Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 6, 2026, 10 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
201821 7.5 重要
Network
サムスン - Samsung Note デバイスの SystemUI における整数オーバーフローの脆弱性 CWE-Other
その他
CVE-2016-9277 2016-11-16 11:42 2016-08-16 Show GitHub Exploit DB Packet Storm
201822 9.8 緊急
Network
Exponent CMS project - Exponent CMS の framework/modules/navigation/controllers/navigationController.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2016-9288 2016-11-16 10:22 2016-11-3 Show GitHub Exploit DB Packet Storm
201823 5.3 警告
Network
Exponent CMS project - Exponent CMS の framework/modules/users/controllers/usersController.php におけるアドレス情報を読まれる脆弱性 CWE-200
情報漏えい
CVE-2016-9286 2016-11-16 10:22 2016-11-6 Show GitHub Exploit DB Packet Storm
201824 5.3 警告
Network
Exponent CMS project - Exponent CMS の framework/modules/addressbook/controllers/addressController.php におけるユーザ情報を読まれる脆弱性 CWE-200
情報漏えい
CVE-2016-9285 2016-11-16 10:22 2016-11-3 Show GitHub Exploit DB Packet Storm
201825 5.3 警告
Network
Exponent CMS project - Exponent CMS の framework/modules/users/controllers/usersController.php における SQL インジェクションの脆弱性 CWE-200
情報漏えい
CVE-2016-9284 2016-11-16 10:22 2016-11-3 Show GitHub Exploit DB Packet Storm
201826 7.5 重要
Network
Exponent CMS project - Exponent CMS の framework/core/subsystems/expRouter.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2016-9283 2016-11-16 10:22 2016-11-4 Show GitHub Exploit DB Packet Storm
201827 7.5 重要
Network
Exponent CMS project - Exponent CMS の framework/modules/search/controllers/searchController.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2016-9282 2016-11-16 10:22 2016-11-3 Show GitHub Exploit DB Packet Storm
201828 9.1 緊急
Network
Exponent CMS project - Exponent CMS におけるブラインド SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2016-9272 2016-11-16 10:22 2016-11-6 Show GitHub Exploit DB Packet Storm
201829 6.1 警告
Network
MoinMoin - MoinMoin における "JavaScript インジェクション" 攻撃を実行される脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2016-7148 2016-11-15 17:56 2016-10-31 Show GitHub Exploit DB Packet Storm
201830 6.1 警告
Network
MoinMoin - MoinMoin における "JavaScript インジェクション" 攻撃を実行される脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2016-7146 2016-11-15 17:56 2016-10-31 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 6, 2026, 4:18 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
291421 - beyondgrep ack ack 2.00 through 2.11_02 allows remote attackers to execute arbitrary code via a (1) --pager, (2) --regex, or (3) --output option in a .ackrc file in a directory to be searched. CWE-94
Code Injection
CVE-2013-7069 2024-11-21 11:00 2013-12-15 Show GitHub Exploit DB Packet Storm
291422 - sap emr_unwired Multiple SQL injection vulnerabilities in SAP EMR Unwired allow remote attackers to execute arbitrary SQL commands via unspecified vectors. CWE-89
SQL Injection
CVE-2013-7096 2024-11-21 11:00 2013-12-14 Show GitHub Exploit DB Packet Storm
291423 - sap customer_relationship_management The XML parser (crm_flex_data) in SAP Customer Relationship Management (CRM) 7.02 EHP 2 has unknown impact and attack vectors related to an XML External Entity (XXE) issue. NVD-CWE-noinfo
CVE-2013-7095 2024-11-21 11:00 2013-12-14 Show GitHub Exploit DB Packet Storm
291424 - sap netweaver SQL injection vulnerability in the RSDDCVER_COUNT_TAB_COLS function in SAP NetWeaver 7.30 allows remote attackers to execute arbitrary SQL commands via unspecified vectors. CWE-89
SQL Injection
CVE-2013-7094 2024-11-21 11:00 2013-12-14 Show GitHub Exploit DB Packet Storm
291425 - sap network_interface_router SAP Network Interface Router (SAProuter) 39.3 SP4 allows remote attackers to bypass authentication and modify the configuration via unspecified vectors. CWE-287
Improper Authentication
CVE-2013-7093 2024-11-21 11:00 2013-12-14 Show GitHub Exploit DB Packet Storm
291426 - gnu libmicrohttpd Stack-based buffer overflow in the MHD_digest_auth_check function in libmicrohttpd before 0.9.32, when MHD_OPTION_CONNECTION_MEMORY_LIMIT is set to a large value, allows remote attackers to cause a d… CWE-119
Incorrect Access of Indexable Resource ('Range Error') 
CVE-2013-7039 2024-11-21 11:00 2013-12-14 Show GitHub Exploit DB Packet Storm
291427 - gnu libmicrohttpd The MHD_http_unescape function in libmicrohttpd before 0.9.32 might allow remote attackers to obtain sensitive information or cause a denial of service (crash) via unspecified vectors that trigger an… CWE-119
Incorrect Access of Indexable Resource ('Range Error') 
CVE-2013-7038 2024-11-21 11:00 2013-12-14 Show GitHub Exploit DB Packet Storm
291428 - mcafee email_gateway Multiple SQL injection vulnerabilities in /admin/cgi-bin/rpc/doReport/18 in McAfee Email Gateway 7.6 allow remote authenticated users to execute arbitrary SQL commands via the (1) events_col, (2) eve… CWE-89
SQL Injection
CVE-2013-7092 2024-11-21 11:00 2013-12-14 Show GitHub Exploit DB Packet Storm
291429 - synacor zimbra_collaboration_suite Directory traversal vulnerability in /res/I18nMsg,AjxMsg,ZMsg,ZmMsg,AjxKeys,ZmKeys,ZdMsg,Ajx%20TemplateMsg.js.zgz in Zimbra 7.2.2 and 8.0.2 allows remote attackers to read arbitrary files via a .. (… CWE-22
Path Traversal
CVE-2013-7091 2024-11-21 11:00 2013-12-14 Show GitHub Exploit DB Packet Storm
291430 - devscripts_devel_team devscripts The get_main_source_dir function in scripts/uscan.pl in devscripts before 2.13.8, when using USCAN_EXCLUSION, allows remote attackers to execute arbitrary commands via shell metacharacters in a direc… CWE-94
Code Injection
CVE-2013-7050 2024-11-21 11:00 2013-12-14 Show GitHub Exploit DB Packet Storm