Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 1, 2026, 12:10 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
253021 7.5 危険 サイバートラスト株式会社
レッドハット
Alexander V. Lukyanov		 - LFTP の get1 コマンドにおける任意のコードを実行される脆弱性 CWE-20
不適切な入力確認 		CVE-2010-2251 2010-08-26 16:57 2010-07-6 Show GitHub Exploit DB Packet Storm
253022 5 警告 日立 - JP1/Integrated Manager および JP1/Integrated Management 製品におけるサービス運用妨害 (DoS) の脆弱性 CWE-noinfo
情報不足 		- 2010-08-26 16:56 2010-07-30 Show GitHub Exploit DB Packet Storm
253023 5 警告 日立 - JP1/PAM におけるサービス運用妨害 (DoS) の脆弱性 CWE-noinfo
情報不足 		- 2010-08-26 16:56 2010-07-30 Show GitHub Exploit DB Packet Storm
253024 5 警告 日立 - JP1/AJS の組み込みDB利用製品におけるサービス運用妨害 (DoS) の脆弱性 CWE-noinfo
情報不足 		- 2010-08-26 16:55 2010-07-30 Show GitHub Exploit DB Packet Storm
253025 5 警告 日立 - JP1/ServerConductor/Control Manager におけるサービス運用妨害 (DoS) の脆弱性 CWE-noinfo
情報不足 		- 2010-08-26 16:55 2010-07-30 Show GitHub Exploit DB Packet Storm
253026 7.8 危険 日立 - Cosminexus 製品におけるサービス運用妨害 (DoS) の脆弱性 CWE-noinfo
情報不足 		- 2010-08-26 16:55 2010-07-30 Show GitHub Exploit DB Packet Storm
253027 4.3 警告 サイバートラスト株式会社
レッドハット		 - Apache Tomcat のサンプル用 calendar アプリケーションにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2009-2696 2010-08-25 17:05 2010-08-2 Show GitHub Exploit DB Packet Storm
253028 4.3 警告 インターネットイニシアティブ - SEIL/X シリーズおよび SEIL/B1 における IPv6 Unicast RPF 機能に関する脆弱性 CWE-Other
その他 		CVE-2010-2363 2010-08-25 12:01 2010-08-25 Show GitHub Exploit DB Packet Storm
253029 4.6 警告 レッドハット - LVM2 のクラスタ論理ボリュームマネージャデーモンにおけるサービス運用妨害 (DoS) の脆弱性 CWE-287
不適切な認証 		CVE-2010-2526 2010-08-24 18:42 2010-07-28 Show GitHub Exploit DB Packet Storm
253030 9.3 危険 シマンテック
IBM		 - Autonomy KeyView の WordPerfect 5.x reader (wosr.dll) におけるヒープベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2010-0135 2010-08-24 18:42 2010-08-4 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 1, 2026, 4:54 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
283241 - nagios nagios_xi SQL injection vulnerability in functions/prepend_adm.php in Nagios Core Config Manager in Nagios XI before 2012R2.4 allows remote attackers to execute arbitrary SQL commands via the tfPassword parame… CWE-89
SQL Injection 		CVE-2013-6875 2024-11-21 10:59 2013-11-27 Show GitHub Exploit DB Packet Storm
283242 - vortexgroup light_alloy Stack-based buffer overflow in Vortex Light Alloy before 4.7.4 allows remote attackers to execute arbitrary code via a long URL in a .m3u file. CWE-119
Incorrect Access of Indexable Resource ('Range Error')  		CVE-2013-6874 2024-11-21 10:59 2013-11-27 Show GitHub Exploit DB Packet Storm
283243 - testa online_test_management_system SQL injection vulnerability in Testa Online Test Management System (OTMS) 2.0.0.2 allows remote attackers to execute arbitrary SQL commands via the test_id parameter. CWE-89
SQL Injection 		CVE-2013-6873 2024-11-21 10:59 2013-11-27 Show GitHub Exploit DB Packet Storm
283244 - splunk splunk Cross-site scripting (XSS) vulnerability in Splunk Web in Splunk before 5.0.6 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. CWE-79
Cross-site Scripting 		CVE-2013-6870 2024-11-21 10:59 2013-11-26 Show GitHub Exploit DB Packet Storm
283245 - jenkins-ci build_failure_analyzer Cross-site scripting (XSS) vulnerability in the Build Failure Analyzer plugin before 1.5.1 for Jenkins allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors. CWE-79
Cross-site Scripting 		CVE-2013-6374 2024-11-21 10:59 2013-11-26 Show GitHub Exploit DB Packet Storm
283246 - jenkins-ci exclusion The Exclusion plugin before 0.9 for Jenkins does not properly prevent access to resource locks, which allows remote authenticated users to list and release resources via unspecified vectors. CWE-264
Permissions, Privileges, and Access Controls 		CVE-2013-6373 2024-11-21 10:59 2013-11-26 Show GitHub Exploit DB Packet Storm
283247 - sap netweaver SQL injection vulnerability in the SRTT_GET_COUNT_BEFORE_KEY_RFC function in SAP NetWeaver 7.30 allows remote attackers to execute arbitrary SQL commands via unspecified vectors. CWE-89
SQL Injection 		CVE-2013-6869 2024-11-21 10:59 2013-11-24 Show GitHub Exploit DB Packet Storm
283248 - sybase adaptive_server_enterprise SAP Sybase Adaptive Server Enterprise (ASE) 15.0.3 before 15.0.3 ESD#4.3, 15.5 before 15.5 ESD#5.3, and 15.7 before 15.7 SP50 or 15.7 SP100 allows local users to obtain sensitive information via unsp… CWE-200
Information Exposure 		CVE-2013-6868 2024-11-21 10:59 2013-11-24 Show GitHub Exploit DB Packet Storm
283249 - sybase adaptive_server_enterprise Unspecified vulnerability in SAP Sybase Adaptive Server Enterprise (ASE) 15.7 before 15.7 SP50 or 15.7 SP100 allows remote attackers to cause a denial of service via unspecified vectors. NVD-CWE-noinfo
CVE-2013-6867 2024-11-21 10:59 2013-11-24 Show GitHub Exploit DB Packet Storm
283250 - sybase adaptive_server_enterprise SAP Sybase Adaptive Server Enterprise (ASE) before 15.0.3 ESD#4.3, 15.5 before 15.5 ESD#5.3, and 15.7 before 15.7 SP50 or 15.7 SP100 allows remote authenticated users to execute arbitrary code via un… CWE-94
Code Injection 		CVE-2013-6866 2024-11-21 10:59 2013-11-24 Show GitHub Exploit DB Packet Storm