Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 7, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
230241 9.3 危険 WordPress.org - WordPress の wp-includes/theme.php におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2008-4769 2012-12-20 18:52 2008-04-2 Show GitHub Exploit DB Packet Storm
230242 7.5 危険 tlm cms - TLM CMS における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-4768 2012-12-20 18:52 2008-10-28 Show GitHub Exploit DB Packet Storm
230243 9 危険 PHPNUKE - PHP-Nuke の DownloadsPlus モジュールにおける任意のコードを実行される脆弱性 CWE-20
不適切な入力確認 		CVE-2008-4767 2012-12-20 18:52 2008-10-28 Show GitHub Exploit DB Packet Storm
230244 4.3 警告 wikidsystems - WiKID wClient-PHP の sample.php におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2008-4763 2012-12-20 18:52 2008-10-27 Show GitHub Exploit DB Packet Storm
230245 5 警告 php-daily - PHP-Daily の download_file.php におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2008-4758 2012-12-20 18:52 2008-10-27 Show GitHub Exploit DB Packet Storm
230246 7.5 危険 php-daily - PHP-Daily における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-4757 2012-12-20 18:52 2008-10-27 Show GitHub Exploit DB Packet Storm
230247 4.3 警告 php-daily - PHP-Daily の add_prest_date.php におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2008-4756 2012-12-20 18:52 2008-10-27 Show GitHub Exploit DB Packet Storm
230248 7.5 危険 pozscripts - PozScripts Classified Auctions Script の gotourl.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-4755 2012-12-20 18:52 2008-10-27 Show GitHub Exploit DB Packet Storm
230249 5.8 警告 scripts-for-sites - SFS Ez Forum の forum.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-4754 2012-12-20 18:52 2008-10-27 Show GitHub Exploit DB Packet Storm
230250 7.5 危険 tech logic - TlNews における認証を回避される脆弱性 CWE-287
不適切な認証 		CVE-2008-4752 2012-12-20 18:52 2008-10-27 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 7, 2026, 4:13 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
294571 6.5 MEDIUM
Network 		otrs
debian
opensuse 		otrs_help_desk
otrs_itsm
faq
debian_linux
opensuse 		An Access Bypass issue exists in OTRS Help Desk before 3.2.4, 3.1.14, and 3.0.19, OTRS ITSM before 3.2.3, 3.1.8, and 3.0.7, and FAQ before 2.2.3, 2.1.4, and 2.0.8. Access rights by the object linking… CWE-269
 Improper Privilege Management 		CVE-2013-2625 2024-11-21 10:52 2019-11-28 Show GitHub Exploit DB Packet Storm
294572 9.8 CRITICAL
Network 		netgear wndr4700_firmware An Authentication Bypass vulnerability exists in NETGEAR Centria WNDR4700 Firmware 1.0.0.34 in http://<router_ip>/apply.cgi?/hdd_usr_setup.htm that when visited by any user, authenticated or not, cau… CWE-287
Improper Authentication 		CVE-2013-3072 2024-11-21 10:52 2019-11-15 Show GitHub Exploit DB Packet Storm
294573 7.5 HIGH
Network 		netgear wndr4700_firmware An Information Disclosure vulnerability exists in Netgear WNDR4700 running firmware 1.0.0.34 in the management web interface, which discloses the PSK of the wireless LAN. CWE-200
Information Exposure 		CVE-2013-3070 2024-11-21 10:52 2019-11-15 Show GitHub Exploit DB Packet Storm
294574 9.8 CRITICAL
Network 		netgear wndr4700_firmware A Symlink Traversal vulnerability exists in NETGEAR Centria WNDR4700 Firmware 1.0.0.34. CWE-22
Path Traversal 		CVE-2013-3073 2024-11-21 10:52 2019-11-15 Show GitHub Exploit DB Packet Storm
294575 9.8 CRITICAL
Network 		readymedia_project
debian 		readymedia
debian_linux 		MiniDLNA has heap-based buffer overflow CWE-119
CWE-787
Incorrect Access of Indexable Resource ('Range Error') 
 Out-of-bounds Write 		CVE-2013-2739 2024-11-21 10:52 2019-11-1 Show GitHub Exploit DB Packet Storm
294576 9.8 CRITICAL
Network 		readymedia_project readymedia minidlna has SQL Injection that may allow retrieval of arbitrary files CWE-89
SQL Injection 		CVE-2013-2738 2024-11-21 10:52 2019-11-1 Show GitHub Exploit DB Packet Storm
294577 7.5 HIGH
Network 		miniupnp_project
debian 		miniupnpd
debian_linux 		MiniUPnPd has information disclosure use of snprintf() CWE-200
Information Exposure 		CVE-2013-2600 2024-11-21 10:52 2019-11-1 Show GitHub Exploit DB Packet Storm
294578 7.5 HIGH
Network 		rockwellautomation rslinx_enterprise Rockwell Automation RSLinx Enterprise Software (LogReceiver.exe) CPR9, CPR9-SR1, CPR9-SR2, CPR9-SR3, CPR9-SR4, CPR9-SR5, CPR9-SR5.1, and CPR9-SR6 does not handle input correctly and results in a logi… CWE-125
Out-of-bounds Read 		CVE-2013-2805 2024-11-21 10:52 2019-03-27 Show GitHub Exploit DB Packet Storm
294579 7.5 HIGH
Network 		rockwellautomation rslinx_enterprise Rockwell Automation RSLinx Enterprise Software (LogReceiver.exe) CPR9, CPR9-SR1, CPR9-SR2, CPR9-SR3, CPR9-SR4, CPR9-SR5, CPR9-SR5.1, and CPR9-SR6 does not handle input correctly and results in a logi… CWE-125
Out-of-bounds Read 		CVE-2013-2807 2024-11-21 10:52 2019-03-27 Show GitHub Exploit DB Packet Storm
294580 7.5 HIGH
Network 		rockwellautomation rslinx_enterprise Rockwell Automation RSLinx Enterprise Software (LogReceiver.exe) CPR9, CPR9-SR1, CPR9-SR2, CPR9-SR3, CPR9-SR4, CPR9-SR5, CPR9-SR5.1, and CPR9-SR6 does not handle input correctly and results in a logi… CWE-190
 Integer Overflow or Wraparound 		CVE-2013-2806 2024-11-21 10:52 2019-03-27 Show GitHub Exploit DB Packet Storm