Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 28, 2026, 4:09 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
231471 7.5 危険 Vastal I-Tech & Co. - Buddy Zone の view_sub_cat.php における SQL インジェクションの脆弱性 - CVE-2007-3549 2012-12-20 18:19 2007-07-3 Show GitHub Exploit DB Packet Storm
231472 7.1 危険 w3filer - W3Filer におけるスタックベースのバッファオーバーフローの脆弱性 - CVE-2007-3548 2012-12-20 18:19 2007-07-3 Show GitHub Exploit DB Packet Storm
231473 7.8 危険 qt-cute - QuickTicket の qti_checkname.php におけるディレクトリトラバーサルの脆弱性 - CVE-2007-3547 2012-12-20 18:19 2007-07-3 Show GitHub Exploit DB Packet Storm
231474 7.1 危険 warzone - Warzone 2100 Resurrection におけるバッファオーバーフローの脆弱性 - CVE-2007-3545 2012-12-20 18:19 2007-06-22 Show GitHub Exploit DB Packet Storm
231475 6.5 警告 WordPress.org - WordPress および WordPress MU の wp-app.php などにおける任意の PHP コードを実行される脆弱性 - CVE-2007-3544 2012-12-20 18:19 2007-07-3 Show GitHub Exploit DB Packet Storm
231476 6 警告 WordPress.org - WordPress および WordPress MU における任意の PHP コードを実行される脆弱性 - CVE-2007-3543 2012-12-20 18:19 2007-07-3 Show GitHub Exploit DB Packet Storm
231477 4.3 警告 PluXml - Pluxml の admin/auth.php におけるクロスサイトスクリプティングの脆弱性 - CVE-2007-3542 2012-12-20 18:19 2007-07-3 Show GitHub Exploit DB Packet Storm
231478 4.3 警告 rainworx - rwAuction Pro の search.asp におけるクロスサイトスクリプティングの脆弱性 - CVE-2007-3540 2012-12-20 18:19 2007-07-3 Show GitHub Exploit DB Packet Storm
231479 7.5 危険 qt-cute - QuickTicket およびの QuickTalk フォーラムにおける SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2007-3539 2012-12-20 18:19 2007-07-3 Show GitHub Exploit DB Packet Storm
231480 7.5 危険 qt-cute - QuickTalk guestbook の qtg_msg_view.php における SQL インジェクションの脆弱性 - CVE-2007-3538 2012-12-20 18:19 2007-07-3 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 28, 2026, 4:16 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
291361 - ibm infosphere_biginsights IBM InfoSphere BigInsights 1.1 through 2.1 does not properly handle FRAME elements, which makes it easier for remote authenticated users to conduct phishing attacks via a crafted web site. CWE-20
 Improper Input Validation  		CVE-2013-3996 2024-11-21 10:54 2013-08-6 Show GitHub Exploit DB Packet Storm
291362 - ibm infosphere_biginsights Cross-site scripting (XSS) vulnerability in IBM InfoSphere BigInsights 1.1 through 2.1 allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors. CWE-79
Cross-site Scripting 		CVE-2013-3995 2024-11-21 10:54 2013-08-6 Show GitHub Exploit DB Packet Storm
291363 - ibm infosphere_biginsights Cross-site request forgery (CSRF) vulnerability in IBM InfoSphere BigInsights 2.0 through 2.1 allows remote authenticated users to hijack the authentication of unspecified victims via unknown vectors. CWE-352
 Origin Validation Error 		CVE-2013-3992 2024-11-21 10:54 2013-08-6 Show GitHub Exploit DB Packet Storm
291364 - canonical
redhat
fedoraproject
samba
opensuse 		ubuntu_linux
enterprise_linux
fedora
samba
opensuse 		Integer overflow in the read_nttrans_ea_list function in nttrans.c in smbd in Samba 3.x before 3.5.22, 3.6.x before 3.6.17, and 4.x before 4.0.8 allows remote attackers to cause a denial of service (… CWE-189
Numeric Errors 		CVE-2013-4124 2024-11-21 10:54 2013-08-6 Show GitHub Exploit DB Packet Storm
291365 - monkey-project monkey The mk_request_header_process function in mk_request.c in Monkey 1.1.1 allows remote attackers to cause a denial of service (thread crash and service outage) via a '\0' character in an HTTP request. CWE-20
 Improper Input Validation  		CVE-2013-3724 2024-11-21 10:54 2013-08-1 Show GitHub Exploit DB Packet Storm
291366 - apache openoffice Apache OpenOffice.org (OOo) before 4.0 allows remote attackers to cause a denial of service (memory corruption) or possibly have unspecified other impact via a crafted element in an OOXML document fi… CWE-787
 Out-of-bounds Write 		CVE-2013-4156 2024-11-21 10:54 2013-07-31 Show GitHub Exploit DB Packet Storm
291367 - apache subversion The mod_dav_svn Apache HTTPD server module in Subversion 1.7.0 through 1.7.10 and 1.8.x before 1.8.1 allows remote authenticated users to cause a denial of service (assertion failure or out-of-bounds… CWE-119
Incorrect Access of Indexable Resource ('Range Error')  		CVE-2013-4131 2024-11-21 10:54 2013-07-31 Show GitHub Exploit DB Packet Storm
291368 - novell client The NICM.SYS kernel driver 3.1.11.0 in Novell Client 4.91 SP5 on Windows XP and Windows Server 2003; Novell Client 2 SP2 on Windows Vista and Windows Server 2008; and Novell Client 2 SP3 on Windows S… CWE-264
Permissions, Privileges, and Access Controls 		CVE-2013-3956 2024-11-21 10:54 2013-07-31 Show GitHub Exploit DB Packet Storm
291369 - novell client Integer overflow in the NWFS.SYS kernel driver 4.91.5.8 in Novell Client 4.91 SP5 on Windows XP and Windows Server 2003 and the NCPL.SYS kernel driver in Novell Client 2 SP2 on Windows Vista and Wind… CWE-189
Numeric Errors 		CVE-2013-3697 2024-11-21 10:54 2013-07-31 Show GitHub Exploit DB Packet Storm
291370 - drupalisme tinybox Cross-site scripting (XSS) vulnerability in the TinyBox (Simple Splash) module before 7.x-2.2 for Drupal allows remote authenticated users with the "administer tinybox" permission to inject arbitrary… CWE-79
Cross-site Scripting 		CVE-2013-4140 2024-11-21 10:54 2013-07-30 Show GitHub Exploit DB Packet Storm