Vulnerability Search Top

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

Vulnerability Information Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 30, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
224251	4.6	警告	Canonical Marc Deslauriers	-	software-properties の dbus/SoftwarePropertiesDBus.py におけるアクセス制限を回避される脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2013-1061	2013-10-7 19:20	2013-09-18	Show	GitHub Exploit DB Packet Storm

224252	4.3	警告	Gumball	-	WordPress 用 Comment Attachment プラグインにおけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2013-6010	2013-10-7 19:08	2013-09-20	Show	GitHub Exploit DB Packet Storm

224253	4.3	警告	Open-Xchange	-	Open-Xchange AppSuite における CRLF インジェクションの脆弱性	CWE-94 コード・インジェクション	CVE-2013-6009	2013-10-7 18:54	2013-09-30	Show	GitHub Exploit DB Packet Storm

224254	3.5	注意	Open-Xchange	-	Open-Xchange AppSuite におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2013-5690	2013-10-7 18:53	2013-09-30	Show	GitHub Exploit DB Packet Storm

224255	9	危険	エニア株式会社エマソン	-	複数の Emerson Process Management RTU 製品のソフトウェアにおけるシェルアクセス権を取得される脆弱性	CWE-255 証明書・パスワード管理	CVE-2013-0694	2013-10-7 15:44	2013-09-26	Show	GitHub Exploit DB Packet Storm

224256	10	危険	エニア株式会社エマソン	-	複数の Emerson Process Management RTU 製品上で稼働する ENEA OSE における重要な情報を取得される脆弱性	CWE-200 情報漏えい	CVE-2013-0693	2013-10-7 15:44	2013-09-26	Show	GitHub Exploit DB Packet Storm

224257	10	危険	エニア株式会社エマソン	-	複数の Emerson Process Management RTU 製品上で稼働する ENEA OSE における任意のコードを実行される脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2013-0692	2013-10-7 15:41	2013-09-26	Show	GitHub Exploit DB Packet Storm

224258	10	危険	エニア株式会社エマソン	-	複数の Emerson Process Management RTU 製品のソフトウェアにおけるファイルをアップロードされる脆弱性	CWE-94 コード・インジェクション	CVE-2013-0689	2013-10-7 15:40	2013-09-26	Show	GitHub Exploit DB Packet Storm

224259	10	危険	シーメンス	-	Siemens SCALANCE X-200 および X-200IRT スイッチのファームウェアにおける管理者アクションを実行される脆弱性	CWE-287 不適切な認証	CVE-2013-5944	2013-10-7 15:02	2013-10-1	Show	GitHub Exploit DB Packet Storm

224260	7.8	危険	baramundi software AG	-	Baramundi Management Suite の不特定の DLL ファイルにおける暗号保護メカニズムを破られる脆弱性	CWE-255 証明書・パスワード管理	CVE-2013-3625	2013-10-7 14:37	2013-10-1	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 30, 2026, 4:16 a.m.

No	CVSS	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
354461	-	francisco_burzi	php-nuke	Canonicalize-before-filter error in the send_review function in the Reviews module for PHP-Nuke 6.0 to 7.3 allows remote attackers to inject arbitrary web script or HTML via hex-encoded XSS sequences…	NVD-CWE-Other	CVE-2004-2294	2008-09-6 05:43	2004-12-31	Show	GitHub Exploit DB Packet Storm

354462	-	novell	internet_messaging_system netmail	Novell Internet Messaging System (NIMS) 2.6 and 3.0, and NetMail 3.1 and 3.5, is installed with a default NMAP authentication credential, which allows remote attackers to read and write mail store da…	NVD-CWE-Other	CVE-2004-2298	2008-09-6 05:43	2004-12-31	Show	GitHub Exploit DB Packet Storm

354463	-	mbedthis_software	mbedthis_appweb_http_server	Information leak in Mbedthis AppWeb HTTP server 1.0 through 1.1.2 allows remote attackers to obtain sensitive information via a user message that is generated when Mbedthis denies access.	NVD-CWE-Other	CVE-2004-2317	2008-09-6 05:43	2004-12-31	Show	GitHub Exploit DB Packet Storm

354464	-	openbsd	openbsd	OpenBSD 3.3 and 3.4 does not properly parse Accept and Deny rules without netmasks on big-endian 64-bit platforms such as SPARC64, which may allow remote attackers to bypass access restrictions.	NVD-CWE-Other	CVE-2004-2338	2008-09-6 05:43	2004-12-31	Show	GitHub Exploit DB Packet Storm

354465	-	symantec	enterprise_firewall gateway_security	The DNS proxy (DNSd) for multiple Symantec Gateway Security products allows remote attackers to poison the DNS cache via a malicious DNS server query response that contains authoritative or additiona…	NVD-CWE-Other	CVE-2004-1754	2008-09-6 05:42	2004-06-15	Show	GitHub Exploit DB Packet Storm

354466	-	skype_technologies	skype	A "range check error" in Skype for Windows before 0.98.0.28 allows local and remote attackers to cause a denial of service (application crash) via long command line arguments or a long callto:// URL,…	CWE-20 Improper Input Validation	CVE-2004-1777	2008-09-6 05:42	2004-12-31	Show	GitHub Exploit DB Packet Storm

354467	-	info_touch	surfnet	Info Touch Surfnet kiosk allows local users to deposit extra time into Internet kiosk accounts via repeated authentication attempts.	NVD-CWE-Other	CVE-2004-1780	2008-09-6 05:42	2004-12-31	Show	GitHub Exploit DB Packet Storm

354468	-	info_touch	surfnet	Info Touch Surfnet kiosk allows local users to crash Surfnet and access the underlying operating system via the CMD_CREDITCARD_CHARGE command.	NVD-CWE-Other	CVE-2004-1781	2008-09-6 05:42	2004-12-31	Show	GitHub Exploit DB Packet Storm

354469	-	-	-	Directory traversal vulnerability in Net2Soft Flash FTP Server 1.0 allows remote attackers to read and create arbitrary files via a /.. (slash dot dot).	NVD-CWE-Other	CVE-2004-1783	2008-09-6 05:42	2004-12-31	Show	GitHub Exploit DB Packet Storm

354470	-	invision_power_services	invision_board	SQL injection vulnerability in calendar.php for Invision Power Board 1.3 allows remote attackers to execute arbitrary SQL commands via the m parameter, which sets the $this->chosen_month variable.	NVD-CWE-Other	CVE-2004-1785	2008-09-6 05:42	2004-01-3	Show	GitHub Exploit DB Packet Storm