Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 30, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
222431	4.3	警告	Zend Technologies Ltd.	-	ZendTo の lib/NSSDropoff.php におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2013-6808	2014-01-6 17:13	2013-12-16	Show	GitHub Exploit DB Packet Storm

222432	2.1	注意	OpenStack	-	複数の OpenStack 製品の keystone/middleware/auth_token.py におけるサーバを偽装される脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2013-2030	2014-01-6 17:01	2013-05-9	Show	GitHub Exploit DB Packet Storm

222433	6.1	警告	HOT	-	HOT HOTBOX Router のソフトウェアの goform/login におけるサービス運用妨害 (DoS) の脆弱性	CWE-20 不適切な入力確認	CVE-2013-5220	2014-01-6 16:56	2013-09-9	Show	GitHub Exploit DB Packet Storm

222434	3.3	注意	HOT	-	HOT HOTBOX Router のソフトウェアにおけるディレクトリトラバーサルの脆弱性	CWE-22 パス・トラバーサル	CVE-2013-5219	2014-01-6 16:55	2013-09-9	Show	GitHub Exploit DB Packet Storm

222435	2.9	注意	HOT	-	HOT HOTBOX Router のソフトウェアにおけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2013-5218	2014-01-6 16:54	2013-09-9	Show	GitHub Exploit DB Packet Storm

222436	5.4	警告	HOT	-	HOT HOTBOX Router のソフトウェアの goform/wlanBasicSecurity におけるクロスサイトリクエストフォージェリの脆弱性	CWE-352 同一生成元ポリシー違反	CVE-2013-5039	2014-01-6 16:53	2013-09-9	Show	GitHub Exploit DB Packet Storm

222437	5.8	警告	HOT	-	HOT HOTBOX Router のソフトウェアにおける認証を回避される脆弱性	CWE-287 不適切な認証	CVE-2013-5038	2014-01-6 16:52	2013-09-9	Show	GitHub Exploit DB Packet Storm

222438	3.3	注意	HOT	-	HOT HOTBOX Router のソフトウェアにおける事前共有鍵を取得される脆弱性	CWE-255 証明書・パスワード管理	CVE-2013-5037	2014-01-6 16:51	2013-09-9	Show	GitHub Exploit DB Packet Storm

222439	4.3	警告	ヒューレット・パッカード	-	HP Service Manager WebTier および Windows Client におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2013-6198	2014-01-6 16:34	2013-12-19	Show	GitHub Exploit DB Packet Storm

222440	5.2	警告	ヒューレット・パッカード	-	HP Service Manager WebTier および Windows Client における任意のコードを実行される脆弱性	CWE-noinfo 情報不足	CVE-2013-6197	2014-01-6 16:34	2013-12-19	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 30, 2026, 4:16 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
273601	9.1	CRITICAL Network	fedoraproject opensuse ocaml	fedora opensuse ocaml	OCaml before 4.03.0 does not properly handle sign extensions, which allows remote attackers to conduct buffer overflow attacks or obtain sensitive information as demonstrated by a long string to the …	CWE-119 CWE-200 Incorrect Access of Indexable Resource ('Range Error') Information Exposure	CVE-2015-8869	2024-11-21 11:39	2016-06-14	Show	GitHub Exploit DB Packet Storm

273602	7.3	HIGH Network	broadcom	symantec_critical_system_protection symantec_data_center_security_server symantec_data_center_security_server_and_agents symantec_embedded_security_critical_system_protection symantec_emb…	Symantec Embedded Security: Critical System Protection (SES:CSP) 1.0.x before 1.0 MP5, Embedded Security: Critical System Protection for Controllers and Devices (SES:CSP) 6.5.0 before MP1, Critical S…	CWE-74 Injection	CVE-2015-8800	2024-11-21 11:39	2016-06-8	Show	GitHub Exploit DB Packet Storm

273603	7.6	HIGH Adjacent	broadcom	symantec_data_center_security_server symantec_data_center_security_server_and_agents symantec_embedded_security_critical_system_protection_for_controllers_and_devices symantec_critical_syste…	Directory traversal vulnerability in the Management Server in Symantec Embedded Security: Critical System Protection (SES:CSP) 1.0.x before 1.0 MP5, Embedded Security: Critical System Protection for …	CWE-22 Path Traversal	CVE-2015-8799	2024-11-21 11:39	2016-06-8	Show	GitHub Exploit DB Packet Storm

273604	8.0	HIGH Adjacent	broadcom	symantec_data_center_security_server symantec_critical_system_protection symantec_embedded_security_critical_system_protection symantec_data_center_security_server_and_agents symantec_emb…	Directory traversal vulnerability in the Management Server in Symantec Embedded Security: Critical System Protection (SES:CSP) 1.0.x before 1.0 MP5, Embedded Security: Critical System Protection for …	CWE-22 Path Traversal	CVE-2015-8798	2024-11-21 11:39	2016-06-8	Show	GitHub Exploit DB Packet Storm

273605	6.2	MEDIUM Local	canonical opensuse dosfstools_project	ubuntu_linux leap opensuse dosfstools	The set_fat function in fat.c in dosfstools before 4.0 might allow attackers to corrupt a FAT12 filesystem or cause a denial of service (invalid memory read and crash) by writing an odd number of clu…	CWE-189 Numeric Errors	CVE-2015-8872	2024-11-21 11:39	2016-06-3	Show	GitHub Exploit DB Packet Storm

273606	7.8	HIGH Local	gnome	gdk-pixbuf	Multiple integer overflows in the (1) pixops_composite_nearest, (2) pixops_composite_color_nearest, and (3) pixops_process functions in pixops/pixops.c in gdk-pixbuf before 2.33.1 allow remote attack…	CWE-189 Numeric Errors	CVE-2015-8875	2024-11-21 11:39	2016-06-2	Show	GitHub Exploit DB Packet Storm

273607	7.5	HIGH Network	fedoraproject perl	fedora perl	The (1) S_reghop3, (2) S_reghop4, and (3) S_reghopmaybe3 functions in regexec.c in Perl before 5.24.0 allow context-dependent attackers to cause a denial of service (infinite loop) via crafted utf-8 …	CWE-20 Improper Input Validation	CVE-2015-8853	2024-11-21 11:39	2016-05-26	Show	GitHub Exploit DB Packet Storm

273608	9.8	CRITICAL Network	php	php	Double free vulnerability in the format printer in PHP 7.x before 7.0.1 allows remote attackers to have an unspecified impact by triggering an error.	CWE-415 Double Free	CVE-2015-8880	2024-11-21 11:39	2016-05-22	Show	GitHub Exploit DB Packet Storm

273609	7.5	HIGH Network	php	php	The odbc_bindcols function in ext/odbc/php_odbc.c in PHP before 5.6.12 mishandles driver behavior for SQL_WVARCHAR columns, which allows remote attackers to cause a denial of service (application cra…	CWE-20 Improper Input Validation	CVE-2015-8879	2024-11-21 11:39	2016-05-22	Show	GitHub Exploit DB Packet Storm

273610	5.9	MEDIUM Network	php	php	main/php_open_temporary_file.c in PHP before 5.5.28 and 5.6.x before 5.6.12 does not ensure thread safety, which allows remote attackers to cause a denial of service (race condition and heap memory c…	CWE-119 CWE-362 Incorrect Access of Indexable Resource ('Range Error') Race Condition	CVE-2015-8878	2024-11-21 11:39	2016-05-22	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed