Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 2, 2026, 10 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
201361 5.3 警告
Network
Exponent CMS project - Exponent CMS の framework/modules/users/controllers/usersController.php における SQL インジェクションの脆弱性 CWE-200
情報漏えい
CVE-2016-9284 2016-11-16 10:22 2016-11-3 Show GitHub Exploit DB Packet Storm
201362 7.5 重要
Network
Exponent CMS project - Exponent CMS の framework/core/subsystems/expRouter.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2016-9283 2016-11-16 10:22 2016-11-4 Show GitHub Exploit DB Packet Storm
201363 7.5 重要
Network
Exponent CMS project - Exponent CMS の framework/modules/search/controllers/searchController.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2016-9282 2016-11-16 10:22 2016-11-3 Show GitHub Exploit DB Packet Storm
201364 9.1 緊急
Network
Exponent CMS project - Exponent CMS におけるブラインド SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2016-9272 2016-11-16 10:22 2016-11-6 Show GitHub Exploit DB Packet Storm
201365 6.1 警告
Network
MoinMoin - MoinMoin における "JavaScript インジェクション" 攻撃を実行される脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2016-7148 2016-11-15 17:56 2016-10-31 Show GitHub Exploit DB Packet Storm
201366 6.1 警告
Network
MoinMoin - MoinMoin における "JavaScript インジェクション" 攻撃を実行される脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2016-7146 2016-11-15 17:56 2016-10-31 Show GitHub Exploit DB Packet Storm
201367 7.2 重要
Network
Dotclear - Dotclear の "Install or upgrade manually" モジュールのブログの外観における任意のコードを実行される脆弱性 CWE-Other
その他
CVE-2016-9268 2016-11-15 17:33 2016-11-8 Show GitHub Exploit DB Packet Storm
201368 7.8 重要
Local
Git for Windows project - Windows 用 Git における権限を取得される脆弱性 CWE-Other
その他
CVE-2016-9274 2016-11-15 17:15 2016-11-5 Show GitHub Exploit DB Packet Storm
201369 7.8 重要
Local
Teradata Corporation - Teradata Studio Express の studioexpressinstall におけるシステムファイルを上書きされる脆弱性 CWE-264
CWE-59
CVE-2016-7490 2016-11-15 17:09 2016-10-3 Show GitHub Exploit DB Packet Storm
201370 9.8 緊急
Network
Teradata Corporation - Teradata Virtual Machine Community Edition の /opt/teradata/gsctools/bin/t2a.pl における昇格されたコードを実行される脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2016-7489 2016-11-15 17:08 2016-10-1 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 2, 2026, 4:18 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
290661 - schneider-electric telvent_sage_3030_firmware The Schneider Electric Telvent SAGE 3030 RTU with firmware C3413-500-001D3_P4 and C3413-500-001F0_PB allows remote attackers to cause a denial of service (temporary outage and CPU consumption) via ma… CWE-20
CWE-399
 Improper Input Validation 
 Resource Management Errors
CVE-2013-6143 2024-11-21 10:58 2014-02-1 Show GitHub Exploit DB Packet Storm
290662 - steve_souza java_application_monitor Multiple cross-site scripting (XSS) vulnerabilities in JAMon (Java Application Monitor) 2.7 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) listenertype or (2) c… CWE-79
Cross-site Scripting
CVE-2013-6235 2024-11-21 10:58 2014-02-1 Show GitHub Exploit DB Packet Storm
290663 - op5 monitor Unspecified vulnerability in op5 Monitor before 6.1.3 allows attackers to read arbitrary files via unknown vectors related to lack of authorization. NVD-CWE-noinfo
CVE-2013-6141 2024-11-21 10:58 2014-01-30 Show GitHub Exploit DB Packet Storm
290664 - emerson network_power_avocent_mergepoint_unity_2016_firmware Directory traversal vulnerability on the Emerson Network Power Avocent MergePoint Unity 2016 (aka MPU2016) KVM switch with firmware 1.9.16473 allows remote attackers to read arbitrary files via unspe… CWE-22
Path Traversal
CVE-2013-6030 2024-11-21 10:58 2014-01-24 Show GitHub Exploit DB Packet Storm
290665 - nvidia
apple
gpu_driver
mac_os_x
Unspecified vulnerability in NVIDIA graphics driver Release 331, 325, 319, 310, and 304 allows local users to bypass intended access restrictions for the GPU and gain privileges via unknown vectors. NVD-CWE-noinfo
CVE-2013-5987 2024-11-21 10:58 2014-01-22 Show GitHub Exploit DB Packet Storm
290666 - nvidia gpu_driver Unspecified vulnerability in NVIDIA graphics driver Release 331, 325, 319, 310, and 304 has unknown impact and attack vectors, a different vulnerability than CVE-2013-5987. NVD-CWE-noinfo
CVE-2013-5986 2024-11-21 10:58 2014-01-22 Show GitHub Exploit DB Packet Storm
290667 - ibm platform_symphony IBM Platform Symphony 5.2 before build 229037 and 6.1.0.1 before build 229073 uses the same credentials encryption key across different customers' installations, which makes it easier for context-dep… CWE-310
Cryptographic Issues
CVE-2013-6305 2024-11-21 10:58 2014-01-22 Show GitHub Exploit DB Packet Storm
290668 - mw6tech aztec_activex_control
maxicode_activex_control
datamatrix_activex_control
MW6 Aztec, DataMatrix, and MaxiCode ActiveX controls before version 4.0 vulnerable to arbitrary code via a crafted HTML document. Latest versions (4.0) of MW6 Aztec, DataMatrix, and MaxiCode ActiveX … NVD-CWE-noinfo
CVE-2013-6040 2024-11-21 10:58 2014-01-21 Show GitHub Exploit DB Packet Storm
290669 - aveva clearscada DNP3Driver.exe in the DNP3 driver in Schneider Electric ClearSCADA 2010 R2 through 2010 R3.1 and SCADA Expert ClearSCADA 2013 R1 through 2013 R1.2 allows remote attackers to cause a denial of service… CWE-399
 Resource Management Errors
CVE-2013-6142 2024-11-21 10:58 2014-01-16 Show GitHub Exploit DB Packet Storm
290670 - oracle e-business_suite Unspecified vulnerability in the Oracle Payroll component in Oracle E-Business Suite 11.5.10.2, 12.0.6, 12.1.1, 12.1.2, 12.1.3, and 12.2.2 allows remote authenticated users to affect confidentiality … NVD-CWE-noinfo
CVE-2013-5890 2024-11-21 10:58 2014-01-16 Show GitHub Exploit DB Packet Storm