Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 30, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
226091	4.7	警告	Linux レッドハット	-	Linux Kernel の fs/ext4/namei.c におけるサービス運用妨害 (DoS) の脆弱性	CWE-399 リソース管理の問題	CVE-2013-2015	2013-04-30 18:36	2013-01-17	Show	GitHub Exploit DB Packet Storm

226092	6.9	警告	Blue Marble Geographics	-	Global Mapper における権限を取得される脆弱性	CWE-Other その他	CVE-2013-0727	2013-04-30 18:25	2013-04-26	Show	GitHub Exploit DB Packet Storm

226093	7.2	危険	ヒューレット・パッカード	-	HP Storage Data Protector における権限を取得される脆弱性	CWE-noinfo 情報不足	CVE-2012-5220	2013-04-30 18:24	2013-04-24	Show	GitHub Exploit DB Packet Storm

226094	4	警告	The phpMyAdmin Project	-	phpMyAdmin の export.php における値を挿入される脆弱性	CWE-noinfo 情報不足	CVE-2013-3241	2013-04-30 18:23	2013-04-24	Show	GitHub Exploit DB Packet Storm

226095	6.5	警告	The phpMyAdmin Project	-	phpMyAdmin のエクスポート機能におけるディレクトリトラバーサルの脆弱性	CWE-22 パス・トラバーサル	CVE-2013-3240	2013-04-30 18:21	2013-04-24	Show	GitHub Exploit DB Packet Storm

226096	6.8	警告	Crunchify	-	WordPress 用 FourSquare Checkins プラグインにおけるクロスサイトリクエストフォージェリの脆弱性	CWE-352 同一生成元ポリシー違反	CVE-2013-2709	2013-04-30 17:54	2013-04-22	Show	GitHub Exploit DB Packet Storm

226097	6.8	警告	Crunchify	-	WordPress 用 All in One Webmaster プラグインにおけるクロスサイトリクエストフォージェリの脆弱性	CWE-352 同一生成元ポリシー違反	CVE-2013-2696	2013-04-30 17:52	2013-04-22	Show	GitHub Exploit DB Packet Storm

226098	5	警告	Blink Web Effects	-	WordPress 用 Social Media Widget プラグインにおける任意のファイルのアップロードを強制される脆弱性	CWE-noinfo 情報不足	CVE-2013-1949	2013-04-30 17:51	2013-04-9	Show	GitHub Exploit DB Packet Storm

226099	10	危険	Rob Westgeest	-	Ruby 用 md2pdf gem の converter.rb における任意のコマンドを実行される脆弱性	CWE-noinfo 情報不足	CVE-2013-1948	2013-04-30 17:51	2013-04-10	Show	GitHub Exploit DB Packet Storm

226100	9.3	危険	Kelly D. Redding	-	Ruby 用 kelredd-pruview gem における任意のコマンドを実行される脆弱性	CWE-78 OSコマンド・インジェクション	CVE-2013-1947	2013-04-30 17:50	2013-04-4	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 30, 2026, 4:16 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
222761	6.5	MEDIUM Network	djangoproject debian canonical fedoraproject	django debian_linux ubuntu_linux fedora	In Django 1.11.x before 1.11.18, 2.0.x before 2.0.10, and 2.1.x before 2.1.5, an Improper Neutralization of Special Elements in Output Used by a Downstream Component issue exists in django.views.defa…	CWE-74 Injection	CVE-2019-3498	2024-11-21 13:42	2019-01-10	Show	GitHub Exploit DB Packet Storm

222762	7.5	HIGH Network	mcafee	mcafee_web_gateway	Improper input validation in the proxy component of McAfee Web Gateway 7.8.2.0 and later allows remote attackers to cause a denial of service via a crafted HTTP request parameter.	CWE-20 Improper Input Validation	CVE-2019-3581	2024-11-21 13:42	2019-01-9	Show	GitHub Exploit DB Packet Storm

222763	10.0	CRITICAL Network	zohocorp	manageengine_adselfservice_plus	Zoho ManageEngine ADSelfService Plus 5.x before build 5703 has SSRF.	CWE-918 Server-Side Request Forgery (SSRF)	CVE-2019-3905	2024-11-21 13:42	2019-01-4	Show	GitHub Exploit DB Packet Storm

222764	7.8	HIGH Local	sqla_yaml_fixtures_project	sqla_yaml_fixtures	Sqla_yaml_fixtures 0.9.1 allows local users to execute arbitrary python code via the fixture_text argument in sqla_yaml_fixtures.load.	CWE-94 Code Injection	CVE-2019-3575	2024-11-21 13:42	2019-01-4	Show	GitHub Exploit DB Packet Storm

222765	4.4	MEDIUM Local	linux debian canonical	linux_kernel debian_linux ubuntu_linux	An issue was discovered in can_can_gw_rcv in net/can/gw.c in the Linux kernel through 4.19.13. The CAN frame modification rules allow bitwise logical operations that can be also applied to the can_dl…	CWE-787 Out-of-bounds Write	CVE-2019-3701	2024-11-21 13:42	2019-01-4	Show	GitHub Exploit DB Packet Storm

222766	7.5	HIGH Network	openrefine	openrefine	OpenRefine through 3.1 allows arbitrary file write because Directory Traversal can occur during the import of a crafted project file.	CWE-22 Path Traversal	CVE-2019-3580	2024-11-21 13:42	2019-01-3	Show	GitHub Exploit DB Packet Storm

222767	9.8	CRITICAL Network	bijiadao	waimai_super_cms	An issue was discovered in Waimai Super Cms 20150505. web/Lib/Action/ProductAction.class.php allows blind SQL Injection via the id[0] parameter to the /product URI.	CWE-89 SQL Injection	CVE-2019-3577	2024-11-21 13:42	2019-01-3	Show	GitHub Exploit DB Packet Storm

222768	9.8	CRITICAL Network	inxedu_project	inxedu	inxedu through 2018-12-24 has a SQL Injection vulnerability that can lead to information disclosure via the deleteFaveorite/ PATH_INFO. The vulnerable code location is com.inxedu.os.edu.controller.us…	CWE-89 SQL Injection	CVE-2019-3576	2024-11-21 13:42	2019-01-3	Show	GitHub Exploit DB Packet Storm

222769	6.5	MEDIUM Network	libming	libming	An issue was discovered in libming 0.4.8. There is a heap-based buffer over-read in the function writePNG in the file util/dbl2png.c of the dbl2png command-line program. Because this is associated wi…	CWE-125 CWE-787 Out-of-bounds Read Out-of-bounds Write	CVE-2019-3572	2024-11-21 13:42	2019-01-3	Show	GitHub Exploit DB Packet Storm

222770	4.8	MEDIUM Network	ougc_awards_project	ougc_awards	The OUGC Awards plugin before 1.8.19 for MyBB allows XSS via a crafted award reason that is mishandled on the awards page or in a user profile.	CWE-79 Cross-site Scripting	CVE-2019-3501	2024-11-21 13:42	2019-01-2	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed