Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 13, 2026, 2:01 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
224491 6.8 警告 サン・マイクロシステムズ
ヒューレット・パッカード
- Java Web Start における設定ファイル読み込みに関する脆弱性 CWE-Other
その他
CVE-2011-0786 2013-03-26 14:44 2011-06-10 Show GitHub Exploit DB Packet Storm
224492 2.6 注意 株式会社ピーエムナイン - OpenWnnフリック入力対応版におけるアクセス制限不備の脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2013-2300 2013-03-26 12:02 2013-03-26 Show GitHub Exploit DB Packet Storm
224493 2.6 注意 COB's Products - COBIME におけるアクセス制限不備の脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2013-0720 2013-03-26 12:01 2013-03-26 Show GitHub Exploit DB Packet Storm
224494 2.6 注意 codedesign.jp - ArtIME 日本語入力におけるアクセス制限不備の脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2013-0719 2013-03-26 12:01 2013-03-26 Show GitHub Exploit DB Packet Storm
224495 2.6 注意 Baidu, Inc. - Simeji におけるアクセス制限不備の脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2013-0718 2013-03-26 12:01 2013-03-26 Show GitHub Exploit DB Packet Storm
224496 6.8 警告 Verizon - Verizon FiOS Actiontec ルータ MI424WR-GEN3I にクロスサイトリクエストフォージェリの脆弱性 CWE-352
同一生成元ポリシー違反
CVE-2013-0126 2013-03-26 10:48 2013-03-19 Show GitHub Exploit DB Packet Storm
224497 4.3 警告 Askia - ASKIA askiaweb の管理インターフェイスにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2013-0124 2013-03-25 19:10 2013-03-20 Show GitHub Exploit DB Packet Storm
224498 7.5 危険 Askia - ASKIA askiaweb の管理インターフェイスにおける SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2013-0123 2013-03-25 19:09 2013-03-20 Show GitHub Exploit DB Packet Storm
224499 3.5 注意 IBM - IBM Tivoli Endpoint Manager の Web レポートにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2013-0453 2013-03-25 19:09 2013-03-20 Show GitHub Exploit DB Packet Storm
224500 4.3 警告 IBM - IBM Rational ClearQuest の Web クライアントにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2012-5757 2013-03-25 19:08 2013-03-20 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 13, 2026, 5:05 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
278451 - redhat
apache
apple
enterprise_linux_desktop
enterprise_linux_workstation
enterprise_linux_server
enterprise_linux_hpc_node
subversion
xcode
The mod_dav_svn Apache HTTPD server module in Apache Subversion 1.7.x before 1.7.19 and 1.8.x before 1.8.11 allows remote attackers to cause a denial of service (NULL pointer dereference and crash) v… NVD-CWE-Other
CVE-2014-8108 2024-11-21 11:18 2014-12-19 Show GitHub Exploit DB Packet Storm
278452 - file_project
freebsd
mageia
canonical
file
freebsd
mageia
ubuntu_linux
softmagic.c in file before 5.21 does not properly limit recursion, which allows remote attackers to cause a denial of service (CPU consumption or crash) via unspecified vectors. CWE-399
 Resource Management Errors
CVE-2014-8117 2024-11-21 11:18 2014-12-18 Show GitHub Exploit DB Packet Storm
278453 - freebsd
file_project
mageia
canonical
freebsd
file
mageia
ubuntu_linux
The ELF parser (readelf.c) in file before 5.21 allows remote attackers to cause a denial of service (CPU consumption or crash) via a large number of (1) program or (2) section headers or (3) invalid … CWE-399
 Resource Management Errors
CVE-2014-8116 2024-11-21 11:18 2014-12-18 Show GitHub Exploit DB Packet Storm
278454 - hp tcp_ip_services_openvms Multiple unspecified vulnerabilities in the POP implementation in HP OpenVMS TCP/IP 5.7 before ECO5 allow remote attackers to cause a denial of service via unspecified vectors. NVD-CWE-noinfo
CVE-2014-7880 2024-11-21 11:18 2014-12-18 Show GitHub Exploit DB Packet Storm
278455 - linux linux_kernel arch/x86/kernel/tls.c in the Thread Local Storage (TLS) implementation in the Linux kernel through 3.18.1 allows local users to bypass the espfix protection mechanism, and consequently makes it easie… CWE-264
Permissions, Privileges, and Access Controls
CVE-2014-8133 2024-11-21 11:18 2014-12-17 Show GitHub Exploit DB Packet Storm
278456 - cisco isb8320-e_high-definition_ip-only_dvr The Disaster Recovery (DRA) feature on the Cisco ISB8320-E High-Definition IP-Only DVR allows remote attackers to bypass authentication by establishing a TELNET session during a recovery boot, aka Bu… CWE-287
Improper Authentication
CVE-2014-8006 2024-11-21 11:18 2014-12-17 Show GitHub Exploit DB Packet Storm
278457 - broadcom release_automation SQL injection vulnerability in CA Release Automation (formerly iTKO LISA Release Automation) before 4.7.1 b448 allows remote authenticated users to execute arbitrary SQL commands via a crafted query. CWE-89
SQL Injection
CVE-2014-8248 2024-11-21 11:18 2014-12-17 Show GitHub Exploit DB Packet Storm
278458 - broadcom release_automation Cross-site scripting (XSS) vulnerability in CA Release Automation (formerly iTKO LISA Release Automation) before 4.7.1 b448 allows remote attackers to inject arbitrary web script or HTML via unspecif… CWE-79
Cross-site Scripting
CVE-2014-8247 2024-11-21 11:18 2014-12-17 Show GitHub Exploit DB Packet Storm
278459 - broadcom release_automation Cross-site request forgery (CSRF) vulnerability in CA Release Automation (formerly iTKO LISA Release Automation) before 4.7.1 b448 allows remote attackers to hijack the authentication of unspecified … CWE-352
 Origin Validation Error
CVE-2014-8246 2024-11-21 11:18 2014-12-17 Show GitHub Exploit DB Packet Storm
278460 - zoneo-soft phptraffica SQL injection vulnerability in Php/Functions/log_function.php in phpTrafficA 2.3 and earlier allows remote attackers to execute arbitrary SQL commands via a User-Agent HTTP header. CWE-89
SQL Injection
CVE-2014-8340 2024-11-21 11:18 2014-12-17 Show GitHub Exploit DB Packet Storm