Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 19, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
230591 4.3 警告 WordPress.org - WordPress 用の AndyBlue テーマの searchform.php におけるクロスサイトスクリプティングの脆弱性 - CVE-2007-3239 2012-12-20 18:19 2007-06-14 Show GitHub Exploit DB Packet Storm
230592 6 警告 WordPress.org - WordPress のデフォルトテーマの functions.php におけるクロスサイトスクリプティングの脆弱性 - CVE-2007-3238 2012-12-20 18:19 2007-06-14 Show GitHub Exploit DB Packet Storm
230593 6.8 警告 XOOPS - XOOPS 用の TinyContent モジュールにおける PHP リモートファイルインクルージョンの脆弱性 - CVE-2007-3237 2012-12-20 18:19 2007-06-12 Show GitHub Exploit DB Packet Storm
230594 7.5 危険 XOOPS - XOOPS 用の Horoscope モジュールにおける PHP リモートファイルインクルージョンの脆弱性 - CVE-2007-3236 2012-12-20 18:19 2007-06-14 Show GitHub Exploit DB Packet Storm
230595 5 警告 tec-it - TEC-IT TBarCode OCX ActiveX コントロール における任意のファイルを上書きされる脆弱性 - CVE-2007-3233 2012-12-20 18:19 2007-06-14 Show GitHub Exploit DB Packet Storm
230596 6.8 警告 simian systems inc - Idan Sofer PHP::HTML の phphtml.php における PHP リモートファイルインクルージョンの脆弱性 - CVE-2007-3230 2012-12-20 18:19 2007-06-14 Show GitHub Exploit DB Packet Storm
230597 6.8 警告 singapore - Singapore Gallery の index.php における重要な情報を取得される脆弱性 - CVE-2007-3229 2012-12-20 18:19 2007-06-14 Show GitHub Exploit DB Packet Storm
230598 6.8 警告 simian systems inc - Sitellite CMS における PHP リモートファイルインクルージョンの脆弱性 - CVE-2007-3228 2012-12-20 18:19 2007-06-14 Show GitHub Exploit DB Packet Storm
230599 4.3 警告 Ruby on Rails project - Ruby on Rails の to_json 関数におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2007-3227 2012-12-20 18:19 2007-06-14 Show GitHub Exploit DB Packet Storm
230600 6.4 警告 サン・マイクロシステムズ - slapd における特定のデータを変更される脆弱性 - CVE-2007-3225 2012-12-20 18:19 2007-06-13 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 20, 2026, 4:14 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
292321 7.5 HIGH
Network 		imagely nextgen_gallery NextGEN Gallery Plugin for WordPress 1.9.10 and 1.9.11 has a Path Disclosure Vulnerability CWE-200
Information Exposure 		CVE-2013-0291 2024-11-21 10:47 2020-01-30 Show GitHub Exploit DB Packet Storm
292322 5.9 MEDIUM
Network 		pyrad_project
fedoraproject 		pyrad
fedora 		packet.py in pyrad before 2.1 uses weak random numbers to generate RADIUS authenticators and hash passwords, which makes it easier for remote attackers to obtain sensitive information via a brute for… CWE-330
 Use of Insufficiently Random Values 		CVE-2013-0294 2024-11-21 10:47 2020-01-29 Show GitHub Exploit DB Packet Storm
292323 5.4 MEDIUM
Network 		pinboard_project pinboard Pinboard 1.0.6 theme for Wordpress has XSS. CWE-79
Cross-site Scripting 		CVE-2013-0286 2024-11-21 10:47 2020-01-28 Show GitHub Exploit DB Packet Storm
292324 7.5 HIGH
Network 		redhat mrg_management_console An import error was introduced in Cumin in the code refactoring in r5310. Server certificate validation is always disabled when connecting to Aviary servers, even if the installed packages on a syste… CWE-295
Improper Certificate Validation  		CVE-2013-0264 2024-11-21 10:47 2019-12-31 Show GitHub Exploit DB Packet Storm
292325 6.5 MEDIUM
Network 		redhat openshift A CSRF issue was found in OpenShift Enterprise 1.2. The web console is using 'Basic authentication' and the REST API has no CSRF attack protection mechanism. This can allow an attacker to obtain the … CWE-352
 Origin Validation Error 		CVE-2013-0196 2024-11-21 10:47 2019-12-31 Show GitHub Exploit DB Packet Storm
292326 6.1 MEDIUM
Network 		owncloud owncloud Cross-site scripting (XSS) vulnerability in ownCloud 4.5.5, 4.0.10, and earlier allows remote attackers to inject arbitrary web script or HTML via the action parameter to core/ajax/sharing.php. CWE-79
Cross-site Scripting 		CVE-2013-0202 2024-11-21 10:47 2019-12-18 Show GitHub Exploit DB Packet Storm
292327 7.8 HIGH
Local 		ovirt node oVirt Node: Lock screen accepts F2 to drop to shell causing privilege escalation CWE-269
 Improper Privilege Management 		CVE-2013-0293 2024-11-21 10:47 2019-12-10 Show GitHub Exploit DB Packet Storm
292328 4.3 MEDIUM
Network 		pyrad_project pyrad The CreateID function in packet.py in pyrad before 2.1 uses sequential packet IDs, which makes it easier for remote attackers to spoof packets by predicting the next ID, a different vulnerability tha… CWE-20
 Improper Input Validation  		CVE-2013-0342 2024-11-21 10:47 2019-12-10 Show GitHub Exploit DB Packet Storm
292329 5.5 MEDIUM
Local 		openstack
debian 		nova
debian_linux 		OpenStack nova base images permissions are world readable CWE-732
 Incorrect Permission Assignment for Critical Resource 		CVE-2013-0326 2024-11-21 10:47 2019-12-6 Show GitHub Exploit DB Packet Storm
292330 5.4 MEDIUM
Network 		theforeman katello Katello: Username in Notification page has cross site scripting CWE-79
Cross-site Scripting 		CVE-2013-0283 2024-11-21 10:47 2019-12-6 Show GitHub Exploit DB Packet Storm