Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 13, 2026, 6 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
220731 9.3 危険 Trimble - Timbre SketchUp で使用される paintlib におけるヒープベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー
CVE-2013-7388 2014-07-3 17:56 2013-05-21 Show GitHub Exploit DB Packet Storm
220732 9.3 危険 Trimble - Timbre SketchUp における任意のコードを実行される脆弱性 CWE-119
バッファエラー
CVE-2013-3664 2014-07-3 17:55 2013-05-21 Show GitHub Exploit DB Packet Storm
220733 9.3 危険 Trimble - Timbre SketchUp における任意のコードを実行される脆弱性 CWE-119
バッファエラー
CVE-2013-3662 2014-07-3 17:55 2013-05-23 Show GitHub Exploit DB Packet Storm
220734 6.8 警告 シスコシステムズ - Cisco Small Cell 製品上で稼働する Universal Small Cell ファームウェアの DHCP クライアントの実装における任意のコマンドを実行される脆弱性 CWE-Other
その他
CVE-2014-3307 2014-07-3 17:40 2014-07-1 Show GitHub Exploit DB Packet Storm
220735 4 警告 シスコシステムズ - Cisco Cloud Portal の Cisco Intelligent Automation for Cloud の Form Data Viewer における重要な情報を取得される脆弱性 CWE-255
証明書・パスワード管理
CVE-2014-3298 2014-07-3 17:39 2014-07-1 Show GitHub Exploit DB Packet Storm
220736 7.2 危険 IBM - IBM AIX および VIOS の runtime linker における権限を取得される脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2014-3074 2014-07-3 16:28 2014-06-30 Show GitHub Exploit DB Packet Storm
220737 3.5 注意 IBM - IBM Tivoli Application Dependency Discovery Manager の BIRT-Report Viewer におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル
CVE-2013-3004 2014-07-3 16:26 2013-04-12 Show GitHub Exploit DB Packet Storm
220738 4.3 警告 KDE project - kdelibs の POP3 kioslave の kio/usernotificationhandler.cpp における重要な情報を取得される脆弱性 CWE-200
情報漏えい
CVE-2014-3494 2014-07-3 16:25 2014-06-17 Show GitHub Exploit DB Packet Storm
220739 4.3 警告 The Foreman - Foreman のホストの YAML ビューにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2014-3492 2014-07-3 16:17 2014-06-11 Show GitHub Exploit DB Packet Storm
220740 4.3 警告 The Foreman - Foreman におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2014-3491 2014-07-3 16:17 2014-06-10 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 13, 2026, 4:20 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
295981 - cisco secure_access_control_system Cross-site scripting (XSS) vulnerability in the Help index page in Cisco Secure Access Control System (ACS) allows remote attackers to inject arbitrary web script or HTML via an unspecified parameter… CWE-79
Cross-site Scripting
CVE-2013-3421 2024-11-21 10:53 2013-07-13 Show GitHub Exploit DB Packet Storm
295982 - cisco unified_meetingplace_web_conferencing Cross-site scripting (XSS) vulnerability in Cisco Unified MeetingPlace Web Conferencing allows remote attackers to inject arbitrary web script or HTML via an unspecified parameter, aka Bug ID CSCuh74… CWE-79
Cross-site Scripting
CVE-2013-3419 2024-11-21 10:53 2013-07-12 Show GitHub Exploit DB Packet Storm
295983 - cisco unified_communications_domain_manager Cisco Unified Communications Domain Manager does not properly allocate memory for GET and POST requests, which allows remote authenticated users to cause a denial of service (memory consumption and p… CWE-399
 Resource Management Errors
CVE-2013-3418 2024-11-21 10:53 2013-07-12 Show GitHub Exploit DB Packet Storm
295984 - lookout lookout_security_\&_antivirus The Lookout Mobile Security application before 8.17-8a39d3f for Android allows attackers to cause a denial of service (application crash) via a crafted application that sends an intent to com.lookout… NVD-CWE-noinfo
CVE-2013-3579 2024-11-21 10:53 2013-07-11 Show GitHub Exploit DB Packet Storm
295985 - cisco unified_service_monitor
unified_operations_manager
Cross-site scripting (XSS) vulnerability in the web framework in the unified-communications management implementation in Cisco Unified Operations Manager and Unified Service Monitor allows remote att… CWE-79
Cross-site Scripting
CVE-2013-3416 2024-11-21 10:53 2013-07-11 Show GitHub Exploit DB Packet Storm
295986 - cisco virtualization_experience_client_6000_series_firmware
virtualization_experience_client_6000
virtualization_experience_client_6215
The firmware on Cisco Virtualization Experience Client 6000 devices sets incorrect operating-system permissions, which allows local users to gain privileges via an unspecified sequence of commands, a… CWE-264
Permissions, Privileges, and Access Controls
CVE-2013-3408 2024-11-21 10:53 2013-07-11 Show GitHub Exploit DB Packet Storm
295987 - cisco telepresence_tc_software The web portal in TC software on Cisco TelePresence endpoints does not require an exact password match during a login attempt by a user who has not configured a password, which allows remote attacker… CWE-264
Permissions, Privileges, and Access Controls
CVE-2013-3405 2024-11-21 10:53 2013-07-11 Show GitHub Exploit DB Packet Storm
295988 - cisco nx-os
nexus_1000v
The license-installation module in Cisco NX-OS on Nexus 1000V devices allows local users to execute arbitrary commands via crafted "install license" arguments, aka Bug ID CSCuh30824. CWE-20
 Improper Input Validation 
CVE-2013-3400 2024-11-21 10:53 2013-07-11 Show GitHub Exploit DB Packet Storm
295989 - videolan vlc_media_player plugins/demux/libmkv_plugin.dll in VideoLAN VLC Media Player 2.0.7, and possibly other versions, allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a… CWE-119
Incorrect Access of Indexable Resource ('Range Error') 
CVE-2013-3245 2024-11-21 10:53 2013-07-11 Show GitHub Exploit DB Packet Storm
295990 - adobe coldfusion Adobe ColdFusion 10 before Update 11 allows remote attackers to call ColdFusion Components (CFC) public methods via WebSockets. NVD-CWE-Other
CVE-2013-3350 2024-11-21 10:53 2013-07-10 Show GitHub Exploit DB Packet Storm