Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 4, 2026, 4 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
220381 3.3 注意 Jonathan Leung - Ruby 用 Show In Browser gem における任意の Web スクリプトまたは HTML を挿入される脆弱性 CWE-59
リンク解釈の問題
CVE-2013-2105 2014-04-25 14:06 2013-05-18 Show GitHub Exploit DB Packet Storm
220382 4.3 警告 k5n.us - Craig Knudsen WebCalendar におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2013-1421 2014-04-25 13:57 2013-02-22 Show GitHub Exploit DB Packet Storm
220383 6.8 警告 PaperCut Software International Pty - Papercut MF および NG の管理 UI におけるクロスサイトリクエストフォージェリの脆弱性 CWE-352
同一生成元ポリシー違反
CVE-2014-2659 2014-04-25 13:39 2014-04-10 Show GitHub Exploit DB Packet Storm
220384 4.3 警告 CJ Niemira - phpMyID の MyID.php の wrap_html 関数におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2014-2890 2014-04-25 12:26 2014-04-17 Show GitHub Exploit DB Packet Storm
220385 4.9 警告 アップル - Apple OS X のカーネルにおける ASLR 保護メカニズムを回避される脆弱性 CWE-200
情報漏えい
CVE-2014-1322 2014-04-25 12:21 2014-04-22 Show GitHub Exploit DB Packet Storm
220386 3.3 注意 アップル - Apple OS X のパワーマネジメントにおける画面ロック状態への遷移を回避される脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2014-1321 2014-04-25 12:21 2014-04-22 Show GitHub Exploit DB Packet Storm
220387 4.9 警告 アップル - 複数の Apple 製品の IOKit における ASLR 保護メカニズムを回避される脆弱性 CWE-200
情報漏えい
CVE-2014-1320 2014-04-25 12:20 2014-04-22 Show GitHub Exploit DB Packet Storm
220388 5.8 警告 yaSSL - wolfSSL CyaSSL におけるサーバになりすまされる脆弱性 CWE-310
暗号の問題
CVE-2014-2900 2014-04-25 12:19 2014-04-9 Show GitHub Exploit DB Packet Storm
220389 5 警告 yaSSL - wolfSSL CyaSSL におけるサービス運用妨害 (DoS) の脆弱性 CWE-20
不適切な入力確認
CVE-2014-2899 2014-04-25 12:12 2014-04-9 Show GitHub Exploit DB Packet Storm
220390 4 警告 シスコシステムズ - Cisco IOS の Cisco IOS Unified Border Element におけるサービス運用妨害 (DoS) の脆弱性 CWE-20
不適切な入力確認
CVE-2012-5427 2014-04-24 18:45 2012-11-29 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 4, 2026, 4:17 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
295531 - apple quicktime Buffer overflow in Apple QuickTime before 7.7.4 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted MP3 file. CWE-119
Incorrect Access of Indexable Resource ('Range Error') 
CVE-2013-0989 2024-11-21 10:48 2013-05-25 Show GitHub Exploit DB Packet Storm
295532 - apple quicktime Buffer overflow in Apple QuickTime before 7.7.4 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted FPX file. CWE-119
Incorrect Access of Indexable Resource ('Range Error') 
CVE-2013-0988 2024-11-21 10:48 2013-05-25 Show GitHub Exploit DB Packet Storm
295533 - apple quicktime Apple QuickTime before 7.7.4 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted QTIF file. CWE-399
 Resource Management Errors
CVE-2013-0987 2024-11-21 10:48 2013-05-25 Show GitHub Exploit DB Packet Storm
295534 - apple quicktime
mac_os_x
Buffer overflow in Apple QuickTime before 7.7.4 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via crafted enof atoms in a movie file. CWE-119
Incorrect Access of Indexable Resource ('Range Error') 
CVE-2013-0986 2024-11-21 10:48 2013-05-25 Show GitHub Exploit DB Packet Storm
295535 - emc rsa_authentication_agent Cross-site scripting (XSS) vulnerability in EMC RSA Authentication Agent 7.1 before 7.1.1 for Web for Internet Information Services, and 7.1 before 7.1.1 for Web for Apache, allows remote attackers t… CWE-79
Cross-site Scripting
CVE-2013-0942 2024-11-21 10:48 2013-05-22 Show GitHub Exploit DB Packet Storm
295536 - rsa authentication_api
securid_web_agent
pluggable_authentication_module_agent
authentication_agent
EMC RSA Authentication API before 8.1 SP1, RSA Web Agent before 5.3.5 for Apache Web Server, RSA Web Agent before 5.3.5 for IIS, RSA PAM Agent before 7.0, and RSA Agent before 6.1.4 for Microsoft Win… CWE-310
Cryptographic Issues
CVE-2013-0941 2024-11-21 10:48 2013-05-22 Show GitHub Exploit DB Packet Storm
295537 - apple itunes Apple iTunes before 11.0.3 does not properly verify X.509 certificates, which allows man-in-the-middle attackers to spoof HTTPS servers via an arbitrary valid certificate. CWE-20
 Improper Input Validation 
CVE-2013-1014 2024-11-21 10:48 2013-05-20 Show GitHub Exploit DB Packet Storm
295538 - apple itunes WebKit, as used in Apple iTunes before 11.0.3, allows man-in-the-middle attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via vectors related … CWE-399
 Resource Management Errors
CVE-2013-1011 2024-11-21 10:48 2013-05-20 Show GitHub Exploit DB Packet Storm
295539 - apple iphone_os
itunes
WebKit, as used in Apple iTunes before 11.0.3, allows man-in-the-middle attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via vectors related … CWE-399
 Resource Management Errors
CVE-2013-1010 2024-11-21 10:48 2013-05-20 Show GitHub Exploit DB Packet Storm
295540 - apple iphone_os
itunes
WebKit, as used in Apple iTunes before 11.0.3, allows man-in-the-middle attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via vectors related … CWE-399
 Resource Management Errors
CVE-2013-1008 2024-11-21 10:48 2013-05-20 Show GitHub Exploit DB Packet Storm