Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 6, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
251951 9.3 危険 アップル
レッドハット		 - Apple Safari の WebKit における任意のコードを実行される脆弱性 CWE-20
不適切な入力確認 		CVE-2010-1807 2011-02-4 14:33 2010-09-7 Show GitHub Exploit DB Packet Storm
251952 9.3 危険 アップル
レッドハット		 - iPhone および iPod touch 上で稼動する Apple iOS の WebKit における任意のコードを実行される脆弱性 CWE-399
リソース管理の問題 		CVE-2010-1815 2011-02-4 14:32 2010-09-8 Show GitHub Exploit DB Packet Storm
251953 9.3 危険 アップル
レッドハット		 - iPhone および iPod touch 上で稼動する Apple iOS の WebKit における任意のコードを実行される脆弱性 CWE-119
バッファエラー 		CVE-2010-1814 2011-02-4 14:30 2010-09-8 Show GitHub Exploit DB Packet Storm
251954 9.3 危険 アップル
レッドハット		 - iPhone および iPod touch 上で稼動する Apple iOS の WebKit における任意のコードを実行される脆弱性 CWE-399
リソース管理の問題 		CVE-2010-1812 2011-02-4 14:29 2010-09-8 Show GitHub Exploit DB Packet Storm
251955 9.3 危険 アップル
Google
レッドハット		 - Apple Safari の WebKit における任意のコードを実行される脆弱性 CWE-399
リソース管理の問題 		CVE-2010-1780 2011-02-4 14:28 2010-07-30 Show GitHub Exploit DB Packet Storm
251956 5.8 警告 アップル
レッドハット		 - Apple Safari の WebKit における DNS 先読み設定を回避される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2010-3813 2011-02-4 14:26 2010-11-22 Show GitHub Exploit DB Packet Storm
251957 9.3 危険 アップル
レッドハット		 - Apple Safari の WebKit における整数オーバーフローの脆弱性 CWE-189
数値処理の問題 		CVE-2010-3812 2011-02-4 14:25 2010-11-22 Show GitHub Exploit DB Packet Storm
251958 7.5 危険 Objectivity - Objectivity/DB 管理用ツールに認証不備の問題 CWE-287
不適切な認証 		CVE-2011-0489 2011-02-4 14:16 2011-01-14 Show GitHub Exploit DB Packet Storm
251959 6.8 警告 ICQ - ICQ 7のアップデートに検証不備の問題 CWE-94
コード・インジェクション 		CVE-2011-0487 2011-02-4 14:14 2011-01-14 Show GitHub Exploit DB Packet Storm
251960 - - Google - Google Chrome における複数の脆弱性 - - 2011-02-4 14:11 2011-01-14 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 6, 2026, 4:08 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
283591 - jforum jforum Cross-site request forgery (CSRF) vulnerability in admBase/login.page in the Admin module in JForum allows remote attackers to hijack the authentication of administrators for requests that change the… CWE-352
 Origin Validation Error 		CVE-2013-7209 2024-11-21 11:00 2013-12-31 Show GitHub Exploit DB Packet Storm
283592 - wordpress wordpress Cross-site request forgery (CSRF) vulnerability in the retrospam component in wp-admin/options-discussion.php in WordPress 2.0.11 and earlier allows remote attackers to hijack the authentication of a… CWE-352
 Origin Validation Error 		CVE-2013-7233 2024-11-21 11:00 2013-12-30 Show GitHub Exploit DB Packet Storm
283593 - esri arcgis_server SQL injection vulnerability in ESRI ArcGIS for Server through 10.2 allows remote attackers to execute arbitrary SQL commands via unspecified input to the map or feature service. CWE-89
SQL Injection 		CVE-2013-7232 2024-11-21 11:00 2013-12-30 Show GitHub Exploit DB Packet Storm
283594 - esri arcgis_server Cross-site scripting (XSS) vulnerability in the Mobile Content Server in ESRI ArcGIS for Server 10.1 and 10.2 allows remote authenticated users to inject arbitrary web script or HTML via unspecified … CWE-79
Cross-site Scripting 		CVE-2013-7231 2024-11-21 11:00 2013-12-30 Show GitHub Exploit DB Packet Storm
283595 - openx
revive-adserver 		openx
revive_adserver 		SQL injection vulnerability in www/delivery/axmlrpc.php (aka the XML-RPC delivery invocation script) in Revive Adserver before 3.0.2, and OpenX Source 2.8.11 and earlier, allows remote attackers to e… CWE-89
SQL Injection 		CVE-2013-7149 2024-11-21 11:00 2013-12-28 Show GitHub Exploit DB Packet Storm
283596 - cisco ios_xe Cisco IOS XE 3.7S(.1) and earlier allows remote attackers to cause a denial of service (Packet Processor crash) via fragmented MPLS IP packets, aka Bug ID CSCul00709. CWE-20
 Improper Input Validation  		CVE-2013-6981 2024-11-21 11:00 2013-12-28 Show GitHub Exploit DB Packet Storm
283597 - zimbra collaboration_server Unspecified vulnerability in Zimbra Collaboration Server 7.2.5 and earlier, and 8.0.x through 8.0.5, has "critical" impact and unspecified vectors, a different vulnerability than CVE-2013-7091. NVD-CWE-noinfo
CVE-2013-7217 2024-11-21 11:00 2013-12-27 Show GitHub Exploit DB Packet Storm
283598 - etoshop classifieds_creator Multiple SQL injection vulnerabilities in Classifieds Creator 2.0 allow remote attackers to execute arbitrary SQL commands via the (1) ID parameter to demo/classifieds/product.asp, or (2) UserID or (… CWE-89
SQL Injection 		CVE-2013-7216 2024-11-21 11:00 2013-12-25 Show GitHub Exploit DB Packet Storm
283599 - optimizepress optimizepress Multiple unrestricted file upload vulnerabilities in (1) media-upload.php, (2) media-upload-lncthumb.php, and (3) media-upload-sq_button.php in lib/admin/ in the OptimizePress theme before 1.61 for W… CWE-20
 Improper Input Validation  		CVE-2013-7102 2024-11-21 11:00 2013-12-24 Show GitHub Exploit DB Packet Storm
283600 - typo3 typo3 The (old) Form Content Element component in TYPO3 4.5.0 through 4.5.31, 4.7.0 through 4.7.16, 6.0.0 through 6.0.11, and 6.1.0 through 6.1.6 allows remote authenticated editors to generate arbitrary H… CWE-264
Permissions, Privileges, and Access Controls 		CVE-2013-7081 2024-11-21 11:00 2013-12-24 Show GitHub Exploit DB Packet Storm