Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":Feb. 9, 2026, 12:59 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
215381 6.8 警告 Umisoft - Umisoft UMI.CMS におけるクロスサイトリクエストフォージェリの脆弱性 CWE-352
同一生成元ポリシー違反
CVE-2013-2754 2014-03-13 15:48 2013-05-8 Show GitHub Exploit DB Packet Storm
215382 6.5 警告 VICIDIAL Group - VICIDIAL ダイヤラーのエージェントインターフェースにおける SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2013-4467 2014-03-13 15:32 2013-10-23 Show GitHub Exploit DB Packet Storm
215383 4.3 警告 The PHP Group - XHProf におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2013-4433 2014-03-13 15:31 2013-09-30 Show GitHub Exploit DB Packet Storm
215384 5 警告 Schneems - Ruby 用 Wicked gem の controller/concerns/render_redirect.rb におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル
CVE-2013-4413 2014-03-13 15:31 2013-10-8 Show GitHub Exploit DB Packet Storm
215385 4.3 警告 Batavi - Batavi の admin/templates/default.php におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2013-2289 2014-03-13 15:00 2013-03-1 Show GitHub Exploit DB Packet Storm
215386 3.5 注意 Plone Foundation - Plone の cb_decode.py および linkintegrity.py におけるサービス運用妨害 (DoS) の脆弱性 CWE-20
不適切な入力確認
CVE-2013-4199 2014-03-13 14:45 2013-06-18 Show GitHub Exploit DB Packet Storm
215387 4 警告 Plone Foundation - Plone の mail_password.py におけるパスワード変更の禁止を回避される脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2013-4198 2014-03-13 14:45 2013-06-18 Show GitHub Exploit DB Packet Storm
215388 5.5 警告 Plone Foundation - Plone の member_portrait.py における他のユーザのポートレートを変更される脆弱性 CWE-20
不適切な入力確認
CVE-2013-4197 2014-03-13 14:44 2013-06-18 Show GitHub Exploit DB Packet Storm
215389 5 警告 Plone Foundation - Plone のオブジェクト管理の実装における重要な情報を取得される脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2013-4196 2014-03-13 14:44 2013-06-18 Show GitHub Exploit DB Packet Storm
215390 5.8 警告 Plone Foundation - Plone の複数の PY ファイルにおけるオープンリダイレクトの脆弱性 CWE-20
不適切な入力確認
CVE-2013-4195 2014-03-13 14:44 2013-06-18 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:April 24, 2026, 4 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
288861 - tsdisplay4xoops tsdisplay4xoops PHP remote file inclusion vulnerability in blocks/tsdisplay4xoops_block2.php in tsdisplay4xoops (TSD4XOOPS, aka the TeamSpeak display module) 0.1 allows remote attackers to execute arbitrary PHP code… CWE-94
Code Injection
CVE-2007-2091 2017-10-11 10:32 2007-04-18 Show GitHub Exploit DB Packet Storm
288862 - anthologia anthologia PHP remote file inclusion vulnerability in index.php in Anthologia 0.5.2 allows remote attackers to execute arbitrary PHP code via a URL in the ads_file parameter. NVD-CWE-Other
CVE-2007-2094 2017-10-11 10:32 2007-04-18 Show GitHub Exploit DB Packet Storm
288863 - ajportal2php ajportal2php Multiple PHP remote file inclusion vulnerabilities in AjPortal2Php allow remote attackers to execute arbitrary PHP code via a URL in the PagePrefix parameter to (1) begin.inc.php, (2) connection.inc.… NVD-CWE-Other
CVE-2007-2142 2017-10-11 10:32 2007-04-19 Show GitHub Exploit DB Packet Storm
288864 - bonoestente joomla_template_be2004-2 PHP remote file inclusion vulnerability in index.php in the Be2004-2 template for Joomla! allows remote attackers to execute arbitrary PHP code via a URL in the mosConfig_absolute_path parameter. NVD-CWE-Other
CVE-2007-2143 2017-10-11 10:32 2007-04-19 Show GitHub Exploit DB Packet Storm
288865 - joomlapack joomlapack PHP remote file inclusion vulnerability in includes/CAltInstaller.php in the JoomlaPack (com_jpack) 1.0.4a2 RE component for Joomla! allows remote attackers to execute arbitrary PHP code via a URL in… CWE-94
Code Injection
CVE-2007-2144 2017-10-11 10:32 2007-04-19 Show GitHub Exploit DB Packet Storm
288866 - minigal minigal The imagecomments function in classes.php in MiniGal b13 allows remote attackers to inject arbitrary PHP code into a file in the thumbs/ directory via the input parameter. NOTE: some of these detail… NVD-CWE-Other
CVE-2007-2145 2017-10-11 10:32 2007-04-19 Show GitHub Exploit DB Packet Storm
288867 - cabron_connector cabron_connector PHP remote file inclusion vulnerability in services/samples/inclusionService.php in Cabron Connector 1.1.0 allows remote attackers to execute arbitrary PHP code via a URL in the CabronServiceFolder p… NVD-CWE-Other
CVE-2007-2154 2017-10-11 10:32 2007-04-19 Show GitHub Exploit DB Packet Storm
288868 - rezervi_generic rezervi_generic Multiple PHP remote file inclusion vulnerabilities in Rezervi Generic 0.9 allow remote attackers to execute arbitrary PHP code via a URL in the root parameter to (1) datumVonDatumBis.inc.php, (2) foo… NVD-CWE-Other
CVE-2007-2156 2017-10-11 10:32 2007-04-19 Show GitHub Exploit DB Packet Storm
288869 - zomplog zomplog Directory traversal vulnerability in upload/force_download.php in Zomplog 3.8 allows remote attackers to read arbitrary files via a .. (dot dot) in the file parameter. NVD-CWE-Other
CVE-2007-2157 2017-10-11 10:32 2007-04-19 Show GitHub Exploit DB Packet Storm
288870 - kooijman-design jgallery PHP remote file inclusion vulnerability in index.php in jGallery 1.3 allows remote attackers to execute arbitrary PHP code via a URL in the G_JGALL[inc_path] parameter. NVD-CWE-Other
CVE-2007-2158 2017-10-11 10:32 2007-04-19 Show GitHub Exploit DB Packet Storm