Vulnerability Search Top

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

Vulnerability Information Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":June 4, 2026, 4 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
229721	6.8	警告	PreProject.com	-	Pre Projects PHP Auto Listings Script の moreinfo.php における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2008-6226	2012-12-20 19:10	2009-02-20	Show	GitHub Exploit DB Packet Storm

229722	7.5	危険	samelinux	-	WOTW の visualizza.php におけるディレクトリトラバーサルの脆弱性	CWE-22 パス・トラバーサル	CVE-2008-6224	2012-12-20 19:10	2009-02-20	Show	GitHub Exploit DB Packet Storm

229723	7.5	危険	wotw	-	WOTW の visualizza.php における PHP リモートファイルインクルージョンの脆弱性	CWE-94 コード・インジェクション	CVE-2008-6223	2012-12-20 19:10	2009-02-20	Show	GitHub Exploit DB Packet Storm

229724	7.5	危険	Cafuego	-	SDMS の login.php における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2008-6220	2012-12-20 19:10	2009-02-20	Show	GitHub Exploit DB Packet Storm

229725	4.3	警告	php-stats	-	Php-Stats の admin.php におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2008-6212	2012-12-20 19:10	2009-02-19	Show	GitHub Exploit DB Packet Storm

229726	7.5	危険	Vastal I-Tech & Co.	-	Vastal I-Tech Software Zone の view_product.php における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2008-6209	2012-12-20 19:10	2009-02-19	Show	GitHub Exploit DB Packet Storm

229727	8.5	危険	phpg upload	-	PHPG Upload の form_upload.php における任意のコードを実行される脆弱性	CWE-20 不適切な入力確認	CVE-2008-6207	2012-12-20 19:10	2009-02-19	Show	GitHub Exploit DB Packet Storm

229728	7.5	危険	RobotStats	-	RobotStats における PHP リモートファイルインクルージョンの脆弱性	CWE-94 コード・インジェクション	CVE-2008-6206	2012-12-20 19:10	2009-02-19	Show	GitHub Exploit DB Packet Storm

229729	4.3	警告	xaaaaav38	-	Xavier Flahaut URLStreet の seeurl.php におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2008-6205	2012-12-20 19:10	2009-02-19	Show	GitHub Exploit DB Packet Storm

229730	7.5	危険	supernet	-	SuperNET Shop における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2008-6204	2012-12-20 19:10	2009-02-19	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:June 5, 2026, 4:11 a.m.

No	CVSS	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
292621	-	canonical qemu	ubuntu_linux qemu	hw/net/vmxnet3.c in QEMU 2.0.0-rc0, 1.7.1, and earlier allows local guest users to cause a denial of service or possibly execute arbitrary code via vectors related to (1) RX or (2) TX queue numbers o…	CWE-20 Improper Input Validation	CVE-2013-4544	2024-11-21 10:55	2014-05-8	Show	GitHub Exploit DB Packet Storm

292622	-	nagios	plugins	The IPXPING_COMMAND in contrib/check_ipxping.c in Nagios Plugins 1.4.16 allows local users to gain privileges via a symlink attack on /tmp/ipxping/ipxping.	CWE-59 Link Following	CVE-2013-4215	2024-11-21 10:55	2014-05-6	Show	GitHub Exploit DB Packet Storm

292623	-	dkorunic	pam_s\/key	A certain Gentoo patch for the PAM S/Key module does not properly clear credentials from memory, which allows local users to obtain sensitive information by reading system memory.	CWE-255 Credentials Management	CVE-2013-4285	2024-11-21 10:55	2014-04-28	Show	GitHub Exploit DB Packet Storm

292624	-	debian	ppthtml	Heap-based buffer overflow in the __OLEdecode function in ppthtml 0.5.1 and earlier allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a crafted .ppt…	CWE-119 Incorrect Access of Indexable Resource ('Range Error')	CVE-2013-4565	2024-11-21 10:55	2014-04-26	Show	GitHub Exploit DB Packet Storm

292625	-	freedesktop	poppler	The openTempFile function in goo/gfile.cc in Xpdf and Poppler 0.24.3 and earlier, when running on a system other than Unix, allows local users to overwrite arbitrary files via a symlink attack on tem…	CWE-59 Link Following	CVE-2013-4472	2024-11-21 10:55	2014-04-22	Show	GitHub Exploit DB Packet Storm

292626	-	imapsync_project	imapsync	imapsync 1.564 and earlier performs a release check by default, which sends sensitive information (imapsync, operating system, and Perl version) to the developer's site.	CWE-200 Information Exposure	CVE-2013-4279	2024-11-21 10:55	2014-04-19	Show	GitHub Exploit DB Packet Storm

292627	-	uclouvain	openjpeg	Stack-based buffer overflow in OpenJPEG before 1.5.2 allows remote attackers to have unspecified impact via unknown vectors to (1) lib/openjp3d/opj_jp3d_compress.c, (2) bin/jp3d/convert.c, or (3) lib…	CWE-119 Incorrect Access of Indexable Resource ('Range Error')	CVE-2013-4290	2024-11-21 10:55	2014-04-18	Show	GitHub Exploit DB Packet Storm

292628	-	uclouvain	openjpeg	Multiple integer overflows in lib/openjp3d/jp3d.c in OpenJPEG before 1.5.2 allow remote attackers to have unspecified impact and vectors, which trigger a heap-based buffer overflow.	CWE-189 Numeric Errors	CVE-2013-4289	2024-11-21 10:55	2014-04-18	Show	GitHub Exploit DB Packet Storm

292629	-	hitmyserver	hms_testimonials	Multiple cross-site request forgery (CSRF) vulnerabilities in the HMS Testimonials plugin before 2.0.11 for WordPress allow remote attackers to hijack the authentication of administrators for request…	CWE-352 Origin Validation Error	CVE-2013-4240	2024-11-21 10:55	2014-04-3	Show	GitHub Exploit DB Packet Storm

292630	-	samba canonical	samba ubuntu_linux	Samba 3.x before 3.6.23, 4.0.x before 4.0.16, and 4.1.x before 4.1.6 does not enforce the password-guessing protection mechanism for all interfaces, which makes it easier for remote attackers to obta…	CWE-255 Credentials Management	CVE-2013-4496	2024-11-21 10:55	2014-03-14	Show	GitHub Exploit DB Packet Storm