Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 27, 2026, 6 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
201651 6.1 警告
Network
Hero Plugins - WordPress 用 Hero Maps Pro プラグインにおける反射型クロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2016-1000137 2016-10-19 16:54 2016-02-9 Show GitHub Exploit DB Packet Storm
201652 6.1 警告
Network
heat-trackr project - WordPress 用 heat-trackr プラグインにおける反射型クロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2016-1000136 2016-10-19 16:52 2016-02-9 Show GitHub Exploit DB Packet Storm
201653 6.1 警告
Network
HDW Tube project - WordPress 用 HDW Tube プラグインにおける反射型クロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2016-1000135 2016-10-19 16:52 2016-02-9 Show GitHub Exploit DB Packet Storm
201654 6.1 警告
Network
HDW Tube project - WordPress 用 HDW Tube プラグインにおける反射型クロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2016-1000134 2016-10-19 16:52 2016-02-9 Show GitHub Exploit DB Packet Storm
201655 6.1 警告
Network
Designs & Code - WordPress 用 Forget About Shortcode Buttons プラグインにおける反射型クロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2016-1000133 2016-10-19 16:52 2016-02-9 Show GitHub Exploit DB Packet Storm
201656 6.1 警告
Network
CreativeMinds - WordPress 用 CM Enhanced Tooltip Glossary プラグインにおける反射型クロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2016-1000132 2016-10-19 16:52 2016-02-9 Show GitHub Exploit DB Packet Storm
201657 6.1 警告
Network
e-search project - WordPress 用 e-search プラグインにおける反射型クロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2016-1000131 2016-10-19 16:52 2016-02-9 Show GitHub Exploit DB Packet Storm
201658 6.1 警告
Network
e-search project - WordPress 用 e-search プラグインにおける反射型クロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2016-1000130 2016-10-19 16:52 2016-02-9 Show GitHub Exploit DB Packet Storm
201659 6.1 警告
Network
defa-online-image-protector project - WordPress 用 defa-online-image-protector プラグインにおける反射型クロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2016-1000129 2016-10-19 16:52 2016-02-9 Show GitHub Exploit DB Packet Storm
201660 6.1 警告
Network
anti-plagiarism project - WordPress 用 anti-plagiarism プラグインにおける反射型クロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2016-1000128 2016-10-19 16:52 2016-02-9 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 27, 2026, 4:52 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
290411 - novell zenworks_configuration_management Directory traversal vulnerability in the PreBoot service in Novell ZENworks Configuration Management (ZCM) 11.2 allows remote attackers to read arbitrary files via a .. (dot dot) in a preboot update … CWE-22
Path Traversal
CVE-2013-3706 2024-11-21 10:54 2014-03-6 Show GitHub Exploit DB Packet Storm
290412 - ibm websphere_mq Directory traversal vulnerability in WMQ Telemetry in IBM WebSphere MQ 7.5 before 7.5.0.3 allows remote attackers to read arbitrary files via a crafted URI. CWE-22
Path Traversal
CVE-2013-4054 2024-11-21 10:54 2014-03-2 Show GitHub Exploit DB Packet Storm
290413 - suse studio_onsite
studio_extension_for_system_z
SUSE Studio Onsite 1.3.x before 1.3.6 and SUSE Studio Extension for System z 1.3 uses "static" secret tokens, which has unspecified impact and vectors. CWE-310
Cryptographic Issues
CVE-2013-3712 2024-11-21 10:54 2014-02-27 Show GitHub Exploit DB Packet Storm
290414 - ibm sametime The Meeting Server in IBM Sametime 8.5.2 through 8.5.2.1 and 9.x through 9.0.0.1 allows remote attackers to conduct clickjacking attacks via unspecified vectors. CWE-20
 Improper Input Validation 
CVE-2013-3988 2024-11-21 10:54 2014-02-14 Show GitHub Exploit DB Packet Storm
290415 - ibm sametime The Meeting Server in IBM Sametime 8.5.2 through 8.5.2.1 and 9.x through 9.0.0.1 does not validate URLs in Cookie headers before using them in redirects, which has unspecified impact and remote attac… CWE-20
 Improper Input Validation 
CVE-2013-3983 2024-11-21 10:54 2014-02-14 Show GitHub Exploit DB Packet Storm
290416 - ibm sametime The Meeting Server in IBM Sametime 8.5.2 through 8.5.2.1 and 9.x through 9.0.0.1 does not send the appropriate HTTP response headers to prevent unwanted caching by a web browser, which allows remote … CWE-264
Permissions, Privileges, and Access Controls
CVE-2013-3978 2024-11-21 10:54 2014-02-14 Show GitHub Exploit DB Packet Storm
290417 - maxxmarketing joomshopping Cross-site scripting (XSS) vulnerability in the JoomShopping (com_joomshopping) component before 4.3.1 for Joomla! allows remote attackers to inject arbitrary web script or HTML via the user_name par… CWE-79
Cross-site Scripting
CVE-2013-3933 2024-11-21 10:54 2014-02-12 Show GitHub Exploit DB Packet Storm
290418 - xaraya xaraya Multiple cross-site scripting (XSS) vulnerabilities in Xaraya 2.4.0-b1 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) id, (2) interface, (3) name, or (4) tabmod… CWE-79
Cross-site Scripting
CVE-2013-3639 2024-11-21 10:54 2014-02-6 Show GitHub Exploit DB Packet Storm
290419 - ibm spss_collaboration_and_deployment_services The server in IBM SPSS Collaboration and Deployment Services 4.x before 4.2.1.3 IF3, 5.x before 5.0 FP3, and 6.x before 6.0 IF1 allows remote attackers to read arbitrary files via an unspecified HTTP… CWE-200
Information Exposure
CVE-2013-4043 2024-11-21 10:54 2014-02-2 Show GitHub Exploit DB Packet Storm
290420 - springsource
vmware
spring_framework The Spring OXM wrapper in Spring Framework before 3.2.4 and 4.0.0.M1, when using the JAXB marshaller, does not disable entity resolution, which allows context-dependent attackers to read arbitrary fi… CWE-264
Permissions, Privileges, and Access Controls
CVE-2013-4152 2024-11-21 10:54 2014-01-24 Show GitHub Exploit DB Packet Storm