Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 22, 2026, 4 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
233131 7.5 危険 revokesoft - RevokeBB の Search System における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-2778 2012-12-20 18:52 2008-06-19 Show GitHub Exploit DB Packet Storm
233132 7.5 危険 phpraider - Simple Machines phpRaider の authentication/smf/smf.functions.php における PHP リモートファイルインクルージョンの脆弱性 CWE-94
コード・インジェクション 		CVE-2008-2769 2012-12-20 18:52 2008-06-18 Show GitHub Exploit DB Packet Storm
233133 3.5 注意 xigla - Xigla Poll Manager XE の admin/search.asp におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2008-2768 2012-12-20 18:52 2008-06-18 Show GitHub Exploit DB Packet Storm
233134 6.5 警告 xigla - Xigla Poll Manager XE の search.asp における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-2767 2012-12-20 18:52 2008-06-18 Show GitHub Exploit DB Packet Storm
233135 4.3 警告 xigla - Xigla Absolute Image Gallery XE におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2008-2766 2012-12-20 18:52 2008-06-18 Show GitHub Exploit DB Packet Storm
233136 7.5 危険 xigla - Xigla Absolute Image Gallery XE の gallery.asp における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-2765 2012-12-20 18:52 2008-06-18 Show GitHub Exploit DB Packet Storm
233137 3.5 注意 xigla - Xigla Absolute Live Support XE の admin/search.asp におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2008-2764 2012-12-20 18:52 2008-06-18 Show GitHub Exploit DB Packet Storm
233138 6.5 警告 xigla - Xigla Absolute Live Support XE の search.asp における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-2763 2012-12-20 18:52 2008-06-18 Show GitHub Exploit DB Packet Storm
233139 6.5 警告 xigla - Xigla Absolute Form Processor XE の search.asp における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2008-2762 2012-12-20 18:52 2008-06-18 Show GitHub Exploit DB Packet Storm
233140 3.5 注意 xigla - Xigla Absolute Banner Manager XE におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2008-2761 2012-12-20 18:52 2008-06-18 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 22, 2026, 4 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
294001 - redhat icedtea-web The LiveConnect implementation in plugin/icedteanp/IcedTeaNPPlugin.cc in IcedTea-Web before 1.4.2 allows local users to read the messages between a Java applet and a web browser by pre-creating a tem… CWE-200
Information Exposure 		CVE-2013-6493 2024-11-21 10:59 2014-03-4 Show GitHub Exploit DB Packet Storm
294002 - ibm netezza_performance_portal IBM Netezza Performance Portal 2.x before 2.0.0.3 allows remote authenticated users to change arbitrary passwords via an HTTP POST request. CWE-264
Permissions, Privileges, and Access Controls 		CVE-2013-6731 2024-11-21 10:59 2014-02-26 Show GitHub Exploit DB Packet Storm
294003 - google chrome Multiple unspecified vulnerabilities in Google Chrome before 33.0.1750.117 allow attackers to bypass the sandbox protection mechanism after obtaining renderer access, or have other impact, via unknow… NVD-CWE-noinfo
CVE-2013-6661 2024-11-21 10:59 2014-02-24 Show GitHub Exploit DB Packet Storm
294004 - google chrome The drag-and-drop implementation in Google Chrome before 33.0.1750.117 does not properly restrict the information in WebDropData data structures, which allows remote attackers to discover full pathna… CWE-264
Permissions, Privileges, and Access Controls 		CVE-2013-6660 2024-11-21 10:59 2014-02-24 Show GitHub Exploit DB Packet Storm
294005 - google chrome The SSLClientSocketNSS::Core::OwnAuthCertHandler function in net/socket/ssl_client_socket_nss.cc in Google Chrome before 33.0.1750.117 does not prevent changes to server X.509 certificates during ren… CWE-310
Cryptographic Issues 		CVE-2013-6659 2024-11-21 10:59 2014-02-24 Show GitHub Exploit DB Packet Storm
294006 - google chrome Multiple use-after-free vulnerabilities in the layout implementation in Blink, as used in Google Chrome before 33.0.1750.117, allow remote attackers to cause a denial of service or possibly have unsp… CWE-399
 Resource Management Errors 		CVE-2013-6658 2024-11-21 10:59 2014-02-24 Show GitHub Exploit DB Packet Storm
294007 - google chrome core/html/parser/XSSAuditor.cpp in the XSS auditor in Blink, as used in Google Chrome before 33.0.1750.117, inserts the about:blank URL during certain blocking of FORM elements within HTTP requests, … CWE-264
Permissions, Privileges, and Access Controls 		CVE-2013-6657 2024-11-21 10:59 2014-02-24 Show GitHub Exploit DB Packet Storm
294008 - google chrome The XSSAuditor::init function in core/html/parser/XSSAuditor.cpp in the XSS auditor in Blink, as used in Google Chrome before 33.0.1750.117, processes POST requests by using the body of a redirecting… CWE-200
Information Exposure 		CVE-2013-6656 2024-11-21 10:59 2014-02-24 Show GitHub Exploit DB Packet Storm
294009 - google chrome Use-after-free vulnerability in Blink, as used in Google Chrome before 33.0.1750.117, allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors relate… CWE-399
 Resource Management Errors 		CVE-2013-6655 2024-11-21 10:59 2014-02-24 Show GitHub Exploit DB Packet Storm
294010 - google chrome The SVGAnimateElement::calculateAnimatedValue function in core/svg/SVGAnimateElement.cpp in Blink, as used in Google Chrome before 33.0.1750.117, does not properly handle unexpected data types, which… CWE-20
 Improper Input Validation  		CVE-2013-6654 2024-11-21 10:59 2014-02-24 Show GitHub Exploit DB Packet Storm