Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 21, 2026, 6 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
220411 6 警告 SAS - SAS Visual Analytics のイメージアップロードモジュールにおける任意のコードを実行される脆弱性 CWE-Other
その他
CVE-2014-5454 2014-08-27 15:26 2014-08-13 Show GitHub Exploit DB Packet Storm
220412 2.1 注意 Social Stats project - Drupal 用 Social Stats モジュールにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2014-5456 2014-08-27 14:59 2014-08-19 Show GitHub Exploit DB Packet Storm
220413 7.2 危険 Ubisoft - Ubisoft Uplay PC における権限を取得される脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2014-5453 2014-08-27 14:22 2014-07-3 Show GitHub Exploit DB Packet Storm
220414 6.8 警告 innovaphone AG - innovaphone PBX におけるクロスサイトリクエストフォージェリの脆弱性 CWE-352
同一生成元ポリシー違反
CVE-2014-5335 2014-08-27 13:58 2014-08-21 Show GitHub Exploit DB Packet Storm
220415 5 警告 Debian
Python Software Foundation
- Python Image Library および Pillow の PIL/IcnsImagePlugin.py におけるサービス運用妨害 (DoS) の脆弱性 CWE-20
不適切な入力確認
CVE-2014-3589 2014-08-27 12:25 2014-08-13 Show GitHub Exploit DB Packet Storm
220416 4.3 警告 Apache Software Foundation - Apache ActiveMQ の scheduled.jsp におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2013-1879 2014-08-26 17:47 2013-03-21 Show GitHub Exploit DB Packet Storm
220417 7.1 危険 IBM - IBM GCM16 および GCM32 Global Console Manager スイッチのファームウェアの systest.php における任意のコマンドを実行される脆弱性 CWE-78
OSコマンド・インジェクション
CVE-2014-3085 2014-08-26 17:42 2014-07-14 Show GitHub Exploit DB Packet Storm
220418 6.3 警告 IBM - IBM GCM16 および GCM32 Global Console Manager スイッチのファームウェアの prodtest.php における任意のファイルを読まれる脆弱性 CWE-200
情報漏えい
CVE-2014-3081 2014-08-26 17:42 2014-07-14 Show GitHub Exploit DB Packet Storm
220419 6.8 警告 マイクロソフト
アドビシステムズ
Google
- Adobe Flash Player および Adobe AIR におけるクロスサイトリクエストフォージェリ攻撃を実行される脆弱性 CWE-352
同一生成元ポリシー違反
CVE-2014-5333 2014-08-26 17:40 2014-08-12 Show GitHub Exploit DB Packet Storm
220420 6.8 警告 GNU Project
IBM
- GnuTLS の lib/gnutls_handshake.c の read_server_hello 関数におけるバッファオーバーフローの脆弱性 CWE-119
バッファエラー
CVE-2014-3466 2014-08-26 17:40 2014-05-29 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 22, 2026, 4 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
294211 - linux linux_kernel The aac_compat_ioctl function in drivers/scsi/aacraid/linit.c in the Linux kernel before 3.11.8 does not require the CAP_SYS_RAWIO capability, which allows local users to bypass intended access restr… CWE-264
Permissions, Privileges, and Access Controls
CVE-2013-6383 2024-11-21 10:59 2013-11-27 Show GitHub Exploit DB Packet Storm
294212 - linux linux_kernel Multiple buffer underflows in the XFS implementation in the Linux kernel through 3.12.1 allow local users to cause a denial of service (memory corruption) or possibly have unspecified other impact by… CWE-119
Incorrect Access of Indexable Resource ('Range Error') 
CVE-2013-6382 2024-11-21 10:59 2013-11-27 Show GitHub Exploit DB Packet Storm
294213 - linux linux_kernel Buffer overflow in the qeth_snmp_command function in drivers/s390/net/qeth_core_main.c in the Linux kernel through 3.12.1 allows local users to cause a denial of service or possibly have unspecified … CWE-119
Incorrect Access of Indexable Resource ('Range Error') 
CVE-2013-6381 2024-11-21 10:59 2013-11-27 Show GitHub Exploit DB Packet Storm
294214 - linux linux_kernel The aac_send_raw_srb function in drivers/scsi/aacraid/commctrl.c in the Linux kernel through 3.12.1 does not properly validate a certain size value, which allows local users to cause a denial of serv… CWE-20
 Improper Input Validation 
CVE-2013-6380 2024-11-21 10:59 2013-11-27 Show GitHub Exploit DB Packet Storm
294215 - linux linux_kernel The lbs_debugfs_write function in drivers/net/wireless/libertas/debugfs.c in the Linux kernel through 3.12.1 allows local users to cause a denial of service (OOPS) by leveraging root privileges for a… CWE-189
Numeric Errors
CVE-2013-6378 2024-11-21 10:59 2013-11-27 Show GitHub Exploit DB Packet Storm
294216 - nagios nagios_xi SQL injection vulnerability in functions/prepend_adm.php in Nagios Core Config Manager in Nagios XI before 2012R2.4 allows remote attackers to execute arbitrary SQL commands via the tfPassword parame… CWE-89
SQL Injection
CVE-2013-6875 2024-11-21 10:59 2013-11-27 Show GitHub Exploit DB Packet Storm
294217 - vortexgroup light_alloy Stack-based buffer overflow in Vortex Light Alloy before 4.7.4 allows remote attackers to execute arbitrary code via a long URL in a .m3u file. CWE-119
Incorrect Access of Indexable Resource ('Range Error') 
CVE-2013-6874 2024-11-21 10:59 2013-11-27 Show GitHub Exploit DB Packet Storm
294218 - testa online_test_management_system SQL injection vulnerability in Testa Online Test Management System (OTMS) 2.0.0.2 allows remote attackers to execute arbitrary SQL commands via the test_id parameter. CWE-89
SQL Injection
CVE-2013-6873 2024-11-21 10:59 2013-11-27 Show GitHub Exploit DB Packet Storm
294219 - splunk splunk Cross-site scripting (XSS) vulnerability in Splunk Web in Splunk before 5.0.6 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. CWE-79
Cross-site Scripting
CVE-2013-6870 2024-11-21 10:59 2013-11-26 Show GitHub Exploit DB Packet Storm
294220 - jenkins-ci build_failure_analyzer Cross-site scripting (XSS) vulnerability in the Build Failure Analyzer plugin before 1.5.1 for Jenkins allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors. CWE-79
Cross-site Scripting
CVE-2013-6374 2024-11-21 10:59 2013-11-26 Show GitHub Exploit DB Packet Storm