Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 28, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
224001 7.9 危険 シマンテック
日立		 - Symantec Backup Exec の Linux エージェント内のユーティリティプログラムにおけるヒープベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2013-4575 2013-10-16 18:30 2013-08-1 Show GitHub Exploit DB Packet Storm
224002 4.3 警告 シマンテック
日立		 - Symantec Backup Exec におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2013-4676 2013-10-16 18:28 2013-08-1 Show GitHub Exploit DB Packet Storm
224003 4.3 警告 シマンテック
日立		 - Symantec Backup Exec における重要な情報を取得される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2013-4677 2013-10-16 18:26 2013-08-1 Show GitHub Exploit DB Packet Storm
224004 2.7 注意 シマンテック
日立		 - Symantec Backup Exec の NDMP プロトコルの実装における重要なホストバージョン情報を取得される脆弱性 CWE-200
情報漏えい 		CVE-2013-4678 2013-10-16 18:24 2013-08-1 Show GitHub Exploit DB Packet Storm
224005 7.2 危険 FreeBSD - FreeBSD のカーネルのマルチキャストの実装における整数オーバーフローの脆弱性 CWE-189
数値処理の問題 		CVE-2013-3077 2013-10-16 18:11 2012-08-22 Show GitHub Exploit DB Packet Storm
224006 3.5 注意 IBM - IBM Sterling File Gateway および Sterling B2B Integrator におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2013-2983 2013-10-16 18:09 2013-03-22 Show GitHub Exploit DB Packet Storm
224007 10 危険 ヒューレット・パッカード - HP Business Process Monitor における任意のコードを実行される脆弱性 CWE-noinfo
情報不足 		CVE-2013-4804 2013-10-16 18:07 2013-10-10 Show GitHub Exploit DB Packet Storm
224008 9.3 危険 マイクロソフト - Microsoft Internet Explorer 6 から 10 における任意のコードを実行される脆弱性 CWE-Other
その他 		CVE-2013-2551 2013-10-16 18:03 2013-03-11 Show GitHub Exploit DB Packet Storm
224009 10 危険 ヒューレット・パッカード - HP Business Process Monitor における任意のコードを実行される脆弱性 CWE-noinfo
情報不足 		CVE-2013-2366 2013-10-16 17:57 2013-10-10 Show GitHub Exploit DB Packet Storm
224010 6.8 警告 IBM - IBM InfoSphere Information Server におけるクロスサイトリクエストフォージェリの脆弱性 CWE-352
同一生成元ポリシー違反 		CVE-2013-4056 2013-10-16 17:45 2013-10-10 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 29, 2026, 4:16 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
314091 - - - itsourcecode Online Tours and Travels Management System v1.0 is vulnerable to Cross Site Scripting (XSS) via a crafted payload to the val-username, val-email, val-suggestions, val-digits and state_na… - CVE-2024-46077 2024-10-8 02:48 2024-10-5 Show GitHub Exploit DB Packet Storm
314092 - - - Taskcafe 0.3.2 is vulnerable to Cross Site Scripting (XSS). There is a lack of validation in the filetype when uploading a SVG profile picture with a XSS payload on it. An authenticated attacker can … - CVE-2023-26771 2024-10-8 02:48 2024-10-5 Show GitHub Exploit DB Packet Storm
314093 - - - TaskCafe 0.3.2 lacks validation in the Cookie value. Any unauthenticated attacker who knows a registered UserID can change the password of that user. - CVE-2023-26770 2024-10-8 02:48 2024-10-5 Show GitHub Exploit DB Packet Storm
314094 - - - There is a reflected XSS vulnerability in Esri Portal for ArcGIS versions 11.1 and 11.2 which may allow a remote, unauthenticated attacker to create a crafted link which when clicked could potentiall… CWE-79
Cross-site Scripting 		CVE-2024-8149 2024-10-8 02:48 2024-10-5 Show GitHub Exploit DB Packet Storm
314095 - - - There is an unvalidated redirect vulnerability in Esri Portal for ArcGIS 10.8.1 - 11.2 that may allow a remote, unauthenticated attacker to craft a URL that could redirect a victim to an arbitrary we… CWE-601
Open Redirect 		CVE-2024-8148 2024-10-8 02:48 2024-10-5 Show GitHub Exploit DB Packet Storm
314096 - - - A Reflected cross-site scripting (XSS) vulnerability in "ccHandler.aspx" CADClick <= 1.11.0 allows remote attackers to inject arbitrary web script or HTML via the "bomid" parameter. - CVE-2024-41516 2024-10-8 02:48 2024-10-5 Show GitHub Exploit DB Packet Storm
314097 - - - A reflected cross-site scripting (XSS) vulnerability in "ccHandlerResource.ashx" in CADClick <= 1.11.0 allows remote attackers to inject arbitrary web script or HTML via the "res_url" parameter. - CVE-2024-41515 2024-10-8 02:48 2024-10-5 Show GitHub Exploit DB Packet Storm
314098 - - - A reflected cross-site scripting (XSS) vulnerability in "PrevPgGroup.aspx" in CADClick v1.11.0 and before allows remote attackers to inject arbitrary web script or HTML via the "wer" parameter. - CVE-2024-41514 2024-10-8 02:48 2024-10-5 Show GitHub Exploit DB Packet Storm
314099 - - - A reflected cross-site scripting (XSS) vulnerability in "Artikel.aspx" in CADClick v1.11.0 and before allows remote attackers to inject arbitrary web script or HTML via the "searchindex" parameter. - CVE-2024-41513 2024-10-8 02:48 2024-10-5 Show GitHub Exploit DB Packet Storm
314100 - - - A SQL Injection vulnerability in "ccHandler.aspx" in all versions of CADClick v.1.11.0 and before allows remote attackers to execute arbitrary SQL commands via the "bomid" parameter. - CVE-2024-41512 2024-10-8 02:48 2024-10-5 Show GitHub Exploit DB Packet Storm