Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 21, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
231581 7.5 危険 xigla - Xigla Software Absolute Poll Manager XE における認証を回避される脆弱性 CWE-287
不適切な認証 		CVE-2008-6860 2012-12-20 19:10 2009-07-14 Show GitHub Exploit DB Packet Storm
231582 7.5 危険 xigla - Xigla Software Absolute Control Panel XE における認証を回避される脆弱性 CWE-287
不適切な認証 		CVE-2008-6859 2012-12-20 19:10 2009-07-14 Show GitHub Exploit DB Packet Storm
231583 7.5 危険 xigla - Absolute Banner Manager .NET における認証を回避される脆弱性 CWE-287
不適切な認証 		CVE-2008-6858 2012-12-20 19:10 2009-07-14 Show GitHub Exploit DB Packet Storm
231584 7.5 危険 xigla - Absolute Podcast .NET における認証を回避される脆弱性 CWE-287
不適切な認証 		CVE-2008-6857 2012-12-20 19:10 2009-07-14 Show GitHub Exploit DB Packet Storm
231585 7.5 危険 xigla - Xigla Software Absolute News Manager.NET における認証を回避される脆弱性 CWE-287
不適切な認証 		CVE-2008-6856 2012-12-20 19:10 2009-07-14 Show GitHub Exploit DB Packet Storm
231586 7.5 危険 xigla - Xigla Software Absolute News Feed における認証を回避される脆弱性 CWE-287
不適切な認証 		CVE-2008-6855 2012-12-20 19:10 2009-07-14 Show GitHub Exploit DB Packet Storm
231587 7.5 危険 xigla - Xigla Software Absolute FAQ Manager.NET における認証を回避される脆弱性 CWE-287
不適切な認証 		CVE-2008-6854 2012-12-20 19:10 2009-07-14 Show GitHub Exploit DB Packet Storm
231588 4.3 警告 PHP-Fusion - PHP-Fusion の messages.php におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2008-6850 2012-12-20 19:10 2009-07-7 Show GitHub Exploit DB Packet Storm
231589 6.8 警告 w2b - phpGreetCards の index.php における任意の PHP コードを実行される脆弱性 CWE-94
コード・インジェクション 		CVE-2008-6849 2012-12-20 19:10 2009-07-7 Show GitHub Exploit DB Packet Storm
231590 4.3 警告 w2b - phpGreetCards の index.php におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2008-6848 2012-12-20 19:10 2009-07-7 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 21, 2026, 4:01 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
295561 5.5 MEDIUM
Local 		redhat virtual_desktop_server_manager
storage
enterprise_virtualization 		Insecure temporary file vulnerability in RedHat vsdm 4.9.6. CWE-668
 Exposure of Resource to Wrong Sphere 		CVE-2013-4280 2024-11-21 10:55 2019-11-5 Show GitHub Exploit DB Packet Storm
295562 5.5 MEDIUM
Local 		redhat update_infrastructure RHUI (Red Hat Update Infrastructure) 2.1.3 has world readable PKI entitlement certificates CWE-200
Information Exposure 		CVE-2013-4518 2024-11-21 10:55 2019-11-4 Show GitHub Exploit DB Packet Storm
295563 5.5 MEDIUM
Local 		redhat cloudforms CloudForms stores user passwords in recoverable format CWE-522
 Insufficiently Protected Credentials 		CVE-2013-4423 2024-11-21 10:55 2019-11-4 Show GitHub Exploit DB Packet Storm
295564 7.5 HIGH
Network 		berlios
debian 		slim
debian_linux 		slim has NULL pointer dereference when using crypt() method from glibc 2.17 CWE-476
 NULL Pointer Dereference 		CVE-2013-4412 2024-11-21 10:55 2019-11-4 Show GitHub Exploit DB Packet Storm
295565 6.1 MEDIUM
Network 		smokeping
debian
fedoraproject 		smokeping
debian_linux
fedora 		Cross-site scripting (XSS) vulnerability in SmokePing 2.6.9 in the start and end time fields. CWE-79
Cross-site Scripting 		CVE-2013-4168 2024-11-21 10:55 2019-11-2 Show GitHub Exploit DB Packet Storm
295566 7.8 HIGH
Local 		ovirt ovirt-engine ovirt-engine 3.2 running on Linux kernel 3.1 and newer creates certain files world-writeable due to an upstream kernel change which impacted how python's os.chmod() works when passed a mode of '-1'. CWE-732
 Incorrect Permission Assignment for Critical Resource 		CVE-2013-4367 2024-11-21 10:55 2019-11-2 Show GitHub Exploit DB Packet Storm
295567 9.8 CRITICAL
Network 		gitolite gitolite gitolite commit fa06a34 through 3.5.3 might allow attackers to have unspecified impact via vectors involving world-writable permissions when creating (1) ~/.gitolite.rc, (2) ~/.gitolite, or (3) ~/rep… CWE-264
Permissions, Privileges, and Access Controls 		CVE-2013-4451 2024-11-21 10:55 2018-09-22 Show GitHub Exploit DB Packet Storm
295568 3.3 LOW
Local 		redhat automatic_bug_reporting_tool Automatic Bug Reporting Tool (ABRT) before 2.1.6 allows local users to obtain sensitive information about arbitrary files via vectors related to sha1sums. CWE-200
Information Exposure 		CVE-2013-4209 2024-11-21 10:55 2018-05-2 Show GitHub Exploit DB Packet Storm
295569 4.3 MEDIUM
Network 		katello katello Katello allows remote authenticated users to call the "system remove_deletion" CLI command via vectors related to "remove system" permissions. CWE-275
 Permission Issues 		CVE-2013-4201 2024-11-21 10:55 2018-05-2 Show GitHub Exploit DB Packet Storm
295570 4.3 MEDIUM
Network 		apache cloudstack In Apache CloudStack 4.1.0 and 4.1.1, when calling the CloudStack API call listProjectAccounts as a regular, non-administrative user, the user is able to see information for accounts other than their… CWE-200
Information Exposure 		CVE-2013-4317 2024-11-21 10:55 2018-02-6 Show GitHub Exploit DB Packet Storm