Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 18, 2026, 12:09 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
224551 4.3 警告 web2py - web2py のソーシャルブックマークウィジェットにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2013-2311 2013-05-20 12:00 2013-05-20 Show GitHub Exploit DB Packet Storm
224552 4.3 警告 Rack - Rack の rack/file.rb における任意のファイルにアクセスされる脆弱性 CWE-22
パス・トラバーサル
CVE-2013-0262 2013-05-20 10:35 2013-02-7 Show GitHub Exploit DB Packet Storm
224553 3.6 注意 Digia - Qt の QSharedMemory クラスにおける重要な情報を読まれる脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2013-0254 2013-05-20 10:33 2013-02-6 Show GitHub Exploit DB Packet Storm
224554 5 警告 Django Software Foundation
Canonical
- Django の form ライブラリにおけるフォームセットのリソース制限を回避される脆弱性 CWE-189
数値処理の問題
CVE-2013-0306 2013-05-17 18:25 2013-02-19 Show GitHub Exploit DB Packet Storm
224555 4 警告 Django Software Foundation
Canonical
- Django の管理インターフェースにおける重要な履歴情報を取得される脆弱性 CWE-200
情報漏えい
CVE-2013-0305 2013-05-17 18:23 2013-02-19 Show GitHub Exploit DB Packet Storm
224556 4.9 警告 Fedora Project - System Security Services Daemon におけるアクセス制限を回避される脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2013-0287 2013-05-17 18:20 2013-03-19 Show GitHub Exploit DB Packet Storm
224557 6.9 警告 Mozilla Foundation - Windows 上で稼働する Mozilla Firefox における権限を取得される脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2013-1673 2013-05-17 16:47 2013-05-14 Show GitHub Exploit DB Packet Storm
224558 6.9 警告 Mozilla Foundation - Windows 上で稼働する Mozilla Firefox および Thunderbird における完全性評価を回避される脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2013-1672 2013-05-17 16:46 2013-05-14 Show GitHub Exploit DB Packet Storm
224559 4 警告 シスコシステムズ - Cisco WebEx Social のユーザ管理ページにおけるアクセス制限を回避される脆弱性 CWE-20
不適切な入力確認
CVE-2013-1245 2013-05-17 16:08 2013-05-15 Show GitHub Exploit DB Packet Storm
224560 3.5 注意 シスコシステムズ - Cisco WebEx Social の portal モジュールにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2013-1244 2013-05-17 16:04 2013-05-15 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 18, 2026, 4:12 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
278831 - samsung smartviewer Stack-based buffer overflow in the BackupToAvi method in the CNC_Ctrl ActiveX control in Samsung SmartViewer allows remote attackers to execute arbitrary code via unspecified vectors. CWE-119
Incorrect Access of Indexable Resource ('Range Error') 
CVE-2014-9265 2024-11-21 11:20 2014-12-9 Show GitHub Exploit DB Packet Storm
278832 - 3s_pocketnet_tech 3s_pocketnet_tech_video_management_software Multiple buffer overflows in the PocketNetNVRMediaClientAxCtrl.NVRMediaViewer.1 control in 3S Pocketnet Tech VMS allow remote attackers to execute arbitrary code via a crafted string to the (1) Start… CWE-119
Incorrect Access of Indexable Resource ('Range Error') 
CVE-2014-9263 2024-11-21 11:20 2014-12-9 Show GitHub Exploit DB Packet Storm
278833 - pyyaml libyaml scanner.c in LibYAML 0.1.5 and 0.1.6, as used in the YAML-LibYAML (aka YAML-XS) module for Perl, allows context-dependent attackers to cause a denial of service (assertion failure and crash) via vect… CWE-20
 Improper Input Validation 
CVE-2014-9130 2024-11-21 11:20 2014-12-9 Show GitHub Exploit DB Packet Storm
278834 - jasper_project jasper Multiple off-by-one errors in the (1) jpc_dec_cp_setfromcox and (2) jpc_dec_cp_setfromrgn functions in jpc/jpc_dec.c in JasPer 1.900.1 and earlier allow remote attackers to execute arbitrary code via… CWE-189
Numeric Errors
CVE-2014-9029 2024-11-21 11:20 2014-12-9 Show GitHub Exploit DB Packet Storm
278835 - f5 big-ip Cross-site scripting (XSS) vulnerability in the tree view (pl_tree.php) feature in Application Security Manager (ASM) in F5 BIG-IP 11.3.0 allows remote attackers to inject arbitrary web script or HTM… CWE-79
Cross-site Scripting
CVE-2014-9342 2024-11-21 11:20 2014-12-8 Show GitHub Exploit DB Packet Storm
278836 - phpmyadmin phpmyadmin Cross-site scripting (XSS) vulnerability in the redirection feature in url.php in phpMyAdmin 4.2.x before 4.2.13.1 allows remote attackers to inject arbitrary web script or HTML via the url parameter. CWE-79
Cross-site Scripting
CVE-2014-9219 2024-11-21 11:20 2014-12-8 Show GitHub Exploit DB Packet Storm
278837 - phpmyadmin phpmyadmin libraries/common.inc.php in phpMyAdmin 4.0.x before 4.0.10.7, 4.1.x before 4.1.14.8, and 4.2.x before 4.2.13.1 allows remote attackers to cause a denial of service (resource consumption) via a long p… CWE-399
 Resource Management Errors
CVE-2014-9218 2024-11-21 11:20 2014-12-8 Show GitHub Exploit DB Packet Storm
278838 - torch_gmbh graylog2 Graylog2 before 0.92 allows remote attackers to bypass LDAP authentication via crafted wildcards. CWE-287
Improper Authentication
CVE-2014-9217 2024-11-21 11:20 2014-12-8 Show GitHub Exploit DB Packet Storm
278839 - plex media_server Plex Media Server before 0.9.9.3 allows remote attackers to bypass the web server whitelist, conduct SSRF attacks, and execute arbitrary administrative actions via multiple crafted X-Plex-Url headers… CWE-264
Permissions, Privileges, and Access Controls
CVE-2014-9304 2024-11-21 11:20 2014-12-8 Show GitHub Exploit DB Packet Storm
278840 - entrypass n5200_active_network_control_panel EntryPass N5200 Active Network Control Panel allows remote attackers to read device memory and obtain the administrator username and password via a URL starting with an ASCII character o through z or… CWE-200
Information Exposure
CVE-2014-9303 2024-11-21 11:20 2014-12-8 Show GitHub Exploit DB Packet Storm