Vulnerability Search Top

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

Vulnerability Information Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":June 6, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
250341	5	警告	Shibboleth Apache Software Foundation	-	Shibboleth などで使用されるApache XML Security for C++ の XML 署名における一つずれエラーの脆弱性	CWE-189 数値処理の問題	CVE-2011-2516	2012-03-27 18:43	2011-07-11	Show	GitHub Exploit DB Packet Storm

250342	4.3	警告	Andreas Gohr	-	DokuWiki の RSS 埋め込み機能におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2011-2510	2012-03-27 18:43	2011-07-14	Show	GitHub Exploit DB Packet Storm

250343	4.3	警告	Joomla!	-	Joomla! におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2011-2509	2012-03-27 18:43	2011-07-27	Show	GitHub Exploit DB Packet Storm

250344	6	警告	The phpMyAdmin Project	-	phpMyAdmin の libraries/display_tbl.lib.php におけるディレクトリトラバーサルの脆弱性	CWE-22 パス・トラバーサル	CVE-2011-2508	2012-03-27 18:43	2011-07-2	Show	GitHub Exploit DB Packet Storm

250345	6.5	警告	The phpMyAdmin Project	-	phpMyAdmin の libraries/server_synchronize.lib.php における PCRE e 修飾子を挿入される脆弱性	CWE-94 コード・インジェクション	CVE-2011-2507	2012-03-27 18:43	2011-07-2	Show	GitHub Exploit DB Packet Storm

250346	7.5	危険	The phpMyAdmin Project	-	phpMyAdmin の setup/lib/ConfigGenerator.class.php における静的コードインジェクションの脆弱性	CWE-94 コード・インジェクション	CVE-2011-2506	2012-03-27 18:43	2011-07-2	Show	GitHub Exploit DB Packet Storm

250347	6.4	警告	The phpMyAdmin Project	-	phpMyAdmin の libraries/auth/swekey/swekey.auth.lib.php における SESSION スーパーグローバル配列を変更される脆弱性	CWE-94 コード・インジェクション	CVE-2011-2505	2012-03-27 18:43	2011-07-2	Show	GitHub Exploit DB Packet Storm

250348	8.3	危険	Linux	-	Linux kernel の l2cap_config_req 関数における整数アンダーフローの脆弱性	CWE-189 数値処理の問題	CVE-2011-2497	2012-03-27 18:43	2011-08-29	Show	GitHub Exploit DB Packet Storm

250349	7.2	危険	NRL	-	OPIE の opielogin.c における権限を取得される脆弱性	CWE-20 不適切な入力確認	CVE-2011-2490	2012-03-27 18:43	2011-07-26	Show	GitHub Exploit DB Packet Storm

250350	7.2	危険	NRL	-	OPIE の opiesu.c における権限を取得される脆弱性	CWE-189 数値処理の問題	CVE-2011-2489	2012-03-27 18:43	2011-07-26	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:June 7, 2026, 4:13 a.m.

No	CVSS	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
295031	-	simplehrm	simplehrm	SQL injection vulnerability in the login page in flexycms/modules/user/user_manager.php in SimpleHRM 2.3, 2.2, and earlier allows remote attackers to execute arbitrary SQL commands via the username p…	CWE-89 SQL Injection	CVE-2013-2498	2024-11-21 10:51	2014-03-1	Show	GitHub Exploit DB Packet Storm

295032	-	nagios	nagios	status.cgi in Nagios 4.0 before 4.0 beta4 and 3.x before 3.5.1 does not properly restrict access to certain users that are a contact for a service, which allows remote authenticated users to obtain s…	CWE-264 Permissions, Privileges, and Access Controls	CVE-2013-2214	2024-11-21 10:51	2014-02-11	Show	GitHub Exploit DB Packet Storm

295033	-	python_bugzilla_project fedoraproject opensuse	python-bugzilla fedora opensuse	python-bugzilla before 0.9.0 does not validate X.509 certificates, which allows man-in-the-middle attackers to spoof Bugzilla servers via a crafted certificate.	CWE-20 Improper Input Validation	CVE-2013-2191	2024-11-21 10:51	2014-02-8	Show	GitHub Exploit DB Packet Storm

295034	-	apache	hadoop	The RPC protocol implementation in Apache Hadoop 2.x before 2.0.6-alpha, 0.23.x before 0.23.9, and 1.x before 1.2.1, when the Kerberos security features are enabled, allows man-in-the-middle attacker…	CWE-287 Improper Authentication	CVE-2013-2192	2024-11-21 10:51	2014-01-25	Show	GitHub Exploit DB Packet Storm

295035	-	redhat	enterprise_virtualization	Unquoted Windows search path vulnerability in the SPICE service, as used in Red Hat Enterprise Virtualization (RHEV) 3.2, allows local users to gain privileges via a crafted application in an unspeci…	NVD-CWE-Other	CVE-2013-2152	2024-11-21 10:51	2014-01-22	Show	GitHub Exploit DB Packet Storm

295036	-	redhat	enterprise_virtualization	Unquoted Windows search path vulnerability in Red Hat Enterprise Virtualization (RHEV) 3 and 3.2 allows local users to gain privileges via a crafted application in an unspecified folder.	NVD-CWE-Other	CVE-2013-2151	2024-11-21 10:51	2014-01-22	Show	GitHub Exploit DB Packet Storm

295037	-	openstack	python-keystoneclient	python-keystoneclient before 0.2.4, as used in OpenStack Keystone (Folsom), does not properly check expiry for PKI tokens, which allows remote authenticated users to (1) retain use of a token after i…	CWE-264 Permissions, Privileges, and Access Controls	CVE-2013-2104	2024-11-21 10:51	2014-01-22	Show	GitHub Exploit DB Packet Storm

295038	-	libimobiledevice	libimobiledevice	userpref.c in libimobiledevice 1.1.4, when $HOME and $XDG_CONFIG_HOME are not set, allows local users to overwrite arbitrary files via a symlink attack on (1) HostCertificate.pem, (2) HostPrivateKey.…	CWE-59 Link Following	CVE-2013-2142	2024-11-21 10:51	2014-01-20	Show	GitHub Exploit DB Packet Storm

295039	-	redhat apache	jboss_enterprise_portal_platform jboss_enterprise_application_platform tomcat	The readObject method in the DiskFileItem class in Apache Tomcat and JBoss Web, as used in Red Hat JBoss Enterprise Application Platform 6.1.0 and Red Hat JBoss Portal 6.0.0, allows remote attackers …	CWE-20 Improper Input Validation	CVE-2013-2185	2024-11-21 10:51	2014-01-20	Show	GitHub Exploit DB Packet Storm

295040	-	fedoraproject opensuse cisco	fedora opensuse libsrtp	Buffer overflow in srtp.c in libsrtp in srtp 1.4.5 and earlier allows remote attackers to cause a denial of service (crash) via vectors related to a length inconsistency in the crypto_policy_set_from…	CWE-119 Incorrect Access of Indexable Resource ('Range Error')	CVE-2013-2139	2024-11-21 10:51	2014-01-16	Show	GitHub Exploit DB Packet Storm