Vulnerability Search Top

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

Vulnerability Information Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":June 2, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
220391	6.4	警告	WordPress.org	-	WordPress の wp-includes/pluggable.php 内の wp_validate_auth_cookie 関数におけるアクセス権を取得される脆弱性	CWE-287 不適切な認証	CVE-2014-0166	2014-04-11 15:33	2014-04-6	Show	GitHub Exploit DB Packet Storm

220392	4	警告	WordPress.org	-	WordPress における投稿を公開される脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2014-0165	2014-04-11 15:32	2014-04-8	Show	GitHub Exploit DB Packet Storm

220393	7.5	危険	Google	-	Google Chrome で使用される Free(b)soft Laboratory Speech Dispatcher におけるサービス運用妨害 (DoS) の脆弱性	CWE-399 リソース管理の問題	CVE-2014-1724	2014-04-11 14:58	2014-04-8	Show	GitHub Exploit DB Packet Storm

220394	7.5	危険	Google	-	Google Chrome の net/base/escape.cc の UnescapeURLWithOffsetsImpl 関数における URL を偽装される脆弱性	CWE-20 不適切な入力確認	CVE-2014-1723	2014-04-11 14:58	2014-04-8	Show	GitHub Exploit DB Packet Storm

220395	7.5	危険	Google	-	Google Chrome のソフトウェアコンポジタにおける整数オーバーフローの脆弱性	CWE-189 数値処理の問題	CVE-2014-1718	2014-04-11 14:58	2014-04-8	Show	GitHub Exploit DB Packet Storm

220396	5	警告	Google	-	Google Chrome で使用される Blink の wtf/text/Base64.cpp の base64DecodeInternal 関数におけるサービス運用妨害 (DoS) の脆弱性	CWE-20 不適切な入力確認	CVE-2014-1725	2014-04-11 14:58	2014-04-8	Show	GitHub Exploit DB Packet Storm

220397	7.5	危険	Google	-	Google Chrome で使用される Blink の core/rendering/RenderBlock.cpp におけるサービス運用妨害 (DoS) の脆弱性	CWE-399 リソース管理の問題	CVE-2014-1722	2014-04-11 14:58	2014-04-8	Show	GitHub Exploit DB Packet Storm

220398	4.3	警告	Google	-	Google Chrome の drag の実装における同一生成元ポリシーを回避される脆弱性	CWE-DesignError	CVE-2014-1726	2014-04-11 14:58	2014-04-8	Show	GitHub Exploit DB Packet Storm

220399	7.5	危険	Google	-	Google Chrome の content/renderer/renderer_webcolorchooser_impl.h におけるサービス運用妨害 (DoS) の脆弱性	CWE-399 リソース管理の問題	CVE-2014-1727	2014-04-11 14:58	2014-04-8	Show	GitHub Exploit DB Packet Storm

220400	7.5	危険	Google	-	Google Chrome で使用される Google V8 におけるサービス運用妨害 (DoS) の脆弱性	CWE-189 数値処理の問題	CVE-2014-1717	2014-04-11 14:58	2014-04-8	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:June 2, 2026, 4:18 a.m.

No	CVSS	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
295361	-	ibm	lotus_inotes lotus_domino	Cross-site scripting (XSS) vulnerability in iNotes 8.5.x in IBM Lotus Domino 8.5 before 8.5.3 FP5 allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors, aka…	CWE-79 Cross-site Scripting	CVE-2013-0590	2024-11-21 10:47	2013-08-27	Show	GitHub Exploit DB Packet Storm

295362	-	ibm	cognos_business_intelligence	Cross-site scripting (XSS) vulnerability in the server in IBM Cognos Business Intelligence (BI) 8.4.1, 10.1, 10.1.1, 10.2, and 10.2.1 allows remote authenticated users to inject arbitrary web script …	CWE-79 Cross-site Scripting	CVE-2013-0586	2024-11-21 10:47	2013-08-27	Show	GitHub Exploit DB Packet Storm

295363	-	ibm	websphere_commerce	Multiple cross-site scripting (XSS) vulnerabilities in the (1) Accelerator JSPs, (2) Organization Administration Console JSPs, and (3) Administration Console JSPs in WebSphere Commerce Tools in IBM W…	CWE-79 Cross-site Scripting	CVE-2013-0566	2024-11-21 10:47	2013-08-27	Show	GitHub Exploit DB Packet Storm

295364	-	ibm	websphere_application_server	Cross-site scripting (XSS) vulnerability in IBM WebSphere Application Server (WAS) 7.0 before 7.0.0.29, 8.0 before 8.0.0.7, and 8.5 before 8.5.5.0, when OAuth is used, allows remote authenticated use…	CWE-79 Cross-site Scripting	CVE-2013-0597	2024-11-21 10:47	2013-08-22	Show	GitHub Exploit DB Packet Storm

295365	-	ibm	global_console_manager_16_firmware global_console_manager_32_firmware	ping.php in Global Console Manager 16 (GCM16) and Global Console Manager 32 (GCM32) before 1.20.0.22575 on the IBM Avocent 1754 KVM switch allows remote authenticated users to execute arbitrary comma…	CWE-20 Improper Input Validation	CVE-2013-0526	2024-11-21 10:47	2013-08-22	Show	GitHub Exploit DB Packet Storm

295366	-	ibm	websphere_portal	Multiple cross-site scripting (XSS) vulnerabilities in IBM WebSphere Portal before 8.0.0.1 CF07 allow remote attackers to inject arbitrary web script or HTML via vectors involving the (1) Portal, (2)…	CWE-79 Cross-site Scripting	CVE-2013-0587	2024-11-21 10:47	2013-08-16	Show	GitHub Exploit DB Packet Storm

295367	-	ibm	infosphere_information_server	Multiple cross-site scripting (XSS) vulnerabilities in IBM InfoSphere Information Server through 8.5 FP3, 8.7 through FP2, and 9.1 allow remote authenticated users to inject arbitrary web script or H…	CWE-79 Cross-site Scripting	CVE-2013-0585	2024-11-21 10:47	2013-08-16	Show	GitHub Exploit DB Packet Storm

295368	-	ibm	sterling_b2b_integrator	IBM Sterling B2B Integrator 5.0 and 5.1 allows remote attackers to cause a denial of service (memory and CPU consumption) via a crafted HTTP (1) Range or (2) Request-Range header.	CWE-399 Resource Management Errors	CVE-2013-0494	2024-11-21 10:47	2013-08-10	Show	GitHub Exploit DB Packet Storm

295369	-	ibm	informix_open_admin_tool	Cross-site scripting (XSS) vulnerability in IBM Informix Open Admin Tool (OAT) 2.x and 3.x before 3.11.1 allows remote authenticated users to inject arbitrary web script or HTML via a crafted URL.	CWE-79 Cross-site Scripting	CVE-2013-0492	2024-11-21 10:47	2013-08-10	Show	GitHub Exploit DB Packet Storm

295370	-	ibm	api_management	Unspecified vulnerability in IBM API Management 2.0 before 2.0.0.1 allows remote attackers to access tenant APIs, and consequently obtain sensitive information or modify data, via unknown vectors.	NVD-CWE-noinfo	CVE-2013-0559	2024-11-21 10:47	2013-07-19	Show	GitHub Exploit DB Packet Storm