Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":June 19, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
228331	7.5	危険	Wesley Destailleur	-	Todoo Forum の todooforum.php における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2013-3537	2013-05-15 17:46	2013-05-13	Show	GitHub Exploit DB Packet Storm

228332	7.5	危険	WHMCS Limited	-	WHMCS 用 Group Pay モジュールにおける SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2013-3536	2013-05-15 17:38	2013-05-13	Show	GitHub Exploit DB Packet Storm

228333	4.3	警告	ThemeLogik	-	CMSLogik におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2013-3535	2013-05-15 17:35	2013-05-13	Show	GitHub Exploit DB Packet Storm

228334	4.3	警告	algisinfo	-	Joomla! 用の aiContactSafe コンポーネントにおけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2013-3534	2013-05-15 17:32	2013-04-16	Show	GitHub Exploit DB Packet Storm

228335	2.6	注意	Fedora Project	-	389 Directory Server の ldap/servers/slapd/search.c における重要な情報を取得される脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2013-1897	2013-05-15 16:07	2013-03-28	Show	GitHub Exploit DB Packet Storm

228336	7.5	危険	Virtual Access	-	Virtual Access Monitor における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2013-3533	2013-05-14 15:49	2013-05-10	Show	GitHub Exploit DB Packet Storm

228337	7.5	危険	Web-Dorado	-	Drupal 用 Web Dorado Spider Video Player プラグインの settings.php における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2013-3532	2013-05-14 15:49	2013-05-10	Show	GitHub Exploit DB Packet Storm

228338	7.5	危険	RadioCMS	-	RadioCMS の meneger.php における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2013-3531	2013-05-14 15:48	2013-05-10	Show	GitHub Exploit DB Packet Storm

228339	7.5	危険	Fabricio Zuardi	-	WordPress 用 Spiffy XSPF Player プラグインの playlist.php における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2013-3530	2013-05-14 15:47	2013-05-10	Show	GitHub Exploit DB Packet Storm

228340	4.3	警告	Smarty Pants Plugins	-	WordPress 用 WP FuneralPress プラグインの user/obits.php におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2013-3529	2013-05-14 15:46	2013-05-10	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:June 20, 2026, 4:01 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
275891	9.8	CRITICAL Network	imagemagick	imagemagick	Off-by-one error in coders/wpg.c in ImageMagick allows remote attackers to have unspecified impact via vectors related to a string copy.	CWE-189 Numeric Errors	CVE-2016-10145	2024-11-21 11:43	2017-03-25	Show	GitHub Exploit DB Packet Storm

275892	9.8	CRITICAL Network	imagemagick	imagemagick	coders/ipl.c in ImageMagick allows remote attackers to have unspecific impact by leveraging a missing malloc check.	CWE-284 Improper Access Control	CVE-2016-10144	2024-11-21 11:43	2017-03-25	Show	GitHub Exploit DB Packet Storm

275893	9.8	CRITICAL Network	artifex	mujs	Heap-based buffer overflow in the js_stackoverflow function in jsrun.c in Artifex Software, Inc. MuJS allows attackers to have unspecified impact by leveraging an error when dropping extra arguments …	CWE-119 Incorrect Access of Indexable Resource ('Range Error')	CVE-2016-10133	2024-11-21 11:43	2017-03-25	Show	GitHub Exploit DB Packet Storm

275894	7.5	HIGH Network	artifex fedoraproject	mujs fedora	regexp.c in Artifex Software, Inc. MuJS allows attackers to cause a denial of service (NULL pointer dereference and crash) via vectors related to regular expression compilation.	CWE-476 NULL Pointer Dereference	CVE-2016-10132	2024-11-21 11:43	2017-03-25	Show	GitHub Exploit DB Packet Storm

275895	5.9	MEDIUM Network	libgit2_project	libgit2	The http_connect function in transports/http.c in libgit2 before 0.24.6 and 0.25.x before 0.25.1 might allow man-in-the-middle attackers to spoof servers by leveraging clobbering of the error variabl…	CWE-284 Improper Access Control	CVE-2016-10130	2024-11-21 11:43	2017-03-25	Show	GitHub Exploit DB Packet Storm

275896	7.5	HIGH Network	libgit2_project	libgit2	The Git Smart Protocol support in libgit2 before 0.24.6 and 0.25.x before 0.25.1 allows remote attackers to cause a denial of service (NULL pointer dereference) via an empty packet line.	CWE-476 NULL Pointer Dereference	CVE-2016-10129	2024-11-21 11:43	2017-03-25	Show	GitHub Exploit DB Packet Storm

275897	9.8	CRITICAL Network	libgit2_project	libgit2	Buffer overflow in the git_pkt_parse_line function in transports/smart_pkt.c in the Git Smart Protocol support in libgit2 before 0.24.6 and 0.25.x before 0.25.1 allows remote attackers to have unspec…	CWE-119 Incorrect Access of Indexable Resource ('Range Error')	CVE-2016-10128	2024-11-21 11:43	2017-03-25	Show	GitHub Exploit DB Packet Storm

275898	7.5	HIGH Network	pysaml2_project debian	pysaml2 debian_linux	XML External Entity (XXE) vulnerability in PySAML2 4.4.0 and earlier allows remote attackers to read arbitrary files via a crafted SAML XML request or response.	CWE-611 XXE	CVE-2016-10149	2024-11-21 11:43	2017-03-24	Show	GitHub Exploit DB Packet Storm

275899	7.8	HIGH Local	imagemagick	imagemagick	Buffer overflow in coders/tiff.c in ImageMagick before 6.9.4-1 allows remote attackers to cause a denial of service (application crash) or have unspecified other impact via a crafted TIFF file.	CWE-119 Incorrect Access of Indexable Resource ('Range Error')	CVE-2016-10059	2024-11-21 11:43	2017-03-24	Show	GitHub Exploit DB Packet Storm

275900	5.5	MEDIUM Local	imagemagick	imagemagick	Memory leak in the ReadPSDLayers function in coders/psd.c in ImageMagick before 6.9.6-3 allows remote attackers to cause a denial of service (memory consumption) via a crafted image file.	CWE-400 Uncontrolled Resource Consumption	CVE-2016-10058	2024-11-21 11:43	2017-03-24	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed