack… CWE-352
 Origin Validation Error
CVE-2013-4227 2024-11-21 10:55 2020-02-19 Show GitHub Exploit DB Packet Storm
292503 9.1 CRITICAL
Network
getbutterfly portable-phpmyadmin WordPress Portable phpMyAdmin Plugin 1.4.1 has Multiple Security Bypass Vulnerabilities CWE-287
Improper Authentication
CVE-2013-4454 2024-11-21 10:55 2020-02-18 Show GitHub Exploit DB Packet Storm
292504 9.8 CRITICAL
Network
openx openx A Code Execution Vulnerability exists in OpenX Ad Server 2.8.10 due to a backdoor in flowplayer-3.1.1.min.js library, which could let a remote malicious user execute arbitrary PHP code CWE-94
Code Injection
CVE-2013-4211 2024-11-21 10:55 2020-02-15 Show GitHub Exploit DB Packet Storm
292505 5.5 MEDIUM
Local
avira antivir_mailgate
antivir_mailgate_suite
exchange_security
antivir_webgate
antivir_webgate_suite
antivir_sharepoint
professional_security
antivir_personal
savapi
antivirus_s…
A Denial of Service (infinite loop) vulnerability exists in Avira AntiVir Engine before 8.2.12.58 via an unspecified function in the PDF Scanner Engine. CWE-400
 Uncontrolled Resource Consumption
CVE-2013-4602 2024-11-21 10:55 2020-02-13 Show GitHub Exploit DB Packet Storm
292506 6.1 MEDIUM
Network
simplemachines simple_machines_forum Simple Machines Forum (SMF) through 2.0.5 has XSS CWE-79
Cross-site Scripting
CVE-2013-4395 2024-11-21 10:55 2020-02-13 Show GitHub Exploit DB Packet Storm
292507 8.8 HIGH
Network
restful_web_services_project restful_web_services The RESTful Web Services (restws) module 7.x-1.x before 7.x-1.4 and 7.x-2.x before 7.x-2.1 for Drupal does not properly restrict access to entity write operations, which makes it easier for remote au… CWE-79
CWE-94
Cross-site Scripting
Code Injection
CVE-2013-4225 2024-11-21 10:55 2020-02-12 Show GitHub Exploit DB Packet Storm
292508 8.8 HIGH
Local
qemu
redhat
qemu
enterprise_linux_server_tus
enterprise_linux_desktop
enterprise_linux_server
enterprise_linux_workstation
virtualization
The virtqueue_map_sg function in hw/virtio/virtio.c in QEMU before 1.7.2 allows remote attackers to execute arbitrary files via a crafted savevm image, related to virtio-block or virtio-serial read. CWE-20
 Improper Input Validation 
CVE-2013-4535 2024-11-21 10:55 2020-02-12 Show GitHub Exploit DB Packet Storm
292509 9.8 CRITICAL
Network
pydio pydio Ajaxeplorer before 5.0.1 allows remote attackers to execute arbitrary commands via shell metacharacters in the (1) archive_name parameter to the Power FS module (plugins/action.powerfs/class.PowerFSC… CWE-78
OS Command 
CVE-2013-4267 2024-11-21 10:55 2020-02-11 Show GitHub Exploit DB Packet Storm
292510 9.8 CRITICAL
Network
openpne opopensocialplugin opOpenSocialPlugin 0.8.2.1, > 0.9.9.2, 0.9.13, 1.2.6: Multiple XML External Entity Injection Vulnerabilities CWE-776
XML Entity Expansion
CVE-2013-4335 2024-11-21 10:55 2020-02-8 Show GitHub Exploit DB Packet Storm