Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":July 1, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
259601	4.3	警告	株式会社ロックオン	-	EC-CUBE におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2011-0451	2011-02-2 14:01	2011-02-2	Show	GitHub Exploit DB Packet Storm

259602	9.3	危険	アップルアドビシステムズレッドハットオラクル	-	Adobe Flash Player における任意のコードを実行される脆弱性	CWE-noinfo 情報不足	CVE-2010-3644	2011-02-1 16:29	2010-11-4	Show	GitHub Exploit DB Packet Storm

259603	9.3	危険	アップルアドビシステムズレッドハットオラクル	-	Adobe Flash Player における任意のコードを実行される脆弱性	CWE-noinfo 情報不足	CVE-2010-3643	2011-02-1 16:28	2010-11-4	Show	GitHub Exploit DB Packet Storm

259604	9.3	危険	アップルアドビシステムズレッドハットオラクル	-	Adobe Flash Player における任意のコードを実行される脆弱性	CWE-noinfo 情報不足	CVE-2010-3642	2011-02-1 16:27	2010-11-4	Show	GitHub Exploit DB Packet Storm

259605	9.3	危険	アップルアドビシステムズレッドハットオラクル	-	Adobe Flash Player における任意のコードを実行される脆弱性	CWE-noinfo 情報不足	CVE-2010-3641	2011-02-1 16:26	2010-11-4	Show	GitHub Exploit DB Packet Storm

259606	9.3	危険	アップルアドビシステムズレッドハットオラクル	-	Adobe Flash Player における任意のコードを実行される脆弱性	CWE-noinfo 情報不足	CVE-2010-3640	2011-02-1 16:25	2010-11-4	Show	GitHub Exploit DB Packet Storm

259607	9.3	危険	アップルアドビシステムズレッドハットオラクル	-	Adobe Flash Player における任意のコードを実行される脆弱性	CWE-noinfo 情報不足	CVE-2010-3639	2011-02-1 16:24	2010-11-4	Show	GitHub Exploit DB Packet Storm

259608	9.3	危険	アドビシステムズオラクル	-	Adobe Flash Player の ActiveX コントロールにおける任意のコードを実行される脆弱性	CWE-119 バッファエラー	CVE-2010-3637	2011-02-1 16:23	2010-11-4	Show	GitHub Exploit DB Packet Storm

259609	2.6	注意	アップルアドビシステムズレッドハットオラクル	-	Flash Player におけるアクセス制限回避の脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2010-3636	2011-02-1 16:20	2010-11-9	Show	GitHub Exploit DB Packet Storm

259610	8.5	危険	アップルサイバートラスト株式会社 MySQL AB レッドハット	-	MySQL の dispatch_command 関数におけるサービス運用妨害 (DoS) の脆弱性	CWE-134 書式文字列の問題	CVE-2009-2446	2011-02-1 16:19	2009-07-7	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:July 1, 2026, 4:27 a.m.

No	CVSS	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
297151	-	ibm	qradar_security_information_and_event_manager	Cross-site scripting (XSS) vulnerability in IBM Security QRadar SIEM 7.0 allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors.	CWE-79 Cross-site Scripting	CVE-2013-6307	2024-11-21 10:58	2013-11-30	Show	GitHub Exploit DB Packet Storm

297152	-	thomsonreuters	velocity_analytics_vhayu_analytic_server	VhttpdMgr in Thomson Reuters Velocity Analytics Vhayu Analytic Server 6.94 build 2995 allows remote attackers to execute arbitrary code via a URL in the fileName parameter during an importFile action.	CWE-94 Code Injection	CVE-2013-5912	2024-11-21 10:58	2013-11-28	Show	GitHub Exploit DB Packet Storm

297153	-	civicrm	civicrm	Multiple SQL injection vulnerabilities in CRM/Core/Page/AJAX/Location.php in CiviCRM before 4.2.12, 4.3.x before 4.3.7, and 4.4.x before 4.4.beta4 allow remote attackers to execute arbitrary SQL comm…	CWE-89 SQL Injection	CVE-2013-5957	2024-11-21 10:58	2013-11-28	Show	GitHub Exploit DB Packet Storm

297154	-	ibm	rational_performance_tester rational_service_tester	Unspecified vulnerability in IBM Rational Service Tester 8.3.x and 8.5.x before 8.5.1 and Rational Performance Tester 8.3.x and 8.5.x before 8.5.1 allows remote attackers to read arbitrary files via …	NVD-CWE-noinfo	CVE-2013-6312	2024-11-21 10:58	2013-11-23	Show	GitHub Exploit DB Packet Storm

297155	-	kingsoft	kdrive	Kingsoft KDrive Personal before 1.21.0.1880 on Windows does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information …	CWE-310 Cryptographic Issues	CVE-2013-5999	2024-11-21 10:58	2013-11-23	Show	GitHub Exploit DB Packet Storm

297156	-	dlink	des-3800_firmware des-3800	Unspecified vulnerability in the Web manager implementation on D-Link Japan DES-3800 devices with firmware before R4.50B58 allows remote attackers to cause a denial of service (device hang) via unkno…	NVD-CWE-noinfo	CVE-2013-5998	2024-11-21 10:58	2013-11-23	Show	GitHub Exploit DB Packet Storm

297157	-	dlink	des-3800_firmware des-3800	Unspecified vulnerability in the SSH implementation on D-Link Japan DES-3800 devices with firmware before R4.50B58 allows remote authenticated users to cause a denial of service (device hang) via unk…	NVD-CWE-noinfo	CVE-2013-5997	2024-11-21 10:58	2013-11-23	Show	GitHub Exploit DB Packet Storm

297158	-	emc	document_sciences_xpression	Directory traversal vulnerability in EMC Document Sciences xPression 4.1 SP1 before Patch 47, 4.2 before Patch 26, and 4.5 before Patch 05, as used in Documentum Edition, Enterprise Edition Publish E…	CWE-22 Path Traversal	CVE-2013-6177	2024-11-21 10:58	2013-11-21	Show	GitHub Exploit DB Packet Storm

297159	-	emc	document_sciences_xpression	Multiple SQL injection vulnerabilities in EMC Document Sciences xPression 4.1 SP1 before Patch 47, 4.2 before Patch 26, and 4.5 before Patch 05, as used in Documentum Edition, Enterprise Edition Publ…	CWE-89 SQL Injection	CVE-2013-6176	2024-11-21 10:58	2013-11-21	Show	GitHub Exploit DB Packet Storm

297160	-	emc	document_sciences_xpression	Multiple cross-site scripting (XSS) vulnerabilities in EMC Document Sciences xPression 4.1 SP1 before Patch 47, 4.2 before Patch 26, and 4.5 before Patch 05, as used in Documentum Edition, Enterprise…	CWE-79 Cross-site Scripting	CVE-2013-6175	2024-11-21 10:58	2013-11-21	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed