Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 4, 2026, 4 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
220481 6.5 警告 PaperThin - PaperThin CommonSpot におけるアクションを実行される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2014-2862 2014-04-21 19:01 2014-04-14 Show GitHub Exploit DB Packet Storm
220482 5 警告 PaperThin - PaperThin CommonSpot における重要な情報を取得される脆弱性 CWE-200
情報漏えい 		CVE-2014-2871 2014-04-21 19:01 2014-04-14 Show GitHub Exploit DB Packet Storm
220483 4.3 警告 PaperThin - PaperThin CommonSpot におけるクロスサイトスクリプティングの脆弱性 CWE-Other
その他 		CVE-2014-2861 2014-04-21 19:01 2014-04-14 Show GitHub Exploit DB Packet Storm
220484 4.3 警告 PaperThin - PaperThin CommonSpot におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2014-2860 2014-04-21 19:01 2014-04-14 Show GitHub Exploit DB Packet Storm
220485 7.5 危険 PaperThin - PaperThin CommonSpot におけるアクセス制限を回避される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2014-2859 2014-04-21 19:01 2014-04-14 Show GitHub Exploit DB Packet Storm
220486 4 警告 コクヨS&T株式会社 - Android 版 CamiApp における Content Provider のアクセス制限不備の脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2014-1986 2014-04-21 18:31 2014-04-14 Show GitHub Exploit DB Packet Storm
220487 2.1 注意 PackageKit Project - PackageKit の Zypper バックエンドにおけるパッケージをダウングレードされる脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2013-1764 2014-04-21 18:28 2013-05-8 Show GitHub Exploit DB Packet Storm
220488 4.6 警告 bzip.org - bzip2 の bzexe コマンドにおける任意のコードを実行される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2011-4089 2014-04-21 17:56 2011-12-4 Show GitHub Exploit DB Packet Storm
220489 7.5 危険 Novell - SUSE Studio Onsite および SUSE Studio Extension for System z で使用される KIWI における任意のコマンドを実行される脆弱性 CWE-Other
その他 		CVE-2011-4195 2014-04-21 17:27 2011-12-15 Show GitHub Exploit DB Packet Storm
220490 4.3 警告 Novell - SUSE Studio Onsite および SUSE Studio Extension for System z のオーバーレイファイルタブにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2011-4193 2014-04-21 17:25 2011-12-15 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 4, 2026, 4:17 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
295971 - ibm websphere_application_server IBM WebSphere Application Server (WAS) Liberty Profile 8.5 before 8.5.0.2, when SSL is not enabled, does not properly validate authentication cookies, which allows remote authenticated users to bypas… CWE-287
Improper Authentication 		CVE-2013-0540 2024-11-21 10:47 2013-04-24 Show GitHub Exploit DB Packet Storm
295972 - ibm infosphere_replication_server The Data Replication Dashboard component in IBM InfoSphere Replication Server 9.7 and 10.x before 10.2.0.0-b113 allows remote attackers to obtain a list of all user accounts, along with information a… CWE-200
Information Exposure 		CVE-2013-0584 2024-11-21 10:47 2013-04-23 Show GitHub Exploit DB Packet Storm
295973 - ibm lotus_connections Cross-site scripting (XSS) vulnerability in the Bookmarks component in IBM Lotus Connections before 4.0 CR3 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. CWE-79
Cross-site Scripting 		CVE-2013-0503 2024-11-21 10:47 2013-04-23 Show GitHub Exploit DB Packet Storm
295974 - oracle siebel_crm Unspecified vulnerability in the Siebel Enterprise Application Integration component in Oracle Siebel CRM 8.1.1 and 8.2.2 allows remote authenticated users to affect confidentiality via unknown vecto… NVD-CWE-noinfo
CVE-2013-0416 2024-11-21 10:47 2013-04-17 Show GitHub Exploit DB Packet Storm
295975 - sun sunos Unspecified vulnerability in Oracle Sun Solaris 10 and 11 allows local users to affect confidentiality, integrity, and availability via unknown vectors related to Remote Execution Service. NVD-CWE-noinfo
CVE-2013-0413 2024-11-21 10:47 2013-04-17 Show GitHub Exploit DB Packet Storm
295976 - sun sunos Unspecified vulnerability in Oracle Sun Solaris 8, 9, 10, and 11 allows local users to affect integrity and availability via unknown vectors related to Utility/pax. NVD-CWE-noinfo
CVE-2013-0412 2024-11-21 10:47 2013-04-17 Show GitHub Exploit DB Packet Storm
295977 - sun sunos Unspecified vulnerability in Oracle Sun Solaris 8, 9, and 10 allows local users to affect confidentiality, integrity, and availability via vectors related to RBAC Configuration. NVD-CWE-noinfo
CVE-2013-0411 2024-11-21 10:47 2013-04-17 Show GitHub Exploit DB Packet Storm
295978 - oracle supply_chain_products_suite Unspecified vulnerability in the Agile EDM component in Oracle Supply Chain Products Suite 6.1.1.0, 6.1.2.0, and 6.1.2.2 allows remote attackers to affect confidentiality via unknown vectors related … NVD-CWE-noinfo
CVE-2013-0410 2024-11-21 10:47 2013-04-17 Show GitHub Exploit DB Packet Storm
295979 - sun sunos Unspecified vulnerability in Oracle Sun Solaris 10 allows local users to affect availability via vectors related to CPU performance counters drivers. NVD-CWE-noinfo
CVE-2013-0408 2024-11-21 10:47 2013-04-17 Show GitHub Exploit DB Packet Storm
295980 - sun sunos Unspecified vulnerability in Oracle Sun Solaris 10 allows remote attackers to affect integrity via unknown vectors via vectors related to Kernel/IPsec. NVD-CWE-noinfo
CVE-2013-0406 2024-11-21 10:47 2013-04-17 Show GitHub Exploit DB Packet Storm