Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 2, 2026, 4 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
223621 1.9 注意 OpenStack - 複数の OpenStack 製品におけるサービス運用妨害 (DoS) の脆弱性 CWE-399
リソース管理の問題
CVE-2013-4469 2013-11-6 11:52 2013-11-1 Show GitHub Exploit DB Packet Storm
223622 6.8 警告 Novell - Novell ZENworks Configuration Management における Web セッションをハイジャックされる脆弱性 CWE-287
不適切な認証
CVE-2013-6347 2013-11-6 11:43 2013-10-28 Show GitHub Exploit DB Packet Storm
223623 6 警告 NAS4Free - NAS4Free にコードインジェクションの脆弱性 CWE-94
コード・インジェクション
CVE-2013-3631 2013-11-6 11:33 2013-10-30 Show GitHub Exploit DB Packet Storm
223624 7.8 危険 Shenzhen TVT Digital Technology Co., Ltd. - TVT TD-2308SS-B にディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル
CVE-2013-6023 2013-11-6 11:27 2013-10-25 Show GitHub Exploit DB Packet Storm
223625 6.8 警告 Novell - Novell ZENworks Configuration Management の ZCC ページにおけるクロスサイトリクエストフォージェリの脆弱性 CWE-352
同一生成元ポリシー違反
CVE-2013-6346 2013-11-6 11:23 2013-10-28 Show GitHub Exploit DB Packet Storm
223626 10 危険 Novell - Novell ZENworks Configuration Management の ZCC ページにおける脆弱性 CWE-noinfo
情報不足
CVE-2013-6345 2013-11-6 11:20 2013-10-28 Show GitHub Exploit DB Packet Storm
223627 4.3 警告 Novell - Novell ZENworks Configuration Management の ZCC ページにおけるクロスフレームスクリプティング攻撃を実行される脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2013-6344 2013-11-6 10:54 2013-10-28 Show GitHub Exploit DB Packet Storm
223628 6.4 警告 Ruby-lang.org
Novell
- Ruby の DL および Fiddle における $SAFE レベルの制限を回避される脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2013-2065 2013-11-5 19:13 2013-05-14 Show GitHub Exploit DB Packet Storm
223629 5 警告 strongSwan - strongSWAN におけるサービス運用妨害 (DoS) の脆弱性 CWE-Other
その他
CVE-2013-6076 2013-11-5 19:02 2013-11-1 Show GitHub Exploit DB Packet Storm
223630 5 警告 strongSwan - strongSwan の utils/identification.c の compare_dn 関数におけるサービス運用妨害 (DoS) の脆弱性 CWE-119
バッファエラー
CVE-2013-6075 2013-11-5 18:54 2013-11-1 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 2, 2026, 4:18 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
277361 - mozilla
opensuse
oracle
firefox
opensuse
solaris
Race condition in the Mozilla Maintenance Service in Mozilla Firefox before 40.0 and Firefox ESR 38.x before 38.2 on Windows allows local users to write to arbitrary files and consequently gain privi… CWE-362
Race Condition
CVE-2015-4481 2024-11-21 11:31 2015-08-16 Show GitHub Exploit DB Packet Storm
277362 - canonical
opensuse
mozilla
ubuntu_linux
opensuse
firefox
Integer overflow in the stagefright::SampleTable::isValid function in libstagefright in Mozilla Firefox before 40.0 and Firefox ESR 38.x before 38.2 allows remote attackers to execute arbitrary code … CWE-189
Numeric Errors
CVE-2015-4480 2024-11-21 11:31 2015-08-16 Show GitHub Exploit DB Packet Storm
277363 - mozilla
canonical
opensuse
firefox
ubuntu_linux
opensuse
Multiple integer overflows in libstagefright in Mozilla Firefox before 40.0 and Firefox ESR 38.x before 38.2 allow remote attackers to execute arbitrary code via a crafted saio chunk in MPEG-4 video … CWE-189
Numeric Errors
CVE-2015-4479 2024-11-21 11:31 2015-08-16 Show GitHub Exploit DB Packet Storm
277364 - canonical
opensuse
mozilla
ubuntu_linux
opensuse
firefox
Mozilla Firefox before 40.0 and Firefox ESR 38.x before 38.2 do not impose certain ECMAScript 6 requirements on JavaScript object properties, which allows remote attackers to bypass the Same Origin P… CWE-200
Information Exposure
CVE-2015-4478 2024-11-21 11:31 2015-08-16 Show GitHub Exploit DB Packet Storm
277365 - canonical
opensuse
mozilla
ubuntu_linux
opensuse
firefox
Use-after-free vulnerability in the MediaStream playback feature in Mozilla Firefox before 40.0 allows remote attackers to execute arbitrary code via unspecified use of the Web Audio API. NVD-CWE-Other
CVE-2015-4477 2024-11-21 11:31 2015-08-16 Show GitHub Exploit DB Packet Storm
277366 - mozilla
canonical
opensuse
firefox
ubuntu_linux
opensuse
The mozilla::AudioSink function in Mozilla Firefox before 40.0 and Firefox ESR 38.x before 38.2 mishandles inconsistent sample formats within MP3 audio data, which allows remote attackers to execute … CWE-119
Incorrect Access of Indexable Resource ('Range Error') 
CVE-2015-4475 2024-11-21 11:31 2015-08-16 Show GitHub Exploit DB Packet Storm
277367 - canonical
opensuse
mozilla
ubuntu_linux
opensuse
firefox
Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 40.0 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly exe… NVD-CWE-noinfo
CVE-2015-4474 2024-11-21 11:31 2015-08-16 Show GitHub Exploit DB Packet Storm
277368 - canonical
debian
opensuse
mozilla
ubuntu_linux
debian_linux
opensuse
firefox
Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 40.0 and Firefox ESR 38.x before 38.2 allow remote attackers to cause a denial of service (memory corruption and a… CWE-119
Incorrect Access of Indexable Resource ('Range Error') 
CVE-2015-4473 2024-11-21 11:31 2015-08-16 Show GitHub Exploit DB Packet Storm
277369 - xceedium xsuite Directory traversal vulnerability in opm/read_sessionlog.php in Xceedium Xsuite 2.4.4.5 and earlier allows remote attackers to read arbitrary files via a ....// (quadruple dot double slash) in the lo… CWE-22
Path Traversal
CVE-2015-4666 2024-11-21 11:31 2015-08-13 Show GitHub Exploit DB Packet Storm
277370 - xceedium xsuite Cross-site scripting (XSS) vulnerability in ajax_cmd.php in Xceedium Xsuite 2.4.4.1 and earlier allows remote attackers to inject arbitrary web script or HTML via the fileName parameter. CWE-79
Cross-site Scripting
CVE-2015-4665 2024-11-21 11:31 2015-08-13 Show GitHub Exploit DB Packet Storm