Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 2, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
229831 3.6 注意 Matthias Wandel - Matthias Wandel jhead の jhead.c における任意のファイルを削除される脆弱性 CWE-20
不適切な入力確認 		CVE-2008-4640 2012-12-20 18:52 2008-10-21 Show GitHub Exploit DB Packet Storm
229832 4.6 警告 Matthias Wandel - Matthias Wandel jhead の jhead.c における任意のファイルを上書きされる脆弱性 CWE-59
リンク解釈の問題 		CVE-2008-4639 2012-12-20 18:52 2008-10-21 Show GitHub Exploit DB Packet Storm
229833 7.5 危険 rgallery - WBB 用の rGallery プラグインにおける SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-4627 2012-12-20 18:52 2008-10-20 Show GitHub Exploit DB Packet Storm
229834 6.8 警告 zirkon box - Fritz Berger yappa-ng の yappa-ng におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2008-4626 2012-12-20 18:52 2008-10-20 Show GitHub Exploit DB Packet Storm
229835 7.5 危険 shiftthis - WordPress 用の ShiftThis Newsletter プラグインにおける SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-4625 2012-12-20 18:52 2008-10-20 Show GitHub Exploit DB Packet Storm
229836 5 警告 Wireshark - Wireshark の Bluetooth ACL 解析子におけるサービス運用妨害 (DoS) の脆弱性 CWE-399
リソース管理の問題 		CVE-2008-4683 2012-12-20 18:52 2007-04-4 Show GitHub Exploit DB Packet Storm
229837 7.5 危険 phpfastnews - phpFastNews の fastnews-code.php における認証を迂回される脆弱性 CWE-287
不適切な認証 		CVE-2008-4622 2012-12-20 18:52 2008-10-20 Show GitHub Exploit DB Packet Storm
229838 7.5 危険 ZeeScripts.com - ZeeScripts Zeeproperty の bannerclick.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-4621 2012-12-20 18:52 2008-10-20 Show GitHub Exploit DB Packet Storm
229839 10 危険 サン・マイクロシステムズ - Sun Solaris の RPC サブシステムにおけるサービス運用妨害 (DoS) の脆弱性 CWE-noinfo
情報不足 		CVE-2008-4619 2012-12-20 18:52 2008-10-20 Show GitHub Exploit DB Packet Storm
229840 7.5 危険 pyxicom - Joomla! 用の actualite モジュールにおける SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-4617 2012-12-20 18:52 2008-10-20 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 3, 2026, 4:18 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
292541 - project-redcap
vanderbilt 		redcap Multiple cross-site scripting (XSS) vulnerabilities in REDCap before 5.1.0 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors involving different modules. CWE-79
Cross-site Scripting 		CVE-2013-4612 2024-11-21 10:55 2013-06-17 Show GitHub Exploit DB Packet Storm
292542 - project-redcap
vanderbilt 		redcap Multiple unspecified vulnerabilities in REDCap before 5.1.1 allow remote attackers to have an unknown impact via vectors involving (1) the Online Designer page or (2) the Manage Survey Participants p… NVD-CWE-noinfo
CVE-2013-4611 2024-11-21 10:55 2013-06-17 Show GitHub Exploit DB Packet Storm
292543 - project-redcap
vanderbilt 		redcap Unspecified vulnerability in the Data Search utility in data-entry forms in REDCap before 5.0.3 and 5.1.x before 5.1.2 has unknown impact and remote attack vectors. NVD-CWE-noinfo
CVE-2013-4610 2024-11-21 10:55 2013-06-17 Show GitHub Exploit DB Packet Storm
292544 - project-redcap
vanderbilt 		redcap REDCap before 5.0.4 and 5.1.x before 5.1.3 does not reject certain undocumented syntax within branching logic and calculations, which allows remote authenticated users to bypass intended access restr… CWE-264
Permissions, Privileges, and Access Controls 		CVE-2013-4609 2024-11-21 10:55 2013-06-17 Show GitHub Exploit DB Packet Storm
292545 - project-redcap
vanderbilt 		redcap Cross-site scripting (XSS) vulnerability in REDCap before 5.0.6 allows remote attackers to inject arbitrary web script or HTML via vectors involving the Graphical Data View & Descriptive Stats page. CWE-79
Cross-site Scripting 		CVE-2013-4608 2024-11-21 10:55 2013-06-17 Show GitHub Exploit DB Packet Storm
292546 9.8 CRITICAL
Network 		swfupload_project swfupload There is an object injection vulnerability in swfupload plugin for wordpress. CWE-74
Injection 		CVE-2013-4144 2024-11-21 10:54 2022-07-1 Show GitHub Exploit DB Packet Storm
292547 6.5 MEDIUM
Network 		otrs otrs Kernel/Modules/AgentTicketWatcher.pm in Open Ticket Request System (OTRS) 3.0.x before 3.0.21, 3.1.x before 3.1.17, and 3.2.x before 3.2.8 does not properly restrict tickets, which allows remote atta… CWE-200
Information Exposure 		CVE-2013-4088 2024-11-21 10:54 2020-02-22 Show GitHub Exploit DB Packet Storm
292548 7.5 HIGH
Network 		opensips opensips A Denial of Service (infinite loop) exists in OpenSIPS before 1.10 in lookup.c. CWE-835
 Loop with Unreachable Exit Condition ('Infinite Loop') 		CVE-2013-3722 2024-11-21 10:54 2020-02-18 Show GitHub Exploit DB Packet Storm
292549 9.8 CRITICAL
Network 		zabbix zabbix A File Inclusion vulnerability exists in Zabbix 2.0.6 due to inadequate sanitization of request strings in CGI scripts, which could let a remote malicious user execute arbitrary code. CWE-20
 Improper Input Validation  		CVE-2013-3738 2024-11-21 10:54 2020-02-18 Show GitHub Exploit DB Packet Storm
292550 9.8 CRITICAL
Network 		invisioncommunity invision_power_board Invision Power Board (IPB) through 3.x allows admin account takeover leading to code execution. NVD-CWE-noinfo
CVE-2013-3725 2024-11-21 10:54 2020-02-13 Show GitHub Exploit DB Packet Storm