Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 18, 2026, 4:01 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
255641 4.3 警告 アドビシステムズ - Adobe ColdFusion の Administrator ページにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2010-1293 2010-06-2 12:14 2010-05-11 Show GitHub Exploit DB Packet Storm
255642 4.3 警告 アドビシステムズ - Adobe ColdFusion におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2009-3467 2010-06-2 12:13 2010-05-11 Show GitHub Exploit DB Packet Storm
255643 9.3 危険 アドビシステムズ - Adobe Shockwave Player の pami RIFF chunk 構文解析における任意のコードを実行される脆弱性 CWE-20
不適切な入力確認 		CVE-2010-1292 2010-06-2 12:13 2010-05-11 Show GitHub Exploit DB Packet Storm
255644 9.3 危険 アドビシステムズ - Adobe Shockwave Player における任意のコードを実行される脆弱性 CWE-119
バッファエラー 		CVE-2010-1291 2010-06-2 12:13 2010-05-11 Show GitHub Exploit DB Packet Storm
255645 9.3 危険 アドビシステムズ - Adobe Shockwave Player における任意のコードを実行される脆弱性 CWE-119
バッファエラー 		CVE-2010-1290 2010-06-2 12:13 2010-05-11 Show GitHub Exploit DB Packet Storm
255646 9.3 危険 ジャストシステム - 一太郎シリーズにおける任意のコードが実行される脆弱性 CWE-noinfo
情報不足 		CVE-2010-2152 2010-06-1 16:01 2010-06-1 Show GitHub Exploit DB Packet Storm
255647 9.3 危険 アドビシステムズ - Adobe Shockwave Player における任意のコードを実行される脆弱性 CWE-119
バッファエラー 		CVE-2010-1289 2010-06-1 15:45 2010-05-11 Show GitHub Exploit DB Packet Storm
255648 9.3 危険 アドビシステムズ - Adobe Shockwave Player におけるバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2010-1288 2010-06-1 15:45 2010-05-11 Show GitHub Exploit DB Packet Storm
255649 9.3 危険 アドビシステムズ - Adobe Shockwave Player における任意のコードを実行される脆弱性 CWE-119
バッファエラー 		CVE-2010-1287 2010-06-1 15:45 2010-05-11 Show GitHub Exploit DB Packet Storm
255650 9.3 危険 アドビシステムズ - Adobe Shockwave Player における任意のコードを実行される脆弱性 CWE-119
バッファエラー 		CVE-2010-1286 2010-06-1 15:44 2010-05-11 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 18, 2026, 4:12 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
288821 - apache sling_auth_core_component
sling 		Open redirect vulnerability in the AbstractAuthenticationFormServlet in the Auth Core (org.apache.sling.auth.core) bundle before 1.1.4 in Apache Sling allows remote attackers to redirect users to arb… CWE-20
 Improper Input Validation  		CVE-2013-4390 2024-11-21 10:55 2013-10-24 Show GitHub Exploit DB Packet Storm
288822 - redhat jboss_operations_network The storeFiles method in JPADriftServerBean in Red Hat JBoss Operations Network (JON) 3.1.2 allows local users to load arbitrary drift files into a server by writing the files to the temporary direct… CWE-20
 Improper Input Validation  		CVE-2013-4373 2024-11-21 10:55 2013-10-24 Show GitHub Exploit DB Packet Storm
288823 - apache shindig The gadget renderer in Apache Shindig 2.5.0 for PHP allows remote attackers to obtain sensitive information via an XML document containing an external entity declaration in conjunction with an entity… CWE-200
Information Exposure 		CVE-2013-4295 2024-11-21 10:55 2013-10-24 Show GitHub Exploit DB Packet Storm
288824 - redhat jboss_operations_network The server in Red Hat JBoss Operations Network (JON) 3.1.2 logs passwords in plaintext, which allows local users to obtain sensitive information by reading the log files. CWE-310
Cryptographic Issues 		CVE-2013-4293 2024-11-21 10:55 2013-10-24 Show GitHub Exploit DB Packet Storm
288825 - quassel-irc quassel_irc SQL injection vulnerability in Quassel IRC before 0.9.1, when Qt 4.8.5 or later and PostgreSQL 8.2 or later are used, allows remote attackers to execute arbitrary SQL commands via a \ (backslash) in … CWE-89
SQL Injection 		CVE-2013-4422 2024-11-21 10:55 2013-10-24 Show GitHub Exploit DB Packet Storm
288826 - nodejs nodejs The HTTP server in Node.js 0.10.x before 0.10.21 and 0.8.x before 0.8.26 allows remote attackers to cause a denial of service (memory and CPU consumption) by sending a large number of pipelined reque… CWE-20
 Improper Input Validation  		CVE-2013-4450 2024-11-21 10:55 2013-10-22 Show GitHub Exploit DB Packet Storm
288827 - redhat
feep 		enterprise_linux
libtar 		Multiple integer overflows in the th_read function in lib/block.c in libtar before 1.2.20 allow remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a long (1… CWE-189
Numeric Errors 		CVE-2013-4397 2024-11-21 10:55 2013-10-18 Show GitHub Exploit DB Packet Storm
288828 - xen xen Use-after-free vulnerability in the libxl_list_cpupool function in the libxl toolstack library in Xen 4.2.x and 4.3.x, when running "under memory pressure," returns the original pointer when the real… CWE-399
 Resource Management Errors 		CVE-2013-4371 2024-11-21 10:55 2013-10-18 Show GitHub Exploit DB Packet Storm
288829 - xen xen The ocaml binding for the xc_vcpu_getaffinity function in Xen 4.2.x and 4.3.x frees certain memory that may still be intended for use, which allows local users to cause a denial of service (heap corr… CWE-119
Incorrect Access of Indexable Resource ('Range Error')  		CVE-2013-4370 2024-11-21 10:55 2013-10-18 Show GitHub Exploit DB Packet Storm
288830 - xen xen The xlu_vif_parse_rate function in the libxlu library in Xen 4.2.x and 4.3.x allows local users to cause a denial of service (NULL pointer dereference) by using the "@" character as the VIF rate conf… NVD-CWE-Other
CVE-2013-4369 2024-11-21 10:55 2013-10-18 Show GitHub Exploit DB Packet Storm