Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 14, 2026, 6:01 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
240731	4.3	警告	Wireshark	-	Wireshark の wiretap/pcap-common.c 内の pcap_process_pseudo_header 関数におけるサービス運用妨害 (DoS) の脆弱性	CWE-399 リソース管理の問題	CVE-2012-1595	2012-07-9 16:16	2012-03-27	Show	GitHub Exploit DB Packet Storm

240732	5	警告	Wireshark	-	Wireshark の mp2t_process_fragmented_payload 関数におけるサービス運用妨害 (DoS) の脆弱性	CWE-399 リソース管理の問題	CVE-2012-1596	2012-07-9 16:15	2012-03-27	Show	GitHub Exploit DB Packet Storm

240733	3.3	注意	Wireshark	-	Wireshark の ANSI A 解析機能におけるサービス運用妨害 (DoS) の脆弱性	CWE-Other その他	CVE-2012-1593	2012-07-9 16:13	2012-03-27	Show	GitHub Exploit DB Packet Storm

240734	2.1	注意	Fedora Project レッドハット	-	389 Directory Server におけるパスワードを読まれる脆弱性	CWE-310 暗号の問題	CVE-2012-2746	2012-07-9 16:06	2012-06-20	Show	GitHub Exploit DB Packet Storm

240735	9.3	危険	Irfan Skiljan	-	IrfanView PlugIns の JPEG_LS プラグインにおけるヒープベースのバッファオーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2012-3585	2012-07-9 15:47	2012-07-5	Show	GitHub Exploit DB Packet Storm

240736	4.3	警告	ヒューレット・パッカード	-	HP Network Node Manager i におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2012-2018	2012-07-9 15:45	2012-07-2	Show	GitHub Exploit DB Packet Storm

240737	6.8	警告	RSAセキュリティ	-	EMC RSA Access Manager Server および RSA Access Manager Agent におけるリプレイ攻撃の脆弱性	CWE-287 不適切な認証	CVE-2012-2281	2012-07-9 15:38	2012-07-5	Show	GitHub Exploit DB Packet Storm

240738	6.8	警告	シマンテック	-	Symantec Message Filter の Brightmail Control Center におけるクロスサイトリクエストフォージェリの脆弱性	CWE-352 同一生成元ポリシー違反	CVE-2012-0303	2012-07-9 11:33	2012-06-26	Show	GitHub Exploit DB Packet Storm

240739	4.3	警告	シマンテック	-	Symantec Message Filter の Brightmail Control Center におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2012-0302	2012-07-9 11:33	2012-06-26	Show	GitHub Exploit DB Packet Storm

240740	5.4	警告	シマンテック	-	Symantec Message Filter の Brightmail Control Center における Web セッションをハイジャックされる脆弱性	CWE-287 不適切な認証	CVE-2012-0301	2012-07-9 11:32	2012-06-26	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 14, 2026, 4 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
285811	8.8	HIGH Network	horde debian	groupware debian_linux	Horde Groupware Webmail Edition has CSRF and XSS when saving search as a virtual address book	CWE-352 CWE-79 Origin Validation Error Cross-site Scripting	CVE-2013-6364	2024-11-21 10:59	2019-11-5	Show	GitHub Exploit DB Packet Storm

285812	5.4	MEDIUM Network	ibm	spss_modeler	IBM SPSS Modeler before 16 on UNIX allows remote authenticated users to bypass intended access restrictions via an SSO token. IBM X-Force ID: 89855.	CWE-284 Improper Access Control	CVE-2013-6739	2024-11-21 10:59	2018-04-28	Show	GitHub Exploit DB Packet Storm

285813	7.8	HIGH Local	s3dvt_project	s3dvt	The (1) pty_init_terminal and (2) pipe_init_terminal functions in main.c in s3dvt 0.2.2 and earlier allows local users to gain privileges by leveraging setuid permissions and usage of bash 4.3 and ea…	CWE-264 Permissions, Privileges, and Access Controls	CVE-2013-6876	2024-11-21 10:59	2018-04-7	Show	GitHub Exploit DB Packet Storm

285814	5.4	MEDIUM Network	redhat	jbpm	Multiple cross-site scripting (XSS) vulnerabilities in JBPM KIE Workbench 6.0.x allow remote authenticated users to inject arbitrary web script or HTML via vectors related to task name html inputs.	CWE-79 Cross-site Scripting	CVE-2013-6465	2024-11-21 10:59	2017-12-20	Show	GitHub Exploit DB Packet Storm

285815	9.8	CRITICAL Network	seagate	blackarmor_nas_220_firmware	Seagate BlackArmor NAS devices with firmware sg2000-2000.1331 allow remote attackers to execute arbitrary commands via shell metacharacters in the ip parameter to backupmgt/getAlias.php.	CWE-77 Command Injection	CVE-2013-6924	2024-11-21 10:59	2017-10-11	Show	GitHub Exploit DB Packet Storm

285816	6.5	MEDIUM Network	google	chrome	Google Chrome caches TLS sessions before certificate validation occurs.	CWE-295 Improper Certificate Validation	CVE-2013-6662	2024-11-21 10:59	2017-04-14	Show	GitHub Exploit DB Packet Storm

285817	7.5	HIGH Network	google	skia	SkRegion::setPath in Skia allows remote attackers to cause a denial of service (crash).	NVD-CWE-noinfo	CVE-2013-6648	2024-11-21 10:59	2017-04-14	Show	GitHub Exploit DB Packet Storm

285818	9.8	CRITICAL Network	google	chrome	A use-after-free in AnimationController::endAnimationUpdate in Google Chrome.	CWE-416 Use After Free	CVE-2013-6647	2024-11-21 10:59	2017-04-12	Show	GitHub Exploit DB Packet Storm

285819	3.1	LOW Network	cloudera	cdh	The JobHistory Server in Cloudera CDH 4.x before 4.6.0 and 5.x before 5.0.0 Beta 2, when using MRv2/YARN with HTTP authentication, allows remote authenticated users to obtain sensitive job informatio…	CWE-264 Permissions, Privileges, and Access Controls	CVE-2013-6446	2024-11-21 10:59	2017-03-24	Show	GitHub Exploit DB Packet Storm

285820	-		php suse	php linux_enterprise_server	The default soap.wsdl_cache_dir setting in (1) php.ini-production and (2) php.ini-development in PHP through 5.6.7 specifies the /tmp directory, which makes it easier for local users to conduct WSDL …	CWE-74 Injection	CVE-2013-6501	2024-11-21 10:59	2015-03-30	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed