Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 15, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
219231	6.8	警告	IBM	-	IBM InfoSphere Information Server の XML Pack におけるクロスサイトリクエストフォージェリの脆弱性	CWE-352 同一生成元ポリシー違反	CVE-2013-4057	2014-03-18 14:51	2013-06-7	Show	GitHub Exploit DB Packet Storm

219232	4.3	警告	Proxmox Server Solutions	-	Proxmox Mail Gateway におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2014-2325	2014-03-18 12:22	2014-03-3	Show	GitHub Exploit DB Packet Storm

219233	4.3	警告	Open Classifieds	-	Open Classifieds 2 の classes/controller/error.php におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2014-2024	2014-03-18 12:12	2014-02-20	Show	GitHub Exploit DB Packet Storm

219234	4.3	警告	ブラザー工業	-	Brother MFC-9970CDW プリンタのファームウェアにおけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2013-2671	2014-03-18 11:57	2013-05-6	Show	GitHub Exploit DB Packet Storm

219235	4.3	警告	ブラザー工業	-	Brother MFC-9970CDW プリンタのファームウェアにおけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2013-2670	2014-03-18 11:57	2013-05-6	Show	GitHub Exploit DB Packet Storm

219236	4.3	警告	ブラザー工業	-	Brother MFC-9970CDW プリンタのファームウェアにおけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2013-2507	2014-03-18 11:56	2013-05-6	Show	GitHub Exploit DB Packet Storm

219237	4.4	警告	Debian Canonical Fedora Project Linux Foundation	-	CUPS および cups-filters の pdftoopvp フィルタの oprs/OPVPWrapper.cxx における権限を取得される脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2013-6476	2014-03-18 11:53	2013-11-6	Show	GitHub Exploit DB Packet Storm

219238	6.8	警告	Debian Canonical Fedora Project Linux Foundation	-	CUPS および cups-filters の pdftoopvp フィルタにおける整数オーバーフローの脆弱性	CWE-189 数値処理の問題	CVE-2013-6475	2014-03-18 11:52	2013-11-6	Show	GitHub Exploit DB Packet Storm

219239	6.8	警告	Debian Canonical Fedora Project Linux Foundation	-	CUPS および cups-filters の pdftoopvp フィルタにおけるヒープベースのバッファオーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2013-6474	2014-03-18 11:52	2013-11-6	Show	GitHub Exploit DB Packet Storm

219240	6.8	警告	Canonical Linux Foundation	-	cups-filters の urftopdf フィルタにおけるヒープベースのバッファオーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2013-6473	2014-03-18 11:51	2013-11-6	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 15, 2026, 4:28 a.m.

No	CVSS	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
292381	-	hp	pki_activex_control	The KillProcess method in the HP PKI ActiveX control (HPPKI.ocx) before 1.2.0.1 allows remote attackers to cause a denial of service (kill process) via the partial or full name of a process.	CWE-20 Improper Input Validation	CVE-2012-6501	2024-11-21 10:46	2013-01-12	Show	GitHub Exploit DB Packet Storm

292382	-	pragyan_cms_project	pragyan_cms	Directory traversal vulnerability in download.lib.php in Pragyan CMS 3.0 and earlier allows remote attackers to read arbitrary files via a .. (dot dot) in the fileget parameter in a profile action to…	CWE-22 Path Traversal	CVE-2012-6500	2024-11-21 10:46	2013-01-12	Show	GitHub Exploit DB Packet Storm

292383	-	age_verification_project	age_verification	Open redirect vulnerability in age-verification.php in the Age Verification plugin 0.4 and earlier for WordPress allows remote attackers to redirect users to arbitrary web sites and conduct phishing …	CWE-20 Improper Input Validation	CVE-2012-6499	2024-11-21 10:46	2013-01-12	Show	GitHub Exploit DB Packet Storm

292384	-	microsoft	windows_server_2008 windows_rt windows_8 windows_7 windows_vista windows_server_2012	The SSL provider component in Microsoft Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1, Windows 7 Gold and SP1, Windows 8, Windows Server 2012, and Windows RT does not properly handle enc…	CWE-264 Permissions, Privileges, and Access Controls	CVE-2013-0013	2024-11-21 10:46	2013-01-10	Show	GitHub Exploit DB Packet Storm

292385	-	microsoft	windows_server_2008 windows_7	The Print Spooler in Microsoft Windows Server 2008 R2 and R2 SP1 and Windows 7 Gold and SP1 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a cr…	CWE-119 Incorrect Access of Indexable Resource ('Range Error')	CVE-2013-0011	2024-11-21 10:46	2013-01-10	Show	GitHub Exploit DB Packet Storm

292386	-	microsoft	system_center_operations_manager	Cross-site scripting (XSS) vulnerability in Microsoft System Center Operations Manager 2007 SP1 and R2 allows remote attackers to inject arbitrary web script or HTML via crafted input, aka "System Ce…	CWE-79 Cross-site Scripting	CVE-2013-0010	2024-11-21 10:46	2013-01-10	Show	GitHub Exploit DB Packet Storm

292387	-	microsoft	system_center_operations_manager	Cross-site scripting (XSS) vulnerability in Microsoft System Center Operations Manager 2007 SP1 and R2 allows remote attackers to inject arbitrary web script or HTML via crafted input, aka "System Ce…	CWE-79 Cross-site Scripting	CVE-2013-0009	2024-11-21 10:46	2013-01-10	Show	GitHub Exploit DB Packet Storm

292388	-	microsoft	windows_vista windows_server_2008 windows_7 windows_8 windows_server_2012 windows_rt	win32k.sys in the kernel-mode drivers in Microsoft Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1, Windows 7 Gold and SP1, Windows 8, Windows Server 2012, and Windows RT does not properly…	CWE-264 Permissions, Privileges, and Access Controls	CVE-2013-0008	2024-11-21 10:46	2013-01-10	Show	GitHub Exploit DB Packet Storm

292389	-	microsoft	xml_core_services windows_7 windows_8 windows_server_2003 windows_server_2008 windows_server_2012 windows_vista windows_xp windows_rt expression_web groove_server off…	Microsoft XML Core Services (aka MSXML) 4.0, 5.0, and 6.0 does not properly parse XML content, which allows remote attackers to execute arbitrary code via a crafted web page, aka "MSXML XSLT Vulnerab…	CWE-94 Code Injection	CVE-2013-0007	2024-11-21 10:46	2013-01-10	Show	GitHub Exploit DB Packet Storm

292390	-	microsoft	xml_core_services windows_7 windows_8 windows_server_2003 windows_server_2008 windows_server_2012 windows_vista windows_xp windows_rt expression_web groove_server off…	Microsoft XML Core Services (aka MSXML) 3.0, 5.0, and 6.0 does not properly parse XML content, which allows remote attackers to execute arbitrary code via a crafted web page, aka "MSXML Integer Trunc…	CWE-189 Numeric Errors	CVE-2013-0006	2024-11-21 10:46	2013-01-10	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed