Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 28, 2026, noon

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
231511 10 危険 sienzo - Sienzo DMM ActiveX コントロール におけるスタックベースのバッファオーバーフローの脆弱性 - CVE-2007-2564 2012-12-20 18:19 2007-05-9 Show GitHub Exploit DB Packet Storm
231512 9.3 危険 versalsoft - VersalSoft HTTP File Upload ActiveX コントロール の AddFile 関数におけるバッファオーバーフローの脆弱性 - CVE-2007-2563 2012-12-20 18:19 2007-05-9 Show GitHub Exploit DB Packet Storm
231513 4.3 警告 podium cms - Podium CMS の Default.aspx におけるセッションをハイジャックされる脆弱性 CWE-287
不適切な認証 		CVE-2007-2555 2012-12-20 18:19 2007-05-9 Show GitHub Exploit DB Packet Storm
231514 5 警告 Wikka Development Team - WikkaWiki の RecentChanges 機能における非公開ページの名前などを取得される脆弱性 CWE-200
情報漏えい 		CVE-2007-2552 2012-12-20 18:19 2007-05-9 Show GitHub Exploit DB Packet Storm
231515 4.3 警告 Wikka Development Team - WikkaWiki の usersettings.php におけるクロスサイトスクリプティングの脆弱性 - CVE-2007-2551 2012-12-20 18:19 2007-05-9 Show GitHub Exploit DB Packet Storm
231516 7.5 危険 turnkey web tools - TurnkeyWebTools SunShop Shopping Cart の index.php における SQL インジェクションの脆弱性 - CVE-2007-2549 2012-12-20 18:19 2007-05-9 Show GitHub Exploit DB Packet Storm
231517 6.4 警告 turnkey web tools - TurnkeyWebTools SunShop Shopping Cart の index.php における脆弱性 - CVE-2007-2548 2012-12-20 18:19 2007-05-9 Show GitHub Exploit DB Packet Storm
231518 4.3 警告 turnkey web tools - TurnkeyWebTools SunShop Shopping Cart の index.php におけるクロスサイトスクリプティングの脆弱性 - CVE-2007-2547 2012-12-20 18:19 2007-05-9 Show GitHub Exploit DB Packet Storm
231519 6.8 警告 Simple Machines - SMF におけるセッションをハイジャックされる脆弱性 CWE-287
不適切な認証 		CVE-2007-2546 2012-12-20 18:19 2007-05-9 Show GitHub Exploit DB Packet Storm
231520 7.5 危険 XOOPS - XOOPS 用の Flashgames モジュールにおける SQL インジェクションの脆弱性 - CVE-2007-2543 2012-12-20 18:19 2007-05-8 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 28, 2026, 4:16 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
291361 - ibm infosphere_biginsights IBM InfoSphere BigInsights 1.1 through 2.1 does not properly handle FRAME elements, which makes it easier for remote authenticated users to conduct phishing attacks via a crafted web site. CWE-20
 Improper Input Validation  		CVE-2013-3996 2024-11-21 10:54 2013-08-6 Show GitHub Exploit DB Packet Storm
291362 - ibm infosphere_biginsights Cross-site scripting (XSS) vulnerability in IBM InfoSphere BigInsights 1.1 through 2.1 allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors. CWE-79
Cross-site Scripting 		CVE-2013-3995 2024-11-21 10:54 2013-08-6 Show GitHub Exploit DB Packet Storm
291363 - ibm infosphere_biginsights Cross-site request forgery (CSRF) vulnerability in IBM InfoSphere BigInsights 2.0 through 2.1 allows remote authenticated users to hijack the authentication of unspecified victims via unknown vectors. CWE-352
 Origin Validation Error 		CVE-2013-3992 2024-11-21 10:54 2013-08-6 Show GitHub Exploit DB Packet Storm
291364 - canonical
redhat
fedoraproject
samba
opensuse 		ubuntu_linux
enterprise_linux
fedora
samba
opensuse 		Integer overflow in the read_nttrans_ea_list function in nttrans.c in smbd in Samba 3.x before 3.5.22, 3.6.x before 3.6.17, and 4.x before 4.0.8 allows remote attackers to cause a denial of service (… CWE-189
Numeric Errors 		CVE-2013-4124 2024-11-21 10:54 2013-08-6 Show GitHub Exploit DB Packet Storm
291365 - monkey-project monkey The mk_request_header_process function in mk_request.c in Monkey 1.1.1 allows remote attackers to cause a denial of service (thread crash and service outage) via a '\0' character in an HTTP request. CWE-20
 Improper Input Validation  		CVE-2013-3724 2024-11-21 10:54 2013-08-1 Show GitHub Exploit DB Packet Storm
291366 - apache openoffice Apache OpenOffice.org (OOo) before 4.0 allows remote attackers to cause a denial of service (memory corruption) or possibly have unspecified other impact via a crafted element in an OOXML document fi… CWE-787
 Out-of-bounds Write 		CVE-2013-4156 2024-11-21 10:54 2013-07-31 Show GitHub Exploit DB Packet Storm
291367 - apache subversion The mod_dav_svn Apache HTTPD server module in Subversion 1.7.0 through 1.7.10 and 1.8.x before 1.8.1 allows remote authenticated users to cause a denial of service (assertion failure or out-of-bounds… CWE-119
Incorrect Access of Indexable Resource ('Range Error')  		CVE-2013-4131 2024-11-21 10:54 2013-07-31 Show GitHub Exploit DB Packet Storm
291368 - novell client The NICM.SYS kernel driver 3.1.11.0 in Novell Client 4.91 SP5 on Windows XP and Windows Server 2003; Novell Client 2 SP2 on Windows Vista and Windows Server 2008; and Novell Client 2 SP3 on Windows S… CWE-264
Permissions, Privileges, and Access Controls 		CVE-2013-3956 2024-11-21 10:54 2013-07-31 Show GitHub Exploit DB Packet Storm
291369 - novell client Integer overflow in the NWFS.SYS kernel driver 4.91.5.8 in Novell Client 4.91 SP5 on Windows XP and Windows Server 2003 and the NCPL.SYS kernel driver in Novell Client 2 SP2 on Windows Vista and Wind… CWE-189
Numeric Errors 		CVE-2013-3697 2024-11-21 10:54 2013-07-31 Show GitHub Exploit DB Packet Storm
291370 - drupalisme tinybox Cross-site scripting (XSS) vulnerability in the TinyBox (Simple Splash) module before 7.x-2.2 for Drupal allows remote authenticated users with the "administer tinybox" permission to inject arbitrary… CWE-79
Cross-site Scripting 		CVE-2013-4140 2024-11-21 10:54 2013-07-30 Show GitHub Exploit DB Packet Storm