Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 30, 2026, 6 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
251311 6.8 警告 daniel naber - Daniel Naber LanguageTool の埋め込み Web サーバにおけるクロスサイトスクリプティングの脆弱性 - CVE-2007-1939 2012-06-26 15:46 2007-04-10 Show GitHub Exploit DB Packet Storm
251312 6.8 警告 dreamcodes - Scorp Book の smilies.php における PHP リモートファイルインクルージョンの脆弱性 - CVE-2007-1937 2012-06-26 15:46 2007-04-10 Show GitHub Exploit DB Packet Storm
251313 7.5 危険 dreamcodes - PcP-Book におけるディレクトリトラバーサルの脆弱性 - CVE-2007-1933 2012-06-26 15:46 2007-04-10 Show GitHub Exploit DB Packet Storm
251314 7.8 危険 cattadoc - cattaDoc の download2.php におけるディレクトリトラバーサルの脆弱性 - CVE-2007-1930 2012-06-26 15:46 2007-04-10 Show GitHub Exploit DB Packet Storm
251315 5 警告 gna - Beryo の downloadpic.php におけるディレクトリトラバーサルの脆弱性 - CVE-2007-1929 2012-06-26 15:46 2007-04-10 Show GitHub Exploit DB Packet Storm
251316 7.5 危険 LedgerSMB
dws systems inc.
- LedgerSMB における制限された機能にアクセスされる脆弱性 - CVE-2007-1923 2012-06-26 15:46 2007-04-10 Show GitHub Exploit DB Packet Storm
251317 4.3 警告 arizona-dream - Arizona Dream livor の index.php におけるクロスサイトスクリプティングの脆弱性 - CVE-2007-1919 2012-06-26 15:46 2007-04-10 Show GitHub Exploit DB Packet Storm
251318 6.8 警告 MyBB Group
ecardmax.com
- eCardMAX Hot Editor および HotEditor プラグインの richedit/keyboard.php におけるディレクトリトラバーサルの脆弱性 - CVE-2007-1906 2012-06-26 15:46 2007-04-10 Show GitHub Exploit DB Packet Storm
251319 4.3 警告 AOL - AIM および ICQ におけるディレクトリトラバーサルの脆弱性 - CVE-2007-1904 2012-06-26 15:46 2007-04-10 Show GitHub Exploit DB Packet Storm
251320 9.3 危険 アカマイテクノロジーズ - Akamai Technologies Download Manager ActiveX コントロール (DownloadManagerV2.ocx) におけるスタックベースのバッファオーバーフローの脆弱性 - CVE-2007-1892 2012-06-26 15:46 2007-04-17 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 30, 2026, 4:22 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
301821 - ibm websphere_application_server Cross-site scripting (XSS) vulnerability in the Administrative console in IBM WebSphere Application Server (WAS) 6.1 before 6.1.0.47, 7.0 before 7.0.0.27, 8.0 before 8.0.0.6, and 8.5 before 8.5.0.2 a… CWE-79
Cross-site Scripting
CVE-2013-0459 2024-11-21 10:47 2013-01-28 Show GitHub Exploit DB Packet Storm
301822 - ibm websphere_application_server Cross-site scripting (XSS) vulnerability in the Administrative console in IBM WebSphere Application Server (WAS) 6.1 before 6.1.0.47, 7.0 before 7.0.0.27, 8.0 before 8.0.0.6, and 8.5 before 8.5.0.2, … CWE-79
Cross-site Scripting
CVE-2013-0458 2024-11-21 10:47 2013-01-28 Show GitHub Exploit DB Packet Storm
301823 - sixapart movable_type lib/MT/Upgrade.pm in mt-upgrade.cgi in Movable Type 4.2x and 4.3x through 4.38 does not require authentication for requests to database-migration functions, which allows remote attackers to conduct e… CWE-287
Improper Authentication
CVE-2013-0209 2024-11-21 10:47 2013-01-23 Show GitHub Exploit DB Packet Storm
301824 - siemens simatic_rf-manager
simatic_rf-manager_2008
Buffer overflow in a third-party ActiveX component in Siemens SIMATIC RF-MANAGER 2008, and RF-MANAGER Basic 3.0 and earlier, allows remote attackers to execute arbitrary code via a crafted web site. CWE-119
Incorrect Access of Indexable Resource ('Range Error') 
CVE-2013-0656 2024-11-21 10:47 2013-01-22 Show GitHub Exploit DB Packet Storm
301825 - schneider-electric interactive_graphical_scada_system Stack-based buffer overflow in Schneider Electric Interactive Graphical SCADA System (IGSS) 10 and earlier allows remote attackers to execute arbitrary code by sending TCP port-12397 data that does n… CWE-119
Incorrect Access of Indexable Resource ('Range Error') 
CVE-2013-0657 2024-11-21 10:47 2013-01-22 Show GitHub Exploit DB Packet Storm
301826 - schneider-electric software_update_utility The client in Schneider Electric Software Update (SESU) Utility 1.0.x and 1.1.x does not ensure that updates have a valid origin, which allows man-in-the-middle attackers to spoof updates, and conseq… CWE-20
 Improper Input Validation 
CVE-2013-0655 2024-11-21 10:47 2013-01-22 Show GitHub Exploit DB Packet Storm
301827 - opensuse
oracle
opensuse
vm_virtualbox
virtualization
Unspecified vulnerability in the VirtualBox component in Oracle Virtualization 4.0, 4.1, and 4.2 allows local users to affect integrity and availability via unknown vectors related to Core. NOTE: Th… NVD-CWE-noinfo
CVE-2013-0420 2024-11-21 10:47 2013-01-17 Show GitHub Exploit DB Packet Storm
301828 - microsoft
oracle
exchange_server
fusion_middleware
Unspecified vulnerability in the Oracle Outside In Technology component in Oracle Fusion Middleware 8.3.7 and 8.4 allows context-dependent attackers to affect availability via unknown vectors related… NVD-CWE-noinfo
CVE-2013-0418 2024-11-21 10:47 2013-01-17 Show GitHub Exploit DB Packet Storm
301829 - oracle sun_products_suite Unspecified vulnerability in the Sun Storage Common Array Manager (CAM) component in Oracle Sun Products Suite 6.9.0 allows remote attackers to affect confidentiality, related to Fault Management Sys… NVD-CWE-noinfo
CVE-2013-0417 2024-11-21 10:47 2013-01-17 Show GitHub Exploit DB Packet Storm
301830 - xerox
sun
freeflow_print_server
sunos
Unspecified vulnerability in Oracle Sun Solaris 10 allows local users to affect confidentiality, integrity, and availability via unknown vectors related to the Bind/Postinstall script for Bind packag… NVD-CWE-noinfo
CVE-2013-0415 2024-11-21 10:47 2013-01-17 Show GitHub Exploit DB Packet Storm