Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 2, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
232131 6.8 警告 PHPNUKE - PHP-Nuke における CSRF 攻撃を実行される脆弱性 CWE-352
同一生成元ポリシー違反 		CVE-2007-1520 2012-12-20 18:19 2007-03-20 Show GitHub Exploit DB Packet Storm
232132 4.3 警告 PHPNUKE - PHP-Nuke の modules.php におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2007-1519 2012-12-20 18:19 2007-03-20 Show GitHub Exploit DB Packet Storm
232133 7.5 危険 woltlab - wBB の usergroups.php における SQL インジェクションの脆弱性 - CVE-2007-1518 2012-12-20 18:19 2007-03-20 Show GitHub Exploit DB Packet Storm
232134 6.8 警告 viperweb - ViperWeb Portal の index.php における PHP リモートファイルインクルージョンの脆弱性 - CVE-2007-1514 2012-12-20 18:19 2007-03-20 Show GitHub Exploit DB Packet Storm
232135 7.5 危険 rhapsody irc - Rhapsody IRC の comm.c におけるフォーマットストリングの脆弱性 - CVE-2007-1503 2012-12-20 18:19 2007-03-19 Show GitHub Exploit DB Packet Storm
232136 6.8 警告 rhapsody irc - Rhapsody IRC におけるバッファオーバーフローの脆弱性 - CVE-2007-1502 2012-12-20 18:19 2007-03-19 Show GitHub Exploit DB Packet Storm
232137 4.9 警告 シマンテック - Symantec Norton Personal Firewall などの \Device\SymEvent ドライバにおけるサービス運用妨害 (DoS) の脆弱性 - CVE-2007-1495 2012-12-20 18:19 2007-03-16 Show GitHub Exploit DB Packet Storm
232138 6.8 警告 web-app.org - web-app.org WebAPP における管理アクセス権限を取得される脆弱性 CWE-352
同一生成元ポリシー違反 		CVE-2007-1489 2012-12-20 18:19 2007-03-16 Show GitHub Exploit DB Packet Storm
232139 7.5 危険 wbblog - WBBlog の index.php における SQL インジェクションの脆弱性 - CVE-2007-1481 2012-12-20 18:19 2007-03-16 Show GitHub Exploit DB Packet Storm
232140 1.9 注意 シマンテック - Symantec Norton Personal Firewall などの SYMTDI.SYS におけるサービス運用妨害 (DoS) の脆弱性 CWE-20
不適切な入力確認 		CVE-2007-1476 2012-12-20 18:19 2007-03-16 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 3, 2026, 4:18 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
294431 - opensuse
ruby-lang 		opensuse
ruby 		(1) DL and (2) Fiddle in Ruby 1.9 before 1.9.3 patchlevel 426, and 2.0 before 2.0.0 patchlevel 195, do not perform taint checking for native functions, which allows context-dependent attackers to byp… CWE-264
Permissions, Privileges, and Access Controls 		CVE-2013-2065 2024-11-21 10:50 2013-11-3 Show GitHub Exploit DB Packet Storm
294432 - mozilla bugzilla Multiple cross-site scripting (XSS) vulnerabilities in report.cgi in Bugzilla 4.1.x and 4.2.x before 4.2.7 and 4.3.x and 4.4.x before 4.4.1 allow remote attackers to inject arbitrary web script or HT… CWE-79
Cross-site Scripting 		CVE-2013-1743 2024-11-21 10:50 2013-10-24 Show GitHub Exploit DB Packet Storm
294433 - mozilla bugzilla Multiple cross-site scripting (XSS) vulnerabilities in editflagtypes.cgi in Bugzilla 2.x, 3.x, and 4.0.x before 4.0.11; 4.1.x and 4.2.x before 4.2.7; and 4.3.x and 4.4.x before 4.4.1 allow remote att… CWE-79
Cross-site Scripting 		CVE-2013-1742 2024-11-21 10:50 2013-10-24 Show GitHub Exploit DB Packet Storm
294434 - mozilla bugzilla Cross-site request forgery (CSRF) vulnerability in attachment.cgi in Bugzilla 2.x, 3.x, and 4.0.x before 4.0.11; 4.1.x and 4.2.x before 4.2.7; and 4.3.x and 4.4.x before 4.4.1 allows remote attackers… CWE-352
 Origin Validation Error 		CVE-2013-1734 2024-11-21 10:50 2013-10-24 Show GitHub Exploit DB Packet Storm
294435 - mozilla bugzilla Cross-site request forgery (CSRF) vulnerability in process_bug.cgi in Bugzilla 4.4.x before 4.4.1 allows remote attackers to hijack the authentication of arbitrary users for requests that modify bugs… CWE-352
 Origin Validation Error 		CVE-2013-1733 2024-11-21 10:50 2013-10-24 Show GitHub Exploit DB Packet Storm
294436 - mozilla network_security_services Mozilla Network Security Services (NSS) before 3.15.2 does not ensure that data structures are initialized before read operations, which allows remote attackers to cause a denial of service or possib… NVD-CWE-noinfo
CVE-2013-1739 2024-11-21 10:50 2013-10-23 Show GitHub Exploit DB Packet Storm
294437 - gnome librsvg GNOME libsvg before 2.39.0 allows remote attackers to read arbitrary files via an XML document containing an external entity declaration in conjunction with an entity reference, related to an XML Ext… CWE-20
 Improper Input Validation  		CVE-2013-1881 2024-11-21 10:50 2013-10-10 Show GitHub Exploit DB Packet Storm
294438 - openstack python-keystoneclient The user-password-update command in python-keystoneclient before 0.2.4 accepts the new password in the --password argument, which allows local users to obtain sensitive information by listing the pro… CWE-200
Information Exposure 		CVE-2013-2013 2024-11-21 10:50 2013-10-2 Show GitHub Exploit DB Packet Storm
294439 - mongodb
redhat 		mongodb
enterprise_mrg 		MongoDB before 2.0.9 and 2.2.x before 2.2.4 does not properly validate requests to the nativeHelper function in SpiderMonkey, which allows remote authenticated users to cause a denial of service (inv… CWE-20
 Improper Input Validation  		CVE-2013-1892 2024-11-21 10:50 2013-10-2 Show GitHub Exploit DB Packet Storm
294440 - squid-cache squid The strHdrAcptLangGetItem function in errorpage.cc in Squid 3.2.x before 3.2.9 and 3.3.x before 3.3.3 allows remote attackers to cause a denial of service (infinite loop and CPU consumption) via a ",… CWE-20
 Improper Input Validation  		CVE-2013-1839 2024-11-21 10:50 2013-10-1 Show GitHub Exploit DB Packet Storm