Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 13, 2026, 6 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
223101 3.5 注意 IBM - IBM InfoSphere Enterprise Records および Enterprise Records におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2013-6314 2014-03-7 15:10 2013-10-31 Show GitHub Exploit DB Packet Storm
223102 4 警告 IBM - IBM Algo One の Algo Risk Application におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル
CVE-2013-6304 2014-03-7 15:10 2013-10-31 Show GitHub Exploit DB Packet Storm
223103 4 警告 DELL EMC (旧 EMC Corporation) - EMC Documentum TaskSpace における任意のファイルを読まれる脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2014-0630 2014-03-7 12:02 2014-03-5 Show GitHub Exploit DB Packet Storm
223104 6 警告 DELL EMC (旧 EMC Corporation) - EMC Documentum TaskSpace における重要な情報および権限を取得される脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2014-0629 2014-03-7 12:02 2014-03-5 Show GitHub Exploit DB Packet Storm
223105 2.7 注意 DELL EMC (旧 EMC Corporation) - EMC RSA Data Loss Prevention における権限を取得される脆弱性 CWE-noinfo
情報不足
CVE-2014-0624 2014-03-7 12:02 2014-02-28 Show GitHub Exploit DB Packet Storm
223106 6.8 警告 SERENA Software - Serena Dimensions CM の Web クライアントにおけるクロスサイトリクエストフォージェリの脆弱性 CWE-352
同一生成元ポリシー違反
CVE-2014-0336 2014-03-7 11:37 2014-03-5 Show GitHub Exploit DB Packet Storm
223107 4.3 警告 SERENA Software - Serena Dimensions CM の Web クライアントにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2014-0335 2014-03-7 11:37 2014-03-5 Show GitHub Exploit DB Packet Storm
223108 9.3 危険 オラクル - Oracle Java SE の Java Runtime Environment における Deployment に関する脆弱性 CWE-noinfo
情報不足
CVE-2013-2462 2014-03-6 18:37 2013-06-18 Show GitHub Exploit DB Packet Storm
223109 9.3 危険 オラクル - Oracle Java SE の Java Runtime Environment における Serviceability に関する脆弱性 CWE-noinfo
情報不足
CVE-2013-2460 2014-03-6 18:25 2013-06-18 Show GitHub Exploit DB Packet Storm
223110 5.8 警告 オラクル - Oracle Java SE の Java Runtime Environment における Libraries に関する脆弱性 CWE-noinfo
情報不足
CVE-2013-2458 2014-03-6 18:24 2013-06-18 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 13, 2026, 4:20 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
314691 6.5 MEDIUM
Network
mongodb mongodb prepareUnique index may cause secondaries to crash due to incorrect enforcement of index constraints on secondaries, where in extreme cases may cause multiple secondaries crashing leading to no prima… NVD-CWE-Other
CVE-2024-8305 2024-11-8 00:38 2024-10-22 Show GitHub Exploit DB Packet Storm
314692 6.1 MEDIUM
Network
klokantech maptiler_tileserver_gl A vulnerability was found in Klokan MapTiler tileserver-gl 2.3.1 and classified as problematic. This issue affects some unknown processing of the component URL Handler. The manipulation of the argume… CWE-79
Cross-site Scripting
CVE-2024-10503 2024-11-8 00:30 2024-10-30 Show GitHub Exploit DB Packet Storm
314693 7.5 HIGH
Network
nginxui nginx_ui Nginx UI is a web user interface for the Nginx web server. Nginx UI v2.0.0-beta.35 and earlier gets the value from the json field without verification, and can construct a value value in the form of … CWE-22
Path Traversal
CVE-2024-49366 2024-11-8 00:15 2024-10-22 Show GitHub Exploit DB Packet Storm
314694 7.5 HIGH
Network
nginxui nginx_ui Nginx UI is a web user interface for the Nginx web server. Prior to version 2.0.0-beta.36, the log path of nginxui is controllable. This issue can be combined with the directory traversal at `/api/co… CWE-862
 Missing Authorization
CVE-2024-49367 2024-11-7 23:57 2024-10-22 Show GitHub Exploit DB Packet Storm
314695 - - - UnoPim 0.1.3 and below is vulnerable to Cross Site Scripting (XSS) in the Create User function. This allows attackers to perform XSS via an SVG document, which can be used to steal cookies. - CVE-2024-50637 2024-11-7 23:15 2024-11-7 Show GitHub Exploit DB Packet Storm
314696 5.5 MEDIUM
Local
linux linux_kernel In the Linux kernel, the following vulnerability has been resolved: ALSA: seq: Fix function prototype mismatch in snd_seq_expand_var_event With clang's kernel control flow integrity (kCFI, CONFIG_C… NVD-CWE-noinfo
CVE-2022-48994 2024-11-7 22:52 2024-10-22 Show GitHub Exploit DB Packet Storm
314697 7.8 HIGH
Local
2n access_commander In 2N Access Commander versions 3.1.1.2 and prior, a local attacker can escalate their privileges in the system which could allow for arbitrary code execution with root permissions. NVD-CWE-noinfo
CVE-2024-47255 2024-11-7 21:15 2024-11-5 Show GitHub Exploit DB Packet Storm
314698 7.2 HIGH
Network
2n access_commander In 2N Access Commander versions 3.1.1.2 and prior, an Insufficient Verification of Data Authenticity vulnerability could allow an attacker to escalate their privileges and gain root access to the s… NVD-CWE-noinfo
CVE-2024-47254 2024-11-7 21:15 2024-11-5 Show GitHub Exploit DB Packet Storm
314699 7.2 HIGH
Network
2n access_commander In 2N Access Commander versions 3.1.1.2 and prior, a Path Traversal vulnerability could allow an attacker with administrative privileges to write files on the filesystem and potentially achieve arbit… CWE-22
Path Traversal
CVE-2024-47253 2024-11-7 21:15 2024-11-5 Show GitHub Exploit DB Packet Storm
314700 8.8 HIGH
Network
zohocorp manageengine_adaudit_plus Zohocorp ManageEngine ADAudit Plus versions below 8121 are vulnerable to SQL Injection in Technician reports option. CWE-89
SQL Injection
CVE-2024-36485 2024-11-7 20:15 2024-11-4 Show GitHub Exploit DB Packet Storm