Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 22, 2026, 10 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
224591 9.3 危険 VideoLAN - VideoLAN VLC media player におけるバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2013-1868 2013-07-12 15:45 2013-01-3 Show GitHub Exploit DB Packet Storm
224592 4.3 警告 VideoLAN - VideoLAN VLC media player の SHAddToRecentDocs 関数におけるサービス運用妨害 (DoS) の脆弱性 CWE-189
数値処理の問題 		CVE-2012-5855 2013-07-12 15:44 2012-11-12 Show GitHub Exploit DB Packet Storm
224593 6.9 警告 レッドハット - JBoss Enterprise Web Server および Red Hat Enterprise Linux 用の Tomcat の init スクリプトにおける任意のファイルの所有権を変更される脆弱性 CWE-59
リンク解釈の問題 		CVE-2013-1976 2013-07-12 11:08 2013-05-28 Show GitHub Exploit DB Packet Storm
224594 4.3 警告 レッドハット - libtirpc の svc_dg_getargs 関数におけるサービス運用妨害 (DoS) の脆弱性 CWE-399
リソース管理の問題 		CVE-2013-1950 2013-07-12 11:03 2013-04-22 Show GitHub Exploit DB Packet Storm
224595 7.5 危険 SPIP - SPIP における権限を取得される脆弱性 CWE-noinfo
情報不足 		CVE-2013-2118 2013-07-12 10:33 2013-05-24 Show GitHub Exploit DB Packet Storm
224596 2.1 注意 OpenStack - 複数の OpenStack 製品におけるサービス運用妨害 (DoS) の脆弱性 CWE-399
リソース管理の問題 		CVE-2013-2096 2013-07-12 10:32 2013-05-11 Show GitHub Exploit DB Packet Storm
224597 6.8 警告 Openswan - Openswan の atodn 関数におけるバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2013-2053 2013-07-12 10:31 2013-05-31 Show GitHub Exploit DB Packet Storm
224598 6.8 警告 Libreswan Project - libreswan の atodn 関数におけるバッファオーバーフローの脆弱 CWE-119
バッファエラー 		CVE-2013-2052 2013-07-12 10:29 2013-05-13 Show GitHub Exploit DB Packet Storm
224599 2.6 注意 レッドハット - Red Hat Enterprise Linux で使用される Tomcat の DIGEST 認証機能におけるアクセス制限を回避される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2013-2051 2013-07-12 10:27 2013-05-28 Show GitHub Exploit DB Packet Storm
224600 7.5 危険 Google - Google Chrome におけるサービス運用妨害 (DoS) の脆弱性 CWE-noinfo
情報不足 		CVE-2013-2880 2013-07-11 19:49 2013-07-9 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 22, 2026, 4:08 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
314111 - - - Out-of-bounds read in UEFI firmware for some Intel(R) Processors may allow a privileged user to potentially enable denial of service via local access. CWE-125
Out-of-bounds Read 		CVE-2023-25546 2024-09-17 02:15 2024-09-17 Show GitHub Exploit DB Packet Storm
314112 - - - NULL pointer dereference in the UEFI firmware for some Intel(R) Processors may allow a privileged user to potentially enable escalation of privilege via local access. CWE-395
 Use of NullPointerException Catch to Detect NULL Pointer Dereference 		CVE-2023-23904 2024-09-17 02:15 2024-09-17 Show GitHub Exploit DB Packet Storm
314113 - - - Out-of-bounds write in UEFI firmware for some Intel(R) Processors may allow a privileged user to potentially enable escalation of privilege via local access. CWE-787
 Out-of-bounds Write 		CVE-2023-22351 2024-09-17 02:15 2024-09-17 Show GitHub Exploit DB Packet Storm
314114 9.8 CRITICAL
Network 		ibm sterling_connect_direct_web_services IBM Sterling Connect:Direct Web Services 6.0, 6.1, 6.2, and 6.3 uses default credentials for potentially critical functionality. CWE-1392
 Use of Default Credentials 		CVE-2024-39747 2024-09-17 02:13 2024-08-31 Show GitHub Exploit DB Packet Storm
314115 7.5 HIGH
Network 		skyport skyportd Skyport Daemon (skyportd) is the daemon for the Skyport Panel. By making thousands of folders & files (easy due to skyport's lack of rate limiting on createFolder. createFile), skyportd in a lot of c… CWE-400
 Uncontrolled Resource Consumption 		CVE-2024-42481 2024-09-17 02:10 2024-08-13 Show GitHub Exploit DB Packet Storm
314116 7.8 HIGH
Local 		ultimaker ultimaker_cura UltiMaker Cura slicer versions 5.7.0-beta.1 through 5.7.2 are vulnerable to code injection via the 3MF format reader (/plugins/ThreeMFReader.py). The vulnerability arises from improper handling of th… CWE-94
Code Injection 		CVE-2024-8374 2024-09-17 01:44 2024-09-3 Show GitHub Exploit DB Packet Storm
314117 6.4 MEDIUM
Network 		halo halo Halo is an open source website building tool. A security vulnerability has been identified in versions prior to 2.19.0 of the Halo project. This vulnerability allows an attacker to execute malicious … CWE-79
Cross-site Scripting 		CVE-2024-43793 2024-09-17 01:28 2024-09-12 Show GitHub Exploit DB Packet Storm
314118 6.1 MEDIUM
Network 		halo halo Halo is an open source website building tool. A security vulnerability has been identified in versions prior to 2.17.0 of the Halo project. This vulnerability allows an attacker to execute malicious … CWE-79
Cross-site Scripting 		CVE-2024-43792 2024-09-17 01:26 2024-09-3 Show GitHub Exploit DB Packet Storm
314119 8.2 HIGH
Network 		sap bex_web_java_runtime_export_web_service BEx Web Java Runtime Export Web Service does not sufficiently validate an XML document accepted from an untrusted source. An attacker can retrieve information from the SAP ADS system and exhaust the … CWE-91
Blind XPath Injection 		CVE-2024-42374 2024-09-17 01:25 2024-08-13 Show GitHub Exploit DB Packet Storm
314120 9.1 CRITICAL
Network 		sap commerce_cloud Some OCC API endpoints in SAP Commerce Cloud allows Personally Identifiable Information (PII) data, such as passwords, email addresses, mobile numbers, coupon codes, and voucher codes, to be included… NVD-CWE-noinfo
CVE-2024-33003 2024-09-17 01:22 2024-08-13 Show GitHub Exploit DB Packet Storm