Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 4, 2026, 4 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
231221 5 警告 shttp - Windows 上で稼動している shttpd におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2007-6404 2012-12-20 18:34 2007-12-17 Show GitHub Exploit DB Packet Storm
231222 6.8 警告 Winamp - Nullsoft Winamp におけるスタックベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2007-6403 2012-12-20 18:34 2007-12-17 Show GitHub Exploit DB Packet Storm
231223 5 警告 poldoc - PolDoc CMS の download_file.php におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2007-6400 2012-12-20 18:34 2007-12-17 Show GitHub Exploit DB Packet Storm
231224 7.5 危険 sh-news - SH-News の patch/comments.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2007-6391 2012-12-20 18:34 2007-12-17 Show GitHub Exploit DB Packet Storm
231225 4.3 警告 s9y - Serendipity 用の mycalendar プラグインにおけるクロスサイトリクエストフォージェリの脆弱性 CWE-352
同一生成元ポリシー違反 		CVE-2007-6390 2012-12-20 18:34 2007-12-17 Show GitHub Exploit DB Packet Storm
231226 7.2 危険 トレンドマイクロ - Trend Micro AntiVirus などの PccScan.dll におけるスタックベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2007-6386 2012-12-20 18:34 2007-12-14 Show GitHub Exploit DB Packet Storm
231227 6.8 警告 robocode - Robocode の Event Dispatch Thread における任意の Java コードを実行される脆弱性 CWE-DesignError
CVE-2007-6382 2012-12-20 18:34 2007-12-14 Show GitHub Exploit DB Packet Storm
231228 6.5 警告 TYPO3 Association - TYPO3 用の indexed_search システムエクステンションにおける SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2007-6381 2012-12-20 18:34 2007-12-14 Show GitHub Exploit DB Packet Storm
231229 5 警告 WordPress.org - WordPress 用の PictPress プラグインにおけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2007-6369 2012-12-20 18:34 2007-12-14 Show GitHub Exploit DB Packet Storm
231230 4.3 警告 sinecms - SineCMS の guestbook におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2007-6367 2012-12-20 18:34 2007-12-14 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 4, 2026, 4:17 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
291281 - hp operations_orchestration Cross-site scripting (XSS) vulnerability in HP Operations Orchestration before 9 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. CWE-79
Cross-site Scripting 		CVE-2013-6191 2024-11-21 10:58 2013-12-17 Show GitHub Exploit DB Packet Storm
291282 - google android Android 4.0 through 4.3 allows attackers to bypass intended access restrictions and remove device locks via a crafted application that invokes the updateUnlockMethodAndFinish method in the com.androi… CWE-264
Permissions, Privileges, and Access Controls 		CVE-2013-6271 2024-11-21 10:58 2013-12-15 Show GitHub Exploit DB Packet Storm
291283 - quagga quagga The bgp_attr_unknown function in bgp_attr.c in Quagga 0.99.21 does not properly initialize the total variable, which allows remote attackers to cause a denial of service (bgpd crash) via a crafted BG… NVD-CWE-noinfo
CVE-2013-6051 2024-11-21 10:58 2013-12-15 Show GitHub Exploit DB Packet Storm
291284 - munin-monitoring munin The get_group_tree function in lib/Munin/Master/HTMLConfig.pm in Munin before 2.0.18 allows remote nodes to cause a denial of service (infinite loop and memory consumption in the munin-html process) … CWE-20
 Improper Input Validation  		CVE-2013-6048 2024-11-21 10:58 2013-12-14 Show GitHub Exploit DB Packet Storm
291285 - cybozu dezie Cross-site scripting (XSS) vulnerability in Cybozu Dezie before 8.1.0 allows remote attackers to inject arbitrary web script or HTML via vectors related to the Cancel button. CWE-79
Cross-site Scripting 		CVE-2013-6005 2024-11-21 10:58 2013-12-14 Show GitHub Exploit DB Packet Storm
291286 - oracle fusion_middleware Unspecified vulnerability in the Oracle Outside In Technology component in Oracle Fusion Middleware 8.4.0 allows context-dependent attackers to affect availability via unknown vectors related to Outs… NVD-CWE-noinfo
CVE-2013-5763 2024-11-21 10:58 2013-12-13 Show GitHub Exploit DB Packet Storm
291287 - uclouvain openjpeg Heap-based buffer overflow in OpenJPEG 1.3 has unspecified impact and remote vectors, a different vulnerability than CVE-2013-6045. CWE-119
Incorrect Access of Indexable Resource ('Range Error')  		CVE-2013-6054 2024-11-21 10:58 2013-12-13 Show GitHub Exploit DB Packet Storm
291288 - uclouvain openjpeg OpenJPEG 1.3 and earlier allows remote attackers to obtain sensitive information via unspecified vectors that trigger a heap-based out-of-bounds read. CWE-200
Information Exposure 		CVE-2013-6052 2024-11-21 10:58 2013-12-13 Show GitHub Exploit DB Packet Storm
291289 - uclouvain openjpeg Multiple heap-based buffer overflows in OpenJPEG 1.3 and earlier might allow remote attackers to execute arbitrary code via unspecified vectors. CWE-119
Incorrect Access of Indexable Resource ('Range Error')  		CVE-2013-6045 2024-11-21 10:58 2013-12-13 Show GitHub Exploit DB Packet Storm
291290 - islonline isl_desktop_plugin
isl_light 		The ISL Desktop plugin for Windows before 1.4.7 for ISL Light 3.5.4 and earlier allows remote authenticated users to obtain sensitive information by pasting the clipboard contents that have been copi… CWE-200
Information Exposure 		CVE-2013-6237 2024-11-21 10:58 2013-12-11 Show GitHub Exploit DB Packet Storm