Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 27, 2026, 6 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
201941 9.8 緊急
Network
The PHP Group - PHP の mcrypt エクステンションの mcrypt.c における整数オーバーフローの脆弱性 CWE-Other
その他
CVE-2016-5769 2016-10-7 16:55 2016-06-23 Show GitHub Exploit DB Packet Storm
201942 9.8 緊急
Network
The PHP Group - PHP の SPL エクステンションの spl_directory.c の SplFileObject::fread 関数における整数オーバーフローの脆弱性 CWE-Other
その他
CVE-2016-5770 2016-10-7 16:54 2016-06-23 Show GitHub Exploit DB Packet Storm
201943 9.8 緊急
Network
The PHP Group - PHP の SPL エクステンションの spl_array.c における任意のコードを実行される脆弱性 CWE-Other
その他
CVE-2016-5771 2016-10-7 16:53 2016-06-23 Show GitHub Exploit DB Packet Storm
201944 9.8 緊急
Network
The PHP Group - PHP の WDDX エクステンションの wddx.c の php_wddx_process_data 関数におけるメモリ二重解放の脆弱性 CWE-Other
その他
CVE-2016-5772 2016-10-7 16:51 2016-06-23 Show GitHub Exploit DB Packet Storm
201945 9.8 緊急
Network
The PHP Group - PHP の zip エクステンションの php_zip.c における任意のコードを実行される脆弱性 CWE-Other
その他
CVE-2016-5773 2016-10-7 16:49 2016-06-23 Show GitHub Exploit DB Packet Storm
201946 7.5 重要
Network
The PHP Group - PHP の ext/wddx/wddx.c の php_wddx_push_element 関数におけるサービス運用妨害 (DoS) の脆弱性 CWE-119
バッファエラー
CVE-2016-7418 2016-10-7 16:40 2016-09-15 Show GitHub Exploit DB Packet Storm
201947 9.8 緊急
Network
The PHP Group - PHP の ext/wddx/wddx.c の wddx_stack_destroy 関数におけるサービス運用妨害 (DoS) の脆弱性 CWE-Other
その他
CVE-2016-7413 2016-10-7 16:40 2016-09-15 Show GitHub Exploit DB Packet Storm
201948 8.8 重要
Network
The PHP Group - PHP の ext/zip/zip_stream.c の php_stream_zip_opener 関数における整数オーバーフローの脆弱性 CWE-119
バッファエラー
CVE-2016-6297 2016-10-7 16:37 2016-07-21 Show GitHub Exploit DB Packet Storm
201949 9.8 緊急
Network
The PHP Group - PHP で使用される xmlrpc-epi の simplestring.c の simplestring_addn 関数における整数符号エラーの脆弱性 CWE-119
バッファエラー
CVE-2016-6296 2016-10-7 16:37 2016-07-21 Show GitHub Exploit DB Packet Storm
201950 9.8 緊急
Network
The PHP Group - PHP の ext/snmp/snmp.c におけるサービス運用妨害 (DoS) の脆弱性 CWE-Other
その他
CVE-2016-6295 2016-10-7 16:37 2016-07-21 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 27, 2026, 4:52 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
291361 - idleman leed Leed (Light Feed), possibly before 1.5 Stable, allows remote attackers to bypass authorization via vectors related to the (1) importForm, (2) importFeed, (3) addFavorite, or (4) removeFavorite action… CWE-20
 Improper Input Validation 
CVE-2013-2629 2024-11-21 10:52 2013-12-24 Show GitHub Exploit DB Packet Storm
291362 - novatech orion5_dnp_slave
orionlx_dnp_slave
orion5r_dnp_master
orion5r_dnp_slave
orionlx_dnp_master
orion5_dnp_master
NovaTech Orion Substation Automation Platform OrionLX DNP Master 1.27.38 and DNP Slave 1.23.10 and earlier and Orion5/Orion5r DNP Master 1.27.38 and DNP Slave 1.23.10 and earlier allow physically pro… CWE-20
 Improper Input Validation 
CVE-2013-2822 2024-11-21 10:52 2013-12-21 Show GitHub Exploit DB Packet Storm
291363 - novatech orion5_dnp_slave
orionlx_dnp_slave
orion5r_dnp_master
orion5r_dnp_slave
orionlx_dnp_master
orion5_dnp_master
NovaTech Orion Substation Automation Platform OrionLX DNP Master 1.27.38 and DNP Slave 1.23.10 and earlier and Orion5/Orion5r DNP Master 1.27.38 and DNP Slave 1.23.10 and earlier allow remote attacke… CWE-20
 Improper Input Validation 
CVE-2013-2821 2024-11-21 10:52 2013-12-21 Show GitHub Exploit DB Packet Storm
291364 - idleman leed Multiple cross-site request forgery (CSRF) vulnerabilities in action.php in Leed (Light Feed), possibly before 1.5 Stable, allow remote attackers to hijack the authentication of administrators for un… CWE-352
 Origin Validation Error
CVE-2013-2628 2024-11-21 10:52 2013-12-21 Show GitHub Exploit DB Packet Storm
291365 - idleman leed SQL injection vulnerability in action.php in Leed (Light Feed), possibly before 1.5 Stable, allows remote attackers to execute arbitrary SQL commands via the id parameter in a removeFolder action. CWE-89
SQL Injection
CVE-2013-2627 2024-11-21 10:52 2013-12-21 Show GitHub Exploit DB Packet Storm
291366 - cooperindustries smp_4_gateway_\(data_concentrator\)
smp_4\/dp_gateway_\(data_concentrator\)
smp_16_gateway_\(data_concentrator\)
The DNP3 component in Cooper Power Systems SMP 4, 4/DP, and 16 gateways allows physically proximate attackers to cause a denial of service (reboot or link outage) via crafted input over a serial line. CWE-20
 Improper Input Validation 
CVE-2013-2816 2024-11-21 10:52 2013-12-18 Show GitHub Exploit DB Packet Storm
291367 - cooperindustries dnp3_master_opc_server Cooper Power Systems Cybectec DNP3 Master OPC Server allows remote attackers to cause a denial of service (unhandled exception and process crash) via unspecified vectors. CWE-20
 Improper Input Validation 
CVE-2013-2814 2024-11-21 10:52 2013-12-18 Show GitHub Exploit DB Packet Storm
291368 - cooperindustries smp_4_gateway_\(data_concentrator\)
smp_4\/dp_gateway_\(data_concentrator\)
smp_16_gateway_\(data_concentrator\)
The DNP3 component in Cooper Power Systems SMP 4, 4/DP, and 16 gateways allows remote attackers to cause a denial of service (reboot or link outage) via a crafted DNP3 TCP packet. CWE-20
 Improper Input Validation 
CVE-2013-2813 2024-11-21 10:52 2013-12-18 Show GitHub Exploit DB Packet Storm
291369 - ibm rational_software_architect_design_manager
rhapsody_design_manager
Directory traversal vulnerability in the client in IBM Rational Software Architect Design Manager and Rhapsody Design Manager 3.x and 4.x before 4.0.5 allows local users to read arbitrary files via v… CWE-22
Path Traversal
CVE-2013-3043 2024-11-21 10:52 2013-12-15 Show GitHub Exploit DB Packet Storm
291370 - ibm rational_software_architect_design_manager
rhapsody_design_manager
Directory traversal vulnerability in the server in IBM Rational Software Architect Design Manager and Rhapsody Design Manager 3.x and 4.x before 4.0.5 allows local users to read arbitrary files via v… CWE-22
Path Traversal
CVE-2013-3042 2024-11-21 10:52 2013-12-15 Show GitHub Exploit DB Packet Storm