Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 3, 2026, 6:08 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
230641 7.5 危険 zomp - Zomplog における管理アクセス権限を取得される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2008-2349 2012-12-20 18:52 2008-05-20 Show GitHub Exploit DB Packet Storm
230642 10 危険 TYPO3 Association - TYPO3 用の air_filemanager エクステンションにおける任意の PHP コードされる脆弱性 CWE-94
コード・インジェクション 		CVE-2008-2345 2012-12-20 18:52 2008-05-19 Show GitHub Exploit DB Packet Storm
230643 4.3 警告 TYPO3 Association - TYPO3 用の air_filemanager エクステンションにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2008-2344 2012-12-20 18:52 2008-05-19 Show GitHub Exploit DB Packet Storm
230644 7.5 危険 turnkey web tools - Turnkey Web Tools SunShop Shopping Cart の index.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-2339 2012-12-20 18:52 2008-05-19 Show GitHub Exploit DB Packet Storm
230645 4.3 警告 Vastal I-Tech & Co. - Vastal I-Tech phpVID の search_results.php におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2008-2335 2012-12-20 18:52 2008-05-19 Show GitHub Exploit DB Packet Storm
230646 7.5 危険 phpway - Kostenloses Linkmanagementscript における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-2301 2012-12-20 18:52 2008-05-18 Show GitHub Exploit DB Packet Storm
230647 7.5 危険 加藤和良 - Web Slider の Admin.php における認証を回避される脆弱性 CWE-287
不適切な認証 		CVE-2008-2298 2012-12-20 18:52 2008-05-18 Show GitHub Exploit DB Packet Storm
230648 7.5 危険 roticv - Rantx の admin.php における認証を回避される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2008-2297 2012-12-20 18:52 2008-05-18 Show GitHub Exploit DB Packet Storm
230649 7.5 危険 rgboard - Rgboard の include/bbs.lib.inc.php における PHP リモートファイルインクルージョンの脆弱性 CWE-94
コード・インジェクション 		CVE-2008-2296 2012-12-20 18:52 2008-05-18 Show GitHub Exploit DB Packet Storm
230650 4.3 警告 rgboard - Rgboard の rg_search.php におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2008-2295 2012-12-20 18:52 2008-05-18 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 3, 2026, 4:18 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
291461 - cisco nexus_1000v The license-installation module on the Cisco Nexus 1000V switch 4.2(1)SV1(5.2b) and earlier for VMware vSphere, Cisco Nexus 1000V switch 5.2(1)SM1(5.1) for Microsoft Hyper-V, and Cisco Virtual Securi… CWE-264
Permissions, Privileges, and Access Controls 		CVE-2013-5556 2024-11-21 10:57 2013-11-18 Show GitHub Exploit DB Packet Storm
291462 - ibm websphere_portal IBM WebSphere Portal 6.0 through 6.0.1.7, 6.1.0 through 6.1.0.6 CF27, 6.1.5 through 6.1.5.3 CF27, 7.0 through 7.0.0.2 CF25, and 8.0 through 8.0.0.1 CF08 allows remote attackers to read arbitrary file… CWE-200
Information Exposure 		CVE-2013-5454 2024-11-21 10:57 2013-11-18 Show GitHub Exploit DB Packet Storm
291463 - ibm websphere_virtual_enterprise Cross-site scripting (XSS) vulnerability in the Administration Console in IBM WebSphere Virtual Enterprise 6.1 before 6.1.1.6 and 7.0 before 7.0.0.4 allows remote authenticated users to inject arbitr… CWE-79
Cross-site Scripting 		CVE-2013-5425 2024-11-21 10:57 2013-11-18 Show GitHub Exploit DB Packet Storm
291464 - apple iphone_os The App Store component in Apple iOS before 7.0.4 does not properly enforce an intended transaction-time password requirement, which allows local users to complete a (1) App purchase or (2) In-App pu… CWE-255
Credentials Management 		CVE-2013-5193 2024-11-21 10:57 2013-11-18 Show GitHub Exploit DB Packet Storm
291465 - cisco adaptive_security_appliance_software The auto-update implementation in Cisco Adaptive Security Appliance (ASA) Software 9.0.3.6 and earlier allows remote attackers to cause a denial of service (device reload) via crafted update data, ak… CWE-20
 Improper Input Validation  		CVE-2013-5568 2024-11-21 10:57 2013-11-14 Show GitHub Exploit DB Packet Storm
291466 - cisco adaptive_security_appliance_software The IPv6 implementation in Cisco Adaptive Security Appliance (ASA) Software 9.1.3 and earlier, when NAT64 or NAT66 is enabled, does not properly process NAT rules, which allows remote attackers to ca… CWE-20
 Improper Input Validation  		CVE-2013-5560 2024-11-21 10:57 2013-11-14 Show GitHub Exploit DB Packet Storm
291467 - cisco ios
content_services_gateway 		Cisco IOS 12.4(24)MDB9 and earlier on Content Services Gateway (CSG) devices does not properly implement the "parse error drop" feature, which allows remote attackers to bypass intended access restri… CWE-264
Permissions, Privileges, and Access Controls 		CVE-2013-5552 2024-11-21 10:57 2013-11-14 Show GitHub Exploit DB Packet Storm
291468 - ibm security_appscan IBM Security AppScan Enterprise 5.6 through 8.7.0.1 allows remote authenticated users to read arbitrary report files by leveraging knowledge of filenames that cannot be easily predicted. CWE-200
Information Exposure 		CVE-2013-5453 2024-11-21 10:57 2013-11-14 Show GitHub Exploit DB Packet Storm
291469 - ibm security_appscan IBM Security AppScan Enterprise 8.5 through 8.7.0.1, when Jazz authentication is enabled, allows man-in-the-middle attackers to obtain sensitive information or modify data by leveraging an improperly… CWE-255
Credentials Management 		CVE-2013-5450 2024-11-21 10:57 2013-11-14 Show GitHub Exploit DB Packet Storm
291470 - ibm security_network_protection_firmware
security_network_protection_xgs_5100 		Cross-site scripting (XSS) vulnerability in the Local Management Interface (LMI) in IBM Security Network Protection on XGS 5100 devices with firmware 5.1 before 5.1.0.6 and 5.1.1 before 5.1.1.1 allow… CWE-79
Cross-site Scripting 		CVE-2013-5442 2024-11-21 10:57 2013-11-14 Show GitHub Exploit DB Packet Storm