Vulnerability Search Top

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

Vulnerability Information Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 27, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
222501	4.3	警告	マイクロソフト	-	Microsoft ASP.NET SignalR および Visual Studio Team Foundation Server におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2013-5042	2013-12-12 17:07	2013-12-10	Show	GitHub Exploit DB Packet Storm

222502	4.3	警告	マイクロソフト	-	Microsoft Office 2007 および 2010 の hxds.dll における任意のコードを実行される脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2013-5057	2013-12-12 17:03	2013-12-10	Show	GitHub Exploit DB Packet Storm

222503	6.9	警告	マイクロソフト	-	Microsoft Windows XP および Windows Server 2003 の LRPC クライアントにおけるスタックベースのバッファオーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2013-3878	2013-12-12 16:59	2013-12-10	Show	GitHub Exploit DB Packet Storm

222504	4.9	警告	マイクロソフト	-	複数の Microsoft Windows 製品のカーネルモードドライバにおける整数オーバーフローの脆弱性	CWE-189 数値処理の問題	CVE-2013-5058	2013-12-12 16:55	2013-12-10	Show	GitHub Exploit DB Packet Storm

222505	7.2	危険	マイクロソフト	-	複数の Microsoft Windows 製品のカーネルモードドライバの portcls.sys における権限昇格の脆弱性	CWE-119 バッファエラー	CVE-2013-3907	2013-12-12 16:53	2013-12-10	Show	GitHub Exploit DB Packet Storm

222506	4.7	警告	マイクロソフト	-	複数の Microsoft Windows 製品のカーネルモードドライバの win32k.sys におけるサービス運用妨害 (DoS) の脆弱性	CWE-20 不適切な入力確認	CVE-2013-3903	2013-12-12 16:45	2013-12-10	Show	GitHub Exploit DB Packet Storm

222507	7.2	危険	マイクロソフト	-	Microsoft Windows Server 2008 R2 および Windows 7 のカーネルモードドライバの win32k.sys における権限昇格の脆弱性	CWE-399 リソース管理の問題	CVE-2013-3902	2013-12-12 16:41	2013-12-10	Show	GitHub Exploit DB Packet Storm

222508	7.2	危険	マイクロソフト	-	Microsoft Windows XP および Windows Server 2003 のカーネルモードドライバの win32k.sys における権限昇格の脆弱性	CWE-20 不適切な入力確認	CVE-2013-3899	2013-12-12 16:38	2013-12-10	Show	GitHub Exploit DB Packet Storm

222509	6.8	警告	マイクロソフト	-	Microsoft SharePoint Server および Office Web Apps における任意のコードを実行される脆弱性	CWE-94 コード・インジェクション	CVE-2013-5059	2013-12-12 16:35	2013-12-10	Show	GitHub Exploit DB Packet Storm

222510	9.3	危険	マイクロソフト	-	複数の Microsoft Windows 製品の Scripting Runtime オブジェクトライブラリにおける任意のコードを実行される脆弱性	CWE-399 リソース管理の問題	CVE-2013-5056	2013-12-12 16:32	2013-12-10	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 27, 2026, 4:52 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
273471	-		juniper	pulse_connect_secure	The Secure Meeting (Pulse Collaboration) in Pulse Connect Secure (formerly Juniper Junos Pulse) before 7.1R22.1, 7.4, 8.0 before 8.0R11, and 8.1 before 8.1R3 allows remote authenticated users to bypa…	CWE-264 Permissions, Privileges, and Access Controls	CVE-2015-7323	2024-11-21 11:36	2015-10-6	Show	GitHub Exploit DB Packet Storm

273472	-		juniper	pulse_connect_secure	The Secure Meeting (Pulse Collaboration) in Pulse Connect Secure (formerly Juniper Junos Pulse) before 7.1R22.1, 7.4, 8.0 before 8.0R11, and 8.1 before 8.1R3 provides different messages for attempts …	CWE-200 Information Exposure	CVE-2015-7322	2024-11-21 11:36	2015-10-6	Show	GitHub Exploit DB Packet Storm

273473	-		freeswitch	freeswitch	Heap-based buffer overflow in the parse_string function in libs/esl/src/esl_json.c in FreeSWITCH before 1.4.23 and 1.6.x before 1.6.2 allows remote attackers to execute arbitrary code via a trailing …	CWE-119 Incorrect Access of Indexable Resource ('Range Error')	CVE-2015-7392	2024-11-21 11:36	2015-10-5	Show	GitHub Exploit DB Packet Storm

273474	-		xen	xen	libxl in Xen 4.1.x through 4.6.x does not properly handle the readonly flag on disks when using the qemu-xen device model, which allows local guest users to write to a read-only disk image.	CWE-17 Code	CVE-2015-7311	2024-11-21 11:36	2015-10-2	Show	GitHub Exploit DB Packet Storm

273475	7.5	HIGH Network	rpcbind_project canonical debian oracle	rpcbind ubuntu_linux debian_linux solaris	Use-after-free vulnerability in xprt_set_caller in rpcb_svc_com.c in rpcbind 0.2.1 and earlier allows remote attackers to cause a denial of service (daemon crash) via crafted packets, involving a PMA…	NVD-CWE-Other	CVE-2015-7236	2024-11-21 11:36	2015-10-2	Show	GitHub Exploit DB Packet Storm

273476	-		ipython jupyter	notebook	The editor in IPython Notebook before 3.2.2 and Jupyter Notebook 4.0.x before 4.0.5 allows remote attackers to execute arbitrary JavaScript code via a crafted file, which triggers a redirect to files…	CWE-20 Improper Input Validation	CVE-2015-7337	2024-11-21 11:36	2015-09-30	Show	GitHub Exploit DB Packet Storm

273477	-		codepeople	appointment_booking_calendar	Multiple cross-site scripting (XSS) vulnerabilities in cpabc_appointments_admin_int_bookings_list.inc.php in the Appointment Booking Calendar plugin before 1.1.8 for WordPress allow remote attackers …	CWE-79 Cross-site Scripting	CVE-2015-7320	2024-11-21 11:36	2015-09-30	Show	GitHub Exploit DB Packet Storm

273478	-		codepeople	appointment_booking_calendar	SQL injection vulnerability in cpabc_appointments_admin_int_calendar_list.inc.php in the Appointment Booking Calendar plugin before 1.1.8 for WordPress allows remote attackers to execute arbitrary SQ…	CWE-89 SQL Injection	CVE-2015-7319	2024-11-21 11:36	2015-09-30	Show	GitHub Exploit DB Packet Storm

273479	-		zohocorp	manageengine_eventlog_analyzer	ZOHO ManageEngine EventLog Analyzer 10.6 build 10060 and earlier allows remote attackers to bypass intended restrictions and execute arbitrary SQL commands via an allowed query followed by a disallow…	CWE-89 SQL Injection	CVE-2015-7387	2024-11-21 11:36	2015-09-29	Show	GitHub Exploit DB Packet Storm

273480	-		ghozylab	gallery_-_photo_albums_-_portfolio	Multiple cross-site scripting (XSS) vulnerabilities in includes/metaboxes.php in the Gallery - Photo Albums - Portfolio plugin 1.3.47 for WordPress allow remote authenticated users to inject arbitrar…	CWE-79 Cross-site Scripting	CVE-2015-7386	2024-11-21 11:36	2015-09-29	Show	GitHub Exploit DB Packet Storm