Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 12, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
252021 5 警告 Opera Software ASA - Opera におけるサービス運用妨害 (アプリケーションハング) の脆弱性 CWE-noinfo
情報不足 		CVE-2011-2615 2011-07-26 11:58 2011-06-28 Show GitHub Exploit DB Packet Storm
252022 5 警告 Opera Software ASA - Opera の SVG 実装におけるサービス運用妨害 (アプリケーションクラッシュ) の脆弱性 CWE-399
リソース管理の問題 		CVE-2011-2614 2011-07-26 11:57 2011-06-28 Show GitHub Exploit DB Packet Storm
252023 9.3 危険 シマンテック - 複数の Symantec 製品の Lotus Freelance Graphics PRZ file viewer におけるバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2011-0548 2011-07-26 11:36 2011-05-31 Show GitHub Exploit DB Packet Storm
252024 5 警告 ブロケード コミュニケーションズ システムズ株式会社 - Brocade BigIron RX スイッチにアクセス制御リスト (ACL) 回避の脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2011-2760 2011-07-26 11:32 2011-07-14 Show GitHub Exploit DB Packet Storm
252025 4.3 警告 日立 - JP1/Performance Management - Web Console におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		- 2011-07-26 11:30 2011-07-14 Show GitHub Exploit DB Packet Storm
252026 10 危険 日立 - HiRDB Control Manager - Agent における任意のコマンドを実行される脆弱性 CWE-noinfo
情報不足 		- 2011-07-26 11:28 2011-07-8 Show GitHub Exploit DB Packet Storm
252027 10 危険 サイバートラスト株式会社
Mozilla Foundation
レッドハット		 - Mozilla Firefox および Thunderbird におけるサービス運用妨害 (DoS) の脆弱性 CWE-noinfo
情報不足 		CVE-2011-2376 2011-07-26 11:20 2011-06-21 Show GitHub Exploit DB Packet Storm
252028 10 危険 サイバートラスト株式会社
Mozilla Foundation
レッドハット		 - 複数の Mozilla 製品のブラウザエンジンにおけるサービス運用妨害 (DoS) の脆弱性 CWE-noinfo
情報不足 		CVE-2011-2375 2011-07-26 11:14 2011-06-21 Show GitHub Exploit DB Packet Storm
252029 10 危険 サイバートラスト株式会社
Mozilla Foundation
レッドハット		 - 複数の Mozilla 製品のブラウザエンジンにおけるサービス運用妨害 (DoS) の脆弱性 CWE-noinfo
情報不足 		CVE-2011-2374 2011-07-26 11:13 2011-06-21 Show GitHub Exploit DB Packet Storm
252030 10 危険 サイバートラスト株式会社
Mozilla Foundation
レッドハット		 - 複数の Mozilla 製品のブラウザエンジンにおけるサービス運用妨害 (DoS) の脆弱性 CWE-noinfo
情報不足 		CVE-2011-2364 2011-07-26 11:09 2011-06-21 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 12, 2026, 5:06 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
286941 - leon_weber pyxtrlock pyxtrlock before 0.1 uses an incorrect variable name, which allows physically proximate attackers to bypass the lock screen via multiple failed authentication attempts, which trigger a crash. NVD-CWE-noinfo
CVE-2013-4426 2024-11-21 10:55 2014-05-19 Show GitHub Exploit DB Packet Storm
286942 - quick_tabs_module_project quicktabs The Quick Tabs module 6.x-2.x before 6.x-2.2, 6.x-3.x before 6.x-3.2, and 7.x-3.x before 7.x-3.6 for Drupal does not properly check block permissions, which allows remote attackers to obtain sensitiv… CWE-264
Permissions, Privileges, and Access Controls 		CVE-2013-4406 2024-11-21 10:55 2014-05-19 Show GitHub Exploit DB Packet Storm
286943 - florian_weber spaces The Spaces OG submodule in the Spaces module 6.x-3.x before 6.x-3.7 for Drupal does not properly delete organic group group spaces content when using the option to move to a new group, which causes t… CWE-264
Permissions, Privileges, and Access Controls 		CVE-2013-4498 2024-11-21 10:55 2014-05-18 Show GitHub Exploit DB Packet Storm
286944 - gitlab gitlab The Grit gem for Ruby, as used in GitLab 5.2 before 5.4.1 and 6.x before 6.2.3, allows remote authenticated users to execute arbitrary commands, as demonstrated by the search box for the GitLab code … NVD-CWE-Other
CVE-2013-4489 2024-11-21 10:55 2014-05-18 Show GitHub Exploit DB Packet Storm
286945 - openstack horizon The Identity v3 API in OpenStack Dashboard (Horizon) before 2013.2 does not require the current password when changing passwords for user accounts, which makes it easier for remote attackers to chang… CWE-287
Improper Authentication 		CVE-2013-4471 2024-11-21 10:55 2014-05-15 Show GitHub Exploit DB Packet Storm
286946 - vicidial vicidial VICIDIAL dialer (aka Asterisk GUI client) 2.8-403a, 2.7, 2.7RC1, and earlier allows remote authenticated users to execute arbitrary commands via shell metacharacters in the extension parameter in an … NVD-CWE-Other
CVE-2013-4468 2024-11-21 10:55 2014-05-15 Show GitHub Exploit DB Packet Storm
286947 - katello katello_installer Katello Installer before 0.0.18 uses world-readable permissions for /etc/pki/tls/private/katello-node.key when deploying a child Pulp node, which allows local users to obtain the private key by readi… CWE-264
Permissions, Privileges, and Access Controls 		CVE-2013-4455 2024-11-21 10:55 2014-05-15 Show GitHub Exploit DB Packet Storm
286948 - madeofcode omniauth-facebook The omniauth-facebook gem 1.4.1 before 1.5.0 does not properly store the session parameter, which allows remote attackers to conduct cross-site request forgery (CSRF) attacks via the state parameter. CWE-352
 Origin Validation Error 		CVE-2013-4562 2024-11-21 10:55 2014-05-14 Show GitHub Exploit DB Packet Storm
286949 - drupalauth_project drupalauth lib/Auth/Source/External.php in the drupalauth module before 1.2.2 for simpleSAMLphp allows remote attackers to authenticate as an arbitrary user via the user name (uid) in a cookie. CWE-287
Improper Authentication 		CVE-2013-4552 2024-11-21 10:55 2014-05-14 Show GitHub Exploit DB Packet Storm
286950 - gitlab gitlab
gitlab-shell 		The repository import feature in gitlab-shell before 1.7.4, as used in GitLab, allows remote authenticated users to execute arbitrary commands via the import URL. NVD-CWE-Other
CVE-2013-4546 2024-11-21 10:55 2014-05-14 Show GitHub Exploit DB Packet Storm