Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 21, 2026, 4 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
220911 6.3 警告 IBM - IBM InfoSphere Master Data Management - Collaborative Edition および InfoSphere Master Data Management Server for Product Information Management の GDS コンポーネントにおける任意のファイルを読まれる脆弱性 CWE-200
情報漏えい
CVE-2014-3064 2014-07-22 17:35 2014-06-24 Show GitHub Exploit DB Packet Storm
220912 6.5 警告 IBM - IBM Storwize V7000 Unified における権限を取得される脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2014-3043 2014-07-22 17:34 2014-07-15 Show GitHub Exploit DB Packet Storm
220913 3.5 注意 IBM - IBM InfoSphere Master Data Management - Collaborative Edition および InfoSphere Master Data Management Server for Product Information Management の GDS コンポーネントにおけるリンクを挿入される脆弱性 CWE-20
不適切な入力確認
CVE-2014-0970 2014-07-22 17:34 2014-06-24 Show GitHub Exploit DB Packet Storm
220914 3.5 注意 IBM - IBM InfoSphere Master Data Management - Collaborative Edition および InfoSphere Master Data Management Server for Product Information Management の GDS コンポーネントにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2014-0968 2014-07-22 17:33 2014-06-24 Show GitHub Exploit DB Packet Storm
220915 3.5 注意 IBM - IBM InfoSphere Master Data Management - Collaborative Edition および InfoSphere Master Data Management Server for Product Information Management の GDS コンポーネントにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2014-0967 2014-07-22 17:33 2014-06-24 Show GitHub Exploit DB Packet Storm
220916 4.3 警告 IBM - IBM Business Process Manager および WebSphere Lombardi Edition におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2014-0957 2014-07-22 17:33 2014-07-14 Show GitHub Exploit DB Packet Storm
220917 4.3 警告 OctavoCMS - OctavoCMS の admin/viewer.php におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2014-4331 2014-07-22 17:24 2014-07-9 Show GitHub Exploit DB Packet Storm
220918 5 警告 アドバンテック株式会社 - Advantech WebAccess の bwocxrun ActiveX コントロールの BrowseFolder メソッドにおける任意のファイルを読まれる脆弱性 CWE-200
情報漏えい
CVE-2014-2368 2014-07-22 16:09 2014-07-17 Show GitHub Exploit DB Packet Storm
220919 4.3 警告 アドバンテック株式会社 - Advantech WebAccess の broadweb/include/gChkCook.asp の ActiveX コントロールにおける任意のファイルを読まれる脆弱性 CWE-200
情報漏えい
CVE-2014-2367 2014-07-22 16:09 2014-07-17 Show GitHub Exploit DB Packet Storm
220920 4 警告 アドバンテック株式会社 - Advantech WebAccess の upAdminPg.asp における認証情報を取得される脆弱性 CWE-200
情報漏えい
CVE-2014-2366 2014-07-22 16:08 2014-07-17 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 21, 2026, 4:01 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
293891 - ffmpeg ffmpeg The rpza_decode_stream function in libavcodec/rpza.c in FFmpeg before 2.1 does not properly maintain a pointer to pixel data, which allows remote attackers to cause a denial of service (out-of-bounds… CWE-119
Incorrect Access of Indexable Resource ('Range Error') 
CVE-2013-7009 2024-11-21 11:00 2013-12-10 Show GitHub Exploit DB Packet Storm
293892 - ffmpeg ffmpeg The decode_slice_header function in libavcodec/h264.c in FFmpeg before 2.1 incorrectly relies on a certain droppable field, which allows remote attackers to cause a denial of service (deadlock) or po… NVD-CWE-Other
CVE-2013-7008 2024-11-21 11:00 2013-12-10 Show GitHub Exploit DB Packet Storm
293893 - nowsms now_sms_\&_mms_gateway The Multimedia Messaging Centre (MMSC) in NowSMS Now SMS & MMS Gateway before 2013.11.15 allows remote attackers to cause a denial of service via a malformed MM1 message that is routed to a (1) MM4 o… CWE-20
 Improper Input Validation 
CVE-2013-7001 2024-11-21 11:00 2013-12-8 Show GitHub Exploit DB Packet Storm
293894 - nowsms now_sms_\&_mms_gateway The Multimedia Messaging Centre (MMSC) in NowSMS Now SMS & MMS Gateway 2013.09.26 allows remote attackers to cause a denial of service via a malformed message to a MM4 connection. CWE-20
 Improper Input Validation 
CVE-2013-7000 2024-11-21 11:00 2013-12-8 Show GitHub Exploit DB Packet Storm
293895 - microsoft windows_server_2008 The IsHandleEntrySecure function in win32k.sys in the kernel-mode drivers in Microsoft Windows Server 2008 SP2 does not properly validate the tagPROCESSINFO pW32Job field, which allows local users to… NVD-CWE-Other
CVE-2013-6999 2024-11-21 11:00 2013-12-7 Show GitHub Exploit DB Packet Storm
293896 - osehra vista The M2M Broker in OSEHRA VistA, as distributed before September 30, 2013, allows attackers to bypass authentication and authorization to perform doctor-only actions and read or modify patient records… CWE-264
Permissions, Privileges, and Access Controls
CVE-2013-6945 2024-11-21 11:00 2013-12-5 Show GitHub Exploit DB Packet Storm
293897 - mybb ajax_forum_stat Multiple SQL injection vulnerabilities in ajaxfs.php in the Ajax forum stat (Ajaxfs) Plugin 2.0 for MyBB (aka MyBulletinBoard) allow remote attackers to execute arbitrary SQL commands via the (1) too… CWE-89
SQL Injection
CVE-2013-6936 2024-11-21 11:00 2013-12-5 Show GitHub Exploit DB Packet Storm
293898 - videocharge watermark_master Buffer overflow in VideoCharge Software Watermark Master 2.2.23 allows remote attackers to execute arbitrary code via a long string in the SourcePath value in a .wcf file. CWE-119
Incorrect Access of Indexable Resource ('Range Error') 
CVE-2013-6935 2024-11-21 11:00 2013-12-5 Show GitHub Exploit DB Packet Storm
293899 - videocharge watermark_master Buffer overflow in VideoCharge Software Watermark Master 2.2.23 allows remote attackers to execute arbitrary code via a long string in the name attribute of the cols element in a .wstyle file. CWE-119
Incorrect Access of Indexable Resource ('Range Error') 
CVE-2013-6937 2024-11-21 11:00 2013-12-5 Show GitHub Exploit DB Packet Storm
293900 5.5 MEDIUM
Local
triplc trilogi_server Internet TRiLOGI Server (unknown versions) could allow a local user to bypass security and create a local user account. NVD-CWE-Other
CVE-2013-6927 2024-11-21 10:59 2020-02-14 Show GitHub Exploit DB Packet Storm