Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 22, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
230661	6.8	警告	xkiosk	-	xKiosk WEB の system/funcs/xkurl.php における PHP リモートファイルインクルージョンの脆弱性	CWE-94 コード・インジェクション	CVE-2007-5314	2012-12-20 18:33	2007-10-9	Show	GitHub Exploit DB Packet Storm

230662	7.5	危険	script-solution.de	-	Picturesolution の install/config.php における PHP リモートファイルインクルージョンの脆弱性	CWE-94 コード・インジェクション	CVE-2007-5313	2012-12-20 18:33	2007-10-9	Show	GitHub Exploit DB Packet Storm

230663	4.3	警告	torrenttrader	-	TorrentTrader Classic におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2007-5312	2012-12-20 18:33	2007-10-9	Show	GitHub Exploit DB Packet Storm

230664	7.5	危険	torrenttrader	-	TorrentTrader Classic Edition の backend/admin-functions.php におけるディレクトリトラバーサルの脆弱性	CWE-22 パス・トラバーサル	CVE-2007-5311	2012-12-20 18:33	2007-10-9	Show	GitHub Exploit DB Packet Storm

230665	7.5	危険	yannick tanguy	-	ELSEIF CMS における任意の PHP コードを実行される脆弱性	CWE-94 コード・インジェクション	CVE-2007-5307	2012-12-20 18:33	2007-10-9	Show	GitHub Exploit DB Packet Storm

230666	5	警告	yannick tanguy	-	ELSEIF CMS における重要な情報を取得される脆弱性	CWE-22 パス・トラバーサル	CVE-2007-5306	2012-12-20 18:33	2007-10-9	Show	GitHub Exploit DB Packet Storm

230667	7.5	危険	yannick tanguy	-	ELSEIF CMS における PHP リモートファイルインクルージョンの脆弱性	CWE-94 コード・インジェクション	CVE-2007-5305	2012-12-20 18:33	2007-10-9	Show	GitHub Exploit DB Packet Storm

230668	4.3	警告	yannick tanguy	-	ELSEIF CMS におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2007-5304	2012-12-20 18:33	2007-10-9	Show	GitHub Exploit DB Packet Storm

230669	4.3	警告	snewscms	-	SnewsCMS Rus の news_page.php におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2007-5303	2012-12-20 18:33	2007-10-9	Show	GitHub Exploit DB Packet Storm

230670	4.3	警告	splitside	-	Directory Image Gallery の photos.cfm におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2007-5292	2012-12-20 18:33	2007-10-9	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 22, 2026, 4:08 a.m.

No	CVSS	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
292111	-	adobe	shockwave_player	Buffer overflow in Adobe Shockwave Player before 12.0.2.122 allows attackers to execute arbitrary code via unspecified vectors.	CWE-119 Incorrect Access of Indexable Resource ('Range Error')	CVE-2013-1383	2024-11-21 10:49	2013-04-10	Show	GitHub Exploit DB Packet Storm

292112	-	adobe	flash_player adobe_air adobe_air_sdk	Adobe Flash Player before 10.3.183.75 and 11.x before 11.7.700.169 on Windows and Mac OS X, before 10.3.183.75 and 11.x before 11.2.202.280 on Linux, before 11.1.111.50 on Android 2.x and 3.x, and be…	NVD-CWE-noinfo	CVE-2013-1380	2024-11-21 10:49	2013-04-10	Show	GitHub Exploit DB Packet Storm

292113	-	adobe opensuse novell	adobe_air_sdk flash_player adobe_air opensuse suse_linux_enterprise_desktop	Adobe Flash Player before 10.3.183.75 and 11.x before 11.7.700.169 on Windows and Mac OS X, before 10.3.183.75 and 11.x before 11.2.202.280 on Linux, before 11.1.111.50 on Android 2.x and 3.x, and be…	CWE-119 Incorrect Access of Indexable Resource ('Range Error')	CVE-2013-1379	2024-11-21 10:49	2013-04-10	Show	GitHub Exploit DB Packet Storm

292114	-	adobe	flash_player adobe_air adobe_air_sdk	Adobe Flash Player before 10.3.183.75 and 11.x before 11.7.700.169 on Windows and Mac OS X, before 10.3.183.75 and 11.x before 11.2.202.280 on Linux, before 11.1.111.50 on Android 2.x and 3.x, and be…	CWE-119 Incorrect Access of Indexable Resource ('Range Error')	CVE-2013-1378	2024-11-21 10:49	2013-04-10	Show	GitHub Exploit DB Packet Storm

292115	-	microsoft	internet_explorer	Use-after-free vulnerability in Microsoft Internet Explorer 6 through 10 allows remote attackers to execute arbitrary code via a crafted web site that triggers access to a deleted object, aka "Intern…	CWE-399 Resource Management Errors	CVE-2013-1304	2024-11-21 10:49	2013-04-10	Show	GitHub Exploit DB Packet Storm

292116	-	microsoft	internet_explorer	Use-after-free vulnerability in Microsoft Internet Explorer 6 through 10 allows remote attackers to execute arbitrary code via a crafted web site that triggers access to a deleted object, aka "Intern…	CWE-399 Resource Management Errors	CVE-2013-1303	2024-11-21 10:49	2013-04-10	Show	GitHub Exploit DB Packet Storm

292117	-	microsoft	windows_server_2008 windows_xp windows_server_2003 windows_vista	The Client/Server Run-time Subsystem (CSRSS) in Microsoft Windows XP SP2 and SP3, Server 2003 SP2, Vista SP2, and Server 2008 SP2 does not properly handle objects in memory, which allows local users …	CWE-119 Incorrect Access of Indexable Resource ('Range Error')	CVE-2013-1295	2024-11-21 10:49	2013-04-10	Show	GitHub Exploit DB Packet Storm

292118	-	microsoft	remote_desktop_connection	The Remote Desktop ActiveX control in mstscax.dll in Microsoft Remote Desktop Connection Client 6.1 and 7.0 does not properly handle objects in memory, which allows remote attackers to execute arbitr…	CWE-94 Code Injection	CVE-2013-1296	2024-11-21 10:49	2013-04-10	Show	GitHub Exploit DB Packet Storm

292119	-	microsoft	windows_server_2008 windows_rt windows_xp windows_8 windows_7 windows_server_2003 windows_vista windows_server_2012	Race condition in the kernel in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1, Windows 7 Gold and SP1, Windows 8, Windows Serve…	CWE-362 Race Condition	CVE-2013-1294	2024-11-21 10:49	2013-04-10	Show	GitHub Exploit DB Packet Storm

292120	-	microsoft	windows_server_2008 windows_7 windows_vista	The NTFS kernel-mode driver in Microsoft Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 allows local users to gain privileges or cause a denial of service (NUL…	NVD-CWE-Other	CVE-2013-1293	2024-11-21 10:49	2013-04-10	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed