Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 12, 2026, 6 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
240421 5 警告 IBM - IBM WebSphere Portal の Dojo モジュールにおけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル
CVE-2012-2181 2012-07-5 13:57 2012-07-3 Show GitHub Exploit DB Packet Storm
240422 10 危険 アバイア - Avaya Aura Application Server 5300 におけるスタックベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー
CVE-2011-5096 2012-07-5 13:46 2011-08-2 Show GitHub Exploit DB Packet Storm
240423 10 危険 アバイア - Avaya IP Office Customer Call Reporter における任意のコードを実行される脆弱性 CWE-Other
その他
CVE-2012-3811 2012-07-5 13:44 2012-06-28 Show GitHub Exploit DB Packet Storm
240424 5 警告 Joomla! - Joomla! における重要な情報を取得される脆弱性 CWE-noinfo
情報不足
CVE-2012-2748 2012-07-5 11:57 2012-06-18 Show GitHub Exploit DB Packet Storm
240425 7.5 危険 Joomla! - Joomla! における権限を取得される脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2012-2747 2012-07-5 11:56 2012-06-18 Show GitHub Exploit DB Packet Storm
240426 9.3 危険 Argonne National Laboratory - bcfg2 の Trigger プラグインにおける任意のコマンドを実行される脆弱性 CWE-78
OSコマンド・インジェクション
CVE-2012-3366 2012-07-4 15:54 2012-07-3 Show GitHub Exploit DB Packet Storm
240427 1.2 注意 Fedora Project
レッドハット
- 389 Directory Server におけるパスワードを読まれる脆弱性 CWE-310
暗号の問題
CVE-2012-2678 2012-07-4 15:32 2012-06-20 Show GitHub Exploit DB Packet Storm
240428 4 警告 Linux - Linux Kernel におけるサービス運用妨害 (システムクラッシュ) の脆弱性 CWE-399
リソース管理の問題
CVE-2012-2133 2012-07-4 15:30 2012-07-3 Show GitHub Exploit DB Packet Storm
240429 1.9 注意 レッドハット - Automatic Bug Reporting Tool (ABRT) の C handler プラグインにおける重要な情報を取得される脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2012-1106 2012-07-4 15:28 2012-06-20 Show GitHub Exploit DB Packet Storm
240430 2.3 注意 Fedora Project - 389 Directory Server の servers/plugins/acl/acllas.c におけるサービス運用妨害 (DoS) の脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2012-0833 2012-07-4 15:26 2012-01-6 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 12, 2026, 5:06 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
286101 - apple iphone_os Backup in Apple iOS before 7.1 does not properly restrict symlinks, which allows remote attackers to overwrite files during a restore operation via crafted backup data. CWE-264
Permissions, Privileges, and Access Controls
CVE-2013-5133 2024-11-21 10:57 2014-03-14 Show GitHub Exploit DB Packet Storm
286102 - zldnn dnnarticle SQL injection vulnerability in the RSS page (DNNArticleRSS.aspx) in the ZLDNN DNNArticle module before 10.1 for DotNetNuke allows remote attackers to execute arbitrary SQL commands via the categoryid… CWE-89
SQL Injection
CVE-2013-5117 2024-11-21 10:57 2014-03-12 Show GitHub Exploit DB Packet Storm
286103 - raoul_proenca gnew Directory traversal vulnerability in users/login.php in Gnew 2013.1 and earlier allows remote attackers to read arbitrary files via a .. (dot dot) in the gnew_language cookie. CWE-22
Path Traversal
CVE-2013-5639 2024-11-21 10:57 2014-03-12 Show GitHub Exploit DB Packet Storm
286104 - ibm algo_one IBM Algo One, as used in MetaData Management Tools in UDS 4.7.0 through 5.0.0, ACSWeb in Algo Security Access Control Management 4.7.0 through 4.9.0, and ACSWeb in AlgoWebApps 5.0.0, does not encrypt… CWE-310
Cryptographic Issues
CVE-2013-5468 2024-11-21 10:57 2014-03-5 Show GitHub Exploit DB Packet Storm
286105 - irfanview irfanview Heap-based buffer overflow in IrfanView before 4.37 allows remote attackers to execute arbitrary code via the LZW code stream in a GIF file. CWE-119
Incorrect Access of Indexable Resource ('Range Error') 
CVE-2013-5351 2024-11-21 10:57 2014-02-15 Show GitHub Exploit DB Packet Storm
286106 - ibm platform_symphony An unspecified servlet in IBM Platform Symphony Developer Edition (DE) 5.2 and 6.1.x through 6.1.1 has hardcoded credentials, which allows remote attackers to bypass authentication and obtain "local … CWE-255
Credentials Management
CVE-2013-5400 2024-11-21 10:57 2014-02-14 Show GitHub Exploit DB Packet Storm
286107 - ibm infosphere_master_data_management_server_for_product_information_management
infosphere_master_data_management_collaboration_server
Cross-site request forgery (CSRF) vulnerability in IBM InfoSphere Master Data Management - Collaborative Edition 10.x before 10.1 FP8 through 11.0 and InfoSphere Master Data Management Server for Pro… CWE-352
 Origin Validation Error
CVE-2013-5427 2024-11-21 10:57 2014-02-4 Show GitHub Exploit DB Packet Storm
286108 - mcafee vulnerability_manager Cross-site scripting (XSS) vulnerability in index.exp in McAfee Vulnerability Manager 7.5 allows remote attackers to inject arbitrary web script or HTML via the cert_cn cookie parameter. CWE-79
Cross-site Scripting
CVE-2013-5094 2024-11-21 10:57 2014-01-29 Show GitHub Exploit DB Packet Storm
286109 - secunia csi_agent Secunia CSI Agent 6.0.0.15017 and earlier, 6.0.1.1007 and earlier, and 7.0.0.21 and earlier, when running on Red Hat Linux, uses world-readable and world-writable permissions for /etc/csia_config.xml… CWE-264
Permissions, Privileges, and Access Controls
CVE-2013-5364 2024-11-21 10:57 2014-01-26 Show GitHub Exploit DB Packet Storm
286110 - tejimaya openpne The "Remember me" feature in the opSecurityUser::getRememberLoginCookie function in lib/user/opSecurityUser.class.php in OpenPNE 3.6.13 before 3.6.13.1 and 3.8.9 before 3.8.9.1 does not properly vali… CWE-20
 Improper Input Validation 
CVE-2013-5350 2024-11-21 10:57 2014-01-25 Show GitHub Exploit DB Packet Storm