Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 27, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
232561 6.8 警告 phpprofiles - phpProfiles における PHP リモートファイルインクルージョンの脆弱性 CWE-94
コード・インジェクション 		CVE-2006-5634 2012-12-20 18:02 2006-10-31 Show GitHub Exploit DB Packet Storm
232562 7.5 危険 unisor cms - UNISOR CMS の login.asp における SQL インジェクションの脆弱性 - CVE-2006-5628 2012-12-20 18:02 2006-10-31 Show GitHub Exploit DB Packet Storm
232563 7.5 危険 qnecms - QnECMS における PHP リモートファイルインクルージョンの脆弱性 - CVE-2006-5627 2012-12-20 18:02 2006-10-31 Show GitHub Exploit DB Packet Storm
232564 4.3 警告 phpfaber - phpFaber CMS の cms_images/js/htmlarea/htmlarea.php におけるクロスサイトスクリプティングの脆弱性 - CVE-2006-5626 2012-12-20 18:02 2006-10-31 Show GitHub Exploit DB Packet Storm
232565 7.5 危険 thepeak - Thepeak File Upload Manager の index.php におけるディレクトリトラバーサルの脆弱性 - CVE-2006-5617 2012-12-20 18:02 2006-10-30 Show GitHub Exploit DB Packet Storm
232566 7.5 危険 Textpattern - Textpattern の publish.php における PHP リモートファイルインクルージョンの脆弱性 - CVE-2006-5615 2012-12-20 18:02 2006-10-30 Show GitHub Exploit DB Packet Storm
232567 10 危険 東芝 - Toshiba Bluetooth スタックにおける脆弱性 CWE-noinfo
情報不足 		CVE-2006-5611 2012-12-20 18:02 2006-10-30 Show GitHub Exploit DB Packet Storm
232568 5 警告 TorrentFlux - TorrentFlux の dir.php におけるディレクトリトラバーサルの脆弱性 - CVE-2006-5609 2012-12-20 18:02 2006-10-30 Show GitHub Exploit DB Packet Storm
232569 6.8 警告 phpcards - phpCards の phpcards.footer.php におけるクロスサイトスクリプティングの脆弱性 - CVE-2006-5605 2012-12-20 18:02 2006-10-30 Show GitHub Exploit DB Packet Storm
232570 7.5 危険 phpcards - phpCards の phpcards.header.php におけるディレクトリトラバーサルの脆弱性 - CVE-2006-5604 2012-12-20 18:02 2006-10-30 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 27, 2026, 4:52 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
291881 - freebsd freebsd The vm_map_lookup function in sys/vm/vm_map.c in the mmap implementation in the kernel in FreeBSD 9.0 through 9.1-RELEASE-p4 does not properly determine whether a task should have write access to a m… CWE-264
Permissions, Privileges, and Access Controls 		CVE-2013-2171 2024-11-21 10:51 2013-07-2 Show GitHub Exploit DB Packet Storm
291882 - services_project services Cross-site request forgery (CSRF) vulnerability in the Services module 6.x-3.x and 7.x-3.x before 7.x-3.4 for Drupal allows remote attackers to hijack the authentication of unspecified victims via un… CWE-352
 Origin Validation Error 		CVE-2013-2158 2024-11-21 10:51 2013-07-2 Show GitHub Exploit DB Packet Storm
291883 - hp storeonce_d2d The HP StoreOnce D2D backup system with software before 3.0.0 has a default password of badg3r5 for the HPSupport account, which allows remote attackers to obtain administrative access and delete dat… CWE-255
Credentials Management 		CVE-2013-2342 2024-11-21 10:51 2013-07-1 Show GitHub Exploit DB Packet Storm
291884 - hp smart_zero_core HP Smart Zero Core 4.3 and 4.3.1 on the t410 All-in-One Smart Zero Client, t410 Smart Zero Client, t510 Flexible Thin Client, t5565z Smart Client, t610 Flexible Thin Client, and t610 PLUS Flexible Th… NVD-CWE-noinfo
CVE-2013-2339 2024-11-21 10:51 2013-07-1 Show GitHub Exploit DB Packet Storm
291885 - hp nonstop_sql\/mx HP SQL/MX 3.0 through 3.2 on NonStop servers, when SQL/MP Objects are used, allows remote authenticated users to bypass intended access restrictions and modify data via unspecified vectors, aka the "… CWE-264
Permissions, Privileges, and Access Controls 		CVE-2013-2323 2024-11-21 10:51 2013-06-28 Show GitHub Exploit DB Packet Storm
291886 - hp nonstop_sql\/mx HP SQL/MX 3.2 and earlier on NonStop servers, when SQL/MP Objects are used, allows remote authenticated users to obtain sensitive information via unspecified vectors, aka the "SQL/MP index" issue. CWE-200
Information Exposure 		CVE-2013-2322 2024-11-21 10:51 2013-06-28 Show GitHub Exploit DB Packet Storm
291887 - kristof_de_jaeger display_suite Cross-site scripting (XSS) vulnerability in the Display Suite module 7.x-1.x before 7.x-1.7 and 7.x-2.x before 7.x-2.3 for Drupal allows remote authenticated users with certain permissions to inject … CWE-79
Cross-site Scripting 		CVE-2013-2177 2024-11-21 10:51 2013-06-26 Show GitHub Exploit DB Packet Storm
291888 - nathan_haug webform Cross-site scripting (XSS) vulnerability in the Webform module 6.x-3.x before 6.x-3.19 for Drupal allows remote authenticated users with the "edit own webform content" or "edit all webform content" p… CWE-79
Cross-site Scripting 		CVE-2013-2129 2024-11-21 10:51 2013-06-25 Show GitHub Exploit DB Packet Storm
291889 - php php Heap-based buffer overflow in the php_quot_print_encode function in ext/standard/quot_print.c in PHP before 5.3.26 and 5.4.x before 5.4.16 allows remote attackers to cause a denial of service (applic… CWE-119
Incorrect Access of Indexable Resource ('Range Error')  		CVE-2013-2110 2024-11-21 10:51 2013-06-22 Show GitHub Exploit DB Packet Storm
291890 - wordpress wordpress wp-includes/class-phpass.php in WordPress 3.5.1, when a password-protected post exists, allows remote attackers to cause a denial of service (CPU consumption) via a crafted value of a certain wp-post… CWE-310
Cryptographic Issues 		CVE-2013-2173 2024-11-21 10:51 2013-06-21 Show GitHub Exploit DB Packet Storm