Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 22, 2026, 6:01 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
220941 2.7 注意 Samba Project - Samba の smbd の push_ascii 関数におけるサービス運用妨害 (DoS) の脆弱性 CWE-119
バッファエラー
CVE-2014-3493 2014-08-25 17:04 2014-06-12 Show GitHub Exploit DB Packet Storm
220942 4.3 警告 Wireshark - Wireshark の frame metadissector の epan/dissectors/packet-frame.c におけるサービス運用妨害 (DoS) の脆弱性 CWE-189
数値処理の問題
CVE-2014-4020 2014-08-25 17:03 2014-05-15 Show GitHub Exploit DB Packet Storm
220943 4.9 警告 IBM - IBM Rational Directory Server および Rational Directory Administrator の RDS Java Client ライブラリにおける重要な情報を取得される脆弱性 CWE-310
暗号の問題
CVE-2014-3089 2014-08-25 16:57 2014-08-19 Show GitHub Exploit DB Packet Storm
220944 6.5 警告 IBM - IBM WebSphere Application Server Liberty Profile における任意のコードを実行される脆弱性 CWE-94
コード・インジェクション
CVE-2014-4767 2014-08-25 16:56 2014-08-18 Show GitHub Exploit DB Packet Storm
220945 7.1 危険 IBM - IBM WebSphere Application Server におけるサービス運用妨害 (DoS) の脆弱性 CWE-noinfo
情報不足
CVE-2014-4764 2014-08-25 16:55 2014-08-18 Show GitHub Exploit DB Packet Storm
220946 5 警告 IBM - IBM WebSphere Application Server における重要な情報を取得される脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2014-3083 2014-08-25 16:54 2014-08-18 Show GitHub Exploit DB Packet Storm
220947 5 警告 IBM - IBM WebSphere Application Server の addFileRegistryAccount Virtual Member Manager SPI Admin Task におけるアクセス制限を回避される脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2014-3070 2014-08-25 16:54 2014-08-18 Show GitHub Exploit DB Packet Storm
220948 3.5 注意 OpenStack - OpenStack Dashboard の Host Aggregate インターフェースにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2014-3594 2014-08-25 16:50 2014-08-20 Show GitHub Exploit DB Packet Storm
220949 10 危険 Apache Software Foundation - Apache Traffic Server における脆弱性 CWE-noinfo
情報不足
CVE-2014-3525 2014-08-25 16:49 2014-07-23 Show GitHub Exploit DB Packet Storm
220950 4.3 警告 Apache Software Foundation - Apache OFBiz の framework/common/webcommon/includes/messages.ftl におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2014-0232 2014-08-25 16:49 2014-08-19 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 23, 2026, 4 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
294531 - softaculous webuzo Cross-site scripting (XSS) vulnerability in filemanager/login.php in the File Manager module in Softaculous Webuzo before 2.1.4 allows remote attackers to inject arbitrary web script or HTML via the … CWE-79
Cross-site Scripting
CVE-2013-6042 2024-11-21 10:58 2013-11-19 Show GitHub Exploit DB Packet Storm
294532 - vmware workstation
player
VMware Workstation 9.x before 9.0.3 and VMware Player 5.x before 5.0.3 on Linux do not properly handle shared libraries, which allows host OS users to gain host OS privileges via unspecified vectors. CWE-264
Permissions, Privileges, and Access Controls
CVE-2013-5972 2024-11-21 10:58 2013-11-18 Show GitHub Exploit DB Packet Storm
294533 - ajaxplorer ajaxplorer Directory traversal vulnerability in plugins/editor.zoho/agent/save_zoho.php in the Zoho plugin in Pydio (formerly AjaXplorer) before 5.0.4 allows remote attackers to read or delete arbitrary files v… CWE-22
Path Traversal
CVE-2013-6226 2024-11-21 10:58 2013-11-15 Show GitHub Exploit DB Packet Storm
294534 - zikula zikula_application_framework Cross-site scripting (XSS) vulnerability in Zikula Application Framework before 1.3.6 allows remote attackers to inject arbitrary web script or HTML via the returnpage parameter to index.php. CWE-79
Cross-site Scripting
CVE-2013-6168 2024-11-21 10:58 2013-11-15 Show GitHub Exploit DB Packet Storm
294535 - projeqtor projeqtor SQL injection vulnerability in view/objectDetail.php in Project'Or RIA 3.4.0 allows remote attackers to execute arbitrary SQL commands via the objectId parameter. CWE-89
SQL Injection
CVE-2013-6164 2024-11-21 10:58 2013-11-15 Show GitHub Exploit DB Packet Storm
294536 - projeqtor projeqtor Multiple cross-site scripting (XSS) vulnerabilities in ProjeQtOr (formerly Project'Or RIA) before 4.0.0 allow remote attackers to inject arbitrary web script or HTML via the (1) type parameter to vie… CWE-79
Cross-site Scripting
CVE-2013-6163 2024-11-21 10:58 2013-11-15 Show GitHub Exploit DB Packet Storm
294537 - apprain apprain SQL injection vulnerability in appRain CMF 3.0.2 and earlier allows remote attackers to execute arbitrary SQL commands via the PATH_INFO to blog-by-cat/. CWE-89
SQL Injection
CVE-2013-6058 2024-11-21 10:58 2013-11-15 Show GitHub Exploit DB Packet Storm
294538 - justsystems ichitaro_pro
ichitaro_portable_with_oreplug
ichitaro
ichitaro_viewer
Unspecified vulnerability in JustSystems Ichitaro 2006 through 2011; Ichitaro Government 6, 7, and 2006 through 2010; Ichitaro 2011 Sou; Ichitaro 2012 Shou; Ichitaro 2013 Gen and Gen Trial Edition; I… NVD-CWE-noinfo
CVE-2013-5990 2024-11-21 10:58 2013-11-14 Show GitHub Exploit DB Packet Storm
294539 - tapbots tweetbot Tweetbot 1.3.3 for Mac, and 2.8.5 for iPad and iPhone, does not require confirmation of (1) follow or (2) favorite actions, which allows remote attackers to automatically force the user to perform un… CWE-352
 Origin Validation Error
CVE-2013-5726 2024-11-21 10:58 2013-11-13 Show GitHub Exploit DB Packet Storm
294540 - qualcomm quic_mobile_station_modem_kernel goodix_tool.c in the Goodix gt915 touchscreen driver for the Linux kernel 3.x, as used in Qualcomm Innovation Center (QuIC) Android contributions for MSM devices and other products, does not properly… CWE-20
 Improper Input Validation 
CVE-2013-6122 2024-11-21 10:58 2013-11-12 Show GitHub Exploit DB Packet Storm