Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 24, 2026, 6 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
251261 5 警告 TIBCO Software - 複数の TIBCO Spotfire 製品における重要な情報を取得される脆弱性 CWE-200
情報漏えい
CVE-2012-0690 2012-03-15 11:16 2012-03-8 Show GitHub Exploit DB Packet Storm
251262 5 警告 TIBCO Software - 複数の TIBCO 製品における証明書情報を発見される脆弱性 CWE-200
情報漏えい
CVE-2012-0689 2012-03-15 11:15 2012-03-8 Show GitHub Exploit DB Packet Storm
251263 4.3 警告 TIBCO Software - 複数の TIBCO 製品におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2012-0688 2012-03-15 11:15 2012-03-8 Show GitHub Exploit DB Packet Storm
251264 5 警告 TIBCO Software - 複数の TIBCO 製品における重要な情報を取得される脆弱性 CWE-200
情報漏えい
CVE-2012-0687 2012-03-15 11:14 2012-03-8 Show GitHub Exploit DB Packet Storm
251265 5 警告 IBM - 複数の IBM 製品におけるサービス運用妨害 (メモリ消費) の脆弱性 CWE-399
リソース管理の問題
CVE-2011-1394 2012-03-14 16:24 2012-02-14 Show GitHub Exploit DB Packet Storm
251266 4.3 警告 IBM - IBM Maximo Asset Management および Maximo Asset Management Essentials におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2011-1395 2012-03-14 16:23 2012-02-14 Show GitHub Exploit DB Packet Storm
251267 4.3 警告 IBM - IBM Maximo Asset Management および Maximo Asset Management Essentials におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2011-1396 2012-03-14 16:23 2012-02-14 Show GitHub Exploit DB Packet Storm
251268 6.8 警告 IBM - 複数の IBM 製品の Labor Reporting ページにおけるクロスサイトリクエストフォージェリの脆弱性 CWE-352
同一生成元ポリシー違反
CVE-2011-1397 2012-03-14 16:22 2012-02-14 Show GitHub Exploit DB Packet Storm
251269 6.5 警告 IBM - 複数の IBM 製品 の KPI コンポーネントにおける SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2011-4816 2012-03-14 16:08 2012-02-14 Show GitHub Exploit DB Packet Storm
251270 4 警告 IBM - 複数の IBM 製品 の Help メニューの About オプションにおける詳細不明な脆弱性 CWE-200
情報漏えい
CVE-2011-4817 2012-03-14 16:07 2012-02-14 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 24, 2026, 4:05 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
287451 - canonical
php
ubuntu_linux
php
The gdImageCrop function in ext/gd/gd.c in PHP 5.5.x before 5.5.9 does not check return values, which allows remote attackers to cause a denial of service (application crash) or possibly have unspeci… CWE-20
 Improper Input Validation 
CVE-2013-7327 2024-11-21 11:00 2014-02-18 Show GitHub Exploit DB Packet Storm
287452 - php php Integer overflow in the gdImageCrop function in ext/gd/gd.c in PHP 5.5.x before 5.5.9 allows remote attackers to cause a denial of service (application crash) or possibly have unspecified other impac… CWE-189
Numeric Errors
CVE-2013-7226 2024-11-21 11:00 2014-02-18 Show GitHub Exploit DB Packet Storm
287453 - vtiger vtiger_crm Cross-site scripting (XSS) vulnerability in vTiger CRM 5.4.0 allows remote attackers to inject arbitrary web script or HTML via the (1) return_url parameter to modules\com_vtiger_workflow\savetemplat… CWE-79
Cross-site Scripting
CVE-2013-7326 2024-11-21 11:00 2014-02-15 Show GitHub Exploit DB Packet Storm
287454 - livezilla livezilla Multiple cross-site scripting (XSS) vulnerabilities in the web based operator client in LiveZilla before 5.1.2.1 allow remote attackers to inject arbitrary web script or HTML via the (1) name of an u… CWE-79
Cross-site Scripting
CVE-2013-7032 2024-11-21 11:00 2014-02-15 Show GitHub Exploit DB Packet Storm
287455 - openstack compute
havana
grizzly
icehouse
The i_create_images_and_backing (aka create_images_and_backing) method in libvirt driver in OpenStack Compute (Nova) Grizzly, Havana, and Icehouse, when using KVM live block migration, does not prope… CWE-200
Information Exposure
CVE-2013-7130 2024-11-21 11:00 2014-02-7 Show GitHub Exploit DB Packet Storm
287456 - d-link dap_2253_firmware
dap_2253
Cross-site scripting (XSS) vulnerability in D-Link DAP-2253 Access Point (Rev. A1) with firmware before 1.30 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. CWE-79
Cross-site Scripting
CVE-2013-7321 2024-11-21 11:00 2014-02-7 Show GitHub Exploit DB Packet Storm
287457 - d-link dap_2253_firmware
dap_2253
Cross-site request forgery (CSRF) vulnerability in D-Link DAP-2253 Access Point (Rev. A1) with firmware before 1.30 allows remote attackers to hijack the authentication of administrators for requests… CWE-352
 Origin Validation Error
CVE-2013-7320 2024-11-21 11:00 2014-02-7 Show GitHub Exploit DB Packet Storm
287458 - wpdownloadmanager wordpress_download_manager Cross-site scripting (XSS) vulnerability in the Download Manager plugin before 2.5.9 for WordPress allows remote attackers to inject arbitrary web script or HTML via the title field. CWE-79
Cross-site Scripting
CVE-2013-7319 2024-11-21 11:00 2014-02-7 Show GitHub Exploit DB Packet Storm
287459 - seowonintech swc-9100 cgi-bin/reboot.cgi on Seowon Intech SWC-9100 routers allows remote attackers to (1) cause a denial of service (reboot) via a default_reboot action or (2) reset all configuration values via a factory_… CWE-287
Improper Authentication
CVE-2013-7183 2024-11-21 11:00 2014-02-4 Show GitHub Exploit DB Packet Storm
287460 - fortinet fortios Cross-site scripting (XSS) vulnerability in firewall/schedule/recurrdlg in Fortinet FortiOS 5.0.5 allows remote attackers to inject arbitrary web script or HTML via the mkey parameter. CWE-79
Cross-site Scripting
CVE-2013-7182 2024-11-21 11:00 2014-02-4 Show GitHub Exploit DB Packet Storm