Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 31, 2026, 2 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
232031 6.8 警告 sky gunning - Sky GUNNING MySpeach の chat.php における PHP リモートファイルインクルージョンの脆弱性 - CVE-2007-1895 2012-12-20 18:19 2007-04-9 Show GitHub Exploit DB Packet Storm
232032 4.3 警告 WordPress.org - WordPress の wp-includes/general-template.php におけるクロスサイトスクリプティングの脆弱性 - CVE-2007-1894 2012-12-20 18:19 2007-03-9 Show GitHub Exploit DB Packet Storm
232033 4.9 警告 WordPress.org - WordPress の xmlrpc におけるアクセス制限を回避される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2007-1893 2012-12-20 18:19 2007-04-9 Show GitHub Exploit DB Packet Storm
232034 7.8 危険 VMware - VMware Workstation におけるゲスト OS がサービス運用妨害 (DoS) 状態となる脆弱性 - CVE-2007-1877 2012-12-20 18:19 2007-05-2 Show GitHub Exploit DB Packet Storm
232035 7.2 危険 VMware - VMware Workstation における "仮想マシンに登録されたコンテキストが破損" する脆弱性 - CVE-2007-1876 2012-12-20 18:19 2007-05-2 Show GitHub Exploit DB Packet Storm
232036 4.3 警告 toenda software development - toendaCMS におけるクロスサイトスクリプティングの脆弱性 - CVE-2007-1872 2012-12-20 18:19 2007-04-13 Show GitHub Exploit DB Packet Storm
232037 7.5 危険 webasyst llc - Shop-Script FREE の smarty/smarty_class.php における PHP リモートファイルインクルージョンの脆弱性 - CVE-2007-1855 2012-12-20 18:19 2007-04-3 Show GitHub Exploit DB Packet Storm
232038 7.5 危険 really simple php and ajax - RSPA におけるディレクトリトラバーサルの脆弱性 - CVE-2007-1851 2012-12-20 18:19 2007-04-3 Show GitHub Exploit DB Packet Storm
232039 7.5 危険 XOOPS - XOOPS 用の Repository モジュールにおける SQL インジェクションの脆弱性 - CVE-2007-1847 2012-12-20 18:19 2007-04-3 Show GitHub Exploit DB Packet Storm
232040 7.5 危険 XOOPS - Xoops 用の MyAds モジュールにおける SQL インジェクションの脆弱性 - CVE-2007-1846 2012-12-20 18:19 2007-04-3 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 31, 2026, 4:16 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
291291 - icofx icofx Stack-based buffer overflow in IcoFX 2.5 and earlier allows remote attackers to execute arbitrary code via a long idCount value in an ICONDIR structure in an ICO file. NOTE: some of these details ar… CWE-119
Incorrect Access of Indexable Resource ('Range Error')  		CVE-2013-4988 2024-11-21 10:56 2013-12-14 Show GitHub Exploit DB Packet Storm
291292 - microsoft exchange_server Cross-site scripting (XSS) vulnerability in Outlook Web Access in Microsoft Exchange Server 2010 SP2 and SP3 and 2013 Cumulative Update 2 and 3 allows remote attackers to inject arbitrary web script … CWE-79
Cross-site Scripting 		CVE-2013-5072 2024-11-21 10:56 2013-12-11 Show GitHub Exploit DB Packet Storm
291293 - microsoft sharepoint_server
office_web_apps 		Microsoft SharePoint Server 2010 SP1 and SP2 and 2013, and Office Web Apps 2013, allows remote attackers to execute arbitrary code via crafted page content, aka "SharePoint Page Content Vulnerabiliti… CWE-94
Code Injection 		CVE-2013-5059 2024-11-21 10:56 2013-12-11 Show GitHub Exploit DB Packet Storm
291294 - microsoft windows_xp
windows_server_2008
windows_server_2012
windows_rt
windows_8.1
windows_7
windows_rt_8.1
windows_vista
windows_8
windows_server_2003 		Integer overflow in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1,… CWE-190
 Integer Overflow or Wraparound 		CVE-2013-5058 2024-11-21 10:56 2013-12-11 Show GitHub Exploit DB Packet Storm
291295 - microsoft office hxds.dll in Microsoft Office 2007 SP3 and 2010 SP1 and SP2 does not implement the ASLR protection mechanism, which makes it easier for remote attackers to execute arbitrary code via a crafted COM com… CWE-264
Permissions, Privileges, and Access Controls 		CVE-2013-5057 2024-11-21 10:56 2013-12-11 Show GitHub Exploit DB Packet Storm
291296 - microsoft office_2013_rt
office 		Microsoft Office 2013 and 2013 RT allows remote attackers to discover authentication tokens via a crafted response to a file-open request for an Office file on a web site, as exploited in the wild in… CWE-200
Information Exposure 		CVE-2013-5054 2024-11-21 10:56 2013-12-11 Show GitHub Exploit DB Packet Storm
291297 - microsoft windows_server_2008
windows_server_2012
windows_rt
windows_8.1
windows_xp
windows_7
windows_rt_8.1
windows_vista
windows_8
windows_server_2003 		Use-after-free vulnerability in the Scripting Runtime Object Library in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1… CWE-416
 Use After Free 		CVE-2013-5056 2024-11-21 10:56 2013-12-11 Show GitHub Exploit DB Packet Storm
291298 - microsoft internet_explorer Microsoft Internet Explorer 7 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Internet Explorer Memory Corruption Vulne… CWE-119
Incorrect Access of Indexable Resource ('Range Error')  		CVE-2013-5052 2024-11-21 10:56 2013-12-11 Show GitHub Exploit DB Packet Storm
291299 - microsoft internet_explorer Microsoft Internet Explorer 10 and 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Internet Explorer Memory Corrupti… CWE-119
Incorrect Access of Indexable Resource ('Range Error')  		CVE-2013-5051 2024-11-21 10:56 2013-12-11 Show GitHub Exploit DB Packet Storm
291300 - microsoft internet_explorer Microsoft Internet Explorer 6 through 9 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Internet Explorer Memory Corrup… CWE-119
Incorrect Access of Indexable Resource ('Range Error')  		CVE-2013-5049 2024-11-21 10:56 2013-12-11 Show GitHub Exploit DB Packet Storm