Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 23, 2026, 2 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
230271 6.8 警告 wavelink media - TutorialCMS の activate.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-0254 2012-12-20 18:34 2008-01-15 Show GitHub Exploit DB Packet Storm
230272 5 警告 php webquest - PHP Webquest におけるデータベースの資格情報を取得される脆弱性 CWE-200
情報漏えい 		CVE-2008-0249 2012-12-20 18:34 2008-01-11 Show GitHub Exploit DB Packet Storm
230273 9.3 危険 streamaudio - StreamAudio ChainCast ProxyManager の ccpm_0237.dll におけるバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2008-0248 2012-12-20 18:34 2008-01-11 Show GitHub Exploit DB Packet Storm
230274 10 危険 uploadscript - UploadScript の admin.php における管理者の権限を取得される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2008-0246 2012-12-20 18:34 2008-01-11 Show GitHub Exploit DB Packet Storm
230275 7.5 危険 uploadscript - UploadImage の admin.php における管理者の権限を取得される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2008-0245 2012-12-20 18:34 2008-01-11 Show GitHub Exploit DB Packet Storm
230276 10 危険 SAP - SAP MaxDB における任意のコマンドを実行される脆弱性 CWE-20
不適切な入力確認 		CVE-2008-0244 2012-12-20 18:34 2008-01-11 Show GitHub Exploit DB Packet Storm
230277 5.8 警告 サン・マイクロシステムズ - Sun Java System Identity Manager の /idm/user/login.jsp におけるオープンリダイレクトの脆弱性 CWE-20
不適切な入力確認 		CVE-2008-0241 2012-12-20 18:34 2008-01-9 Show GitHub Exploit DB Packet Storm
230278 4.3 警告 サン・マイクロシステムズ - Sun Java System Identity Manager の /idm/help/index.jsp におけるフィッシング攻撃を実行される脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2008-0240 2012-12-20 18:34 2008-01-9 Show GitHub Exploit DB Packet Storm
230279 4.3 警告 サン・マイクロシステムズ - Sun Java System Identity Manager におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2008-0239 2012-12-20 18:34 2008-01-9 Show GitHub Exploit DB Packet Storm
230280 7.5 危険 Xine - xine-lib の input/libreal/rmff.c におけるヒープベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2008-0238 2012-12-20 18:34 2008-01-11 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 23, 2026, 4:08 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
292791 4.9 MEDIUM
Network 		simplemachines simple_machines_forum File Disclosure in SMF (SimpleMachines Forum) <= 2.0.3: Forum admin can read files such as the database config. CWE-200
Information Exposure 		CVE-2013-0192 2024-11-21 10:47 2020-02-7 Show GitHub Exploit DB Packet Storm
292792 8.1 HIGH
Network 		ibm infosphere_information_server IBM InfoSphere Information Server 8.1, 8.5, 8.7, 9.1 has a Session Fixation Vulnerability CWE-384
 Session Fixation 		CVE-2013-0507 2024-11-21 10:47 2020-02-6 Show GitHub Exploit DB Packet Storm
292793 7.5 HIGH
Network 		imagely nextgen_gallery NextGEN Gallery Plugin for WordPress 1.9.10 and 1.9.11 has a Path Disclosure Vulnerability CWE-200
Information Exposure 		CVE-2013-0291 2024-11-21 10:47 2020-01-30 Show GitHub Exploit DB Packet Storm
292794 5.9 MEDIUM
Network 		pyrad_project
fedoraproject 		pyrad
fedora 		packet.py in pyrad before 2.1 uses weak random numbers to generate RADIUS authenticators and hash passwords, which makes it easier for remote attackers to obtain sensitive information via a brute for… CWE-330
 Use of Insufficiently Random Values 		CVE-2013-0294 2024-11-21 10:47 2020-01-29 Show GitHub Exploit DB Packet Storm
292795 5.4 MEDIUM
Network 		pinboard_project pinboard Pinboard 1.0.6 theme for Wordpress has XSS. CWE-79
Cross-site Scripting 		CVE-2013-0286 2024-11-21 10:47 2020-01-28 Show GitHub Exploit DB Packet Storm
292796 7.5 HIGH
Network 		redhat mrg_management_console An import error was introduced in Cumin in the code refactoring in r5310. Server certificate validation is always disabled when connecting to Aviary servers, even if the installed packages on a syste… CWE-295
Improper Certificate Validation  		CVE-2013-0264 2024-11-21 10:47 2019-12-31 Show GitHub Exploit DB Packet Storm
292797 6.5 MEDIUM
Network 		redhat openshift A CSRF issue was found in OpenShift Enterprise 1.2. The web console is using 'Basic authentication' and the REST API has no CSRF attack protection mechanism. This can allow an attacker to obtain the … CWE-352
 Origin Validation Error 		CVE-2013-0196 2024-11-21 10:47 2019-12-31 Show GitHub Exploit DB Packet Storm
292798 6.1 MEDIUM
Network 		owncloud owncloud Cross-site scripting (XSS) vulnerability in ownCloud 4.5.5, 4.0.10, and earlier allows remote attackers to inject arbitrary web script or HTML via the action parameter to core/ajax/sharing.php. CWE-79
Cross-site Scripting 		CVE-2013-0202 2024-11-21 10:47 2019-12-18 Show GitHub Exploit DB Packet Storm
292799 7.8 HIGH
Local 		ovirt node oVirt Node: Lock screen accepts F2 to drop to shell causing privilege escalation CWE-269
 Improper Privilege Management 		CVE-2013-0293 2024-11-21 10:47 2019-12-10 Show GitHub Exploit DB Packet Storm
292800 4.3 MEDIUM
Network 		pyrad_project pyrad The CreateID function in packet.py in pyrad before 2.1 uses sequential packet IDs, which makes it easier for remote attackers to spoof packets by predicting the next ID, a different vulnerability tha… CWE-20
 Improper Input Validation  		CVE-2013-0342 2024-11-21 10:47 2019-12-10 Show GitHub Exploit DB Packet Storm