Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 30, 2026, 4 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
225011 4 警告 Apache Software Foundation - Apache Subversion の mod_dav_svn Apache HTTPD サーバモジュールにおけるサービス運用妨害 (DoS) の脆弱性 CWE-119
バッファエラー
CVE-2013-4131 2013-08-2 15:41 2013-07-25 Show GitHub Exploit DB Packet Storm
225012 10 危険 Eva LibRary - Ultra Mini HTTPD におけるスタックベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー
CVE-2013-5019 2013-08-2 15:26 2013-07-11 Show GitHub Exploit DB Packet Storm
225013 4.3 警告 シマンテック - Symantec Encryption Management Server におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2013-4674 2013-08-2 15:20 2013-07-22 Show GitHub Exploit DB Packet Storm
225014 4 警告 Fedora Project
レッドハット
- Red Hat Directory Server および 389 Directory Server における重要な情報を取得される脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2013-2219 2013-08-2 15:14 2013-07-30 Show GitHub Exploit DB Packet Storm
225015 4.3 警告 Beanbag - Review Board の htdocs/media/rb/js/reviews.js におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2013-2209 2013-08-2 15:06 2013-06-22 Show GitHub Exploit DB Packet Storm
225016 6 警告 The Foreman
レッドハット
- Foreman の Bookmarks コントローラの create メソッドにおける任意のコードを実行される脆弱性 CWE-94
コード・インジェクション
CVE-2013-2121 2013-08-2 14:11 2013-06-7 Show GitHub Exploit DB Packet Storm
225017 6 警告 The Foreman
レッドハット
- Foreman の app/controllers/users_controller.rb の create メソッドにおける権限を取得される脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2013-2113 2013-08-2 14:06 2013-06-7 Show GitHub Exploit DB Packet Storm
225018 7.1 危険 Novell
CollabNet, Inc.
Apache Software Foundation
- Apache Subversion における任意のコマンドを実行される脆弱性 CWE-20
不適切な入力確認
CVE-2013-2088 2013-08-1 18:01 2013-07-4 Show GitHub Exploit DB Packet Storm
225019 4.3 警告 Western Digital Corporation - 複数の Western Digital My Net ルータ製品のファームウェアにおける平文の管理パスワードを破られる脆弱性 CWE-255
証明書・パスワード管理
CVE-2013-5006 2013-08-1 17:36 2013-07-18 Show GitHub Exploit DB Packet Storm
225020 7.5 危険 Google - Google Chrome におけるサービス運用妨害 (DoS) の脆弱性 CWE-noinfo
情報不足
CVE-2013-2886 2013-08-1 16:33 2013-07-30 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 30, 2026, 4:16 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
278901 8.8 HIGH
Network
webgateinc edvr_manager Multiple stack-based buffer overflows in WebGate eDVR Manager allow remote attackers to execute arbitrary code via unspecified vectors to the (1) Connect, (2) ConnectEx, or (3) ConnectEx2 function in… CWE-120
Classic Buffer Overflow
CVE-2015-2098 2024-11-21 11:26 2021-07-23 Show GitHub Exploit DB Packet Storm
278902 8.8 HIGH
Network
freedesktop
debian
xdg-utils
debian_linux
The open_generic_xdg_mime function in xdg-open in xdg-utils 1.1.0 rc1 in Debian, when using dash, does not properly handle local variables, which allows remote attackers to execute arbitrary commands… CWE-77
Command Injection
CVE-2015-1877 2024-11-21 11:26 2021-06-3 Show GitHub Exploit DB Packet Storm
278903 7.5 HIGH
Network
rust-lang rust In the standard library in Rust before 1.2.0, BinaryHeap is not panic-safe. The binary heap is left in an inconsistent state when the comparison of generic elements inside sift_up or sift_down_range … CWE-119
Incorrect Access of Indexable Resource ('Range Error') 
CVE-2015-20001 2024-11-21 11:26 2021-04-12 Show GitHub Exploit DB Packet Storm
278904 7.2 HIGH
Network
huge-it huge-it_slider Multiple SQL injection vulnerabilities in the Huge-IT Slider (slider-image) plugin before 2.7.0 for WordPress allow remote administrators to execute arbitrary SQL commands via the removeslide paramet… CWE-89
SQL Injection
CVE-2015-2062 2024-11-21 11:26 2020-02-9 Show GitHub Exploit DB Packet Storm
278905 7.5 HIGH
Network
jenkins cloudbees XML external entity (XXE) vulnerability in CloudBees Jenkins before 1.600 and LTS before 1.596.1 allows remote attackers to read arbitrary XML files via a crafted XML document. CWE-611
XXE
CVE-2015-1811 2024-11-21 11:26 2020-01-16 Show GitHub Exploit DB Packet Storm
278906 7.5 HIGH
Network
jenkins cloudbees XML external entity (XXE) vulnerability in CloudBees Jenkins before 1.600 and LTS before 1.596.1 allows remote attackers to read arbitrary XML files via an XPath query. CWE-611
XXE
CVE-2015-1809 2024-11-21 11:26 2020-01-16 Show GitHub Exploit DB Packet Storm
278907 7.8 HIGH
Local
redhat automatic_bug_reporting_tool The default event handling scripts in Automatic Bug Reporting Tool (ABRT) allow local users to gain privileges as demonstrated by a symlink attack on a var_log_messages file. CWE-59
Link Following
CVE-2015-1869 2024-11-21 11:26 2020-01-15 Show GitHub Exploit DB Packet Storm
278908 6.5 MEDIUM
Network
tuxfamily chrony chrony before 1.31.1 does not properly protect state variables in authenticated symmetric NTP associations, which allows remote attackers with knowledge of NTP peering to cause a denial of service (i… NVD-CWE-Other
CVE-2015-1853 2024-11-21 11:26 2019-12-10 Show GitHub Exploit DB Packet Storm
278909 5.3 MEDIUM
Network
cabextract_project cabextract cabextract before 1.6 does not properly check for leading slashes when extracting files, which allows remote attackers to conduct absolute directory traversal attacks via a malformed UTF-8 character … CWE-22
Path Traversal
CVE-2015-2060 2024-11-21 11:26 2019-11-30 Show GitHub Exploit DB Packet Storm
278910 5.9 MEDIUM
Network
ruby-lang
debian
puppet
ruby
trunk
debian_linux
puppet_enterprise
puppet_agent
verify_certificate_identity in the OpenSSL extension in Ruby before 2.0.0 patchlevel 645, 2.1.x before 2.1.6, and 2.2.x before 2.2.2 does not properly validate hostnames, which allows remote attacker… CWE-20
 Improper Input Validation 
CVE-2015-1855 2024-11-21 11:26 2019-11-30 Show GitHub Exploit DB Packet Storm