Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":Feb. 9, 2026, 12:59 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
215011 6.8 警告 b2evolution - b2evolution の blogs/admin.php におけるクロスサイトリクエストフォージェリの脆弱性 CWE-352
同一生成元ポリシー違反
CVE-2013-7352 2014-04-4 16:19 2013-04-29 Show GitHub Exploit DB Packet Storm
215012 6.5 警告 b2evolution - b2evolution の blogs/admin.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2013-2945 2014-04-4 16:18 2013-04-29 Show GitHub Exploit DB Packet Storm
215013 7.5 危険 Cartpauj.com - WordPress 用 Mingle Forum プラグインの wpf.class.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2013-0735 2014-04-4 16:08 2013-02-7 Show GitHub Exploit DB Packet Storm
215014 6.8 警告 XCloner - WordPress 用 XCloner プラグインにおけるクロスサイトリクエストフォージェリの脆弱性 CWE-352
同一生成元ポリシー違反
CVE-2014-2340 2014-04-4 16:07 2014-03-13 Show GitHub Exploit DB Packet Storm
215015 5.8 警告 レッドハット - Red Hat JBoss Enterprise Application Platform におけるアプリケーションに java.security.AllPermission パーミッションを付与される脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2014-0093 2014-04-4 14:45 2014-03-31 Show GitHub Exploit DB Packet Storm
215016 9.3 危険 Tracker Software Products - Tracker Software PDF-XChange におけるヒープベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー
CVE-2013-0729 2014-04-4 14:27 2013-01-21 Show GitHub Exploit DB Packet Storm
215017 6.5 警告 Postfix Admin Project - Postfix Admin の functions.inc.php の gen_show_status 関数における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2014-2655 2014-04-4 14:27 2014-02-19 Show GitHub Exploit DB Packet Storm
215018 4.3 警告 Splunk - Splunk の Splunk Web におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2014-2578 2014-04-4 12:15 2014-03-24 Show GitHub Exploit DB Packet Storm
215019 3.5 注意 OTRS プロジェクト - Open Ticket Request System におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2014-2553 2014-04-4 12:03 2014-04-1 Show GitHub Exploit DB Packet Storm
215020 6.8 警告 HitMyServer - WordPress 用 HMS Testimonials プラグインにおけるクロスサイトリクエストフォージェリの脆弱性 CWE-352
同一生成元ポリシー違反
CVE-2013-4240 2014-04-4 11:19 2013-08-8 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:April 24, 2026, 4 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
289231 - php_mip php_mip PHP remote file inclusion vulnerability in top.php in PHP Module Implementation (PHP-MIP) 0.1 allows remote attackers to execute arbitrary PHP code via a URL in the laypath parameter. NVD-CWE-Other
CVE-2007-1104 2017-10-11 10:31 2007-02-27 Show GitHub Exploit DB Packet Storm
289232 - extreme_phpbb extreme_phpbb PHP remote file inclusion vulnerability in functions.php in Extreme phpBB (aka phpBB Extreme) 3.0.1 allows remote attackers to execute arbitrary PHP code via a URL in the phpbb_root_path parameter. NVD-CWE-Other
CVE-2007-1105 2017-10-11 10:31 2007-02-27 Show GitHub Exploit DB Packet Storm
289233 - nomoketos_rules nomoketos_rules PHP remote file inclusion vulnerability in includes/functions_nomoketos_rules.php in the NoMoKeTos Rules 0.0.1 module for phpBB allows remote attackers to execute arbitrary PHP code via a URL in the … NVD-CWE-Other
CVE-2007-1106 2017-10-11 10:31 2007-02-27 Show GitHub Exploit DB Packet Storm
289234 - cs-gallery cs-gallery PHP remote file inclusion vulnerability in index.php in Christian Schneider CS-Gallery 2.0 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the album parameter during a … NVD-CWE-Other
CVE-2007-1108 2017-10-11 10:31 2007-02-27 Show GitHub Exploit DB Packet Storm
289235 - efiction efiction Multiple PHP remote file inclusion vulnerabilities in eFiction 3.1.1 and earlier allow remote attackers to execute arbitrary PHP code via a URL in the path_to_smf parameter to (1) bridges/SMF/logout.… NVD-CWE-Other
CVE-2007-1118 2017-10-11 10:31 2007-02-27 Show GitHub Exploit DB Packet Storm
289236 - scipter.ch gastebuch PHP remote file inclusion vulnerability in sinagb.php in Sinapis Gastebuch 2.2 allows remote attackers to execute arbitrary PHP code via a URL in the fuss parameter. NVD-CWE-Other
CVE-2007-1130 2017-10-11 10:31 2007-02-27 Show GitHub Exploit DB Packet Storm
289237 - scripter.ch sinapis_forum PHP remote file inclusion vulnerability in sinapis.php in Sinapis Forum 2.2 allows remote attackers to execute arbitrary PHP code via a URL in the fuss parameter. NVD-CWE-Other
CVE-2007-1131 2017-10-11 10:31 2007-02-27 Show GitHub Exploit DB Packet Storm
289238 - scripter.ch fcring PHP remote file inclusion vulnerability in fcring.php in FCRing 1.3 allows remote attackers to execute arbitrary PHP code via a URL in the s_fuss parameter. NVD-CWE-Other
CVE-2007-1133 2017-10-11 10:31 2007-02-27 Show GitHub Exploit DB Packet Storm
289239 - pyrophobia pyrophobia Multiple directory traversal vulnerabilities in Pyrophobia 2.1.3.1 allow remote attackers to read arbitrary files via a .. (dot dot) in the (1) act or (2) pid parameter to the top-level URI (index.ph… CWE-22
Path Traversal
CVE-2007-1152 2017-10-11 10:31 2007-03-3 Show GitHub Exploit DB Packet Storm
289240 - common_controls_replacement_project browsedialog_server A certain ActiveX control in the Common Controls Replacement Project (CCRP) CCRP BrowseDialog Server (ccrpbds6.dll) allows remote attackers to cause a denial of service (Internet Explorer 7 crash) vi… NVD-CWE-Other
CVE-2007-1162 2017-10-11 10:31 2007-03-3 Show GitHub Exploit DB Packet Storm