Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 23, 2026, 4 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
224491 4 警告 Apache Software Foundation - Apache Subversion の mod_dav_svn Apache HTTPD サーバモジュールにおけるサービス運用妨害 (DoS) の脆弱性 CWE-119
バッファエラー
CVE-2013-4131 2013-08-2 15:41 2013-07-25 Show GitHub Exploit DB Packet Storm
224492 10 危険 Eva LibRary - Ultra Mini HTTPD におけるスタックベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー
CVE-2013-5019 2013-08-2 15:26 2013-07-11 Show GitHub Exploit DB Packet Storm
224493 4.3 警告 シマンテック - Symantec Encryption Management Server におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2013-4674 2013-08-2 15:20 2013-07-22 Show GitHub Exploit DB Packet Storm
224494 4 警告 Fedora Project
レッドハット
- Red Hat Directory Server および 389 Directory Server における重要な情報を取得される脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2013-2219 2013-08-2 15:14 2013-07-30 Show GitHub Exploit DB Packet Storm
224495 4.3 警告 Beanbag - Review Board の htdocs/media/rb/js/reviews.js におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2013-2209 2013-08-2 15:06 2013-06-22 Show GitHub Exploit DB Packet Storm
224496 6 警告 The Foreman
レッドハット
- Foreman の Bookmarks コントローラの create メソッドにおける任意のコードを実行される脆弱性 CWE-94
コード・インジェクション
CVE-2013-2121 2013-08-2 14:11 2013-06-7 Show GitHub Exploit DB Packet Storm
224497 6 警告 The Foreman
レッドハット
- Foreman の app/controllers/users_controller.rb の create メソッドにおける権限を取得される脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2013-2113 2013-08-2 14:06 2013-06-7 Show GitHub Exploit DB Packet Storm
224498 7.1 危険 Novell
CollabNet, Inc.
Apache Software Foundation
- Apache Subversion における任意のコマンドを実行される脆弱性 CWE-20
不適切な入力確認
CVE-2013-2088 2013-08-1 18:01 2013-07-4 Show GitHub Exploit DB Packet Storm
224499 4.3 警告 Western Digital Corporation - 複数の Western Digital My Net ルータ製品のファームウェアにおける平文の管理パスワードを破られる脆弱性 CWE-255
証明書・パスワード管理
CVE-2013-5006 2013-08-1 17:36 2013-07-18 Show GitHub Exploit DB Packet Storm
224500 7.5 危険 Google - Google Chrome におけるサービス運用妨害 (DoS) の脆弱性 CWE-noinfo
情報不足
CVE-2013-2886 2013-08-1 16:33 2013-07-30 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 23, 2026, 4:08 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
314911 - - - A Cross-Site Request Forgery (CSRF) in the component admin_modify_room.php of Hotel Management System commit 91caab8 allows attackers to escalate privileges. - CVE-2024-42557 2024-09-7 02:35 2024-08-20 Show GitHub Exploit DB Packet Storm
314912 7.5 HIGH
Network
rust-bitcoin miniscript The Miniscript (aka rust-miniscript) library before 12.2.0 for Rust allows stack consumption because it does not properly track tree depth. CWE-787
 Out-of-bounds Write
CVE-2024-44073 2024-09-7 02:35 2024-08-19 Show GitHub Exploit DB Packet Storm
314913 - - - The News Element Elementor Blog Magazine WordPress plugin before 1.0.6 is vulnerable to Local File Inclusion via the template parameter. This makes it possible for unauthenticated attacker to include… - CVE-2024-6459 2024-09-7 02:35 2024-08-17 Show GitHub Exploit DB Packet Storm
314914 9.8 CRITICAL
Network
totolink lr350_firmware Incorrect access control in TOTOLINK LR350 V9.3.5u.6369_B20220309 allows attackers to obtain the apmib configuration file, which contains the username and the password, via a crafted request to /cgi-… NVD-CWE-noinfo
CVE-2024-42967 2024-09-7 02:35 2024-08-16 Show GitHub Exploit DB Packet Storm
314915 9.8 CRITICAL
Network
tenda fh1201_firmware An issue in the handler function in /goform/telnet of Tenda FH1201 v1.2.0.14 (408) allows attackers to execute arbitrary commands via a crafted HTTP request. NVD-CWE-noinfo
CVE-2024-42947 2024-09-7 02:35 2024-08-16 Show GitHub Exploit DB Packet Storm
314916 7.8 HIGH
Local
cysoft168 super_easy_enterprise_management_system SQL Injection vulnerability in Super easy enterprise management system v.1.0.0 and before allows a local attacker to execute arbitrary code via a crafted script to the/ajax/Login.ashx component. CWE-89
SQL Injection
CVE-2024-42679 2024-09-7 02:35 2024-08-15 Show GitHub Exploit DB Packet Storm
314917 4.8 MEDIUM
Network
micro.company collect.chat The Chatbot for WordPress by Collect.chat ?? WordPress plugin before 2.4.4 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Cross-Sit… CWE-79
Cross-site Scripting
CVE-2024-6498 2024-09-7 02:35 2024-08-5 Show GitHub Exploit DB Packet Storm
314918 8.6 HIGH
Network
rocket.chat rocket.chat A Server-Side Request Forgery (SSRF) affects Rocket.Chat's Twilio webhook endpoint before version 6.10.1. CWE-918
Server-Side Request Forgery (SSRF) 
CVE-2024-39713 2024-09-7 02:35 2024-08-5 Show GitHub Exploit DB Packet Storm
314919 - - - The UsersWP WordPress plugin before 1.2.12 uses predictable filenames when an admin generates an export, which could allow unauthenticated attackers to download them and retrieve sensitive informati… - CVE-2024-6477 2024-09-7 02:35 2024-08-3 Show GitHub Exploit DB Packet Storm
314920 7.2 HIGH
Network
teamt5 threatsonar_anti-ransomware ThreatSonar Anti-Ransomware from TeamT5 does not properly validate the content of uploaded files. Remote attackers with administrator privileges on the product platform can upload malicious files, w… CWE-434
 Unrestricted Upload of File with Dangerous Type 
CVE-2024-7694 2024-09-7 02:24 2024-08-12 Show GitHub Exploit DB Packet Storm