Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 18, 2026, 2:16 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
231001 5 警告 unclassified newsboard - Unclassified NewsBoard における board ログを取得される脆弱性 - CVE-2007-1597 2012-12-20 18:19 2007-03-22 Show GitHub Exploit DB Packet Storm
231002 5 警告 シマンテック - Symantec Storage Foundation 製品の Symantec VVR および VVR の管理サービスにおけるサービス運用妨害 (DoS) の脆弱性 CWE-399
リソース管理の問題 		CVE-2007-1593 2012-12-20 18:19 2007-06-1 Show GitHub Exploit DB Packet Storm
231003 2.1 注意 TrueCrypt Foundation - TrueCrypt におけるサービス運用妨害 (DoS) の脆弱性 - CVE-2007-1589 2012-12-20 18:19 2007-03-21 Show GitHub Exploit DB Packet Storm
231004 10 危険 tim soderstrom - Tim Soderstrom StatsDawg の templates/config/mail.tpl における任意のプログラムを実行される脆弱性 - CVE-2007-1587 2012-12-20 18:19 2007-03-21 Show GitHub Exploit DB Packet Storm
231005 7.8 危険 ZyXEL - ZynOS におけるサービス運用妨害 (DoS) の脆弱性 - CVE-2007-1586 2012-12-20 18:19 2007-03-21 Show GitHub Exploit DB Packet Storm
231006 4.3 警告 phprojekt - PHProjekt におけるクロスサイトスクリプティングの脆弱性 - CVE-2007-1576 2012-12-20 18:19 2007-03-21 Show GitHub Exploit DB Packet Storm
231007 7.5 危険 phprojekt - PHProjekt における SQL インジェクションの脆弱性 - CVE-2007-1575 2012-12-20 18:19 2007-03-21 Show GitHub Exploit DB Packet Storm
231008 6.8 警告 加藤和良 - JGBBS の search.asp における SQL インジェクションの脆弱性 - CVE-2007-1572 2012-12-20 18:19 2007-03-21 Show GitHub Exploit DB Packet Storm
231009 6.8 警告 radical designs - Radical Designs AMP の includes/base.php における PHP リモートファイルインクルージョンの脆弱性 - CVE-2007-1571 2012-12-20 18:19 2007-03-21 Show GitHub Exploit DB Packet Storm
231010 10 危険 war ftp daemon - War FTP Daemon におけるスタックベースのバッファオーバーフローの脆弱性 - CVE-2007-1567 2012-12-20 18:19 2007-03-21 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 18, 2026, 4:12 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
292131 - ibm sterling_b2b_integrator IBM Sterling B2B Integrator 5.0 and 5.1 allows remote attackers to cause a denial of service (memory and CPU consumption) via a crafted HTTP (1) Range or (2) Request-Range header. CWE-399
 Resource Management Errors 		CVE-2013-0494 2024-11-21 10:47 2013-08-10 Show GitHub Exploit DB Packet Storm
292132 - ibm informix_open_admin_tool Cross-site scripting (XSS) vulnerability in IBM Informix Open Admin Tool (OAT) 2.x and 3.x before 3.11.1 allows remote authenticated users to inject arbitrary web script or HTML via a crafted URL. CWE-79
Cross-site Scripting 		CVE-2013-0492 2024-11-21 10:47 2013-08-10 Show GitHub Exploit DB Packet Storm
292133 - ibm api_management Unspecified vulnerability in IBM API Management 2.0 before 2.0.0.1 allows remote attackers to access tenant APIs, and consequently obtain sensitive information or modify data, via unknown vectors. NVD-CWE-noinfo
CVE-2013-0559 2024-11-21 10:47 2013-07-19 Show GitHub Exploit DB Packet Storm
292134 - sun sunos Unspecified vulnerability in Oracle Solaris 8, 9, 10, and 11 allows remote attackers to affect confidentiality via unknown vectors related to Utility/Remote Execution Server (in.rexecd). NVD-CWE-noinfo
CVE-2013-0398 2024-11-21 10:47 2013-07-17 Show GitHub Exploit DB Packet Storm
292135 - drupal drupal The Image module in Drupal 7.x before 7.19, when a private file system is used, does not properly restrict access to derivative images, which allows remote attackers to read derivative images of othe… CWE-264
Permissions, Privileges, and Access Controls 		CVE-2013-0246 2024-11-21 10:47 2013-07-17 Show GitHub Exploit DB Packet Storm
292136 - drupal drupal The printer friendly version functionality in the Book module in Drupal 6.x before 6.28 and 7.x before 7.19 does not properly restrict access to node that are part of a book outline, which allows rem… CWE-264
Permissions, Privileges, and Access Controls 		CVE-2013-0245 2024-11-21 10:47 2013-07-17 Show GitHub Exploit DB Packet Storm
292137 - moxiecode
wordpress
fedoraproject 		plupload
wordpress
fedora 		Cross-site scripting (XSS) vulnerability in Plupload.as in Moxiecode plupload before 1.5.5, as used in WordPress before 3.5.1 and other products, allows remote attackers to inject arbitrary web scrip… CWE-79
Cross-site Scripting 		CVE-2013-0237 2024-11-21 10:47 2013-07-9 Show GitHub Exploit DB Packet Storm
292138 - wordpress wordpress Multiple cross-site scripting (XSS) vulnerabilities in WordPress before 3.5.1 allow remote attackers to inject arbitrary web script or HTML via vectors involving (1) gallery shortcodes or (2) the con… CWE-79
Cross-site Scripting 		CVE-2013-0236 2024-11-21 10:47 2013-07-9 Show GitHub Exploit DB Packet Storm
292139 - wordpress wordpress The XMLRPC API in WordPress before 3.5.1 allows remote attackers to send HTTP requests to intranet servers, and conduct port-scanning attacks, by specifying a crafted source URL for a pingback, relat… NVD-CWE-Other
CVE-2013-0235 2024-11-21 10:47 2013-07-9 Show GitHub Exploit DB Packet Storm
292140 - ibm business_process_manager Multiple cross-site scripting (XSS) vulnerabilities in IBM Business Process Manager (BPM) 7.5.1.x, 8.0.0.x, and 8.0.1 before FP1 allow remote authenticated users to inject arbitrary web script or HTM… CWE-79
Cross-site Scripting 		CVE-2013-0581 2024-11-21 10:47 2013-07-6 Show GitHub Exploit DB Packet Storm