Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 3, 2026, 6:08 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
224541 4.6 警告 Canonical
Evan Dandrea
- usb-creator におけるアクセス制限を回避される脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2013-1063 2013-10-7 19:31 2013-09-18 Show GitHub Exploit DB Packet Storm
224542 6.6 警告 ウォッチガード・テクノロジー - WatchGuard Server Center における権限を取得される脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2013-5701 2013-10-7 19:27 2013-09-8 Show GitHub Exploit DB Packet Storm
224543 4.6 警告 Michael Vogt
Canonical
- ubuntu-system-service におけるアクセス制限を回避される脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2013-1062 2013-10-7 19:24 2013-09-18 Show GitHub Exploit DB Packet Storm
224544 4.6 警告 Canonical
Marc Deslauriers
- software-properties の dbus/SoftwarePropertiesDBus.py におけるアクセス制限を回避される脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2013-1061 2013-10-7 19:20 2013-09-18 Show GitHub Exploit DB Packet Storm
224545 4.3 警告 Gumball - WordPress 用 Comment Attachment プラグインにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2013-6010 2013-10-7 19:08 2013-09-20 Show GitHub Exploit DB Packet Storm
224546 4.3 警告 Open-Xchange - Open-Xchange AppSuite における CRLF インジェクションの脆弱性 CWE-94
コード・インジェクション
CVE-2013-6009 2013-10-7 18:54 2013-09-30 Show GitHub Exploit DB Packet Storm
224547 3.5 注意 Open-Xchange - Open-Xchange AppSuite におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2013-5690 2013-10-7 18:53 2013-09-30 Show GitHub Exploit DB Packet Storm
224548 9 危険 エニア株式会社
エマソン
- 複数の Emerson Process Management RTU 製品のソフトウェアにおけるシェルアクセス権を取得される脆弱性 CWE-255
証明書・パスワード管理
CVE-2013-0694 2013-10-7 15:44 2013-09-26 Show GitHub Exploit DB Packet Storm
224549 10 危険 エニア株式会社
エマソン
- 複数の Emerson Process Management RTU 製品上で稼働する ENEA OSE における重要な情報を取得される脆弱性 CWE-200
情報漏えい
CVE-2013-0693 2013-10-7 15:44 2013-09-26 Show GitHub Exploit DB Packet Storm
224550 10 危険 エニア株式会社
エマソン
- 複数の Emerson Process Management RTU 製品上で稼働する ENEA OSE における任意のコードを実行される脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2013-0692 2013-10-7 15:41 2013-09-26 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 3, 2026, 4:18 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
279421 - microsoft windows_8.1
windows_server_2012
Hyper-V in Microsoft Windows 8.1 and Windows Server 2012 R2 does not properly initialize guest OS system data structures, which allows guest OS users to execute arbitrary code on the host OS or cause… CWE-119
Incorrect Access of Indexable Resource ('Range Error') 
CVE-2015-2361 2024-11-21 11:27 2015-07-15 Show GitHub Exploit DB Packet Storm
279422 - mozilla
oracle
novell
firefox_esr
firefox
solaris
suse_linux_enterprise_server
suse_linux_enterprise_desktop
suse_linux_enterprise_software_development_kit
PDF.js in Mozilla Firefox before 39.0 and Firefox ESR 31.x before 31.8 and 38.x before 38.1 enables excessive privileges for internal Workers, which might allow remote attackers to execute arbitrary … CWE-17
Code
CVE-2015-2743 2024-11-21 11:27 2015-07-6 Show GitHub Exploit DB Packet Storm
279423 - oracle
mozilla
solaris
firefox
Mozilla Firefox before 39.0 on OS X includes native key press information during the logging of crashes, which allows remote attackers to obtain sensitive information by leveraging access to a crash-… CWE-200
Information Exposure
CVE-2015-2742 2024-11-21 11:27 2015-07-6 Show GitHub Exploit DB Packet Storm
279424 - mozilla
oracle
firefox
solaris
firefox_esr
Mozilla Firefox before 39.0, Firefox ESR 38.x before 38.1, and Thunderbird before 38.1 do not enforce key pinning upon encountering an X.509 certificate problem that generates a user dialog, which al… CWE-310
Cryptographic Issues
CVE-2015-2741 2024-11-21 11:27 2015-07-6 Show GitHub Exploit DB Packet Storm
279425 - mozilla
canonical
novell
debian
oracle
thunderbird
firefox_esr
firefox
ubuntu_linux
suse_linux_enterprise_server
debian_linux
suse_linux_enterprise_desktop
suse_linux_enterprise_software_development_kit
solaris
Buffer overflow in the nsXMLHttpRequest::AppendToResponseText function in Mozilla Firefox before 39.0, Firefox ESR 31.x before 31.8 and 38.x before 38.1, and Thunderbird before 38.1 might allow remot… CWE-119
Incorrect Access of Indexable Resource ('Range Error') 
CVE-2015-2740 2024-11-21 11:27 2015-07-6 Show GitHub Exploit DB Packet Storm
279426 - mozilla
canonical
novell
debian
oracle
firefox
ubuntu_linux
suse_linux_enterprise_server
suse_linux_enterprise_desktop
suse_linux_enterprise_software_development_kit
debian_linux
firefox_esr
solaris
thunderbird
The ArrayBufferBuilder::append function in Mozilla Firefox before 39.0, Firefox ESR 31.x before 31.8 and 38.x before 38.1, and Thunderbird before 38.1 accesses unintended memory locations, which has … CWE-119
Incorrect Access of Indexable Resource ('Range Error') 
CVE-2015-2739 2024-11-21 11:27 2015-07-6 Show GitHub Exploit DB Packet Storm
279427 - canonical
suse
debian
mozilla
oracle
ubuntu_linux
linux_enterprise_server
linux_enterprise_software_development_kit
linux_enterprise_desktop
suse_linux_enterprise_server
debian_linux
firefox
firefox_esr
thunderbi…
The YCbCrImageDataDeserializer::ToDataSourceSurface function in the YCbCr implementation in Mozilla Firefox before 39.0, Firefox ESR 31.x before 31.8 and 38.x before 38.1, and Thunderbird before 38.1… CWE-17
Code
CVE-2015-2738 2024-11-21 11:27 2015-07-6 Show GitHub Exploit DB Packet Storm
279428 - mozilla
canonical
oracle
suse
debian
firefox_esr
firefox
ubuntu_linux
solaris
linux_enterprise_server
linux_enterprise_software_development_kit
linux_enterprise_desktop
suse_linux_enterprise_server
debian_linux
The rx::d3d11::SetBufferData function in the Direct3D 11 implementation in Mozilla Firefox before 39.0, Firefox ESR 31.x before 31.8 and 38.x before 38.1, and Thunderbird before 38.1 reads data from … CWE-17
Code
CVE-2015-2737 2024-11-21 11:27 2015-07-6 Show GitHub Exploit DB Packet Storm
279429 - mozilla
oracle
canonical
novell
debian
firefox
thunderbird
firefox_esr
solaris
ubuntu_linux
suse_linux_enterprise_server
debian_linux
suse_linux_enterprise_desktop
suse_linux_enterprise_software_development_kit
The nsZipArchive::BuildFileList function in Mozilla Firefox before 39.0, Firefox ESR 31.x before 31.8 and 38.x before 38.1, and Thunderbird before 38.1 accesses unintended memory locations, which all… CWE-17
Code
CVE-2015-2736 2024-11-21 11:27 2015-07-6 Show GitHub Exploit DB Packet Storm
279430 - mozilla
canonical
novell
debian
oracle
firefox
firefox_esr
thunderbird
ubuntu_linux
suse_linux_enterprise_server
debian_linux
suse_linux_enterprise_desktop
suse_linux_enterprise_software_development_kit
solaris
nsZipArchive.cpp in Mozilla Firefox before 39.0, Firefox ESR 31.x before 31.8 and 38.x before 38.1, and Thunderbird before 38.1 accesses unintended memory locations, which allows remote attackers to … CWE-17
Code
CVE-2015-2735 2024-11-21 11:27 2015-07-6 Show GitHub Exploit DB Packet Storm