Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 29, 2026, 6 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
225051 7.5 危険 BMC Software - BMC Service Desk Express における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2013-4945 2013-07-31 15:08 2013-06-12 Show GitHub Exploit DB Packet Storm
225052 2.1 注意 Drupal Indonesia - Drupal 用 TinyBox モジュールにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2013-4140 2013-07-31 14:44 2013-07-10 Show GitHub Exploit DB Packet Storm
225053 2.6 注意 BuddyDev.com - WordPress 用 BuddyPress Extended Friendship Request プラグインにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2013-4944 2013-07-31 14:36 2013-07-2 Show GitHub Exploit DB Packet Storm
225054 4.3 警告 OpenX - OpenX Source におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2013-3515 2013-07-31 14:08 2013-05-8 Show GitHub Exploit DB Packet Storm
225055 4.3 警告 Monkey Project - Monkey HTTP Daemon の Directory Listing プラグインにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2013-2181 2013-07-31 13:55 2013-06-14 Show GitHub Exploit DB Packet Storm
225056 9.3 危険 キングソフト株式会社 - Kingsoft Spreadsheets 2012 におけるヒープベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー
CVE-2013-0723 2013-07-31 13:47 2013-07-29 Show GitHub Exploit DB Packet Storm
225057 5 警告 ヒューレット・パッカード
レッドハット
- 複数の Red Hat JBoss 製品の JBossWS Native におけるサービス運用妨害 (DoS) の脆弱性 CWE-noinfo
情報不足
CVE-2011-1483 2013-07-30 17:40 2011-04-4 Show GitHub Exploit DB Packet Storm
225058 4.7 警告 Linux - Linux Kernel のブリッジのマルチキャストの実装におけるサービス運用妨害 (DoS) の脆弱性 CWE-20
不適切な入力確認
CVE-2013-4129 2013-07-30 17:21 2013-07-7 Show GitHub Exploit DB Packet Storm
225059 4.7 警告 Linux - Linux Kernel の drivers/vhost/net.c におけるサービス運用妨害 (DoS) の脆弱性 CWE-399
リソース管理の問題
CVE-2013-4127 2013-07-30 17:21 2013-07-9 Show GitHub Exploit DB Packet Storm
225060 6.4 警告 FreeBSD - FreeBSD のカーネルにおける NFS ファイルシステムのファイルパーミッションを回避される脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2013-4851 2013-07-30 16:42 2013-07-26 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 29, 2026, 4:16 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
278791 - canonical
debian
x
ubuntu_linux
debian_linux
libxfont
The bdfReadCharacters function in bitmap/bdfread.c in X.Org libXfont before 1.4.9 and 1.5.x before 1.5.1 does not properly handle character bitmaps it cannot read, which allows remote authenticated u… NVD-CWE-Other
CVE-2015-1803 2024-11-21 11:26 2015-03-20 Show GitHub Exploit DB Packet Storm
278792 - x libxfont The bdfReadProperties function in bitmap/bdfread.c in X.Org libXfont before 1.4.9 and 1.5.x before 1.5.1 allows remote authenticated users to cause a denial of service (out-of-bounds write and crash)… CWE-119
Incorrect Access of Indexable Resource ('Range Error') 
CVE-2015-1802 2024-11-21 11:26 2015-03-20 Show GitHub Exploit DB Packet Storm
278793 - openssl openssl The ssl3_get_client_key_exchange function in s3_srvr.c in OpenSSL 1.0.2 before 1.0.2a, when client authentication and an ephemeral Diffie-Hellman ciphersuite are enabled, allows remote attackers to c… CWE-20
 Improper Input Validation 
CVE-2015-1787 2024-11-21 11:26 2015-03-20 Show GitHub Exploit DB Packet Storm
278794 - xen
fedoraproject
xen
fedora
Xen 4.5.x and earlier enables certain default backends when emulating a VGA device for an x86 HVM guest qemu even when the configuration disables them, which allows local guest users to obtain access… CWE-264
Permissions, Privileges, and Access Controls
CVE-2015-2152 2024-11-21 11:26 2015-03-19 Show GitHub Exploit DB Packet Storm
278795 - mybb mybb Multiple cross-site scripting (XSS) vulnerabilities in the administrative backend in MyBB (aka MyBulletinBoard) before 1.8.4 allow remote authenticated users to inject arbitrary web script or HTML vi… CWE-79
Cross-site Scripting
CVE-2015-2149 2024-11-21 11:26 2015-03-18 Show GitHub Exploit DB Packet Storm
278796 - hp operations_manager_i_management_pack HP Operations Manager i Management Pack 1.x before 1.01 for SAP allows local users to execute OS commands by leveraging SAP administrative privileges. CWE-284
Improper Access Control
CVE-2015-2107 2024-11-21 11:26 2015-03-14 Show GitHub Exploit DB Packet Storm
278797 - apache mod-gnutls The authentication hook (mgs_hook_authz) in mod-gnutls 0.5.10 and earlier does not validate client certificates when "GnuTLSClientVerify require" is set, which allows remote attackers to spoof client… CWE-310
Cryptographic Issues
CVE-2015-2091 2024-11-21 11:26 2015-03-13 Show GitHub Exploit DB Packet Storm
278798 - debian
libssh2
fedoraproject
debian_linux
libssh2
fedora
The kex_agree_methods function in libssh2 before 1.5.0 allows remote servers to cause a denial of service (crash) or have other unspecified impact via crafted length values in an SSH_MSG_KEXINIT pack… CWE-20
 Improper Input Validation 
CVE-2015-1782 2024-11-21 11:26 2015-03-13 Show GitHub Exploit DB Packet Storm
278799 - fedoraproject
debian
xen
fedora
debian_linux
xen
The x86 emulator in Xen 3.2.x through 4.5.x does not properly ignore segment overrides for instructions with register operands, which allows local guest users to obtain sensitive information, cause a… CWE-264
Permissions, Privileges, and Access Controls
CVE-2015-2151 2024-11-21 11:26 2015-03-12 Show GitHub Exploit DB Packet Storm
278800 - ubuntu
xen
linux
ubuntu
xen
linux_kernel
Xen 3.3.x through 4.5.x and the Linux kernel through 3.19.1 do not properly restrict access to PCI command registers, which might allow local guest OS users to cause a denial of service (non-maskable… CWE-264
Permissions, Privileges, and Access Controls
CVE-2015-2150 2024-11-21 11:26 2015-03-12 Show GitHub Exploit DB Packet Storm