Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 31, 2026, 6 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
202281 9.8 緊急
Network
The PHP Group - PHP の SPL エクステンションの spl_array.c における任意のコードを実行される脆弱性 CWE-Other
その他
CVE-2016-5771 2016-10-7 16:53 2016-06-23 Show GitHub Exploit DB Packet Storm
202282 9.8 緊急
Network
The PHP Group - PHP の WDDX エクステンションの wddx.c の php_wddx_process_data 関数におけるメモリ二重解放の脆弱性 CWE-Other
その他
CVE-2016-5772 2016-10-7 16:51 2016-06-23 Show GitHub Exploit DB Packet Storm
202283 9.8 緊急
Network
The PHP Group - PHP の zip エクステンションの php_zip.c における任意のコードを実行される脆弱性 CWE-Other
その他
CVE-2016-5773 2016-10-7 16:49 2016-06-23 Show GitHub Exploit DB Packet Storm
202284 7.5 重要
Network
The PHP Group - PHP の ext/wddx/wddx.c の php_wddx_push_element 関数におけるサービス運用妨害 (DoS) の脆弱性 CWE-119
バッファエラー
CVE-2016-7418 2016-10-7 16:40 2016-09-15 Show GitHub Exploit DB Packet Storm
202285 9.8 緊急
Network
The PHP Group - PHP の ext/wddx/wddx.c の wddx_stack_destroy 関数におけるサービス運用妨害 (DoS) の脆弱性 CWE-Other
その他
CVE-2016-7413 2016-10-7 16:40 2016-09-15 Show GitHub Exploit DB Packet Storm
202286 8.8 重要
Network
The PHP Group - PHP の ext/zip/zip_stream.c の php_stream_zip_opener 関数における整数オーバーフローの脆弱性 CWE-119
バッファエラー
CVE-2016-6297 2016-10-7 16:37 2016-07-21 Show GitHub Exploit DB Packet Storm
202287 9.8 緊急
Network
The PHP Group - PHP で使用される xmlrpc-epi の simplestring.c の simplestring_addn 関数における整数符号エラーの脆弱性 CWE-119
バッファエラー
CVE-2016-6296 2016-10-7 16:37 2016-07-21 Show GitHub Exploit DB Packet Storm
202288 9.8 緊急
Network
The PHP Group - PHP の ext/snmp/snmp.c におけるサービス運用妨害 (DoS) の脆弱性 CWE-Other
その他
CVE-2016-6295 2016-10-7 16:37 2016-07-21 Show GitHub Exploit DB Packet Storm
202289 9.8 緊急
Network
The PHP Group - PHP の ext/intl/locale/locale_methods.c の locale_accept_from_http 関数におけるサービス運用妨害 (DoS) の脆弱性 CWE-Other
その他
CVE-2016-6294 2016-10-7 16:37 2016-07-21 Show GitHub Exploit DB Packet Storm
202290 6.5 警告
Network
The PHP Group - PHP の ext/exif/exif.c の exif_process_user_comment 関数におけるサービス運用妨害 (DoS) の脆弱性 CWE-Other
その他
CVE-2016-6292 2016-10-7 16:37 2016-07-21 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 31, 2026, 4:16 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
289691 - php php Multiple integer signedness errors in the gdImageCrop function in ext/gd/gd.c in PHP 5.5.x before 5.5.9 allow remote attackers to cause a denial of service (application crash) or obtain sensitive inf… CWE-189
Numeric Errors
CVE-2013-7328 2024-11-21 11:00 2014-02-18 Show GitHub Exploit DB Packet Storm
289692 - canonical
php
ubuntu_linux
php
The gdImageCrop function in ext/gd/gd.c in PHP 5.5.x before 5.5.9 does not check return values, which allows remote attackers to cause a denial of service (application crash) or possibly have unspeci… CWE-20
 Improper Input Validation 
CVE-2013-7327 2024-11-21 11:00 2014-02-18 Show GitHub Exploit DB Packet Storm
289693 - php php Integer overflow in the gdImageCrop function in ext/gd/gd.c in PHP 5.5.x before 5.5.9 allows remote attackers to cause a denial of service (application crash) or possibly have unspecified other impac… CWE-189
Numeric Errors
CVE-2013-7226 2024-11-21 11:00 2014-02-18 Show GitHub Exploit DB Packet Storm
289694 - vtiger vtiger_crm Cross-site scripting (XSS) vulnerability in vTiger CRM 5.4.0 allows remote attackers to inject arbitrary web script or HTML via the (1) return_url parameter to modules\com_vtiger_workflow\savetemplat… CWE-79
Cross-site Scripting
CVE-2013-7326 2024-11-21 11:00 2014-02-15 Show GitHub Exploit DB Packet Storm
289695 - livezilla livezilla Multiple cross-site scripting (XSS) vulnerabilities in the web based operator client in LiveZilla before 5.1.2.1 allow remote attackers to inject arbitrary web script or HTML via the (1) name of an u… CWE-79
Cross-site Scripting
CVE-2013-7032 2024-11-21 11:00 2014-02-15 Show GitHub Exploit DB Packet Storm
289696 - openstack compute
havana
grizzly
icehouse
The i_create_images_and_backing (aka create_images_and_backing) method in libvirt driver in OpenStack Compute (Nova) Grizzly, Havana, and Icehouse, when using KVM live block migration, does not prope… CWE-200
Information Exposure
CVE-2013-7130 2024-11-21 11:00 2014-02-7 Show GitHub Exploit DB Packet Storm
289697 - d-link dap_2253_firmware
dap_2253
Cross-site scripting (XSS) vulnerability in D-Link DAP-2253 Access Point (Rev. A1) with firmware before 1.30 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. CWE-79
Cross-site Scripting
CVE-2013-7321 2024-11-21 11:00 2014-02-7 Show GitHub Exploit DB Packet Storm
289698 - d-link dap_2253_firmware
dap_2253
Cross-site request forgery (CSRF) vulnerability in D-Link DAP-2253 Access Point (Rev. A1) with firmware before 1.30 allows remote attackers to hijack the authentication of administrators for requests… CWE-352
 Origin Validation Error
CVE-2013-7320 2024-11-21 11:00 2014-02-7 Show GitHub Exploit DB Packet Storm
289699 - wpdownloadmanager wordpress_download_manager Cross-site scripting (XSS) vulnerability in the Download Manager plugin before 2.5.9 for WordPress allows remote attackers to inject arbitrary web script or HTML via the title field. CWE-79
Cross-site Scripting
CVE-2013-7319 2024-11-21 11:00 2014-02-7 Show GitHub Exploit DB Packet Storm
289700 - seowonintech swc-9100 cgi-bin/reboot.cgi on Seowon Intech SWC-9100 routers allows remote attackers to (1) cause a denial of service (reboot) via a default_reboot action or (2) reset all configuration values via a factory_… CWE-287
Improper Authentication
CVE-2013-7183 2024-11-21 11:00 2014-02-4 Show GitHub Exploit DB Packet Storm