Vulnerability Search Top

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

Vulnerability Information Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":June 9, 2026, 10 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
220251	4.3	警告	Sergio Martin Morillas	-	Alfresco Enterprise に複数のクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2014-2939	2014-06-4 17:03	2014-05-28	Show	GitHub Exploit DB Packet Storm

220252	7.5	危険	Ajay D'Souza	-	WordPress 用 Contextual Related Posts プラグインにおける SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2014-3937	2014-06-4 16:18	2014-06-2	Show	GitHub Exploit DB Packet Storm

220253	6.8	警告	Ajay D'Souza	-	WordPress 用 Contextual Related Posts プラグインにおけるクロスサイトリクエストフォージェリの脆弱性	CWE-352 同一生成元ポリシー違反	CVE-2013-2710	2014-06-4 16:17	2013-05-8	Show	GitHub Exploit DB Packet Storm

220254	6.8	警告	Zemanta	-	WordPress 用 WordPress Related Posts プラグインにおけるクロスサイトリクエストフォージェリの脆弱性	CWE-352 同一生成元ポリシー違反	CVE-2013-3476	2014-06-4 16:08	2013-05-14	Show	GitHub Exploit DB Packet Storm

220255	6.8	警告	Zemanta	-	WordPress 用 Related Posts プラグインにおけるクロスサイトリクエストフォージェリの脆弱性	CWE-352 同一生成元ポリシー違反	CVE-2013-3257	2014-06-4 16:07	2013-05-14	Show	GitHub Exploit DB Packet Storm

220256	6.8	警告	bufferapp	-	WordPress 用 Digg Digg プラグインにおけるクロスサイトリクエストフォージェリの脆弱性	CWE-352 同一生成元ポリシー違反	CVE-2013-3258	2014-06-4 16:07	2013-05-14	Show	GitHub Exploit DB Packet Storm

220257	4.3	警告	レッドハット	-	Red Hat Enterprise Linux OpenStack Platform で使用される OpenStack Heat Templates における任意のパッケージをインストールされる脆弱性	CWE-310 暗号の問題	CVE-2014-0042	2014-06-4 15:52	2014-05-29	Show	GitHub Exploit DB Packet Storm

220258	4.3	警告	レッドハット	-	Red Hat Enterprise Linux OpenStack Platform で使用される OpenStack Heat Templates におけるアップデートを制限される脆弱性	CWE-310 暗号の問題	CVE-2014-0041	2014-06-4 15:51	2014-05-29	Show	GitHub Exploit DB Packet Storm

220259	4.3	警告	レッドハット	-	Red Hat Enterprise Linux OpenStack Platform で使用される OpenStack Heat Templates におけるアップデートを制限される脆弱性	CWE-noinfo 情報不足	CVE-2014-0040	2014-06-4 15:50	2014-05-29	Show	GitHub Exploit DB Packet Storm

220260	5	警告	レッドハット	-	Red Hat Enterprise Linux OpenStack Platform で使用される openstack-foreman-installer におけるアクセス権を取得される脆弱性	CWE-287 不適切な認証	CVE-2013-6470	2014-06-4 15:50	2013-11-4	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:June 9, 2026, 4:16 a.m.

No	CVSS	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
292111	-	sybase	adaptive_server_enterprise	Directory traversal vulnerability in SAP Sybase Adaptive Server Enterprise (ASE) 15.0.3 before 15.0.3 ESD#4.3, 15.5 before 15.5 ESD#5.3, and 15.7 before 15.7 SP50 or 15.7 SP100 allows remote authenti…	CWE-22 Path Traversal	CVE-2013-6864	2024-11-21 10:59	2013-11-24	Show	GitHub Exploit DB Packet Storm

