Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 8, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
231931 4.3 警告 レッドハット - RHN および Red Hat Network Satellite で使用されている Red Hat Network チャンネル検索機能におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2007-5961 2012-12-20 18:33 2008-05-20 Show GitHub Exploit DB Packet Storm
231932 6.5 警告 SoftbizScripts - Softbiz Ad Management plus Script の ads.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2007-5998 2012-12-20 18:33 2007-11-15 Show GitHub Exploit DB Packet Storm
231933 6.5 警告 SoftbizScripts - Softbiz Banner Exchange Network Script の campaign_stats.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2007-5997 2012-12-20 18:33 2007-11-15 Show GitHub Exploit DB Packet Storm
231934 7.5 危険 SoftbizScripts - Softbiz Link Directory Script の searchresult.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2007-5996 2012-12-20 18:33 2007-11-15 Show GitHub Exploit DB Packet Storm
231935 6.8 警告 php-tools - patBBcode の examples/patExampleGen/bbcodeSource.php における PHP リモートファイルインクルージョンの脆弱性 CWE-94
コード・インジェクション 		CVE-2007-5995 2012-12-20 18:33 2007-11-15 Show GitHub Exploit DB Packet Storm
231936 6.8 警告 yappa-ng - Fritz Berger yappa-ng の check_noimage.php における PHP リモートファイルインクルージョンの脆弱性 CWE-94
コード・インジェクション 		CVE-2007-5994 2012-12-20 18:33 2007-11-15 Show GitHub Exploit DB Packet Storm
231937 4.3 警告 vtls - VTLS vtls.web.gateway の Visionary Technology におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2007-5993 2012-12-20 18:33 2007-11-15 Show GitHub Exploit DB Packet Storm
231938 6.8 警告 Skype Technologies S.A. - Skype の skype4com URI ハンドラにおける任意のコードを実行される脆弱性 CWE-119
バッファエラー 		CVE-2007-5989 2012-12-20 18:33 2007-12-13 Show GitHub Exploit DB Packet Storm
231939 4.3 警告 X7 Group - X7 Chat におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2007-5982 2012-12-20 18:33 2007-11-14 Show GitHub Exploit DB Packet Storm
231940 7.5 危険 XOOPS - XOOPS 用の mylinks モジュールにおける SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2007-5978 2012-12-20 18:33 2007-11-14 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 8, 2026, 4:09 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
297501 - pragyan_cms_project pragyan_cms Directory traversal vulnerability in download.lib.php in Pragyan CMS 3.0 and earlier allows remote attackers to read arbitrary files via a .. (dot dot) in the fileget parameter in a profile action to… CWE-22
Path Traversal 		CVE-2012-6500 2024-11-21 10:46 2013-01-12 Show GitHub Exploit DB Packet Storm
297502 - age_verification_project age_verification Open redirect vulnerability in age-verification.php in the Age Verification plugin 0.4 and earlier for WordPress allows remote attackers to redirect users to arbitrary web sites and conduct phishing … CWE-20
 Improper Input Validation  		CVE-2012-6499 2024-11-21 10:46 2013-01-12 Show GitHub Exploit DB Packet Storm
297503 - microsoft windows_server_2008
windows_rt
windows_8
windows_7
windows_vista
windows_server_2012 		The SSL provider component in Microsoft Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1, Windows 7 Gold and SP1, Windows 8, Windows Server 2012, and Windows RT does not properly handle enc… CWE-264
Permissions, Privileges, and Access Controls 		CVE-2013-0013 2024-11-21 10:46 2013-01-10 Show GitHub Exploit DB Packet Storm
297504 - microsoft windows_server_2008
windows_7 		The Print Spooler in Microsoft Windows Server 2008 R2 and R2 SP1 and Windows 7 Gold and SP1 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a cr… CWE-119
Incorrect Access of Indexable Resource ('Range Error')  		CVE-2013-0011 2024-11-21 10:46 2013-01-10 Show GitHub Exploit DB Packet Storm
297505 - microsoft system_center_operations_manager Cross-site scripting (XSS) vulnerability in Microsoft System Center Operations Manager 2007 SP1 and R2 allows remote attackers to inject arbitrary web script or HTML via crafted input, aka "System Ce… CWE-79
Cross-site Scripting 		CVE-2013-0010 2024-11-21 10:46 2013-01-10 Show GitHub Exploit DB Packet Storm
297506 - microsoft system_center_operations_manager Cross-site scripting (XSS) vulnerability in Microsoft System Center Operations Manager 2007 SP1 and R2 allows remote attackers to inject arbitrary web script or HTML via crafted input, aka "System Ce… CWE-79
Cross-site Scripting 		CVE-2013-0009 2024-11-21 10:46 2013-01-10 Show GitHub Exploit DB Packet Storm
297507 - microsoft windows_vista
windows_server_2008
windows_7
windows_8
windows_server_2012
windows_rt 		win32k.sys in the kernel-mode drivers in Microsoft Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1, Windows 7 Gold and SP1, Windows 8, Windows Server 2012, and Windows RT does not properly… CWE-264
Permissions, Privileges, and Access Controls 		CVE-2013-0008 2024-11-21 10:46 2013-01-10 Show GitHub Exploit DB Packet Storm
297508 - microsoft xml_core_services
windows_7
windows_8
windows_server_2003
windows_server_2008
windows_server_2012
windows_vista
windows_xp
windows_rt
expression_web
groove_server
off… 		Microsoft XML Core Services (aka MSXML) 4.0, 5.0, and 6.0 does not properly parse XML content, which allows remote attackers to execute arbitrary code via a crafted web page, aka "MSXML XSLT Vulnerab… CWE-94
Code Injection 		CVE-2013-0007 2024-11-21 10:46 2013-01-10 Show GitHub Exploit DB Packet Storm
297509 - microsoft xml_core_services
windows_7
windows_8
windows_server_2003
windows_server_2008
windows_server_2012
windows_vista
windows_xp
windows_rt
expression_web
groove_server
off… 		Microsoft XML Core Services (aka MSXML) 3.0, 5.0, and 6.0 does not properly parse XML content, which allows remote attackers to execute arbitrary code via a crafted web page, aka "MSXML Integer Trunc… CWE-189
Numeric Errors 		CVE-2013-0006 2024-11-21 10:46 2013-01-10 Show GitHub Exploit DB Packet Storm
297510 - microsoft .net_framework
management_odata_iis_extension 		The WCF Replace function in the Open Data (aka OData) protocol implementation in Microsoft .NET Framework 3.5, 3.5 SP1, 3.5.1, and 4, and the Management OData IIS Extension on Windows Server 2012, al… CWE-20
 Improper Input Validation  		CVE-2013-0005 2024-11-21 10:46 2013-01-10 Show GitHub Exploit DB Packet Storm