Vulnerability Search Top

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

Vulnerability Information Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 30, 2026, 4 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
250881	9.3	危険	Novell	-	Novell ZHM の ZfHIPCND.exe におけるヒープベースのバッファオーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2010-4299	2012-03-27 18:42	2010-11-2	Show	GitHub Exploit DB Packet Storm

250882	7.5	危険	dustincowell	-	Free Simple Software の download モジュールにおける SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2010-4298	2012-03-27 18:42	2010-11-26	Show	GitHub Exploit DB Packet Storm

250883	7.5	危険	Artica ST	-	Pandora FMS における任意の PHP コードを実行される脆弱性	CWE-94 コード・インジェクション	CVE-2010-4283	2012-03-27 18:42	2010-12-2	Show	GitHub Exploit DB Packet Storm

250884	7.5	危険	Artica ST	-	Pandora FMS におけるディレクトリトラバーサルの脆弱性	CWE-22 パス・トラバーサル	CVE-2010-4282	2012-03-27 18:42	2010-12-2	Show	GitHub Exploit DB Packet Storm

250885	7.5	危険	Artica ST	-	Pandora FMS の safe_url_extraclean 関数における任意の PHP コードを実行される脆弱性	CWE-94 コード・インジェクション	CVE-2010-4281	2012-03-27 18:42	2010-12-2	Show	GitHub Exploit DB Packet Storm

250886	7.5	危険	Artica ST	-	Pandora FMS における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2010-4280	2012-03-27 18:42	2010-12-2	Show	GitHub Exploit DB Packet Storm

250887	10	危険	Artica ST	-	Pandora FMS のディフォルト設定における認証を回避される脆弱性	CWE-287 不適切な認証	CVE-2010-4279	2012-03-27 18:42	2010-12-2	Show	GitHub Exploit DB Packet Storm

250888	7.5	危険	accimoveis	-	DescargarVista ACC Imoveis における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2010-4273	2012-03-27 18:42	2010-11-16	Show	GitHub Exploit DB Packet Storm

250889	7.5	危険	pulseinfotech Joomla!	-	Joomla! 用の Pulse Infotech Sponsor Wall コンポーネントにおける SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2010-4272	2012-03-27 18:42	2010-11-16	Show	GitHub Exploit DB Packet Storm

250890	7.5	危険	ImpressCMS	-	ImpressCMS における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2010-4271	2012-03-27 18:42	2010-11-16	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 30, 2026, 4:16 a.m.

No	CVSS	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
291251	-	opera	opera_browser	Cross-site scripting (XSS) vulnerability in Opera before 15.00 allows remote attackers to inject arbitrary web script or HTML by leveraging UTF-8 encoding.	CWE-79 Cross-site Scripting	CVE-2013-4705	2024-11-21 10:56	2013-09-13	Show	GitHub Exploit DB Packet Storm

291252	-	sophos	web_appliance	The close_connections function in /opt/cma/bin/clear_keys.pl in Sophos Web Appliance before 3.7.9.1 and 3.8 before 3.8.1.1 allows local users to gain privileges via shell metacharacters in the second…	CWE-264 CWE-78 Permissions, Privileges, and Access Controls OS Command	CVE-2013-4984	2024-11-21 10:56	2013-09-10	Show	GitHub Exploit DB Packet Storm

291253	-	sophos	web_appliance_firmware	The get_referers function in /opt/ws/bin/sblistpack in Sophos Web Appliance before 3.7.9.1 and 3.8 before 3.8.1.1 allows remote attackers to execute arbitrary commands via shell metacharacters in the…	CWE-78 OS Command	CVE-2013-4983	2024-11-21 10:56	2013-09-10	Show	GitHub Exploit DB Packet Storm

291254	-	cybozu	office	Cross-site scripting (XSS) vulnerability in the top-page customization feature in Cybozu Office before 9.3.1 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.	CWE-79 Cross-site Scripting	CVE-2013-4703	2024-11-21 10:56	2013-09-10	Show	GitHub Exploit DB Packet Storm

291255	-	twilightcms	twilight_cms	Directory traversal vulnerability in DeWeS web server 0.4.2 and possibly earlier, as used in Twilight CMS, allows remote attackers to read arbitrary files via a ..%5c (dot dot encoded backslash) in a…	CWE-22 Path Traversal	CVE-2013-4900	2024-11-21 10:56	2013-09-10	Show	GitHub Exploit DB Packet Storm

291256	-	twilightcms	twilight_cms	Cross-site scripting (XSS) vulnerability in Twilight CMS 5.17 and possibly earlier allows remote attackers to inject arbitrary web script or HTML via the PATH_INFO to the gallery/ page.	CWE-79 Cross-site Scripting	CVE-2013-4899	2024-11-21 10:56	2013-09-10	Show	GitHub Exploit DB Packet Storm

291257	-	htmlcleaner_project open-xchange	htmlcleaner open-xchange_appsuite	Multiple race conditions in HtmlCleaner before 2.6, as used in Open-Xchange AppSuite 7.2.2 before rev13 and other products, allow remote authenticated users to read the private e-mail of other person…	CWE-362 Race Condition	CVE-2013-5035	2024-11-21 10:56	2013-09-5	Show	GitHub Exploit DB Packet Storm

291258	-	open-xchange	open-xchange_appsuite	Open-Xchange AppSuite before 7.0.2 rev14, 7.2.0 before rev11, 7.2.1 before rev10, and 7.2.2 before rev9 relies on user-supplied data to predict the IMAP server hostname for an external domain name, w…	CWE-255 Credentials Management	CVE-2013-4790	2024-11-21 10:56	2013-09-5	Show	GitHub Exploit DB Packet Storm

291259	-	lockon	ec-cube	Multiple directory traversal vulnerabilities in the doApiAction function in data/class/api/SC_Api_Operation.php in LOCKON EC-CUBE 2.12.0 through 2.12.5 on Windows allow remote attackers to read arbit…	CWE-22 Path Traversal	CVE-2013-4702	2024-11-21 10:56	2013-08-31	Show	GitHub Exploit DB Packet Storm

291260	-	strongswan opensuse	strongswan opensuse	The is_asn1 function in strongSwan 4.1.11 through 5.0.4 does not properly validate the return value of the asn1_length function, which allows remote attackers to cause a denial of service (segmentati…	CWE-119 Incorrect Access of Indexable Resource ('Range Error')	CVE-2013-5018	2024-11-21 10:56	2013-08-29	Show	GitHub Exploit DB Packet Storm