Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 31, 2026, 6 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
224161 6.8 警告 アップル - Apple iTunes などの製品で使用される WebKit における任意のコードを実行される脆弱性 CWE-399
リソース管理の問題
CVE-2013-1011 2013-10-11 20:08 2013-05-16 Show GitHub Exploit DB Packet Storm
224162 6.8 警告 アドビシステムズ - Windows 上で稼働する Adobe Reader および Acrobat における javascript: URL 内の任意の JavaScript コードを実行される脆弱性 CWE-94
コード・インジェクション
CVE-2013-5325 2013-10-11 19:34 2013-10-8 Show GitHub Exploit DB Packet Storm
224163 3.5 注意 WordPress.org - WordPress のデフォルト設定におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2013-5739 2013-10-11 19:29 2013-09-11 Show GitHub Exploit DB Packet Storm
224164 4.3 警告 WordPress.org - WordPress の wp-includes/functions.php におけるクロスサイトスクリプティングの脆弱性 CWE-20
不適切な入力確認
CVE-2013-5738 2013-10-11 19:28 2013-09-10 Show GitHub Exploit DB Packet Storm
224165 5.7 警告 シスコシステムズ - Cisco IOS および IOS XE の OSPF 機能におけるサービス運用妨害 (DoS) の脆弱性 CWE-20
不適切な入力確認
CVE-2013-5527 2013-10-11 19:26 2013-10-10 Show GitHub Exploit DB Packet Storm
224166 7.1 危険 シスコシステムズ - Cisco 9900 Fourth-Generation IP Phone におけるサービス運用妨害 (DoS) の脆弱性 CWE-20
不適切な入力確認
CVE-2013-5526 2013-10-11 19:24 2013-10-10 Show GitHub Exploit DB Packet Storm
224167 7.5 危険 Moodle - Moodle の badges/external.php における PHP オブジェクトインジェクション攻撃を実行される脆弱性 CWE-94
コード・インジェクション
CVE-2013-5674 2013-10-11 19:23 2013-09-16 Show GitHub Exploit DB Packet Storm
224168 6.5 警告 シスコシステムズ - Cisco Identity Services Engine の Web フレームワークにおける SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2013-5525 2013-10-11 19:22 2013-10-9 Show GitHub Exploit DB Packet Storm
224169 4.7 警告 FreeBSD - FreeBSD のカーネルの sys/kern/uipc_syscalls.c における重要な情報を取得される脆弱性 CWE-200
情報漏えい
CVE-2013-5666 2013-10-11 19:18 2013-09-10 Show GitHub Exploit DB Packet Storm
224170 4.3 警告 日本ナショナルインスツルメンツ - National Instruments LabWindows/CVI の Help サブシステムにおける脆弱性 CWE-noinfo
情報不足
CVE-2013-5025 2013-10-11 19:16 2013-03-22 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 31, 2026, 4:16 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
349721 - firefly_studios stronghold_2 Firefly Studios Stronghold 2 1.2 and earlier allows remote attackers to cause a denial of service (crash) via a packet with a large size value for the nickname, which causes a memory allocation failu… NVD-CWE-Other
CVE-2005-1808 2016-10-18 12:22 2005-05-30 Show GitHub Exploit DB Packet Storm
349722 - wordpress wordpress SQL injection vulnerability in template-functions-category.php in WordPress 1.5.1 allows remote attackers to execute arbitrary SQL commands via the $cat_ID variable, as demonstrated using the cat par… NVD-CWE-Other
CVE-2005-1810 2016-10-18 12:22 2005-06-1 Show GitHub Exploit DB Packet Storm
349723 - newmad_technologies picowebserver Stack-based buffer overflow in PicoWebServer 1.0 allows remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via a long URL. NVD-CWE-Other
CVE-2005-1814 2016-10-18 12:22 2005-06-1 Show GitHub Exploit DB Packet Storm
349724 - powerscripts.org powerdownload PHP remote file inclusion vulnerability in pdl_header.inc.php in PowerDownload 3.0.2 and 3.0.3 allows remote attackers to execute arbitrary PHP code via the incdir parameter to downloads.php. NVD-CWE-Other
CVE-2005-1821 2016-10-18 12:22 2005-06-1 Show GitHub Exploit DB Packet Storm
349725 - compuware softice_driverstudio The DbgMsg.sys driver in Compuware SoftICE DriverStudio 3.1 and 3.2 allows remote attackers to cause a denial of service (application crash) via an invalid Debug Message pointer. NVD-CWE-Other
CVE-2005-1830 2016-10-18 12:22 2005-05-29 Show GitHub Exploit DB Packet Storm
349726 - mybulletinboard mybulletinboard Multiple cross-site scripting (XSS) vulnerabilities in MyBulletinBoard (MyBB) 1.00 RC4 and earlier allow remote attackers to execute arbitrary web script or HTML via the (1) forums, (2) version, or (… NVD-CWE-Other
CVE-2005-1832 2016-10-18 12:22 2005-05-31 Show GitHub Exploit DB Packet Storm
349727 - mybulletinboard mybulletinboard Multiple SQL injection vulnerabilities in MyBulletinBoard (MyBB) 1.00 RC4 allow remote attackers to execute arbitrary SQL commands via the (1) eid parameter to calendar.php, (2) idsql parameter to on… NVD-CWE-Other
CVE-2005-1833 2016-10-18 12:22 2005-05-31 Show GitHub Exploit DB Packet Storm
349728 - nextweb nextweb_\(i\)site SQL injection vulnerability in login.asp in NEXTWEB (i)Site allows remote attackers to execute arbitrary SQL commands and bypass authentication via the password field. NVD-CWE-Other
CVE-2005-1834 2016-10-18 12:22 2005-06-1 Show GitHub Exploit DB Packet Storm
349729 - nextweb nextweb_\(i\)site NEXTWEB (i)Site allows remote attackers to cause a denial of service (error 500) via a crafted HTTP request, possibly involving wildcard requests for .jsp files. NVD-CWE-Other
CVE-2005-1836 2016-10-18 12:22 2005-06-1 Show GitHub Exploit DB Packet Storm
349730 - fortinet fortinet_firewall Fortinet firewall running FortiOS 2.x contains a hardcoded username with the password set to the serial number, which allows local users with console access to gain privileges. NVD-CWE-Other
CVE-2005-1837 2016-10-18 12:22 2005-06-1 Show GitHub Exploit DB Packet Storm