Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 31, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
220231 5 警告 オラクル - Oracle Fusion Middleware の Oracle Data Integrator における Data Quality に関する脆弱性 CWE-noinfo
情報不足 		CVE-2014-2407 2014-04-18 14:54 2014-04-15 Show GitHub Exploit DB Packet Storm
220232 4 警告 オラクル - Oracle Fusion Middleware の Oracle Access Manager における WebGate に関する脆弱性 CWE-noinfo
情報不足 		CVE-2014-2404 2014-04-18 14:54 2014-04-15 Show GitHub Exploit DB Packet Storm
220233 4.3 警告 オラクル - Oracle Fusion Middleware の Oracle Endeca Server における Oracle Endeca Information Discovery に関する脆弱性 CWE-noinfo
情報不足 		CVE-2014-2400 2014-04-18 14:54 2014-04-15 Show GitHub Exploit DB Packet Storm
220234 4.3 警告 オラクル - Oracle Fusion Middleware の Oracle Endeca Server における Oracle Endeca Information Discovery に関する脆弱性 CWE-noinfo
情報不足 		CVE-2014-2399 2014-04-18 14:54 2014-04-15 Show GitHub Exploit DB Packet Storm
220235 3.5 注意 オラクル - Oracle Fusion Middleware の Oracle OpenSSO における Admin Console に関する脆弱性 CWE-noinfo
情報不足 		CVE-2014-0465 2014-04-18 14:54 2014-04-15 Show GitHub Exploit DB Packet Storm
220236 5 警告 オラクル - Oracle Fusion Middleware の Oracle WebCenter Portal における People Connection に関する脆弱性 CWE-noinfo
情報不足 		CVE-2014-0450 2014-04-18 14:54 2014-04-15 Show GitHub Exploit DB Packet Storm
220237 4.3 警告 オラクル - Oracle Fusion Middleware の Oracle Containers for J2EE における HTTP Request Handling に関する脆弱性 CWE-noinfo
情報不足 		CVE-2014-0426 2014-04-18 14:54 2014-04-15 Show GitHub Exploit DB Packet Storm
220238 5 警告 オラクル - Oracle Fusion Middleware の Oracle Containers for J2EE における HTTP Request Handling に関する脆弱性 CWE-noinfo
情報不足 		CVE-2014-0414 2014-04-18 14:54 2014-04-15 Show GitHub Exploit DB Packet Storm
220239 4.3 警告 オラクル - Oracle Fusion Middleware の Oracle Containers for J2EE における HTTP Request Handling に関する脆弱性 CWE-noinfo
情報不足 		CVE-2014-0413 2014-04-18 14:54 2014-04-15 Show GitHub Exploit DB Packet Storm
220240 3.5 注意 オラクル - Oracle Supply Chain Products Suite の Oracle Agile PLM Framework における Security に関する脆弱性 CWE-noinfo
情報不足 		CVE-2014-2467 2014-04-18 10:13 2014-04-15 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 31, 2026, 4:16 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
292951 - linksys ea6500_firmware
ea6500 		Cross-site scripting (XSS) vulnerability in the Parental Controls section in Linksys EA6500 with firmware 1.1.28.147876 allows remote authenticated users to inject arbitrary web script or HTML via ve… CWE-79
Cross-site Scripting 		CVE-2013-3065 2024-11-21 10:52 2014-09-30 Show GitHub Exploit DB Packet Storm
292952 - linksys ea6500_firmware
ea6500 		Open redirect vulnerability in ui/dynamic/unsecured.html in Linksys EA6500 with firmware 1.1.28.147876 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks vi… NVD-CWE-Other
CVE-2013-3064 2024-11-21 10:52 2014-09-30 Show GitHub Exploit DB Packet Storm
292953 - apachefriends xampp XAMPP 1.8.1 does not properly restrict access to xampp/lang.php, which allows remote attackers to modify xampp/lang.tmp and execute cross-site scripting (XSS) attacks via the WriteIntoLocalDisk metho… CWE-79
Cross-site Scripting 		CVE-2013-2586 2024-11-21 10:52 2014-09-30 Show GitHub Exploit DB Packet Storm
292954 - codeaurora android-msm A certain Qualcomm Innovation Center (QuIC) patch to the NativeDaemonConnector class in services/java/com/android/server/NativeDaemonConnector.java in Code Aurora Forum (CAF) releases of Android 4.1.… NVD-CWE-Other
CVE-2013-2599 2024-11-21 10:52 2014-08-31 Show GitHub Exploit DB Packet Storm
292955 - codeaurora android-msm app/aboot/aboot.c in the Little Kernel (LK) bootloader, as distributed with Qualcomm Innovation Center (QuIC) Android contributions for MSM devices and other products, allows attackers to overwrite s… CWE-20
 Improper Input Validation  		CVE-2013-2598 2024-11-21 10:52 2014-08-31 Show GitHub Exploit DB Packet Storm
292956 - codeaurora android-msm The device-initialization functionality in the MSM camera driver for the Linux kernel 2.6.x and 3.x, as used in Qualcomm Innovation Center (QuIC) Android contributions for MSM devices and other produ… CWE-264
Permissions, Privileges, and Access Controls 		CVE-2013-2595 2024-11-21 10:52 2014-08-31 Show GitHub Exploit DB Packet Storm
292957 - ibm tivoli_application_dependency_discovery_manager Directory traversal vulnerability in BIRT-Report Viewer in IBM Tivoli Application Dependency Discovery Manager (TADDM) 7.1.x and 7.2.x before 7.2.1.5 allows remote authenticated users to read arbitra… CWE-22
Path Traversal 		CVE-2013-3004 2024-11-21 10:52 2014-07-2 Show GitHub Exploit DB Packet Storm
292958 - jojocms jojo-cms Cross-site scripting (XSS) vulnerability in plugins/jojo_core/forgot_password.php in Jojo before 1.2.2 allows remote attackers to inject arbitrary web script or HTML via the search parameter to forgo… CWE-79
Cross-site Scripting 		CVE-2013-3082 2024-11-21 10:52 2014-06-10 Show GitHub Exploit DB Packet Storm
292959 - jojocms jojo-cms SQL injection vulnerability in the checkEmailFormat function in plugins/jojo_core/classes/Jojo.php in Jojo before 1.2.2 allows remote attackers to execute arbitrary SQL commands via the X-Forwarded-F… CWE-89
SQL Injection 		CVE-2013-3081 2024-11-21 10:52 2014-06-10 Show GitHub Exploit DB Packet Storm
292960 - myheritage sequeryobject_activex_control Multiple array index errors in the MyHeritage SEQueryObject ActiveX control (SearchEngineQuery.dll) 1.0.2.0 allow remote attackers to execute arbitrary code via the (1) seTokensArray, or (2) seTokens… NVD-CWE-Other
CVE-2013-2602 2024-11-21 10:52 2014-06-6 Show GitHub Exploit DB Packet Storm