Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":July 1, 2026, 6 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
229091 4.3 警告 Happyworm
ownCloud
- ownCloud Server などの製品で使用される jPlayer の Flash SWF コンポーネントにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2013-1942 2013-08-19 13:32 2013-03-21 Show GitHub Exploit DB Packet Storm
229092 10 危険 Apache Software Foundation - Apache Open For Business Project における任意の Unified Expression Language 機能を実行される脆弱性 CWE-20
不適切な入力確認
CVE-2013-2250 2013-08-16 11:45 2013-07-20 Show GitHub Exploit DB Packet Storm
229093 4.3 警告 Apache Software Foundation - Apache Open For Business Project の Webtools アプリケーションにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2013-2137 2013-08-16 11:37 2013-07-20 Show GitHub Exploit DB Packet Storm
229094 7.5 危険 BigTree CMS - BigTree CMS の core/inc/bigtree/cms.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2013-4879 2013-08-15 19:02 2013-07-3 Show GitHub Exploit DB Packet Storm
229095 4.3 警告 BigTree CMS - BigTree CMS の core/admin/modules/developer/modules/views/add.php におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2013-4880 2013-08-15 19:00 2013-07-17 Show GitHub Exploit DB Packet Storm
229096 7.5 危険 Moxi9 - PHPFox における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2013-5121 2013-08-15 18:39 2013-08-7 Show GitHub Exploit DB Packet Storm
229097 7.5 危険 Moxi9 - PHPFox における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2013-5120 2013-08-15 18:33 2013-07-30 Show GitHub Exploit DB Packet Storm
229098 7.5 危険 LibRaw - LibRaw の exposure correction コードにおけるバッファオーバーフローの脆弱性 CWE-119
バッファエラー
CVE-2013-2127 2013-08-15 18:04 2013-05-24 Show GitHub Exploit DB Packet Storm
229099 7.5 危険 Novell
Canonical
LibRaw
- LibRaw の libraw_cxx.cpp 内の LibRaw::unpack 関数におけるメモリ二重解放の脆弱性 CWE-399
リソース管理の問題
CVE-2013-2126 2013-08-15 18:01 2013-05-26 Show GitHub Exploit DB Packet Storm
229100 9.3 危険 マイクロソフト - Microsoft Internet Explorer 6 から 10 における任意のコードを実行される脆弱性 CWE-119
バッファエラー
CVE-2013-3199 2013-08-15 15:54 2013-08-13 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:July 2, 2026, 4:03 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
292341 7.5 HIGH
Network
microsoft internet_explorer Microsoft Internet Explorer 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Internet Explorer Memory Corruption Vuln… CWE-119
Incorrect Access of Indexable Resource ('Range Error') 
CVE-2014-4112 2024-11-21 11:09 2018-02-9 Show GitHub Exploit DB Packet Storm
292342 7.5 HIGH
Network
microsoft internet_explorer Microsoft Internet Explorer 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Internet Explorer Memory Corruption Vuln… CWE-119
Incorrect Access of Indexable Resource ('Range Error') 
CVE-2014-4066 2024-11-21 11:09 2018-02-9 Show GitHub Exploit DB Packet Storm
292343 8.8 HIGH
Network
cacti cacti Cacti before 1.0.0 allows remote authenticated users to conduct PHP object injection attacks and execute arbitrary PHP code via a crafted serialized object, related to calling unserialize(stripslashe… CWE-94
Code Injection
CVE-2014-4000 2024-11-21 11:09 2017-11-16 Show GitHub Exploit DB Packet Storm
292344 5.4 MEDIUM
Network
iodata rockdisk_firmware Cross-site scripting (XSS) vulnerability in I-O DATA DEVICE RockDisk with firmware before 1.05e1-2.0.5 allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors… CWE-79
Cross-site Scripting
CVE-2014-3887 2024-11-21 11:09 2017-04-14 Show GitHub Exploit DB Packet Storm
292345 7.5 HIGH
Network
lg_project lg lg.pl in Cistron-LG 1.01 stores sensitive information under the web root with insufficient access controls, which allows remote attackers to obtain IP addresses and other unspecified router credentia… CWE-284
Improper Access Control
CVE-2014-3930 2024-11-21 11:09 2017-04-4 Show GitHub Exploit DB Packet Storm
292346 7.5 HIGH
Network
lg_project lg The default configuration for Cougar-LG stores sensitive information under the web root with insufficient access control, which might allow remote attackers to obtain private ssh keys. CWE-284
Improper Access Control
CVE-2014-3929 2024-11-21 11:09 2017-04-4 Show GitHub Exploit DB Packet Storm
292347 9.8 CRITICAL
Network
lg_project lg Cougar-LG stores sensitive information under the web root with insufficient access control, which allows remote attackers to obtain credentials. CWE-284
Improper Access Control
CVE-2014-3928 2024-11-21 11:09 2017-04-4 Show GitHub Exploit DB Packet Storm
292348 9.8 CRITICAL
Network
mrlg4php_project mrlg4php mrlg-lib.php in mrlg4php before 1.0.8 allows remote attackers to execute arbitrary shell code. CWE-94
Code Injection
CVE-2014-3927 2024-11-21 11:09 2017-04-4 Show GitHub Exploit DB Packet Storm
292349 6.1 MEDIUM
Network
lg_project lg Cross-site scripting (XSS) vulnerability in lg.cgi in Cougar LG 1.9 allows remote attackers to inject arbitrary web script or HTML via the "addr" parameter. CWE-79
Cross-site Scripting
CVE-2014-3926 2024-11-21 11:09 2017-03-14 Show GitHub Exploit DB Packet Storm
292350 - oracle peoplesoft_products Unspecified vulnerability in the PeopleSoft Enterprise PeopleTools component in Oracle PeopleSoft Products 8.53 allows remote authenticated users to affect integrity via vectors related to PIA Core T… NVD-CWE-noinfo
CVE-2014-4279 2024-11-21 11:09 2015-01-21 Show GitHub Exploit DB Packet Storm