Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 25, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
230111 6.8 警告 snarky - VisualPic の index.php における PHP リモートファイルインクルージョンの脆弱性 CWE-94
コード・インジェクション 		CVE-2008-1876 2012-12-20 18:52 2008-04-17 Show GitHub Exploit DB Packet Storm
230112 7.5 危険 terong - Terong PHP Photo Gallery の index.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-1875 2012-12-20 18:52 2008-04-17 Show GitHub Exploit DB Packet Storm
230113 6.5 警告 xpoze - Xpoze Pro の account/user/mail.html における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-1874 2012-12-20 18:52 2008-04-17 Show GitHub Exploit DB Packet Storm
230114 4.3 警告 tru-zone - Nuke ET のプライベートメッセージ機能におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2008-1873 2012-12-20 18:52 2008-04-17 Show GitHub Exploit DB Packet Storm
230115 6.5 警告 scriptsagent - Scriptsagent.com Links Directory の links.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-1871 2012-12-20 18:52 2008-04-17 Show GitHub Exploit DB Packet Storm
230116 7.5 危険 site sift media - Site Sift Listings における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-1869 2012-12-20 18:52 2008-04-17 Show GitHub Exploit DB Packet Storm
230117 7.5 危険 pixel motion - Blog Pixel Motion の admin/sauvBase.php における重要な情報を含む blogPM.sql ファイルの結果を取得される脆弱性 CWE-287
不適切な認証 		CVE-2008-1868 2012-12-20 18:52 2008-04-17 Show GitHub Exploit DB Packet Storm
230118 7.5 危険 pixel motion - Blog Pixel Motion における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-1867 2012-12-20 18:52 2008-04-17 Show GitHub Exploit DB Packet Storm
230119 9 危険 pixel motion - Blog Pixel Motion の admin/modif_config.php における任意の PHP スクリプトをアップロードされる脆弱性 CWE-94
コード・インジェクション 		CVE-2008-1866 2012-12-20 18:52 2008-04-17 Show GitHub Exploit DB Packet Storm
230120 7.5 危険 prozilla - Prozilla Freelancers の project.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-1864 2012-12-20 18:52 2008-04-17 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 25, 2026, 4:01 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
292801 - wp_php_widget_project wp_php_widget wp-php-widget.php in the WP PHP widget plugin 1.0.2 for WordPress allows remote attackers to obtain sensitive information via a direct request, which reveals the full path in an error message. CWE-200
Information Exposure 		CVE-2013-0721 2024-11-21 10:48 2013-01-2 Show GitHub Exploit DB Packet Storm
292802 7.8 HIGH
Local 		ibm sterling_external_authentication_server A Command Execution Vulnerability exists in IBM Sterling External Authentication Server 2.2.0, 2.3.01, 2.4.0, and 2.4.1 via an unspecified OS command, which could let a local malicious user execute a… CWE-78
OS Command  		CVE-2013-0517 2024-11-21 10:47 2020-02-12 Show GitHub Exploit DB Packet Storm
292803 4.9 MEDIUM
Network 		simplemachines simple_machines_forum File Disclosure in SMF (SimpleMachines Forum) <= 2.0.3: Forum admin can read files such as the database config. CWE-200
Information Exposure 		CVE-2013-0192 2024-11-21 10:47 2020-02-7 Show GitHub Exploit DB Packet Storm
292804 8.1 HIGH
Network 		ibm infosphere_information_server IBM InfoSphere Information Server 8.1, 8.5, 8.7, 9.1 has a Session Fixation Vulnerability CWE-384
 Session Fixation 		CVE-2013-0507 2024-11-21 10:47 2020-02-6 Show GitHub Exploit DB Packet Storm
292805 7.5 HIGH
Network 		imagely nextgen_gallery NextGEN Gallery Plugin for WordPress 1.9.10 and 1.9.11 has a Path Disclosure Vulnerability CWE-200
Information Exposure 		CVE-2013-0291 2024-11-21 10:47 2020-01-30 Show GitHub Exploit DB Packet Storm
292806 5.9 MEDIUM
Network 		pyrad_project
fedoraproject 		pyrad
fedora 		packet.py in pyrad before 2.1 uses weak random numbers to generate RADIUS authenticators and hash passwords, which makes it easier for remote attackers to obtain sensitive information via a brute for… CWE-330
 Use of Insufficiently Random Values 		CVE-2013-0294 2024-11-21 10:47 2020-01-29 Show GitHub Exploit DB Packet Storm
292807 5.4 MEDIUM
Network 		pinboard_project pinboard Pinboard 1.0.6 theme for Wordpress has XSS. CWE-79
Cross-site Scripting 		CVE-2013-0286 2024-11-21 10:47 2020-01-28 Show GitHub Exploit DB Packet Storm
292808 7.5 HIGH
Network 		redhat mrg_management_console An import error was introduced in Cumin in the code refactoring in r5310. Server certificate validation is always disabled when connecting to Aviary servers, even if the installed packages on a syste… CWE-295
Improper Certificate Validation  		CVE-2013-0264 2024-11-21 10:47 2019-12-31 Show GitHub Exploit DB Packet Storm
292809 6.5 MEDIUM
Network 		redhat openshift A CSRF issue was found in OpenShift Enterprise 1.2. The web console is using 'Basic authentication' and the REST API has no CSRF attack protection mechanism. This can allow an attacker to obtain the … CWE-352
 Origin Validation Error 		CVE-2013-0196 2024-11-21 10:47 2019-12-31 Show GitHub Exploit DB Packet Storm
292810 6.1 MEDIUM
Network 		owncloud owncloud Cross-site scripting (XSS) vulnerability in ownCloud 4.5.5, 4.0.10, and earlier allows remote attackers to inject arbitrary web script or HTML via the action parameter to core/ajax/sharing.php. CWE-79
Cross-site Scripting 		CVE-2013-0202 2024-11-21 10:47 2019-12-18 Show GitHub Exploit DB Packet Storm