292112	-	sybase	adaptive_server_enterprise	SAP Sybase Adaptive Server Enterprise (ASE) 15.0.3 before 15.0.3 ESD#4.3, 15.5 before 15.5 ESD#5.3, and 15.7 before 15.7 SP50 or 15.7 SP100 allows remote authenticated users to gain privileges via un…	CWE-264 Permissions, Privileges, and Access Controls	CVE-2013-6863	2024-11-21 10:59	2013-11-24	Show	GitHub Exploit DB Packet Storm

292113	-	sybase	adaptive_server_enterprise	Unspecified vulnerability in SAP Sybase Adaptive Server Enterprise (ASE) before 15.0.3 ESD#4.3, 15.5 before 15.5 ESD#5.3, and 15.7 before 15.7 SP50 or 15.7 SP100 allows remote attackers to cause a de…	NVD-CWE-noinfo	CVE-2013-6862	2024-11-21 10:59	2013-11-24	Show	GitHub Exploit DB Packet Storm

292114	-	sybase	adaptive_server_enterprise	Unspecified vulnerability in SAP Sybase Adaptive Server Enterprise (ASE) 15.0.3 before 15.0.3 ESD#4.3, 15.5 before 15.5 ESD#5.3, and 15.7 before 15.7 SP50 or 15.7 SP100 allows local users to obtain s…	NVD-CWE-noinfo	CVE-2013-6861	2024-11-21 10:59	2013-11-24	Show	GitHub Exploit DB Packet Storm

292115	-	sybase	adaptive_server_enterprise	Unspecified vulnerability in SAP Sybase Adaptive Server Enterprise (ASE) before 15.0.3 ESD#4.3, 15.5 before 15.5 ESD#5.3, and 15.7 before 15.7 SP50 or 15.7 SP100 allows remote authenticated users to …	NVD-CWE-noinfo	CVE-2013-6860	2024-11-21 10:59	2013-11-24	Show	GitHub Exploit DB Packet Storm

292116	-	sybase	adaptive_server_enterprise	SAP Sybase Adaptive Server Enterprise (ASE) before 15.0.3 ESD#4.3. 15.5 before 15.5 ESD#5.3, and 15.7 before 15.7 SP50 or 15.7 SP100 does not properly perform authorization, which allows remote authe…	CWE-287 Improper Authentication	CVE-2013-6859	2024-11-21 10:59	2013-11-24	Show	GitHub Exploit DB Packet Storm

292117	-	openstack	ceilometer	(1) impl_db2.py and (2) impl_mongodb.py in OpenStack Ceilometer 2013.2 and earlier, when the logging level is set to INFO, logs the connection string from ceilometer.conf, which allows local users to…	CWE-532 Inclusion of Sensitive Information in Log Files	CVE-2013-6384	2024-11-21 10:59	2013-11-24	Show	GitHub Exploit DB Packet Storm

292118	-	openstack opensuse canonical	horizon opensuse ubuntu_linux	Multiple cross-site scripting (XSS) vulnerabilities in OpenStack Dashboard (Horizon) 2013.2 and earlier allow local users to inject arbitrary web script or HTML via an instance name to (1) "Volumes" …	CWE-79 Cross-site Scripting	CVE-2013-6858	2024-11-21 10:59	2013-11-24	Show	GitHub Exploit DB Packet Storm

292119	-	xen opensuse	xen opensuse	Xen 4.2.x and 4.3.x, when using Intel VT-d for PCI passthrough, does not properly flush the TLB after clearing a present translation table entry, which allows local guest administrators to cause a de…	CWE-264 Permissions, Privileges, and Access Controls	CVE-2013-6375	2024-11-21 10:59	2013-11-23	Show	GitHub Exploit DB Packet Storm

292120	-	tweet-blender	tweet-blender	Cross-site scripting (XSS) vulnerability in the Tweet Blender plugin before 4.0.2 for WordPress allows remote attackers to inject arbitrary web script or HTML via the tb_tab_index parameter to wp-adm…	CWE-79 Cross-site Scripting	CVE-2013-6342	2024-11-21 10:59	2013-11-23	Show	GitHub Exploit DB Packet Storm