Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":Feb. 9, 2026, 12:59 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
219861 10 危険 ヒューレット・パッカード - HP LeftHand Virtual SAN Appliance hydra Software における任意のコードを実行される脆弱性 CWE-noinfo
情報不足 		CVE-2013-2343 2013-07-4 14:36 2013-06-27 Show GitHub Exploit DB Packet Storm
219862 4.3 警告 Messaging - TYPO3 用 UserTask Center、Messaging エクステンションにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2013-4749 2013-07-3 17:55 2013-01-28 Show GitHub Exploit DB Packet Storm
219863 7.5 危険 Georg Ringer - TYPO3 用 News system エクステンションにおける SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2013-4748 2013-07-3 17:55 2013-01-11 Show GitHub Exploit DB Packet Storm
219864 4.3 警告 Kasper Skarhoj - TYPO3 用 Accessible browse results for indexed search エクステンションにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2013-4747 2013-07-3 17:54 2013-06-3 Show GitHub Exploit DB Packet Storm
219865 4.3 警告 Kurt Gusbeth - TYPO3 用 My quiz and poll エクステンションにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2013-4746 2013-07-3 17:53 2013-02-19 Show GitHub Exploit DB Packet Storm
219866 4.3 警告 Kurt Gusbeth - TYPO3 用 myquizpoll エクステンションにおける SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2013-4745 2013-07-3 17:52 2008-06-7 Show GitHub Exploit DB Packet Storm
219867 4.3 警告 Sebastian Bergmann - TYPO3 用 PHPUnit エクステンションにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2013-4744 2013-07-3 17:52 2013-01-11 Show GitHub Exploit DB Packet Storm
219868 6.8 警告 X.Org Foundation
Openchrome		 - Openchrome の X.org libchromeXvMC および libchromeXvMCPro における整数オーバーフローの脆弱性 CWE-189
数値処理の問題 		CVE-2013-1994 2013-07-3 16:38 2013-05-23 Show GitHub Exploit DB Packet Storm
219869 3.5 注意 TYPO3 Association - TYPO3 の function menu API におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2012-6148 2013-07-3 16:05 2012-11-8 Show GitHub Exploit DB Packet Storm
219870 3.5 注意 TYPO3 Association - TYPO3 の Backend API の tree render API におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2012-6147 2013-07-3 16:05 2012-11-8 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:April 26, 2026, 4:08 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
278041 - microsoft windows_vista
windows_server_2003 		Race condition in Microsoft Windows Server 2003 and Vista allows local users to cause a denial of service (crash or hang) via a multi-threaded application that makes many calls to UnhookWindowsHookEx… CWE-362
Race Condition 		CVE-2008-5044 2019-02-26 23:04 2008-11-13 Show GitHub Exploit DB Packet Storm
278042 - apple safari Apple Safari on Mac OS X, and before 3.1.2 on Windows, does not prompt the user before downloading an object that has an unrecognized content type, which allows remote attackers to place malware into… CWE-264
Permissions, Privileges, and Access Controls 		CVE-2008-2540 2019-02-26 23:04 2008-06-4 Show GitHub Exploit DB Packet Storm
278043 - linux-pam linux-pam Linux-PAM before 1.0.4 does not enforce the minimum password age (MINDAYS) as specified in /etc/shadow, which allows local users to bypass intended security policy and change their passwords sooner t… CWE-264
Permissions, Privileges, and Access Controls 		CVE-2009-0579 2019-01-4 00:01 2009-04-17 Show GitHub Exploit DB Packet Storm
278044 - lighttpd
debian 		lighttpd
debian_linux 		lighttpd before 1.4.20 compares URIs to patterns in the (1) url.redirect and (2) url.rewrite configuration settings before performing URL decoding, which might allow remote attackers to bypass intend… CWE-200
Information Exposure 		CVE-2008-4359 2018-11-30 00:46 2008-10-4 Show GitHub Exploit DB Packet Storm
278045 - lighttpd
debian 		lighttpd
debian_linux 		mod_userdir in lighttpd before 1.4.20, when a case-insensitive operating system or filesystem is used, performs case-sensitive comparisons on filename components in configuration options, which might… CWE-200
Information Exposure 		CVE-2008-4360 2018-11-30 00:46 2008-10-4 Show GitHub Exploit DB Packet Storm
278046 - yate yet_another_telephony_engine The SIP channel module in Yet Another Telephony Engine (Yate) before 1.2.0 sets the caller_info_uri parameter using an incorrect variable that can be NULL, which allows remote attackers to cause a de… CWE-20
 Improper Input Validation  		CVE-2007-1693 2018-11-30 00:46 2007-05-18 Show GitHub Exploit DB Packet Storm
278047 - omegaboard_project omegaboard PHP remote file inclusion vulnerability in includes/functions.php in Omegaboard 1.0beta4 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the phpbb_root_path parameter. CWE-20
 Improper Input Validation  		CVE-2007-0683 2018-11-30 00:45 2007-02-3 Show GitHub Exploit DB Packet Storm
278048 - apache
debian 		libapreq2
debian_linux 		Unspecified vulnerability in (1) apreq_parse_headers and (2) apreq_parse_urlencoded functions in Apache2::Request (Libapreq2) before 2.07 allows remote attackers to cause a denial of service (CPU con… NVD-CWE-noinfo
CVE-2006-0042 2018-11-30 00:45 2006-02-19 Show GitHub Exploit DB Packet Storm
278049 - spytech-web spyanywhere Spytech SpyAnywhere 1.50 allows remote attackers to gain administrator access via a single character in the "loginpass" field. CWE-264
Permissions, Privileges, and Access Controls 		CVE-2001-0771 2018-11-30 00:45 2001-10-18 Show GitHub Exploit DB Packet Storm
278050 - bb4 big_brother Vulnerability in bb-hist.sh CGI History module in Big Brother 1.09b and 1.09c allows remote attackers to read portions of arbitrary files. CWE-200
Information Exposure 		CVE-1999-1462 2018-11-30 00:44 1999-12-31 Show GitHub Exploit DB Packet Storm