Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 6, 2026, 10 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
220231 6.8 警告 マイクロソフト - Microsoft Office の MSCOMCTL ライブラリにおける ASLR 保護メカニズムを回避される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2014-1809 2014-05-15 14:25 2014-05-13 Show GitHub Exploit DB Packet Storm
220232 4.3 警告 マイクロソフト - Microsoft Office 2013 における重要なトークン情報を取得される脆弱性 CWE-200
情報漏えい 		CVE-2014-1808 2014-05-15 14:24 2014-05-13 Show GitHub Exploit DB Packet Storm
220233 4.3 警告 マイクロソフト - 複数の Microsoft 製品におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2014-1754 2014-05-15 14:21 2014-05-13 Show GitHub Exploit DB Packet Storm
220234 9 危険 マイクロソフト - 複数の Microsoft 製品における任意のコードを実行される脆弱性 CWE-94
コード・インジェクション 		CVE-2014-0251 2014-05-15 14:21 2014-05-13 Show GitHub Exploit DB Packet Storm
220235 5 警告 Haxx
アップル
Canonical		 - cURL および libcurl の cookie.c における Cookie を盗まれる脆弱性 CWE-200
情報漏えい 		CVE-2013-1944 2014-05-14 18:45 2013-04-12 Show GitHub Exploit DB Packet Storm
220236 4.3 警告 FreeType Project - FreeType の _bdf_parse_glyphs 関数におけるサービス運用妨害 (DoS) の脆弱性 CWE-119
バッファエラー 		CVE-2012-5670 2014-05-14 18:44 2012-12-20 Show GitHub Exploit DB Packet Storm
220237 4.3 警告 FreeType Project - FreeType の _bdf_parse_glyphs 関数におけるサービス運用妨害 (DoS) の脆弱性 CWE-119
バッファエラー 		CVE-2012-5669 2014-05-14 18:43 2012-12-20 Show GitHub Exploit DB Packet Storm
220238 4.3 警告 FreeType Project - FreeType におけるサービス運用妨害 (DoS) の脆弱性 CWE-119
バッファエラー 		CVE-2012-5668 2014-05-14 18:43 2012-12-20 Show GitHub Exploit DB Packet Storm
220239 4.6 警告 サイバートラスト株式会社
XScreenSaver project
レッドハット		 - XScreenSaver のクラッシュによりスクリーンロックが解除される問題 CWE-287
不適切な認証 		CVE-2007-1859 2014-05-14 18:41 2007-05-3 Show GitHub Exploit DB Packet Storm
220240 5 警告 VMware - VMware SpringSource Grails におけるアクセス制限を回避される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2012-1833 2014-05-14 18:40 2012-08-13 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 6, 2026, 4:18 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
294221 - cisco unified_operations_manager SQL injection vulnerability in the management application in Cisco Unified Operations Manager allows remote authenticated users to execute arbitrary SQL commands via an entry field, aka Bug ID CSCud8… CWE-89
SQL Injection 		CVE-2013-3437 2024-11-21 10:53 2013-07-23 Show GitHub Exploit DB Packet Storm
294222 - cisco unified_ip_conference_station_7937g_firmware
unified_ip_conference_station_7937g 		The Cisco Unified IP Conference Station 7937G allows remote attackers to cause a denial of service (networking outage) via a flood of TCP packets, aka Bug ID CSCuh42052. CWE-399
 Resource Management Errors 		CVE-2013-3435 2024-11-21 10:53 2013-07-23 Show GitHub Exploit DB Packet Storm
294223 - cisco ios The default configuration of the Group Encrypted Transport VPN (GET VPN) feature on Cisco IOS uses an improper mechanism for enabling Group Domain of Interpretation (GDOI) traffic flow, which allows … CWE-264
Permissions, Privileges, and Access Controls 		CVE-2013-3436 2024-11-21 10:53 2013-07-19 Show GitHub Exploit DB Packet Storm
294224 - emc avamar_server
avamar_server_virtual_edition 		EMC Avamar Server and Avamar Virtual Edition before 7.0 on Data Store Gen3, Gen4, and Gen4s platforms do not properly restrict use of FRAME elements, which makes it easier for remote attackers to obt… CWE-20
 Improper Input Validation  		CVE-2013-3275 2024-11-21 10:53 2013-07-19 Show GitHub Exploit DB Packet Storm
294225 - emc avamar_server
avamar_server_virtual_edition 		EMC Avamar Server and Avamar Virtual Edition before 7.0 on Data Store Gen3, Gen4, and Gen4s platforms do not properly determine authorization for calls to Java RMI methods, which allows remote authen… CWE-264
Permissions, Privileges, and Access Controls 		CVE-2013-3274 2024-11-21 10:53 2013-07-19 Show GitHub Exploit DB Packet Storm
294226 - cisco unified_ip_phones_9900_series_firmware
unified_ip_phone_9951
unified_ip_phone_9971 		The Serviceability servlet on Cisco 9900 IP phones does not properly restrict paths, which allows remote attackers to read arbitrary files by specifying a pathname in a file request, aka Bug ID CSCuh… CWE-264
Permissions, Privileges, and Access Controls 		CVE-2013-3426 2024-11-21 10:53 2013-07-18 Show GitHub Exploit DB Packet Storm
294227 - cisco identity_services_engine_software
identity_services_engine 		Cross-site request forgery (CSRF) vulnerability in the web framework on the Cisco Identity Services Engine (ISE) allows remote attackers to hijack the authentication of arbitrary users, aka Bug ID CS… CWE-352
 Origin Validation Error 		CVE-2013-3420 2024-11-21 10:53 2013-07-18 Show GitHub Exploit DB Packet Storm
294228 - cisco unified_communications_manager Untrusted search path vulnerability in Cisco Unified Communications Manager (CUCM) 7.1(x) through 9.1(1a) allows local users to gain privileges by leveraging unspecified file-permission and environme… NVD-CWE-Other
CVE-2013-3434 2024-11-21 10:53 2013-07-18 Show GitHub Exploit DB Packet Storm
294229 - cisco unified_communications_manager Untrusted search path vulnerability in Cisco Unified Communications Manager (CUCM) 7.1(x) through 9.1(1a) allows local users to gain privileges by leveraging unspecified file-permission and environme… NVD-CWE-Other
CVE-2013-3433 2024-11-21 10:53 2013-07-18 Show GitHub Exploit DB Packet Storm
294230 - cisco unified_communications_manager SQL injection vulnerability in Cisco Unified Communications Manager (CUCM) 7.1(x) through 9.1(2) allows remote authenticated users to execute arbitrary SQL commands via unspecified vectors, aka Bug I… CWE-89
SQL Injection 		CVE-2013-3412 2024-11-21 10:53 2013-07-18 Show GitHub Exploit DB Packet Storm