Vulnerability Search Top
Show Search Menu
|
You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database). |
JVN Vulnerability Information
Update Date":May 26, 2026, 6 p.m.
| No | CVSS | Level Attach Vector |
Vendor Name | Project Name | Title | CWE | CVE | Update Date | Publication Date | Impact Show |
Exploit PoC Search |
|---|---|---|---|---|---|---|---|---|---|---|---|
| 219731 | 1.9 | 注意 | LLVM | - | Clang の scan-build ユーティリティの GetHTMLRunDir 関数における重要な情報を取得される脆弱性 |
CWE-59
リンク解釈の問題 |
CVE-2014-2893 | 2014-04-25 16:23 | 2014-04-14 | Show | GitHub Exploit DB Packet Storm |
| 219732 | 7.5 | 危険 | Herry | - | Ruby 用 sfpagent gem における任意のコマンドを実行される脆弱性 |
CWE-Other
その他 |
CVE-2014-2888 | 2014-04-25 16:16 | 2014-04-16 | Show | GitHub Exploit DB Packet Storm |
| 219733 | 6.4 | 警告 | マイクロソフト | - | Windows NT および Windows 2000 上で稼動する Microsoft Internet Information Services における CRLF インジェクションの脆弱性 |
CWE-Other
その他 |
CVE-2011-5279 | 2014-04-25 15:44 | 2014-04-10 | Show | GitHub Exploit DB Packet Storm |
| 219734 | 7.5 | 危険 | libmms project | - | libmms の mmsh.c 内の get_answer 関数におけるヒープベースのバッファオーバーフローの脆弱性 |
CWE-119
バッファエラー |
CVE-2014-2892 | 2014-04-25 15:25 | 2014-04-8 | Show | GitHub Exploit DB Packet Storm |
| 219735 | 4.3 | 警告 | シマンテック | - | Symantec Messaging Gateway の管理コンソールにおけるクロスサイトスクリプティングの脆弱性 |
CWE-79
クロスサイト・スクリプティング（XSS） |
CVE-2014-1648 | 2014-04-25 15:24 | 2014-04-22 | Show | GitHub Exploit DB Packet Storm |
| 219736 | 7.5 | 危険 | KnowledgeTree | - | KnowledgeTree の webservice/clienttools/services/mdownload.php における SQL インジェクションの脆弱性 |
CWE-89
SQLインジェクション |
CVE-2014-2737 | 2014-04-25 15:15 | 2014-03-28 | Show | GitHub Exploit DB Packet Storm |
| 219737 | 3.3 | 注意 | freedesktop.org | - | Xpdf および Poppler の goo/gfile.cc 内の openTempFile 関数における任意のファイルを上書きされる脆弱性 |
CWE-59
リンク解釈の問題 |
CVE-2013-4472 | 2014-04-25 14:59 | 2013-10-26 | Show | GitHub Exploit DB Packet Storm |
| 219738 | 3.3 | 注意 | npm, Inc. | - | Node Packaged Modules の lib/npm.js における任意のファイルを上書きされる脆弱性 |
CWE-59
リンク解釈の問題 |
CVE-2013-4116 | 2014-04-25 14:26 | 2013-07-8 | Show | GitHub Exploit DB Packet Storm |
| 219739 | 4.3 | 警告 | Apache Software Foundation | - | Apache Archiva におけるクロスサイトスクリプティングの脆弱性 |
CWE-79
クロスサイト・スクリプティング（XSS） |
CVE-2013-2187 | 2014-04-25 14:14 | 2013-02-19 | Show | GitHub Exploit DB Packet Storm |
| 219740 | 3.3 | 注意 | Jonathan Leung | - | Ruby 用 Show In Browser gem における任意の Web スクリプトまたは HTML を挿入される脆弱性 |
CWE-59
リンク解釈の問題 |
CVE-2013-2105 | 2014-04-25 14:06 | 2013-05-18 | Show | GitHub Exploit DB Packet Storm |
NVD Vulnerability Information
Update Date:May 27, 2026, 4:52 a.m.
