Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 3, 2026, 2:01 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
201821 3.3
Local
オラクル - Oracle Sun Solaris Cluster における Cluster check files に関する脆弱性 CWE-Other
その他
CVE-2016-5525 2016-10-27 11:45 2016-10-18 Show GitHub Exploit DB Packet Storm
201822 7.7 重要
Network
オラクル - Oracle Hospitality Applications の Oracle Hospitality OPERA 5 Property Services における OPERA Xchange Interface (OXI) に関する脆弱性 CWE-200
CWE-Other
CVE-2016-5565 2016-10-27 11:45 2016-10-18 Show GitHub Exploit DB Packet Storm
201823 7.4 重要
Network
オラクル - Oracle Hospitality Applications の Oracle Hospitality OPERA 5 Property Services における OPERA Application Login に関する脆弱性 CWE-noinfo
情報不足
CVE-2016-5564 2016-10-27 11:44 2016-10-18 Show GitHub Exploit DB Packet Storm
201824 7.9 重要
Network
オラクル - Oracle Hospitality Applications の Oracle Hospitality OPERA 5 Property Services における OPERA File Upload Download に関する脆弱性 CWE-noinfo
情報不足
CVE-2016-5563 2016-10-27 11:44 2016-10-18 Show GitHub Exploit DB Packet Storm
201825 7.3 重要
Physics
オラクル - Oracle Retail Applications の Oracle Retail Xstore Payment における Security に関する脆弱性 CWE-noinfo
情報不足
CVE-2016-5539 2016-10-27 11:44 2016-10-18 Show GitHub Exploit DB Packet Storm
201826 3.3
Local
オラクル - Oracle Database Server の RDBMS Security における脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2016-5499 2016-10-27 11:43 2016-10-18 Show GitHub Exploit DB Packet Storm
201827 4.4 警告
Network
オラクル - Oracle MySQL の MySQL Server における Server: Performance Schema に関する脆弱性 CWE-noinfo
情報不足
CVE-2016-8290 2016-10-27 11:25 2016-10-18 Show GitHub Exploit DB Packet Storm
201828 4.7 警告
Local
オラクル - Oracle MySQL の MySQL Server における Server: InnoDB に関する脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2016-8289 2016-10-27 11:25 2016-10-18 Show GitHub Exploit DB Packet Storm
201829 3.1
Network
オラクル - Oracle MySQL の MySQL Server における Server: InnoDB Plugin に関する脆弱性 CWE-Other
その他
CVE-2016-8288 2016-10-27 11:25 2016-10-18 Show GitHub Exploit DB Packet Storm
201830 4.5 警告
Network
オラクル - Oracle MySQL の MySQL Server における Server: Replication に関する脆弱性 CWE-noinfo
情報不足
CVE-2016-8287 2016-10-27 11:25 2016-10-18 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 3, 2026, 4:18 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
289721 6.1 MEDIUM
Network
pixelite events_manager The events-manager plugin before 5.5.2 for WordPress has XSS in the booking form. CWE-79
Cross-site Scripting
CVE-2013-7477 2024-11-21 11:01 2019-08-22 Show GitHub Exploit DB Packet Storm
289722 8.8 HIGH
Network
simple_fields_project simple_fields The simple-fields plugin before 1.2 for WordPress has CSRF in the admin interface. CWE-352
 Origin Validation Error
CVE-2013-7476 2024-11-21 11:01 2019-08-15 Show GitHub Exploit DB Packet Storm
289723 6.1 MEDIUM
Network
bestwebsoft contact_form The contact-form-plugin plugin before 3.52 for WordPress has XSS. CWE-79
Cross-site Scripting
CVE-2013-7475 2024-11-21 11:01 2019-08-14 Show GitHub Exploit DB Packet Storm
289724 6.1 MEDIUM
Network
windu windu_cms Windu CMS 2.2 allows XSS via the name parameter to admin/content/edit or admin/content/add, or the username parameter to admin/users. CWE-79
Cross-site Scripting
CVE-2013-7474 2024-11-21 11:01 2019-08-2 Show GitHub Exploit DB Packet Storm
289725 8.8 HIGH
Network
windu windu_cms Windu CMS 2.2 allows CSRF via admin/users/?mn=admin.message.error to add an admin account. CWE-352
 Origin Validation Error
CVE-2013-7473 2024-11-21 11:01 2019-08-2 Show GitHub Exploit DB Packet Storm
289726 6.1 MEDIUM
Network
count_per_day_project count_per_day The "Count per Day" plugin before 3.2.6 for WordPress allows XSS via the wp-admin/?page=cpd_metaboxes daytoshow parameter. CWE-79
Cross-site Scripting
CVE-2013-7472 2024-11-21 11:01 2019-06-16 Show GitHub Exploit DB Packet Storm
289727 9.8 CRITICAL
Network
dlink dir-300_firmware
dir-600_firmware
dir-645_firmware
dir-845_firmware
dir-865_firmware
An issue was discovered in soap.cgi?service=WANIPConn1 on D-Link DIR-845 before v1.02b03, DIR-600 before v2.17b01, DIR-645 before v1.04b11, DIR-300 rev. B, and DIR-865 devices. There is Command Injec… CWE-77
Command Injection
CVE-2013-7471 2024-11-21 11:01 2019-06-12 Show GitHub Exploit DB Packet Storm
289728 5.9 MEDIUM
Network
linux linux_kernel cipso_v4_validate in include/net/cipso_ipv4.h in the Linux kernel before 3.11.7, when CONFIG_NETLABEL is disabled, allows attackers to cause a denial of service (infinite loop and crash), as demonstr… CWE-400
 Uncontrolled Resource Consumption
CVE-2013-7470 2024-11-21 11:01 2019-04-23 Show GitHub Exploit DB Packet Storm
289729 8.1 HIGH
Network
simplemachines simple_machines_forum Simple Machines Forum (SMF) 2.0.4 allows PHP Code Injection via the index.php?action=admin;area=languages;sa=editlang dictionary parameter. CWE-94
Code Injection
CVE-2013-7468 2024-11-21 11:01 2019-03-8 Show GitHub Exploit DB Packet Storm
289730 6.1 MEDIUM
Network
simplemachines simple_machines_forum Simple Machines Forum (SMF) 2.0.4 allows XSS via the index.php?action=pm;sa=settings;save sa parameter. CWE-79
Cross-site Scripting
CVE-2013-7467 2024-11-21 11:01 2019-03-8 Show GitHub Exploit DB Packet Storm