Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 7, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
229621 7.5 危険 wowraidmanager - WoW Raid Manager の auth/auth_phpbb3.php における認証を回避される脆弱性 CWE-255
証明書・パスワード管理 		CVE-2008-7050 2012-12-20 19:10 2008-10-13 Show GitHub Exploit DB Packet Storm
229622 7.5 危険 Simple Machines - SMF のパスワードリセット機能における他のユーザのパスワードを変更される脆弱性 CWE-255
証明書・パスワード管理 		CVE-2008-6971 2012-12-20 19:10 2008-09-7 Show GitHub Exploit DB Packet Storm
229623 7.5 危険 UBB Systems - UBB.threads の dosearch.inc.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-6970 2012-12-20 19:10 2008-09-2 Show GitHub Exploit DB Packet Storm
229624 10 危険 raidsonic - RaidSonic ICY BOX NAS の userHandler.cgi における認証を回避される脆弱性 CWE-287
不適切な認証 		CVE-2008-7081 2012-12-20 19:10 2009-08-25 Show GitHub Exploit DB Packet Storm
229625 5 警告 phpclassifiedsscript - Team PHP PHP Classifieds Script におけるデータベース資格情報を取得される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2008-7080 2012-12-20 19:10 2009-08-25 Show GitHub Exploit DB Packet Storm
229626 7.5 危険 relative - SailPlanner における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-7077 2012-12-20 19:10 2009-08-25 Show GitHub Exploit DB Packet Storm
229627 7.8 危険 シーメンス - Siemens C450 IP など VoIP デバイスにおけるサービス運用妨害 (DoS) の脆弱性 CWE-Other
その他 		CVE-2008-7065 2012-12-20 19:10 2009-08-25 Show GitHub Exploit DB Packet Storm
229628 7.5 危険 quicksilver forums - Quicksilver Forums の global.php におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2008-7064 2012-12-20 19:10 2009-08-25 Show GitHub Exploit DB Packet Storm
229629 5.1 警告 visualshapers - ezContents の module.php におけるディレクトリトラバーサル保護メカニズムを回避される脆弱性 CWE-22
パス・トラバーサル 		CVE-2008-7055 2012-12-20 19:10 2009-08-24 Show GitHub Exploit DB Packet Storm
229630 5.1 警告 visualshapers - ezContents におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2008-7054 2012-12-20 19:10 2009-08-24 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 7, 2026, 4:13 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
292681 - cisco wireless_lan_controller Cross-site scripting (XSS) vulnerability in the management interface on Cisco Wireless LAN Controller (WLC) devices allows remote attackers to inject arbitrary web script or HTML via a crafted URL, a… CWE-79
Cross-site Scripting 		CVE-2013-5519 2024-11-21 10:57 2013-10-3 Show GitHub Exploit DB Packet Storm
292682 - cisco unified_communications_domain_manager SQL injection vulnerability in the web framework in Cisco Unified Communications Domain Manager allows remote authenticated users to execute arbitrary SQL commands via a crafted URL, aka Bug ID CSCuh… CWE-89
SQL Injection 		CVE-2013-5517 2024-11-21 10:57 2013-10-3 Show GitHub Exploit DB Packet Storm
292683 - cisco ios_xr The UDP process in Cisco IOS XR 4.3.1 does not free packet memory upon detecting full packet queues, which allows remote attackers to cause a denial of service (memory consumption) via UDP packets to… CWE-399
 Resource Management Errors 		CVE-2013-5503 2024-11-21 10:57 2013-10-3 Show GitHub Exploit DB Packet Storm
292684 - barton ngircd The (1) Conn_StartLogin and (2) cb_Read_Resolver_Result functions in conn.c in ngIRCd 18 through 20.2, when the configuration option NoticeAuth is enabled, does not properly handle the return code fo… CWE-20
 Improper Input Validation  		CVE-2013-5580 2024-11-21 10:57 2013-10-2 Show GitHub Exploit DB Packet Storm
292685 - ibm maximo_asset_management IBM Maximo Asset Management 6.2 through 6.2.8, 7.1 before 7.1.1.12, and 7.5 before 7.5.0.5 allows remote attackers to bypass intended access restrictions via unspecified vectors. NVD-CWE-noinfo
CVE-2013-5395 2024-11-21 10:57 2013-10-1 Show GitHub Exploit DB Packet Storm
292686 - ibm maximo_asset_management IBM Maximo Asset Management 6.2 through 6.2.8, 7.1 before 7.1.1.12, and 7.5 before 7.5.0.5 allows remote authenticated users to gain privileges via unspecified vectors, a different vulnerability than… CWE-264
Permissions, Privileges, and Access Controls 		CVE-2013-5383 2024-11-21 10:57 2013-10-1 Show GitHub Exploit DB Packet Storm
292687 - ibm maximo_asset_management IBM Maximo Asset Management 6.2 through 6.2.8, 7.1 before 7.1.1.12, and 7.5 before 7.5.0.5 allows remote authenticated users to gain privileges via unspecified vectors, a different vulnerability than… NVD-CWE-noinfo
CVE-2013-5382 2024-11-21 10:57 2013-10-1 Show GitHub Exploit DB Packet Storm
292688 - ibm maximo_asset_management IBM Maximo Asset Management 6.2 through 6.2.8, 7.1 through 7.1.1.12, and 7.5 before 7.5.0.3 allows remote authenticated users to gain privileges via unspecified vectors. NVD-CWE-noinfo
CVE-2013-5381 2024-11-21 10:57 2013-10-1 Show GitHub Exploit DB Packet Storm
292689 - ibm maximo_asset_management IBM Maximo Asset Management 6.2 through 6.2.8, 7.1 before 7.1.1.12, and 7.5 before 7.5.0.5 allows local users to obtain sensitive information via unspecified vectors. CWE-200
Information Exposure 		CVE-2013-5380 2024-11-21 10:57 2013-10-1 Show GitHub Exploit DB Packet Storm
292690 - zabbix zabbix Zabbix 2.0.5 allows remote authenticated users to discover the LDAP bind password by leveraging management-console access and reading the ldap_bind_password value in the HTML source code. CWE-264
Permissions, Privileges, and Access Controls 		CVE-2013-5572 2024-11-21 10:57 2013-10-1 Show GitHub Exploit DB Packet Storm