| No | CVSS | Level Attach Vector |
Vendor Name | Project Name | Title | CWE | CVE | Update Date | Publication Date | Show Affected | Exploit PoC Search |
|---|---|---|---|---|---|---|---|---|---|---|---|
| 292091 | 7.5 |
HIGH
Network |
python | python | The gzip_decode function in the xmlrpc client library in Python 3.4 and earlier allows remote attackers to cause a denial of service (memory consumption) via a crafted HTTP request. |
NVD-CWE-noinfo
|
CVE-2013-1753 | 2024-11-21 10:50 | 2020-03-12 | Show | GitHub Exploit DB Packet Storm |
| 292092 | 9.8 |
CRITICAL
Network |
berkeley | boinc | Multiple SQL injection vulnerabilities in BOINC allow remote attackers to execute arbitrary SQL commands via unspecified vectors. |
CWE-89
SQL Injection |
CVE-2013-2018 | 2024-11-21 10:50 | 2020-02-20 | Show | GitHub Exploit DB Packet Storm |
| 292093 | 7.5 |
HIGH
Network |
intel | 82574l_controller_firmware | A denial of service vulnerability exists in some motherboard implementations of Intel e1000e/82574L network controller devices through 2013-02-06 where the device can be brought into a non-processing… |
CWE-665
Improper Initialization |
CVE-2013-1634 | 2024-11-21 10:50 | 2020-02-14 | Show | GitHub Exploit DB Packet Storm |
| 292094 | 6.1 |
MEDIUM
Network |
zimbra | zimbra | Zimbra 2013 has XSS in aspell.php |
CWE-79
Cross-site Scripting |
CVE-2013-1938 | 2024-11-21 10:50 | 2020-02-13 | Show | GitHub Exploit DB Packet Storm |
| 292095 | 7.5 |
HIGH
Network |
skill | commerce_skrill | Commerce Skrill (Formerly Moneybookers) has an Access bypass vulnerability in all versions prior to 7.x-1.2 |
NVD-CWE-Other
|
CVE-2013-1924 | 2024-11-21 10:50 | 2020-02-13 | Show | GitHub Exploit DB Packet Storm |
| 292096 | 9.8 |
CRITICAL
Network |
boldgrid automattic |
w3_total_cache wp_super_cache |
WordPress W3 Total Cache Plugin 0.9.2.8 has a Remote PHP Code Execution Vulnerability |
CWE-74
Injection |
CVE-2013-2010 | 2024-11-21 10:50 | 2020-02-13 | Show | GitHub Exploit DB Packet Storm |
| 292097 | 9.8 |
CRITICAL
Network |
yabb | yabb | YaBB through 2.5.2: 'guestlanguage' Cookie Parameter Local File Include Vulnerability |
CWE-434
Unrestricted Upload of File with Dangerous Type |
CVE-2013-2057 | 2024-11-21 10:50 | 2020-02-12 | Show | GitHub Exploit DB Packet Storm |
| 292098 | 6.1 |
MEDIUM
Network |
thebuggenie | the_bug_genie | The Bug Genie before 3.2.6 has Multiple XSS and HTML Injection Vulnerabilities |
CWE-79
Cross-site Scripting |
CVE-2013-1760 | 2024-11-21 10:50 | 2020-02-12 | Show | GitHub Exploit DB Packet Storm |
| 292099 | 8.8 |
HIGH
Network |
automattic | wp_super_cache | WordPress WP Super Cache Plugin 1.2 has Remote PHP Code Execution |
NVD-CWE-Other
|
CVE-2013-2009 | 2024-11-21 10:50 | 2020-02-7 | Show | GitHub Exploit DB Packet Storm |
| 292100 | 6.1 |
MEDIUM
Network |
automattic | wp_super_cache | WordPress Super Cache Plugin 1.3 has XSS. |
CWE-79
Cross-site Scripting |
CVE-2013-2008 | 2024-11-21 10:50 | 2020-02-7 | Show | GitHub Exploit DB Packet Storm |