Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":June 13, 2026, 4 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
257201	5.1	警告	Opera Software ASA	-	Opera における実行ファイル読み込みに関する脆弱性	CWE-Other その他	CVE-2011-0450	2011-02-2 14:02	2011-02-2	Show	GitHub Exploit DB Packet Storm

257202	4.3	警告	株式会社ロックオン	-	EC-CUBE におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2011-0451	2011-02-2 14:01	2011-02-2	Show	GitHub Exploit DB Packet Storm

257203	9.3	危険	アップルアドビシステムズレッドハットオラクル	-	Adobe Flash Player における任意のコードを実行される脆弱性	CWE-noinfo 情報不足	CVE-2010-3644	2011-02-1 16:29	2010-11-4	Show	GitHub Exploit DB Packet Storm

257204	9.3	危険	アップルアドビシステムズレッドハットオラクル	-	Adobe Flash Player における任意のコードを実行される脆弱性	CWE-noinfo 情報不足	CVE-2010-3643	2011-02-1 16:28	2010-11-4	Show	GitHub Exploit DB Packet Storm

257205	9.3	危険	アップルアドビシステムズレッドハットオラクル	-	Adobe Flash Player における任意のコードを実行される脆弱性	CWE-noinfo 情報不足	CVE-2010-3642	2011-02-1 16:27	2010-11-4	Show	GitHub Exploit DB Packet Storm

257206	9.3	危険	アップルアドビシステムズレッドハットオラクル	-	Adobe Flash Player における任意のコードを実行される脆弱性	CWE-noinfo 情報不足	CVE-2010-3641	2011-02-1 16:26	2010-11-4	Show	GitHub Exploit DB Packet Storm

257207	9.3	危険	アップルアドビシステムズレッドハットオラクル	-	Adobe Flash Player における任意のコードを実行される脆弱性	CWE-noinfo 情報不足	CVE-2010-3640	2011-02-1 16:25	2010-11-4	Show	GitHub Exploit DB Packet Storm

257208	9.3	危険	アップルアドビシステムズレッドハットオラクル	-	Adobe Flash Player における任意のコードを実行される脆弱性	CWE-noinfo 情報不足	CVE-2010-3639	2011-02-1 16:24	2010-11-4	Show	GitHub Exploit DB Packet Storm

257209	9.3	危険	アドビシステムズオラクル	-	Adobe Flash Player の ActiveX コントロールにおける任意のコードを実行される脆弱性	CWE-119 バッファエラー	CVE-2010-3637	2011-02-1 16:23	2010-11-4	Show	GitHub Exploit DB Packet Storm

257210	2.6	注意	アップルアドビシステムズレッドハットオラクル	-	Flash Player におけるアクセス制限回避の脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2010-3636	2011-02-1 16:20	2010-11-9	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:June 13, 2026, 4:20 a.m.

No	CVSS	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
287501	-	ibm	db2_connect db2	IBM DB2 9.7 through FP10, 9.8 through FP5, 10.1 through FP4, and 10.5 before FP5 on Linux, UNIX, and Windows allows remote authenticated users to cause a denial of service (daemon crash) by specifyin…	CWE-20 Improper Input Validation	CVE-2014-6210	2024-11-21 11:13	2014-12-13	Show	GitHub Exploit DB Packet Storm

287502	-	ibm	db2	IBM DB2 9.5 through FP10, 9.7 through FP10, 9.8 through FP5, 10.1 through FP4, and 10.5 before FP5 on Linux, UNIX, and Windows allows remote authenticated users to cause a denial of service (daemon c…	CWE-20 Improper Input Validation	CVE-2014-6209	2024-11-21 11:13	2014-12-13	Show	GitHub Exploit DB Packet Storm

287503	-	ibm	cognos_business_intelligence	Cross-site scripting (XSS) vulnerability in the server in IBM Cognos Business Intelligence 10.1 before IF10, 10.1.1 before IF9, 10.2 before IF11, 10.2.1 before IF8, and 10.2.1.1 before IF7 allows rem…	CWE-79 Cross-site Scripting	CVE-2014-6145	2024-11-21 11:13	2014-12-12	Show	GitHub Exploit DB Packet Storm

287504	-	ibm	websphere_datapower_xc10_appliance_firmware	The IBM WebSphere DataPower XC10 appliance 2.1 and 2.5 before FP4 allows remote authenticated users to bypass intended grid-data access restrictions via unspecified vectors.	CWE-200 Information Exposure	CVE-2014-6138	2024-11-21 11:13	2014-12-12	Show	GitHub Exploit DB Packet Storm

287505	-	ibm	websphere_portal	Cross-site scripting (XSS) vulnerability in IBM WebSphere Portal 6.1.0 through 6.1.0.6 CF27, 6.1.5 through 6.1.5.3 CF27, 7.0.0 before 7.0.0.2 CF29, 8.0.0 through 8.0.0.1 CF14, and 8.5.0 before CF03 a…	CWE-79 Cross-site Scripting	CVE-2014-6215	2024-11-21 11:13	2014-12-12	Show	GitHub Exploit DB Packet Storm

287506	-	ibm	websphere_datapower_xc10_appliance_firmware	Cross-site scripting (XSS) vulnerability on the IBM WebSphere DataPower XC10 appliance 2.1 and 2.5 before FP4 allows remote authenticated users to inject arbitrary web script or HTML via a crafted UR…	CWE-79 Cross-site Scripting	CVE-2014-6163	2024-11-21 11:13	2014-12-12	Show	GitHub Exploit DB Packet Storm

287507	-	ibm	websphere_datapower_xc10_appliance_firmware	The IBM WebSphere DataPower XC10 appliance 2.1 and 2.5 before FP4 allows local users to obtain sensitive information by reading a response.	CWE-200 Information Exposure	CVE-2014-6143	2024-11-21 11:13	2014-12-12	Show	GitHub Exploit DB Packet Storm

287508	-	ibm	operational_decision_manager websphere_ilog_jrules websphere_operational_decision_management	The Hosted Transparent Decision Service in the Rule Execution Server in IBM WebSphere ILOG JRules 7.1 before MP1 FP5 IF43; WebSphere Operational Decision Management 7.5 before FP3 IF41; and Operation…	CWE-200 Information Exposure	CVE-2014-6114	2024-11-21 11:13	2014-12-11	Show	GitHub Exploit DB Packet Storm

287509	-	ibm	tivoli_endpoint_manager_mobile_device_management	IBM Tivoli Endpoint Manager Mobile Device Management (MDM) before 9.0.60100 uses the same secret HMAC token across different customers' installations, which allows remote attackers to execute arbitra…	CWE-310 Cryptographic Issues	CVE-2014-6140	2024-11-21 11:13	2014-12-7	Show	GitHub Exploit DB Packet Storm

287510	-	gnu	glibc	GNU C Library (aka glibc) before 2.20 allows context-dependent attackers to cause a denial of service (out-of-bounds read and crash) via a multibyte character value of "0xffff" to the iconv function …	CWE-119 Incorrect Access of Indexable Resource ('Range Error')	CVE-2014-6040	2024-11-21 11:13	2014-12-6	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed