Vulnerability Search Top

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

Vulnerability Information Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":June 1, 2026, noon

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
226081	9.3	危険	IBM	-	IBM SPSS SamplePower の olch2x32 ActiveX コントロールにおける任意のコードを実行される脆弱性	CWE-noinfo 情報不足	CVE-2013-0593	2013-05-1 11:14	2013-04-26	Show	GitHub Exploit DB Packet Storm

226082	2.3	注意	IBM	-	IBM Application Support Facility for z/OS の IBM Document Connect for Application Support Facility におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2013-0572	2013-05-1 11:13	2013-04-25	Show	GitHub Exploit DB Packet Storm

226083	2.9	注意	IBM	-	IBM Application Support Facility for z/OS の IBM Document Connect for Application Support Facility におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2013-0571	2013-05-1 11:11	2013-04-25	Show	GitHub Exploit DB Packet Storm

226084	4.3	警告	IBM	-	IBM Connections におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2013-0569	2013-05-1 11:04	2013-04-25	Show	GitHub Exploit DB Packet Storm

226085	4.3	警告	シスコシステムズ	-	Cisco Unified Communications Domain Manager の Web フレームワークにおけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2013-1227	2013-04-30 19:48	2013-04-29	Show	GitHub Exploit DB Packet Storm

226086	6.1	警告	シスコシステムズ	-	Cisco Nexus 7000 デバイス上で稼働する Cisco NX-OS におけるサービス運用妨害 (DoS) の脆弱性	CWE-119 バッファエラー	CVE-2013-1226	2013-04-30 19:47	2013-04-29	Show	GitHub Exploit DB Packet Storm

226087	4.4	警告	シスコシステムズ	-	Cisco Intrusion Prevention System の SensorApp におけるサービス運用妨害 (DoS) の脆弱性	CWE-noinfo 情報不足	CVE-2013-1219	2013-04-30 19:45	2013-04-29	Show	GitHub Exploit DB Packet Storm

226088	4.3	警告	シスコシステムズ	-	Cisco Unified Computing System Central の Flash コンポーネントにおけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2013-1198	2013-04-30 19:42	2013-04-29	Show	GitHub Exploit DB Packet Storm

226089	6.8	警告	シスコシステムズ	-	Cisco Adaptive Security Appliance の Easy VPN コンポーネントにおける権限を取得される脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2013-1215	2013-04-30 19:41	2013-04-24	Show	GitHub Exploit DB Packet Storm

226090	4.4	警告	Linux	-	Linux Kernel の fs/cifs/transport.c におけるサービス運用妨害 (DoS) の脆弱性	CWE-362 競合状態	CVE-2013-3302	2013-04-30 18:37	2013-01-11	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:June 1, 2026, 4:12 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
223951	7.5	HIGH Network	webform_report_project	webform_report	The Webform Report project 7.x-1.x-dev for Drupal allows remote attackers to view submissions by visiting the /rss.xml page. NOTE: This project is not covered by Drupal's security advisory policy.	CWE-425 Direct Request ('Forced Browsing')	CVE-2019-25012	2024-11-21 13:39	2021-01-1	Show	GitHub Exploit DB Packet Storm

223952	5.4	MEDIUM Network	netbox	netbox	NetBox through 2.6.2 allows an Authenticated User to conduct an XSS attack against an admin via a GFM-rendered field, as demonstrated by /dcim/sites/add/ comments.	CWE-79 Cross-site Scripting	CVE-2019-25011	2024-11-21 13:39	2021-01-1	Show	GitHub Exploit DB Packet Storm

223953	9.8	CRITICAL Network	failure_project	failure	An issue was discovered in the failure crate through 2019-11-13 for Rust. Type confusion can occur when __private_get_type_id__ is overridden.	CWE-843 Type Confusion	CVE-2019-25010	2024-11-21 13:39	2020-12-31	Show	GitHub Exploit DB Packet Storm

223954	9.8	CRITICAL Network	hyper	http	An issue was discovered in the http crate before 0.1.20 for Rust. The HeaderMap::Drain API can use a raw pointer, defeating soundness.	CWE-415 Double Free	CVE-2019-25009	2024-11-21 13:39	2020-12-31	Show	GitHub Exploit DB Packet Storm

223955	7.5	HIGH Network	streebog_project	streebog	An issue was discovered in the streebog crate before 0.8.0 for Rust. The Streebog hash function can cause a panic.	NVD-CWE-noinfo	CVE-2019-25007	2024-11-21 13:39	2020-12-31	Show	GitHub Exploit DB Packet Storm

223956	7.5	HIGH Network	streebog_project	streebog	An issue was discovered in the streebog crate before 0.8.0 for Rust. The Streebog hash function can produce the wrong answer.	CWE-327 Use of a Broken or Risky Cryptographic Algorithm	CVE-2019-25006	2024-11-21 13:39	2020-12-31	Show	GitHub Exploit DB Packet Storm

223957	7.5	HIGH Network	chacha20_project	chacha20	An issue was discovered in the chacha20 crate before 0.2.3 for Rust. A ChaCha20 counter overflow makes it easier for attackers to determine plaintext.	CWE-190 Integer Overflow or Wraparound	CVE-2019-25005	2024-11-21 13:39	2020-12-31	Show	GitHub Exploit DB Packet Storm

223958	9.8	CRITICAL Network	google	flatbuffers	An issue was discovered in the flatbuffers crate before 0.6.1 for Rust. Arbitrary bytes can be reinterpreted as a bool, defeating soundness.	NVD-CWE-noinfo	CVE-2019-25004	2024-11-21 13:39	2020-12-31	Show	GitHub Exploit DB Packet Storm

223959	7.5	HIGH Network	parity	libsecp256k1	An issue was discovered in the libsecp256k1 crate before 0.3.1 for Rust. Scalar::check_overflow allows a timing side-channel attack; consequently, attackers can obtain sensitive information.	NVD-CWE-Other	CVE-2019-25003	2024-11-21 13:39	2020-12-31	Show	GitHub Exploit DB Packet Storm

223960	9.8	CRITICAL Network	sodiumoxide_project	sodiumoxide	An issue was discovered in the sodiumoxide crate before 0.2.5 for Rust. generichash::Digest::eq compares itself to itself and thus has degenerate security properties.	NVD-CWE-noinfo	CVE-2019-25002	2024-11-21 13:39	2020-12-31	Show	GitHub Exploit DB Packet Storm