Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 4, 2026, 12:01 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
201281 3.7 低
Network 		IBM - IBM Connections における重要な平文情報を取得される脆弱性 CWE-310
暗号の問題 		CVE-2016-2953 2016-12-1 16:48 2016-09-30 Show GitHub Exploit DB Packet Storm
201282 5.3 警告
Network 		IBM - IBM Sterling B2B Integrator におけるクロスサイトスクリプティングの脆弱性 CWE-255
証明書・パスワード管理 		CVE-2016-5890 2016-12-1 16:33 2016-09-8 Show GitHub Exploit DB Packet Storm
201283 6.1 警告
Network 		IBM - IBM Sterling B2B Integrator におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2016-3057 2016-12-1 16:33 2016-09-8 Show GitHub Exploit DB Packet Storm
201284 5.3 警告
Network 		IBM - IBM Maximo Asset Management における重要な情報を取得される脆弱性 CWE-20
不適切な入力確認 		CVE-2016-5987 2016-12-1 16:32 2016-10-10 Show GitHub Exploit DB Packet Storm
201285 5.4 警告
Network 		IBM - IBM Maximo Asset Management におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2016-5905 2016-12-1 16:32 2016-09-29 Show GitHub Exploit DB Packet Storm
201286 7.5 重要
Network 		Boa - Boa Webserver の send_redirect() におけるバッファオーバーフローの脆弱性 CWE-20
不適切な入力確認 		CVE-2016-9564 2016-12-1 14:29 2016-11-28 Show GitHub Exploit DB Packet Storm
201287 9.8 緊急
Network 		Exponent CMS project - Exponent CMS の framework/modules/core/controllers/expCommentController.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2016-9481 2016-12-1 14:18 2016-11-29 Show GitHub Exploit DB Packet Storm
201288 6.5 警告
Network 		マイクロフォーカス株式会社 - 複数の Micro Focus 製品の管理サーバにおける任意のファイルを読まれる脆弱性 CWE-200
CWE-22
CVE-2016-5765 2016-12-1 14:03 2016-11-28 Show GitHub Exploit DB Packet Storm
201289 6.5 警告
Network 		Drupal - Drupal の transliterate メカニズムにおけるサービス運用妨害 (DoS) の脆弱性 CWE-20
不適切な入力確認 		CVE-2016-9452 2016-12-1 11:47 2016-11-16 Show GitHub Exploit DB Packet Storm
201290 6.8 警告
Network 		Drupal - Drupal の確認フォームにおけるオープンリダイレクトの脆弱性 CWE-Other
その他 		CVE-2016-9451 2016-12-1 11:47 2016-11-16 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 4, 2026, 4:17 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
291011 - testa online_test_management_system SQL injection vulnerability in Testa Online Test Management System (OTMS) 2.0.0.2 allows remote attackers to execute arbitrary SQL commands via the test_id parameter. CWE-89
SQL Injection 		CVE-2013-6873 2024-11-21 10:59 2013-11-27 Show GitHub Exploit DB Packet Storm
291012 - splunk splunk Cross-site scripting (XSS) vulnerability in Splunk Web in Splunk before 5.0.6 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. CWE-79
Cross-site Scripting 		CVE-2013-6870 2024-11-21 10:59 2013-11-26 Show GitHub Exploit DB Packet Storm
291013 - jenkins-ci build_failure_analyzer Cross-site scripting (XSS) vulnerability in the Build Failure Analyzer plugin before 1.5.1 for Jenkins allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors. CWE-79
Cross-site Scripting 		CVE-2013-6374 2024-11-21 10:59 2013-11-26 Show GitHub Exploit DB Packet Storm
291014 - jenkins-ci exclusion The Exclusion plugin before 0.9 for Jenkins does not properly prevent access to resource locks, which allows remote authenticated users to list and release resources via unspecified vectors. CWE-264
Permissions, Privileges, and Access Controls 		CVE-2013-6373 2024-11-21 10:59 2013-11-26 Show GitHub Exploit DB Packet Storm
291015 - sap netweaver SQL injection vulnerability in the SRTT_GET_COUNT_BEFORE_KEY_RFC function in SAP NetWeaver 7.30 allows remote attackers to execute arbitrary SQL commands via unspecified vectors. CWE-89
SQL Injection 		CVE-2013-6869 2024-11-21 10:59 2013-11-24 Show GitHub Exploit DB Packet Storm
291016 - sybase adaptive_server_enterprise SAP Sybase Adaptive Server Enterprise (ASE) 15.0.3 before 15.0.3 ESD#4.3, 15.5 before 15.5 ESD#5.3, and 15.7 before 15.7 SP50 or 15.7 SP100 allows local users to obtain sensitive information via unsp… CWE-200
Information Exposure 		CVE-2013-6868 2024-11-21 10:59 2013-11-24 Show GitHub Exploit DB Packet Storm
291017 - sybase adaptive_server_enterprise Unspecified vulnerability in SAP Sybase Adaptive Server Enterprise (ASE) 15.7 before 15.7 SP50 or 15.7 SP100 allows remote attackers to cause a denial of service via unspecified vectors. NVD-CWE-noinfo
CVE-2013-6867 2024-11-21 10:59 2013-11-24 Show GitHub Exploit DB Packet Storm
291018 - sybase adaptive_server_enterprise SAP Sybase Adaptive Server Enterprise (ASE) before 15.0.3 ESD#4.3, 15.5 before 15.5 ESD#5.3, and 15.7 before 15.7 SP50 or 15.7 SP100 allows remote authenticated users to execute arbitrary code via un… CWE-94
Code Injection 		CVE-2013-6866 2024-11-21 10:59 2013-11-24 Show GitHub Exploit DB Packet Storm
291019 - sybase adaptive_server_enterprise SAP Sybase Adaptive Server Enterprise (ASE) 15.0.3 before 15.0.3 ESD#4.3, 15.5 before 15.5 ESD#5.3, and 15.7 before 15.7 SP50 or 15.7 SP100 allows remote authenticated users to execute arbitrary code… CWE-94
Code Injection 		CVE-2013-6865 2024-11-21 10:59 2013-11-24 Show GitHub Exploit DB Packet Storm
291020 - sybase adaptive_server_enterprise Directory traversal vulnerability in SAP Sybase Adaptive Server Enterprise (ASE) 15.0.3 before 15.0.3 ESD#4.3, 15.5 before 15.5 ESD#5.3, and 15.7 before 15.7 SP50 or 15.7 SP100 allows remote authenti… CWE-22
Path Traversal 		CVE-2013-6864 2024-11-21 10:59 2013-11-24 Show GitHub Exploit DB Packet Storm