Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 16, 2026, 4:01 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
220971 6.8 警告 Frederic Guillot - Kanboard におけるクロスサイトリクエストフォージェリの脆弱性 CWE-352
同一生成元ポリシー違反
CVE-2014-3920 2014-07-8 14:06 2014-06-30 Show GitHub Exploit DB Packet Storm
220972 6.5 警告 Kerio Technologies - Kerio Control の Kerio Control Statistics における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2014-3857 2014-07-8 14:01 2014-06-30 Show GitHub Exploit DB Packet Storm
220973 4.3 警告 Invision Power Services, Inc - Invision Power IP.Board または IP.Nexus におけるクロスサイトスクリプティングの脆弱性 "Reflected Cross-Site Scripting (XSS)" (CWE-79) vulnerability in "Invision Power IP.Board" product
CWE-79
CVE-2014-3149 2014-07-8 13:40 2014-04-24 Show GitHub Exploit DB Packet Storm
220974 9.3 危険 マイクロソフト - Microsoft Internet Explorer 9 における任意のコードを実行される脆弱性 CWE-Other
その他
CVE-2014-0325 2014-07-8 12:32 2014-04-8 Show GitHub Exploit DB Packet Storm
220975 5 警告 サイレックス・テクノロジー株式会社 - SX-2000WG におけるサービス運用妨害 (DoS) の脆弱性 CWE-20
不適切な入力確認
CVE-2014-3890 2014-07-7 18:35 2014-07-2 Show GitHub Exploit DB Packet Storm
220976 5 警告 サイレックス・テクノロジー株式会社 - SX-2000WG におけるサービス運用妨害 (DoS) の脆弱性 CWE-20
不適切な入力確認
CVE-2014-3889 2014-07-7 18:34 2014-07-2 Show GitHub Exploit DB Packet Storm
220977 4.3 警告 Verification Code for Comments project - WordPress 用 Verification Code for Comments プラグインの vcc.js.php におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2014-4565 2014-07-7 18:26 2014-06-12 Show GitHub Exploit DB Packet Storm
220978 4.3 警告 WP-Picasa-Image project - WordPress 用 WP-Picasa-Image プラグインの picasa_upload.php におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2014-4591 2014-07-7 18:26 2014-06-12 Show GitHub Exploit DB Packet Storm
220979 4.3 警告 LetsFX - WordPress 用 URL Cloak & Encrypt プラグインの go.php におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2014-4563 2014-07-7 18:26 2014-04-25 Show GitHub Exploit DB Packet Storm
220980 4.3 警告 VN-Calendar project - WordPress 用 VN-Calendar プラグインの vncal.js.php におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2014-4571 2014-07-7 18:26 2014-06-12 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 16, 2026, 4:13 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
295131 5.5 MEDIUM
Local
redhat cloudforms CloudForms stores user passwords in recoverable format CWE-522
 Insufficiently Protected Credentials
CVE-2013-4423 2024-11-21 10:55 2019-11-4 Show GitHub Exploit DB Packet Storm
295132 7.5 HIGH
Network
berlios
debian
slim
debian_linux
slim has NULL pointer dereference when using crypt() method from glibc 2.17 CWE-476
 NULL Pointer Dereference
CVE-2013-4412 2024-11-21 10:55 2019-11-4 Show GitHub Exploit DB Packet Storm
295133 6.1 MEDIUM
Network
smokeping
debian
fedoraproject
smokeping
debian_linux
fedora
Cross-site scripting (XSS) vulnerability in SmokePing 2.6.9 in the start and end time fields. CWE-79
Cross-site Scripting
CVE-2013-4168 2024-11-21 10:55 2019-11-2 Show GitHub Exploit DB Packet Storm
295134 7.8 HIGH
Local
ovirt ovirt-engine ovirt-engine 3.2 running on Linux kernel 3.1 and newer creates certain files world-writeable due to an upstream kernel change which impacted how python's os.chmod() works when passed a mode of '-1'. CWE-732
 Incorrect Permission Assignment for Critical Resource
CVE-2013-4367 2024-11-21 10:55 2019-11-2 Show GitHub Exploit DB Packet Storm
295135 9.8 CRITICAL
Network
gitolite gitolite gitolite commit fa06a34 through 3.5.3 might allow attackers to have unspecified impact via vectors involving world-writable permissions when creating (1) ~/.gitolite.rc, (2) ~/.gitolite, or (3) ~/rep… CWE-264
Permissions, Privileges, and Access Controls
CVE-2013-4451 2024-11-21 10:55 2018-09-22 Show GitHub Exploit DB Packet Storm
295136 3.3 LOW
Local
redhat automatic_bug_reporting_tool Automatic Bug Reporting Tool (ABRT) before 2.1.6 allows local users to obtain sensitive information about arbitrary files via vectors related to sha1sums. CWE-200
Information Exposure
CVE-2013-4209 2024-11-21 10:55 2018-05-2 Show GitHub Exploit DB Packet Storm
295137 4.3 MEDIUM
Network
katello katello Katello allows remote authenticated users to call the "system remove_deletion" CLI command via vectors related to "remove system" permissions. CWE-275
 Permission Issues
CVE-2013-4201 2024-11-21 10:55 2018-05-2 Show GitHub Exploit DB Packet Storm
295138 4.3 MEDIUM
Network
apache cloudstack In Apache CloudStack 4.1.0 and 4.1.1, when calling the CloudStack API call listProjectAccounts as a regular, non-administrative user, the user is able to see information for accounts other than their… CWE-200
Information Exposure
CVE-2013-4317 2024-11-21 10:55 2018-02-6 Show GitHub Exploit DB Packet Storm
295139 7.8 HIGH
Local
redhat openshift (1) oo-analytics-export and (2) oo-analytics-import in the openshift-origin-broker-util package in Red Hat OpenShift Enterprise 1 and 2 allow local users to have unspecified impact via a symlink atta… CWE-59
Link Following
CVE-2013-4364 2024-11-21 10:55 2018-01-9 Show GitHub Exploit DB Packet Storm
295140 5.3 MEDIUM
Network
oracle jre
jdk
jarsigner in OpenJDK and Oracle Java SE before 7u51 allows remote attackers to bypass a code-signing protection mechanism and inject unsigned bytecode into a signed JAR file by leveraging improper fi… CWE-74
Injection
CVE-2013-4578 2024-11-21 10:55 2017-12-30 Show GitHub Exploit DB Packet Storm