Vulnerability Search Top

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

Vulnerability Information Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":June 23, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
221281	4.3	警告	Esri	-	ESRI ArcGIS for Server におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2014-5121	2014-08-25 15:06	2014-08-15	Show	GitHub Exploit DB Packet Storm

221282	7.5	危険	Free Reprintables	-	Free Reprintables ArticleFR における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2014-5097	2014-08-25 14:55	2014-08-20	Show	GitHub Exploit DB Packet Storm

221283	7.5	危険	BSS Company	-	Bank Soft Systems RBS BS-Client における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2014-4197	2014-08-25 14:55	2014-07-1	Show	GitHub Exploit DB Packet Storm

221284	5	警告	shopizer-ecommerce	-	Shopizer の com/salesmanager/central/profile/ProfileAction.java におけるパスワードを推測される脆弱性	CWE-287 不適切な認証	CVE-2014-5385	2014-08-25 14:55	2014-07-10	Show	GitHub Exploit DB Packet Storm

221285	3.5	注意	The phpMyAdmin Project	-	phpMyAdmin のビュー操作ページにおけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2014-5274	2014-08-25 14:54	2014-08-17	Show	GitHub Exploit DB Packet Storm

221286	3.5	注意	The phpMyAdmin Project	-	phpMyAdmin におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2014-5273	2014-08-25 14:54	2014-08-17	Show	GitHub Exploit DB Packet Storm

221287	4.3	警告	Ben Gillbanks	-	複数の製品で使用される TimThumb の timthumb.php の displayError 関数におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2010-5303	2014-08-25 13:39	2010-09-8	Show	GitHub Exploit DB Packet Storm

221288	4.3	警告	Ben Gillbanks	-	複数の製品で使用される TimThumb の timthumb.php におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2010-5302	2014-08-25 12:30	2010-09-8	Show	GitHub Exploit DB Packet Storm

221289	4.3	警告	Ben Gillbanks Pro Theme Design	-	Mimbo Pro などの製品で使用される TimThumb の timthumb.php におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2009-5142	2014-08-25 11:54	2009-12-30	Show	GitHub Exploit DB Packet Storm

221290	6.8	警告	ownCloud	-	ownCloud Server のルーティングコンポーネントにおけるディレクトリトラバーサルの脆弱性	CWE-22 パス・トラバーサル	CVE-2014-4929	2014-08-22 16:38	2014-06-23	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:June 23, 2026, 4 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
295761	-		samba debian canonical	samba debian_linux ubuntu_linux	Samba 3.2.x through 3.6.x before 3.6.20, 4.0.x before 4.0.11, and 4.1.x before 4.1.1, when vfs_streams_depot or vfs_streams_xattr is enabled, allows remote attackers to bypass intended file restricti…	CWE-264 Permissions, Privileges, and Access Controls	CVE-2013-4475	2024-11-21 10:55	2013-11-14	Show	GitHub Exploit DB Packet Storm

295762	-		linux	linux_kernel	The mp_get_count function in drivers/staging/sb105x/sb_pci_mp.c in the Linux kernel before 3.12 does not initialize a certain data structure, which allows local users to obtain sensitive information …	CWE-200 Information Exposure	CVE-2013-4516	2024-11-21 10:55	2013-11-12	Show	GitHub Exploit DB Packet Storm

295763	-		linux	linux_kernel	The bcm_char_ioctl function in drivers/staging/bcm/Bcmchar.c in the Linux kernel before 3.12 does not initialize a certain data structure, which allows local users to obtain sensitive information fro…	CWE-200 Information Exposure	CVE-2013-4515	2024-11-21 10:55	2013-11-12	Show	GitHub Exploit DB Packet Storm

295764	-		linux	linux_kernel	Multiple buffer overflows in drivers/staging/wlags49_h2/wl_priv.c in the Linux kernel before 3.12 allow local users to cause a denial of service or possibly have unspecified other impact by leveragin…	CWE-119 Incorrect Access of Indexable Resource ('Range Error')	CVE-2013-4514	2024-11-21 10:55	2013-11-12	Show	GitHub Exploit DB Packet Storm

295765	-		linux	linux_kernel	Buffer overflow in the oz_cdev_write function in drivers/staging/ozwpan/ozcdev.c in the Linux kernel before 3.12 allows local users to cause a denial of service or possibly have unspecified other imp…	CWE-119 Incorrect Access of Indexable Resource ('Range Error')	CVE-2013-4513	2024-11-21 10:55	2013-11-12	Show	GitHub Exploit DB Packet Storm

295766	-		linux	linux_kernel	Buffer overflow in the exitcode_proc_write function in arch/um/kernel/exitcode.c in the Linux kernel before 3.12 allows local users to cause a denial of service or possibly have unspecified other imp…	CWE-119 Incorrect Access of Indexable Resource ('Range Error')	CVE-2013-4512	2024-11-21 10:55	2013-11-12	Show	GitHub Exploit DB Packet Storm

295767	-		linux	linux_kernel	Multiple integer overflows in Alchemy LCD frame-buffer drivers in the Linux kernel before 3.12 allow local users to create a read-write memory mapping for the entirety of kernel memory, and consequen…	CWE-189 Numeric Errors	CVE-2013-4511	2024-11-21 10:55	2013-11-12	Show	GitHub Exploit DB Packet Storm

295768	-		openbsd	openssh	The mm_newkeys_from_blob function in monitor_wrap.c in sshd in OpenSSH 6.2 and 6.3, when an AES-GCM cipher is used, does not properly initialize memory for a MAC context data structure, which allows …	CWE-264 Permissions, Privileges, and Access Controls	CVE-2013-4548	2024-11-21 10:55	2013-11-9	Show	GitHub Exploit DB Packet Storm

295769	7.5	HIGH Network	lighttpd debian opensuse	lighttpd debian_linux opensuse	lighttpd before 1.4.34, when SNI is enabled, configures weak SSL ciphers, which makes it easier for remote attackers to hijack sessions by inserting packets into the client-server data stream or obta…	CWE-326 Inadequate Encryption Strength	CVE-2013-4508	2024-11-21 10:55	2013-11-8	Show	GitHub Exploit DB Packet Storm

295770	-		openstack	havana grizzly folsom	The XenAPI backend in OpenStack Compute (Nova) Folsom, Grizzly, and Havana before 2013.2 does not properly apply security groups (1) when resizing an image or (2) during live migration, which allows …	CWE-264 Permissions, Privileges, and Access Controls	CVE-2013-4497	2024-11-21 10:55	2013-11-6	Show	GitHub Exploit DB Packet Storm