Vulnerability Search Top

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

Vulnerability Information Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 27, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
232721	5	警告	swsoft	-	Swsoft Pleask Reload および Pleask の filemanager/filemanager.php におけるディレクトリトラバーサルの脆弱性	-	CVE-2006-5028	2012-12-20 18:02	2006-09-27	Show	GitHub Exploit DB Packet Storm

232722	7.5	危険	pnews systems	-	Joshua Wilson pNews System の includes/global.php における PHP リモートファイルインクルージョンの脆弱性	-	CVE-2006-5022	2012-12-20 18:02	2006-09-27	Show	GitHub Exploit DB Packet Storm

232723	7.5	危険	redblog	-	redgun RedBLoG における PHP リモートファイルインクルージョンの脆弱性	-	CVE-2006-5021	2012-12-20 18:02	2006-09-27	Show	GitHub Exploit DB Packet Storm

232724	7.5	危険	solidstate	-	SolidState における PHP リモートファイルインクルージョンの脆弱性	-	CVE-2006-5020	2012-12-20 18:02	2006-09-27	Show	GitHub Exploit DB Packet Storm

232725	7.5	危険	voice of web	-	Voodoo chat における PHP リモートファイルインクルージョンの脆弱性	-	CVE-2006-4993	2012-12-20 18:02	2006-09-25	Show	GitHub Exploit DB Packet Storm

232726	3.6	注意	RSAセキュリティ	-	RSA KeonCA Manager における悪意のある認証局動作を隠される脆弱性	-	CVE-2006-4991	2012-12-20 18:02	2006-09-25	Show	GitHub Exploit DB Packet Storm

232727	4.6	警告	シマンテック	-	Symantec Sygate NAC におけるコントロールメソッドを回避される脆弱性	-	CVE-2006-4981	2012-12-20 18:02	2006-09-25	Show	GitHub Exploit DB Packet Storm

232728	5	警告	walter beschmout	-	Walter Beschmout PhpQuiz の cfgphpquiz/install.php における config.inc.php の任意の PHP コードを挿入される脆弱性	-	CVE-2006-4979	2012-12-20 18:02	2006-09-24	Show	GitHub Exploit DB Packet Storm

232729	7.5	危険	walter beschmout	-	Walter Beschmout PhpQuiz における SQL インジェクションの脆弱性	-	CVE-2006-4978	2012-12-20 18:02	2006-09-24	Show	GitHub Exploit DB Packet Storm

232730	5	警告	walter beschmout	-	Walter Beschmout PhpQuiz の back/upload_img.php などにおける任意の PHP コードをアップロードされる脆弱性	-	CVE-2006-4977	2012-12-20 18:02	2006-09-24	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 27, 2026, 4:52 a.m.

No	CVSS	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
292191	-	linux-nfs	nfs-utils	rpc-gssd in nfs-utils before 1.2.8 performs reverse DNS resolution for server names during GSSAPI authentication, which might allow remote attackers to read otherwise-restricted files via DNS spoofin…	CWE-200 Information Exposure	CVE-2013-1923	2024-11-21 10:50	2014-01-22	Show	GitHub Exploit DB Packet Storm

292192	-	simon_mcvittie	telepathy_gabble	A certain hashing algorithm in Telepathy Gabble 0.16.x before 0.16.5 and 0.17.x before 0.17.3 allows remote attackers to cause a denial of service (NULL pointer dereference and crash) via a crafted m…	CWE-310 Cryptographic Issues	CVE-2013-1769	2024-11-21 10:50	2014-01-22	Show	GitHub Exploit DB Packet Storm

292193	-	mozilla	network_security_services	The ssl_Do1stHandshake function in sslsecur.c in libssl in Mozilla Network Security Services (NSS) before 3.15.4, when the TLS False Start feature is enabled, allows man-in-the-middle attackers to sp…	CWE-310 Cryptographic Issues	CVE-2013-1740	2024-11-21 10:50	2014-01-19	Show	GitHub Exploit DB Packet Storm

292194	-	canonical httplib2_project	ubuntu_linux httplib2	httplib2 0.7.2, 0.8, and earlier, after an initial connection is made, does not verify that the server hostname matches a domain name in the subject's Common Name (CN) or subjectAltName field of the …	CWE-20 Improper Input Validation	CVE-2013-2037	2024-11-21 10:50	2014-01-19	Show	GitHub Exploit DB Packet Storm

292195	-	redhat	cloudforms_management_engine manageiq_enterprise_virtualization_manager	SQL injection vulnerability in the miq_policy controller in Red Hat CloudForms 2.0 Management Engine (CFME) 5.1 and ManageIQ Enterprise Virtualization Manager 5.0 and earlier allows remote authentica…	CWE-89 SQL Injection	CVE-2013-2050	2024-11-21 10:50	2014-01-11	Show	GitHub Exploit DB Packet Storm

292196	-	openstack	compute grizzly havana folsom	keystone/middleware/auth_token.py in OpenStack Nova Folsom, Grizzly, and Havana uses an insecure temporary directory for storing signing certificates, which allows local users to spoof servers by pre…	CWE-264 Permissions, Privileges, and Access Controls	CVE-2013-2030	2024-11-21 10:50	2013-12-27	Show	GitHub Exploit DB Packet Storm

292197	-	gimp redhat	gimp enterprise_linux	Heap-based buffer overflow in the read_xwd_cols function in file-xwd.c in the X Window Dump (XWD) plug-in in GIMP 2.6.9 and earlier allows remote attackers to cause a denial of service (crash) and po…	CWE-787 Out-of-bounds Write	CVE-2013-1978	2024-11-21 10:50	2013-12-13	Show	GitHub Exploit DB Packet Storm

292198	-	gimp redhat	gimp enterprise_linux	Integer overflow in the load_image function in file-xwd.c in the X Window Dump (XWD) plug-in in GIMP 2.6.9 and earlier, when used with glib before 2.24, allows remote attackers to cause a denial of s…	CWE-190 Integer Overflow or Wraparound	CVE-2013-1913	2024-11-21 10:50	2013-12-13	Show	GitHub Exploit DB Packet Storm

292199	-	fedoraproject janrain	fedora ruby-openid	The ruby-openid gem before 2.2.2 for Ruby allows remote OpenID providers to cause a denial of service (CPU consumption) via (1) a large XRDS document or (2) an XML Entity Expansion (XEE) attack.	CWE-399 Resource Management Errors	CVE-2013-1812	2024-11-21 10:50	2013-12-13	Show	GitHub Exploit DB Packet Storm

292200	-	autotrace_project	autotrace	Integer underflow in the input_bmp_reader function in input-bmp.c in AutoTrace 0.31.1 allows context-dependent attackers to have an unspecified impact via a small value in the biSize field in the hea…	CWE-189 Numeric Errors	CVE-2013-1953	2024-11-21 10:50	2013-12-10	Show	GitHub Exploit DB Packet Storm