Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 22, 2026, 4 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
220841 6.8 警告 マカフィー - McAfee Network Security Manager の User Management モジュールにおけるクロスサイトリクエストフォージェリの脆弱性 CWE-352
同一生成元ポリシー違反
CVE-2014-2390 2014-09-3 12:18 2014-07-24 Show GitHub Exploit DB Packet Storm
220842 5 警告 Innovative Interfaces Inc. - Innovative Interfaces Encore Discovery Solution における重要な情報を取得される脆弱性 CWE-200
情報漏えい
CVE-2014-5128 2014-09-3 12:03 2014-08-26 Show GitHub Exploit DB Packet Storm
220843 5.8 警告 Innovative Interfaces Inc. - Innovative Interfaces Encore Discovery Solution におけるオープンリダイレクトの脆弱性 CWE-Other
その他
CVE-2014-5127 2014-09-3 11:59 2014-08-26 Show GitHub Exploit DB Packet Storm
220844 4.3 警告 Zoho Corporation - ZOHO ManageEngine EventLog Analyzer の event/index2.do におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2014-4930 2014-09-3 11:52 2014-08-26 Show GitHub Exploit DB Packet Storm
220845 9 危険 アルバネットワークス株式会社 - Aruba Networks ClearPass Policy Manager の管理コンソールにおける任意のコマンドを実行される脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2014-2593 2014-09-3 11:36 2014-07-25 Show GitHub Exploit DB Packet Storm
220846 4.3 警告 freedesktop.org - Poppler の DCTStream.cc におけるサービス運用妨害 (DoS) の脆弱性 CWE-20
不適切な入力確認
CVE-2010-5110 2014-09-3 11:26 2010-04-5 Show GitHub Exploit DB Packet Storm
220847 4.3 警告 シックス・アパート株式会社 - Six Apart Movable Type Pro におけるクロスサイトスクリプティングの脆弱性 CVE-2012-1503
 Movable Type Pro 5.13en
 Stored XSS
 CWE-79
 CAPEC-86
 Full Disclosure
CWE-79
CVE-2012-1503 2014-09-3 11:19 2012-10-17 Show GitHub Exploit DB Packet Storm
220848 5 警告 Wordpress Mobile Pack project - WordPress 用 WordPress Mobile Pack プラグイン における重要な情報を取得される脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2014-5337 2014-09-3 11:16 2014-08-18 Show GitHub Exploit DB Packet Storm
220849 6 警告 Linux - Linux Kernel の fs/namespace.c における権限を取得される脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2014-5207 2014-09-2 14:59 2014-07-28 Show GitHub Exploit DB Packet Storm
220850 7.5 危険 IBM - IBM InfoSphere Master Data Management - Collaborative Edition および InfoSphere Master Data Management Server for Product Information Management における管理者権限を取得される脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2014-3063 2014-09-2 14:57 2014-07-29 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 22, 2026, 4 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
294211 - linux linux_kernel The aac_compat_ioctl function in drivers/scsi/aacraid/linit.c in the Linux kernel before 3.11.8 does not require the CAP_SYS_RAWIO capability, which allows local users to bypass intended access restr… CWE-264
Permissions, Privileges, and Access Controls
CVE-2013-6383 2024-11-21 10:59 2013-11-27 Show GitHub Exploit DB Packet Storm
294212 - linux linux_kernel Multiple buffer underflows in the XFS implementation in the Linux kernel through 3.12.1 allow local users to cause a denial of service (memory corruption) or possibly have unspecified other impact by… CWE-119
Incorrect Access of Indexable Resource ('Range Error') 
CVE-2013-6382 2024-11-21 10:59 2013-11-27 Show GitHub Exploit DB Packet Storm
294213 - linux linux_kernel Buffer overflow in the qeth_snmp_command function in drivers/s390/net/qeth_core_main.c in the Linux kernel through 3.12.1 allows local users to cause a denial of service or possibly have unspecified … CWE-119
Incorrect Access of Indexable Resource ('Range Error') 
CVE-2013-6381 2024-11-21 10:59 2013-11-27 Show GitHub Exploit DB Packet Storm
294214 - linux linux_kernel The aac_send_raw_srb function in drivers/scsi/aacraid/commctrl.c in the Linux kernel through 3.12.1 does not properly validate a certain size value, which allows local users to cause a denial of serv… CWE-20
 Improper Input Validation 
CVE-2013-6380 2024-11-21 10:59 2013-11-27 Show GitHub Exploit DB Packet Storm
294215 - linux linux_kernel The lbs_debugfs_write function in drivers/net/wireless/libertas/debugfs.c in the Linux kernel through 3.12.1 allows local users to cause a denial of service (OOPS) by leveraging root privileges for a… CWE-189
Numeric Errors
CVE-2013-6378 2024-11-21 10:59 2013-11-27 Show GitHub Exploit DB Packet Storm
294216 - nagios nagios_xi SQL injection vulnerability in functions/prepend_adm.php in Nagios Core Config Manager in Nagios XI before 2012R2.4 allows remote attackers to execute arbitrary SQL commands via the tfPassword parame… CWE-89
SQL Injection
CVE-2013-6875 2024-11-21 10:59 2013-11-27 Show GitHub Exploit DB Packet Storm
294217 - vortexgroup light_alloy Stack-based buffer overflow in Vortex Light Alloy before 4.7.4 allows remote attackers to execute arbitrary code via a long URL in a .m3u file. CWE-119
Incorrect Access of Indexable Resource ('Range Error') 
CVE-2013-6874 2024-11-21 10:59 2013-11-27 Show GitHub Exploit DB Packet Storm
294218 - testa online_test_management_system SQL injection vulnerability in Testa Online Test Management System (OTMS) 2.0.0.2 allows remote attackers to execute arbitrary SQL commands via the test_id parameter. CWE-89
SQL Injection
CVE-2013-6873 2024-11-21 10:59 2013-11-27 Show GitHub Exploit DB Packet Storm
294219 - splunk splunk Cross-site scripting (XSS) vulnerability in Splunk Web in Splunk before 5.0.6 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. CWE-79
Cross-site Scripting
CVE-2013-6870 2024-11-21 10:59 2013-11-26 Show GitHub Exploit DB Packet Storm
294220 - jenkins-ci build_failure_analyzer Cross-site scripting (XSS) vulnerability in the Build Failure Analyzer plugin before 1.5.1 for Jenkins allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors. CWE-79
Cross-site Scripting
CVE-2013-6374 2024-11-21 10:59 2013-11-26 Show GitHub Exploit DB Packet Storm