Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 13, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
224911 6.8 警告 HTTP-Body Project - Perl 用 HTTP-Body の HTTP::Body::Multipart における攻撃を行われる脆弱性 CWE-noinfo
情報不足 		CVE-2013-4407 2013-11-27 18:17 2013-11-21 Show GitHub Exploit DB Packet Storm
224912 3.3 注意 Robert Ancell
Canonical		 - LightDM における制限を回避される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2013-4459 2013-11-27 18:08 2013-11-6 Show GitHub Exploit DB Packet Storm
224913 1.9 注意 OpenStack - OpenStack Ceilometer における重要な情報を取得される脆弱性 CWE-200
情報漏えい 		CVE-2013-6384 2013-11-27 17:58 2013-10-25 Show GitHub Exploit DB Packet Storm
224914 1.9 注意 GNU Project
Novell
レッドハット		 - GNU coreutils 用 SUSE coreutils-i18n.patch におけるサービス運用妨害 (DoS) の脆弱性 CWE-119
バッファエラー 		CVE-2013-0223 2013-11-27 17:54 2013-02-4 Show GitHub Exploit DB Packet Storm
224915 2.1 注意 GNU Project
Novell
レッドハット		 - GNU coreutils 用 SUSE coreutils-i18n.patch におけるサービス運用妨害 (DoS) の脆弱性 CWE-119
バッファエラー 		CVE-2013-0222 2013-11-27 17:52 2013-02-4 Show GitHub Exploit DB Packet Storm
224916 4.3 警告 GNU Project
Novell
レッドハット		 - GNU coreutils 用 SUSE coreutils-i18n.patch におけるサービス運用妨害 (DoS) の脆弱性 CWE-20
不適切な入力確認 		CVE-2013-0221 2013-11-27 17:47 2013-02-4 Show GitHub Exploit DB Packet Storm
224917 7.5 危険 SAP - SAP NetWeaver の SRTT_GET_COUNT_BEFORE_KEY_RFC 関数における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2013-6869 2013-11-27 17:36 2013-10-30 Show GitHub Exploit DB Packet Storm
224918 9.3 危険 FFmpeg - FFmpeg の libavcodec/h264.c の decode_slice_header 関数における脆弱性 CWE-20
不適切な入力確認 		CVE-2013-0867 2013-11-27 16:55 2013-02-6 Show GitHub Exploit DB Packet Storm
224919 9.3 危険 FFmpeg - FFmpeg の libavcodec/aacdec.c の aac_decode_init 関数における脆弱性 CWE-119
バッファエラー 		CVE-2013-0866 2013-11-27 16:53 2013-02-6 Show GitHub Exploit DB Packet Storm
224920 9.3 危険 FFmpeg - FFmpeg の libavcodec/vqavideo.c の vqa_decode_chunk 関数における脆弱性 CWE-119
バッファエラー 		CVE-2013-0865 2013-11-27 16:51 2013-02-6 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 13, 2026, 4:20 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
312901 - - - The End-User Portal module before 1.0.65 for FreeScout sometimes allows an attacker to authenticate as an arbitrary user because a session token can be sent to the /auth endpoint. NOTE: this module i… - CVE-2023-52268 2024-11-20 02:35 2024-11-13 Show GitHub Exploit DB Packet Storm
312902 - - - Sublime Text 4 was discovered to contain a command injection vulnerability via the New Build System module. - CVE-2024-25255 2024-11-20 02:35 2024-11-12 Show GitHub Exploit DB Packet Storm
312903 - - - Driver Booster v10.6 was discovered to contain a buffer overflow via the Host parameter under the Customize proxy module. - CVE-2024-25253 2024-11-20 02:35 2024-11-12 Show GitHub Exploit DB Packet Storm
312904 9.8 CRITICAL
Network 		schneider-electric ecostruxure_it_gateway CWE-862: Missing Authorization vulnerability exists that could cause unauthorized access when enabled on the network and potentially impacting connected devices. CWE-862
 Missing Authorization 		CVE-2024-10575 2024-11-20 02:28 2024-11-13 Show GitHub Exploit DB Packet Storm
312905 - - - Statmatic is a Laravel and Git powered content management system (CMS). Prior to version 5.17.0, assets uploaded with appropriately crafted filenames may result in them being placed in a location dif… CWE-22
Path Traversal 		CVE-2024-52600 2024-11-20 02:15 2024-11-20 Show GitHub Exploit DB Packet Storm
312906 4.3 MEDIUM
Network 		janeczku calibre-web A vulnerability in janeczku/calibre-web allows unauthorized users to view the names of private shelves belonging to other users. This issue occurs in the file shelf.py at line 221, where the name of … CWE-209
Information Exposure Through an Error Message 		CVE-2021-3986 2024-11-20 02:12 2024-11-15 Show GitHub Exploit DB Packet Storm
312907 9.8 CRITICAL
Network 		dompdf_project dompdf An improper restriction of external entities (XXE) vulnerability in dompdf/dompdf's SVG parser allows for Server-Side Request Forgery (SSRF) and deserialization attacks. This issue affects all versio… CWE-611
XXE 		CVE-2021-3902 2024-11-20 02:12 2024-11-15 Show GitHub Exploit DB Packet Storm
312908 5.4 MEDIUM
Network 		sylius sylius sylius/sylius versions prior to 1.9.10, 1.10.11, and 1.11.2 are vulnerable to stored cross-site scripting (XSS) through SVG files. This vulnerability allows attackers to inject malicious scripts that… CWE-79
Cross-site Scripting 		CVE-2021-3841 2024-11-20 02:11 2024-11-15 Show GitHub Exploit DB Packet Storm
312909 9.8 CRITICAL
Network 		dompdf_project dompdf DomPDF before version 2.0.0 is vulnerable to PHAR deserialization due to a lack of checking on the protocol before passing it into the file_get_contents() function. An attacker who can upload files o… CWE-502
 Deserialization of Untrusted Data 		CVE-2021-3838 2024-11-20 02:11 2024-11-15 Show GitHub Exploit DB Packet Storm
312910 8.8 HIGH
Network 		chatwoot chatwoot A Server-Side Request Forgery (SSRF) vulnerability was discovered in chatwoot/chatwoot, affecting all versions prior to 2.5.0. The vulnerability allows an attacker to upload an SVG file containing a … CWE-918
Server-Side Request Forgery (SSRF)  		CVE-2021-3742 2024-11-20 02:10 2024-11-15 Show GitHub Exploit DB Packet Storm