Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 1, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
230081 7.5 危険 phplinkat - TribunaLibre の ftag.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-3406 2012-12-20 18:52 2008-07-31 Show GitHub Exploit DB Packet Storm
230082 4.3 警告 xrms - XRMS CRM における設定情報を取得される脆弱性 CWE-200
情報漏えい 		CVE-2008-3400 2012-12-20 18:52 2008-07-31 Show GitHub Exploit DB Packet Storm
230083 6.8 警告 xrms - XRMS CRM の activities/workflow-activities.php における PHP リモートファイルインクルージョンの脆弱性 CWE-94
コード・インジェクション 		CVE-2008-3399 2012-12-20 18:52 2008-07-31 Show GitHub Exploit DB Packet Storm
230084 2.6 注意 xrms - XRMS CRM におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2008-3398 2012-12-20 18:52 2008-07-31 Show GitHub Exploit DB Packet Storm
230085 4.3 警告 runesoft - Runesoft Cerberus CMS におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2008-3397 2012-12-20 18:52 2008-07-31 Show GitHub Exploit DB Packet Storm
230086 5.8 警告 webwizguide - Web Wiz Forum におけるクロスサイトリクエストフォージェリの脆弱性 CWE-352
同一生成元ポリシー違反 		CVE-2008-3392 2012-12-20 18:52 2008-07-31 Show GitHub Exploit DB Packet Storm
230087 4.3 警告 webwizguide - Web Wiz Forum におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2008-3391 2012-12-20 18:52 2008-07-31 Show GitHub Exploit DB Packet Storm
230088 7.5 危険 phpfootball - PHPFootball の show.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-3387 2012-12-20 18:52 2008-07-30 Show GitHub Exploit DB Packet Storm
230089 4.3 警告 snarky - Snark VisualPic におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2008-3379 2012-12-20 18:52 2008-07-30 Show GitHub Exploit DB Packet Storm
230090 7.5 危険 talkback - TalkBack の install/help.php におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2008-3371 2012-12-20 18:52 2008-07-30 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 2, 2026, 4:18 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
293651 - ibm business_process_monitor Unspecified vulnerability in HP Business Process Monitor 9.13.1 patch 1 and 9.22 patch 1 allows remote attackers to execute arbitrary code and obtain sensitive information via unknown vectors, aka ZD… NVD-CWE-noinfo
CVE-2013-2366 2024-11-21 10:51 2013-10-13 Show GitHub Exploit DB Packet Storm
293652 - tp-link tl-sc3130
tl-sc3130g
tl-sc3171
tl-sc3171g
lm_firmware 		cgi-bin/firmwareupgrade in TP-Link IP Cameras TL-SC3130, TL-SC3130G, TL-SC3171, TL-SC3171G, and possibly other models before beta firmware LM.1.6.18P12_sign6 allows remote attackers to modify the fir… CWE-264
Permissions, Privileges, and Access Controls 		CVE-2013-2581 2024-11-21 10:51 2013-10-12 Show GitHub Exploit DB Packet Storm
293653 - tp-link tl-sc3130
tl-sc3130g
tl-sc3171
tl-sc3171g
lm_firmware 		Unrestricted file upload vulnerability in cgi-bin/uploadfile in TP-Link IP Cameras TL-SC3130, TL-SC3130G, TL-SC3171, TL-SC3171G, and possibly other models before beta firmware LM.1.6.18P12_sign6, all… NVD-CWE-Other
CVE-2013-2580 2024-11-21 10:51 2013-10-12 Show GitHub Exploit DB Packet Storm
293654 - tp-link tl-sc3130
tl-sc3130g
tl-sc3171
tl-sc3171g
lm_firmware 		TP-Link IP Cameras TL-SC3130, TL-SC3130G, TL-SC3171, TL-SC3171G, and possibly other models before beta firmware LM.1.6.18P12_sign6 have an empty password for the hardcoded "qmik" account, which allow… CWE-255
Credentials Management 		CVE-2013-2579 2024-11-21 10:51 2013-10-12 Show GitHub Exploit DB Packet Storm
293655 - tp-link tl-sc3130
tl-sc3130g
tl-sc3171
tl-sc3171g
lm_firmware 		cgi-bin/admin/servetest in TP-Link IP Cameras TL-SC3130, TL-SC3130G, TL-SC3171, TL-SC3171G, and possibly other models before beta firmware LM.1.6.18P12_sign6 allows remote attackers to execute arbitr… CWE-78
OS Command  		CVE-2013-2578 2024-11-21 10:51 2013-10-12 Show GitHub Exploit DB Packet Storm
293656 - menalto gallery modules/gallery/helpers/data_rest.php in Gallery 3 before 3.0.9 allows remote attackers to bypass intended access restrictions and obtain sensitive information (image files) via the "full" string in … CWE-264
Permissions, Privileges, and Access Controls 		CVE-2013-2241 2024-11-21 10:51 2013-10-10 Show GitHub Exploit DB Packet Storm
293657 - menalto gallery lib/flowplayer.swf.php in Gallery 3 before 3.0.9 does not properly remove query fragments, which allows remote attackers to have an unspecified impact via a replay attack, a different vulnerability t… NVD-CWE-noinfo
CVE-2013-2240 2024-11-21 10:51 2013-10-10 Show GitHub Exploit DB Packet Storm
293658 - menalto gallery The (1) uploadify and (2) flowplayer SWF files in Gallery 3 before 3.0.8 do not properly remove query parameters and fragments, which allows remote attackers to have an unspecified impact via a repla… CWE-20
 Improper Input Validation  		CVE-2013-2138 2024-11-21 10:51 2013-10-10 Show GitHub Exploit DB Packet Storm
293659 - gnu
fedoraproject 		glibc
fedora 		pt_chown in GNU C Library (aka glibc or libc6) before 2.18 does not properly check permissions for tty files, which allows local users to change the permission on the files and obtain access to arbit… CWE-264
Permissions, Privileges, and Access Controls 		CVE-2013-2207 2024-11-21 10:51 2013-10-10 Show GitHub Exploit DB Packet Storm
293660 - python
canonical 		python
ubuntu_linux 		Algorithmic complexity vulnerability in the ssl.match_hostname function in Python 3.2.x, 3.3.x, and earlier, and unspecified versions of python-backports-ssl_match_hostname as used for older Python v… CWE-399
 Resource Management Errors 		CVE-2013-2099 2024-11-21 10:51 2013-10-9 Show GitHub Exploit DB Packet Storm