Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 27, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
226101 10 危険 Banckle Chat Project - Drupal 用 Banckle Chat モジュールにおける制限を回避される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2013-0318 2013-04-1 14:17 2013-02-13 Show GitHub Exploit DB Packet Storm
226102 4.3 警告 Joe Haskins - Drupal 用 Manager Change for Organic Groups モジュールにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2013-0317 2013-04-1 14:16 2013-02-12 Show GitHub Exploit DB Packet Storm
226103 5 警告 Drupal - Drupal の Image モジュールにおけるサービス運用妨害 (DoS) の脆弱性 CWE-399
リソース管理の問題 		CVE-2013-0316 2013-04-1 14:15 2013-02-20 Show GitHub Exploit DB Packet Storm
226104 2.1 注意 Elliot Pahl - Drupal 用 Drush Debian Packaging モジュールにおけるデータベースの認証情報を取得される脆弱性 CWE-noinfo
情報不足 		CVE-2013-0260 2013-04-1 14:13 2013-01-30 Show GitHub Exploit DB Packet Storm
226105 2.1 注意 Boxes project - Drupal 用 Boxes モジュールにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2013-0259 2013-04-1 14:11 2013-01-23 Show GitHub Exploit DB Packet Storm
226106 6.8 警告 Attiks - Drupal 用 Google Authenticator login モジュールにおける認証を回避される脆弱性 CWE-287
不適切な認証 		CVE-2013-0258 2013-04-1 14:08 2013-01-29 Show GitHub Exploit DB Packet Storm
226107 5 警告 David Alkire - Drupal 用 email2image モジュールにおけるユーザの電子メール情報のイメージ画像を読まれる脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2013-0257 2013-04-1 14:06 2013-01-30 Show GitHub Exploit DB Packet Storm
226108 5 警告 Bart Feenstra - Drupal 用 Payment モジュールにおける任意の決済情報を読まれる脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2013-0182 2013-04-1 14:03 2013-01-9 Show GitHub Exploit DB Packet Storm
226109 2.6 注意 Thomas Seidl - Drupal 用 Search API モジュールにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2013-0181 2013-04-1 13:46 2013-01-9 Show GitHub Exploit DB Packet Storm
226110 9.3 危険 DELL EMC (旧 EMC Corporation) - EMC Smarts Network Configuration Manager における任意のコードを実行される脆弱性 CWE-287
不適切な認証 		CVE-2013-0935 2013-03-29 16:11 2013-03-28 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 28, 2026, 4:16 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
223611 6.5 MEDIUM
Network 		ezxml_project ezxml An issue was discovered in ezXML 0.8.3 through 0.8.6. The ezxml_parse_* functions mishandle XML entities, leading to an infinite loop in which memory allocations occur. CWE-400
CWE-835
 Uncontrolled Resource Consumption
 Loop with Unreachable Exit Condition ('Infinite Loop') 		CVE-2019-20201 2024-11-21 13:38 2020-01-1 Show GitHub Exploit DB Packet Storm
223612 6.5 MEDIUM
Network 		ezxml_project ezxml An issue was discovered in ezXML 0.8.3 through 0.8.6. The function ezxml_decode, while parsing crafted a XML file, performs incorrect memory handling, leading to a heap-based buffer over-read in the … CWE-125
Out-of-bounds Read 		CVE-2019-20200 2024-11-21 13:38 2020-01-1 Show GitHub Exploit DB Packet Storm
223613 6.5 MEDIUM
Network 		ezxml_project ezxml An issue was discovered in ezXML 0.8.3 through 0.8.6. The function ezxml_decode, while parsing a crafted XML file, performs incorrect memory handling, leading to NULL pointer dereference while runnin… CWE-125
CWE-476
Out-of-bounds Read
 NULL Pointer Dereference 		CVE-2019-20199 2024-11-21 13:38 2020-01-1 Show GitHub Exploit DB Packet Storm
223614 6.5 MEDIUM
Network 		ezxml_project ezxml An issue was discovered in ezXML 0.8.3 through 0.8.6. The function ezxml_ent_ok() mishandles recursion, leading to stack consumption for a crafted XML file. CWE-674
 Uncontrolled Recursion 		CVE-2019-20198 2024-11-21 13:38 2020-01-1 Show GitHub Exploit DB Packet Storm
223615 8.8 HIGH
Network 		nagios nagios_xi In Nagios XI 5.6.9, an authenticated user is able to execute arbitrary OS commands via shell metacharacters in the id parameter to schedulereport.php, in the context of the web-server user account. CWE-78
OS Command  		CVE-2019-20197 2024-11-21 13:38 2020-01-1 Show GitHub Exploit DB Packet Storm
223616 7.5 HIGH
Network 		pureftpd
fedoraproject 		pure-ftpd
fedora 		In Pure-FTPd 1.0.49, a stack exhaustion issue was discovered in the listdir function in ls.c. CWE-400
 Uncontrolled Resource Consumption 		CVE-2019-20176 2024-11-21 13:38 2020-01-1 Show GitHub Exploit DB Packet Storm
223617 7.5 HIGH
Network 		qemu qemu An issue was discovered in ide_dma_cb() in hw/ide/core.c in QEMU 2.4.0 through 4.2.0. The guest system can crash the QEMU process in the host system via a special SCSI_IOCTL_SEND_COMMAND. It hits an … CWE-754
 Improper Check for Unusual or Exceptional Conditions 		CVE-2019-20175 2024-11-21 13:38 2019-12-31 Show GitHub Exploit DB Packet Storm
223618 7.8 HIGH
Local 		serenityos serenityos Kernel/VM/MemoryManager.cpp in SerenityOS before 2019-12-30 does not reject syscalls with pointers into the kernel-only virtual address space, which allows local users to gain privileges by overwriti… CWE-119
Incorrect Access of Indexable Resource ('Range Error')  		CVE-2019-20172 2024-11-21 13:38 2019-12-31 Show GitHub Exploit DB Packet Storm
223619 5.5 MEDIUM
Local 		gpac
debian 		gpac
debian_linux 		An issue was discovered in GPAC version 0.8.0 and 0.9.0-development-20191109. There is an invalid pointer dereference in the function GF_IPMPX_AUTH_Delete() in odf/ipmpx_code.c. CWE-763
 Release of Invalid Pointer or Reference 		CVE-2019-20170 2024-11-21 13:38 2019-12-31 Show GitHub Exploit DB Packet Storm
223620 5.5 MEDIUM
Local 		gpac gpac An issue was discovered in GPAC version 0.8.0 and 0.9.0-development-20191109. There is a use-after-free in the function trak_Read() in isomedia/box_code_base.c. CWE-416
 Use After Free 		CVE-2019-20169 2024-11-21 13:38 2019-12-31 Show GitHub Exploit DB Packet Storm