Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 6, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
220451 4.3 警告 Digital Junkies - dompdf の dompdf.php における chroot の保護を回避される脆弱性 CWE-200
情報漏えい 		CVE-2014-2383 2014-05-1 18:18 2014-03-11 Show GitHub Exploit DB Packet Storm
220452 4.3 警告 VideoWhisper.com - Drupal 用 VideoWhisper Webcam プラグインにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2014-2715 2014-05-1 18:10 2014-04-25 Show GitHub Exploit DB Packet Storm
220453 6.8 警告 Ubercart - Drupal 用 Ubercart モジュールにおける Web セッションをハイジャックされる脆弱性 CWE-287
不適切な認証 		CVE-2013-7302 2014-05-1 18:09 2013-12-17 Show GitHub Exploit DB Packet Storm
220454 4.3 警告 Gizra - Drupal 用 Entity reference モジュールにおけるプライベートノードのタイトルを読まれる脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2013-7066 2014-05-1 18:08 2013-11-20 Show GitHub Exploit DB Packet Storm
220455 4.9 警告 Gizra - Drupal 用 Organic Groups モジュールにおけるノード上のグループの制限を回避される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2013-7068 2014-05-1 18:07 2013-11-20 Show GitHub Exploit DB Packet Storm
220456 5.8 警告 Gizra - Drupal 用 Organic Groups モジュールにおけるアクセス制限を回避される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2013-7065 2014-05-1 18:07 2013-11-20 Show GitHub Exploit DB Packet Storm
220457 2.1 注意 Marcin Pajdzik - Drupal 用 EU Cookie Compliance モジュールにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2013-7064 2014-05-1 18:06 2013-11-20 Show GitHub Exploit DB Packet Storm
220458 5 警告 PlusFront - Drupal 用 Invitation モジュールにおける重要な情報を取得される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2013-7063 2014-05-1 18:05 2013-11-20 Show GitHub Exploit DB Packet Storm
220459 4.3 警告 Joachim Noreiko - Drupal 用 Flag モジュールの管理者ページにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2013-4336 2014-05-1 18:04 2013-08-28 Show GitHub Exploit DB Packet Storm
220460 5 警告 PaperCut Software International Pty - PaperCut MF および NG におけるサービス運用妨害 (DoS) の脆弱性 CWE-noinfo
情報不足 		CVE-2014-2658 2014-05-1 17:34 2014-04-10 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 6, 2026, 4:18 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
294561 - novatech orion5_dnp_slave
orionlx_dnp_slave
orion5r_dnp_master
orion5r_dnp_slave
orionlx_dnp_master
orion5_dnp_master 		NovaTech Orion Substation Automation Platform OrionLX DNP Master 1.27.38 and DNP Slave 1.23.10 and earlier and Orion5/Orion5r DNP Master 1.27.38 and DNP Slave 1.23.10 and earlier allow physically pro… CWE-20
 Improper Input Validation  		CVE-2013-2822 2024-11-21 10:52 2013-12-21 Show GitHub Exploit DB Packet Storm
294562 - novatech orion5_dnp_slave
orionlx_dnp_slave
orion5r_dnp_master
orion5r_dnp_slave
orionlx_dnp_master
orion5_dnp_master 		NovaTech Orion Substation Automation Platform OrionLX DNP Master 1.27.38 and DNP Slave 1.23.10 and earlier and Orion5/Orion5r DNP Master 1.27.38 and DNP Slave 1.23.10 and earlier allow remote attacke… CWE-20
 Improper Input Validation  		CVE-2013-2821 2024-11-21 10:52 2013-12-21 Show GitHub Exploit DB Packet Storm
294563 - idleman leed Multiple cross-site request forgery (CSRF) vulnerabilities in action.php in Leed (Light Feed), possibly before 1.5 Stable, allow remote attackers to hijack the authentication of administrators for un… CWE-352
 Origin Validation Error 		CVE-2013-2628 2024-11-21 10:52 2013-12-21 Show GitHub Exploit DB Packet Storm
294564 - idleman leed SQL injection vulnerability in action.php in Leed (Light Feed), possibly before 1.5 Stable, allows remote attackers to execute arbitrary SQL commands via the id parameter in a removeFolder action. CWE-89
SQL Injection 		CVE-2013-2627 2024-11-21 10:52 2013-12-21 Show GitHub Exploit DB Packet Storm
294565 - cooperindustries smp_4_gateway_\(data_concentrator\)
smp_4\/dp_gateway_\(data_concentrator\)
smp_16_gateway_\(data_concentrator\) 		The DNP3 component in Cooper Power Systems SMP 4, 4/DP, and 16 gateways allows physically proximate attackers to cause a denial of service (reboot or link outage) via crafted input over a serial line. CWE-20
 Improper Input Validation  		CVE-2013-2816 2024-11-21 10:52 2013-12-18 Show GitHub Exploit DB Packet Storm
294566 - cooperindustries dnp3_master_opc_server Cooper Power Systems Cybectec DNP3 Master OPC Server allows remote attackers to cause a denial of service (unhandled exception and process crash) via unspecified vectors. CWE-20
 Improper Input Validation  		CVE-2013-2814 2024-11-21 10:52 2013-12-18 Show GitHub Exploit DB Packet Storm
294567 - cooperindustries smp_4_gateway_\(data_concentrator\)
smp_4\/dp_gateway_\(data_concentrator\)
smp_16_gateway_\(data_concentrator\) 		The DNP3 component in Cooper Power Systems SMP 4, 4/DP, and 16 gateways allows remote attackers to cause a denial of service (reboot or link outage) via a crafted DNP3 TCP packet. CWE-20
 Improper Input Validation  		CVE-2013-2813 2024-11-21 10:52 2013-12-18 Show GitHub Exploit DB Packet Storm
294568 - ibm rational_software_architect_design_manager
rhapsody_design_manager 		Directory traversal vulnerability in the client in IBM Rational Software Architect Design Manager and Rhapsody Design Manager 3.x and 4.x before 4.0.5 allows local users to read arbitrary files via v… CWE-22
Path Traversal 		CVE-2013-3043 2024-11-21 10:52 2013-12-15 Show GitHub Exploit DB Packet Storm
294569 - ibm rational_software_architect_design_manager
rhapsody_design_manager 		Directory traversal vulnerability in the server in IBM Rational Software Architect Design Manager and Rhapsody Design Manager 3.x and 4.x before 4.0.5 allows local users to read arbitrary files via v… CWE-22
Path Traversal 		CVE-2013-3042 2024-11-21 10:52 2013-12-15 Show GitHub Exploit DB Packet Storm
294570 - netgear raidiator Cross-site request forgery (CSRF) vulnerability in frontview/lib/np_handler.pl in NETGEAR ReadyNAS RAIDiator before 4.1.12 and 4.2.x before 4.2.24 allows remote attackers to hijack the authentication… CWE-352
 Origin Validation Error 		CVE-2013-2752 2024-11-21 10:52 2013-12-13 Show GitHub Exploit DB Packet Storm