Vulnerability Search Top

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

Vulnerability Information Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":June 20, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
220891	4.3	警告	ソフォス	-	Sophos Anti-Virus for Linux の Web UI におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2014-2385	2014-07-23 13:48	2014-06-24	Show	GitHub Exploit DB Packet Storm

220892	4.3	警告	LimeSurvey	-	LimeSurvey の common_helper.php の autoEscape 関数におけるクロスサイトスクリプティングの脆弱性	CWE-Other その他	CVE-2014-5018	2014-07-23 12:00	2014-07-2	Show	GitHub Exploit DB Packet Storm

220893	7.5	危険	LimeSurvey	-	LimeSurvey の application/controllers/admin/participantsaction.php の CPDB における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2014-5017	2014-07-23 11:59	2014-07-2	Show	GitHub Exploit DB Packet Storm

220894	4.3	警告	LimeSurvey	-	LimeSurvey におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2014-5016	2014-07-23 11:59	2014-07-2	Show	GitHub Exploit DB Packet Storm

220895	5.1	警告	FuelPHP	-	FuelPHP において任意のコードが実行される脆弱性	CWE-Other その他	CVE-2014-1999	2014-07-23 10:50	2014-07-18	Show	GitHub Exploit DB Packet Storm

220896	4.3	警告	NextApp, Inc.	-	File Explorer におけるディレクトリトラバーサルの脆弱性	CWE-22 パス・トラバーサル	CVE-2014-1973	2014-07-23 10:49	2014-07-18	Show	GitHub Exploit DB Packet Storm

220897	2.6	注意	Nexa Technologies	-	Meridian におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2014-3892	2014-07-23 10:49	2014-07-18	Show	GitHub Exploit DB Packet Storm

220898	4.3	警告	PHP工房	-	多機能メールフォームフリーにおけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2014-3894	2014-07-23 10:48	2014-07-16	Show	GitHub Exploit DB Packet Storm

220899	3.5	注意	サイボウズ	-	サイボウズガルーンのメッセージ機能におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2014-1992	2014-07-23 10:47	2014-07-15	Show	GitHub Exploit DB Packet Storm

220900	3.5	注意	サイボウズ	-	サイボウズガルーンにおいて他のユーザのポートレット設定へアクセス可能な脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2014-1993	2014-07-23 10:47	2014-07-15	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:June 21, 2026, 4:01 a.m.

No	CVSS	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
294031	-	pidgin	pidgin	gtkutils.c in Pidgin before 2.10.8 on Windows allows user-assisted remote attackers to execute arbitrary programs via a message containing a file: URL that is improperly handled during construction o…	CWE-20 Improper Input Validation	CVE-2013-6486	2024-11-21 10:59	2014-02-7	Show	GitHub Exploit DB Packet Storm

294032	-	pidgin	pidgin	Buffer overflow in util.c in libpurple in Pidgin before 2.10.8 allows remote HTTP servers to cause a denial of service (application crash) or possibly have unspecified other impact via an invalid chu…	CWE-119 Incorrect Access of Indexable Resource ('Range Error')	CVE-2013-6485	2024-11-21 10:59	2014-02-7	Show	GitHub Exploit DB Packet Storm

294033	-	pidgin	pidgin	The STUN protocol implementation in libpurple in Pidgin before 2.10.8 allows remote STUN servers to cause a denial of service (out-of-bounds write operation and application crash) by triggering a soc…	CWE-20 Improper Input Validation	CVE-2013-6484	2024-11-21 10:59	2014-02-7	Show	GitHub Exploit DB Packet Storm

294034	-	pidgin	pidgin	The XMPP protocol plugin in libpurple in Pidgin before 2.10.8 does not properly determine whether the from address in an iq reply is consistent with the to address in an iq request, which allows remo…	CWE-20 Improper Input Validation	CVE-2013-6483	2024-11-21 10:59	2014-02-7	Show	GitHub Exploit DB Packet Storm

294035	-	pidgin	pidgin	util.c in libpurple in Pidgin before 2.10.8 does not properly allocate memory for HTTP responses that are inconsistent with the Content-Length header, which allows remote HTTP servers to cause a deni…	CWE-399 Resource Management Errors	CVE-2013-6479	2024-11-21 10:59	2014-02-7	Show	GitHub Exploit DB Packet Storm

294036	-	pidgin	pidgin	gtkimhtml.c in Pidgin before 2.10.8 does not properly interact with underlying library support for wide Pango layouts, which allows user-assisted remote attackers to cause a denial of service (applic…	CWE-20 Improper Input Validation	CVE-2013-6478	2024-11-21 10:59	2014-02-7	Show	GitHub Exploit DB Packet Storm

294037	-	pidgin	pidgin	Multiple integer signedness errors in libpurple in Pidgin before 2.10.8 allow remote attackers to cause a denial of service (application crash) via a crafted timestamp value in an XMPP message.	CWE-189 Numeric Errors	CVE-2013-6477	2024-11-21 10:59	2014-02-7	Show	GitHub Exploit DB Packet Storm

294038	-	openstack redhat	oslo openstack	The python-qpid client (common/rpc/impl_qpid.py) in OpenStack Oslo before 2013.2 does not enforce SSL connections when qpid_protocol is set to ssl, which allows remote attackers to obtain sensitive i…	CWE-310 Cryptographic Issues	CVE-2013-6491	2024-11-21 10:59	2014-02-2	Show	GitHub Exploit DB Packet Storm

294039	-	ibm	spss_samplepower	Unspecified vulnerability in the vsflex8l ActiveX control in IBM SPSS SamplePower 3.0.1 before FP1 IF1 allows remote attackers to execute arbitrary code via a crafted ComboList property value.	NVD-CWE-noinfo	CVE-2013-6724	2024-11-21 10:59	2014-02-2	Show	GitHub Exploit DB Packet Storm

294040	-	ibm	sametime	The Connect client in IBM Sametime 8.5.2 through 8.5.2.1 and 9.0 before HF1 does not properly restrict unsigned Java plugins, which allows remote attackers to obtain sensitive information via unspeci…	CWE-264 Permissions, Privileges, and Access Controls	CVE-2013-6727	2024-11-21 10:59	2014-01-31	Show	GitHub Exploit DB Packet Storm