Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 18, 2026, 10 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
220711 6.8 警告 マイクロソフト
アドビシステムズ
- Adobe Flash Player および Adobe AIR におけるクロスサイトリクエストフォージェリ攻撃を実行される脆弱性 CWE-352
同一生成元ポリシー違反
CVE-2014-4671 2014-08-6 17:36 2014-07-8 Show GitHub Exploit DB Packet Storm
220712 7.5 危険 Ruby on Rails project - Ruby on Rails の Active Record 用 PostgreSQL アダプタにおける SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2014-3483 2014-08-6 17:23 2014-07-2 Show GitHub Exploit DB Packet Storm
220713 7.5 危険 Ruby on Rails project - Ruby on Rails の Active Record 用 PostgreSQL アダプタにおける SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2014-3482 2014-08-6 17:21 2014-07-2 Show GitHub Exploit DB Packet Storm
220714 4.7 警告 Linux - 32-bit x86 プラットフォーム上で稼動する Linux kernel の arch/x86/kernel/entry_32.S におけるサービス運用妨害 (DoS) の脆弱性 CWE-189
数値処理の問題
CVE-2014-4508 2014-08-6 17:17 2014-06-16 Show GitHub Exploit DB Packet Storm
220715 6.9 警告 Linux - インテルプロセッサ上で稼動する Linux Kernel における競合状態を利用される脆弱性 CWE-362
競合状態
CVE-2014-4699 2014-08-6 17:16 2014-07-6 Show GitHub Exploit DB Packet Storm
220716 6.4 警告 シスコシステムズ - Cisco ASR 9000 デバイスの Trident ラインカード上で稼動する Cisco IOS XR におけるサービス運用妨害 (DoS) の脆弱性 CWE-20
不適切な入力確認
CVE-2014-3308 2014-08-6 16:58 2014-07-3 Show GitHub Exploit DB Packet Storm
220717 5.8 警告 The Tor Project - Tor における疎通確認攻撃を実行される脆弱性 CWE-Other
その他
CVE-2014-5117 2014-08-6 16:45 2014-07-30 Show GitHub Exploit DB Packet Storm
220718 6.8 警告 Google - Google Chrome で使用される Blink の core/fetch/ResourceFetcher.cpp における同一生成元ポリシーを回避される脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2014-3160 2014-08-6 16:35 2014-07-16 Show GitHub Exploit DB Packet Storm
220719 2.1 注意 IBM - IBM Scale Out Network Attached Storage における重要な情報を取得される脆弱性 CWE-200
情報漏えい
CVE-2014-3045 2014-08-6 16:33 2014-07-15 Show GitHub Exploit DB Packet Storm
220720 6 警告 IBM - IBM Rational Software Architect Design Manager のサーバにおける任意のコードを実行される脆弱性 CWE-noinfo
情報不足
CVE-2014-0947 2014-08-6 16:32 2014-07-18 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 18, 2026, 4 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
294801 - hot hotbox_router_firmware
hotbox_router
Directory traversal vulnerability on the HOT HOTBOX router with software 2.1.11 allows remote attackers to read arbitrary files via a .. (dot dot) in a URI, as demonstrated by a request for /etc/pass… CWE-22
Path Traversal
CVE-2013-5219 2024-11-21 10:57 2013-12-30 Show GitHub Exploit DB Packet Storm
294802 - hot hotbox_router_firmware
hotbox_router
Cross-site scripting (XSS) vulnerability on the HOT HOTBOX router with software 2.1.11 allows remote attackers to inject arbitrary web script or HTML via a crafted DHCP Host Name option, which is not… CWE-79
Cross-site Scripting
CVE-2013-5218 2024-11-21 10:57 2013-12-30 Show GitHub Exploit DB Packet Storm
294803 - adtran aos
netvanta_7060
netvanta_7100
Cross-site scripting (XSS) vulnerability in the GUI login page in ADTRAN AOS before R10.8.1 on the NetVanta 7100 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. CWE-79
Cross-site Scripting
CVE-2013-5210 2024-11-21 10:57 2013-12-30 Show GitHub Exploit DB Packet Storm
294804 - joomla joomla\! Cross-site scripting (XSS) vulnerability in libraries/idna_convert/example.php in Joomla! 3.1.5 allows remote attackers to inject arbitrary web script or HTML via the lang parameter. CWE-79
Cross-site Scripting
CVE-2013-5583 2024-11-21 10:57 2013-12-29 Show GitHub Exploit DB Packet Storm
294805 - ibm security_access_manager_for_enterprise_single_sign-on The IMS server before Ifix 6 in IBM Security Access Manager for Enterprise Single Sign-On (ISAM ESSO) 8.2 allows remote authenticated users to read log files by leveraging helpdesk privileges for a d… CWE-264
Permissions, Privileges, and Access Controls
CVE-2013-5420 2024-11-21 10:57 2013-12-24 Show GitHub Exploit DB Packet Storm
294806 - ibm security_access_manager_for_enterprise_single_sign-on Cross-site scripting (XSS) vulnerability in the IMS server before Ifix 6 in IBM Security Access Manager for Enterprise Single Sign-On (ISAM ESSO) 8.2 allows remote attackers to inject arbitrary web s… CWE-79
Cross-site Scripting
CVE-2013-5421 2024-11-21 10:57 2013-12-23 Show GitHub Exploit DB Packet Storm
294807 - ibm sterling_b2b_integrator
sterling_file_gateway
IBM Sterling B2B Integrator 5.2 and Sterling File Gateway 2.2 do not invalidate a session upon a logout action, which allows remote attackers to bypass authentication by leveraging an unattended work… CWE-287
Improper Authentication
CVE-2013-5413 2024-11-21 10:57 2013-12-21 Show GitHub Exploit DB Packet Storm
294808 - ibm sterling_b2b_integrator
sterling_file_gateway
IBM Sterling B2B Integrator 5.2 and Sterling File Gateway 2.2 allow remote attackers to inject links and trigger unintended navigation or actions via unspecified vectors. CWE-20
 Improper Input Validation 
CVE-2013-5411 2024-11-21 10:57 2013-12-21 Show GitHub Exploit DB Packet Storm
294809 - ibm sterling_b2b_integrator
sterling_file_gateway
Multiple SQL injection vulnerabilities in IBM Sterling B2B Integrator 5.2 and Sterling File Gateway 2.2 allow remote authenticated users to execute arbitrary SQL commands via unspecified vectors. CWE-89
SQL Injection
CVE-2013-5409 2024-11-21 10:57 2013-12-21 Show GitHub Exploit DB Packet Storm
294810 - ibm sterling_b2b_integrator
sterling_file_gateway
IBM Sterling B2B Integrator 5.2 and Sterling File Gateway 2.2 do not properly restrict use of FRAME elements, which allows remote authenticated users to bypass intended access restrictions or obtain … CWE-20
 Improper Input Validation 
CVE-2013-5407 2024-11-21 10:57 2013-12-21 Show GitHub Exploit DB Packet Storm