Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 3, 2026, 6:08 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
201871 8.8 重要
Network 		Moodle - Moodle のレガシーコースファイルおよびファイルマネージャモジュールにおける任意のコードを実行される脆弱性 CWE-Other
その他 		CVE-2016-9186 2016-11-8 12:07 2016-09-13 Show GitHub Exploit DB Packet Storm
201872 5.5 警告
Local 		AVAST Software s.r.o. - 複数の Avast 製品における DeepScreen 機能を回避される脆弱性 CWE-Other
その他 		CVE-2016-4025 2016-11-8 11:35 2016-04-19 Show GitHub Exploit DB Packet Storm
201873 7.5 重要
Network 		Exponent CMS project - Exponent CMS の "/framework/modules/help/controllers/helpController.php" における SQL インジェクションの脆弱性 CWE-200
CWE-89
CVE-2016-9135 2016-11-7 18:10 2016-10-25 Show GitHub Exploit DB Packet Storm
201874 7.5 重要
Network 		Exponent CMS project - Exponent CMS の "/expPaginator.php" における SQL インジェクションの脆弱性 CWE-200
CWE-89
CVE-2016-9134 2016-11-7 18:10 2016-10-25 Show GitHub Exploit DB Packet Storm
201875 9.8 緊急
Network 		Exponent CMS project - Exponent CMS の Pixidou Image Editor における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2016-7453 2016-11-7 18:10 2016-09-15 Show GitHub Exploit DB Packet Storm
201876 7.5 重要
Network 		Exponent CMS project - Exponent CMS の Pixidou Image Editor におけるサイト上の任意のフォルダにファイルをアップロードされる脆弱性 CWE-Other
その他 		CVE-2016-7452 2016-11-7 18:10 2016-09-15 Show GitHub Exploit DB Packet Storm
201877 9.8 緊急
Network 		Exponent CMS project - Exponent CMS におけるスクリプトファイルをアップロードされる脆弱性 CWE-Other
その他 		CVE-2016-7095 2016-11-7 18:10 2016-08-28 Show GitHub Exploit DB Packet Storm
201878 6.5 警告
Network 		GitLab.org - GitLab の "import/export project" 機能における GitLab サービスアカウントにアクセス可能なすべてのファイルの内容を取得される脆弱性 CWE-200
情報漏えい 		CVE-2016-9086 2016-11-7 15:49 2016-11-2 Show GitHub Exploit DB Packet Storm
201879 9.8 緊急
Network 		Square, Inc. - git-fastclone における任意のコマンドを実行される脆弱性 CWE-Other
その他 		CVE-2015-8969 2016-11-7 14:55 2015-12-17 Show GitHub Exploit DB Packet Storm
201880 8.8 重要
Network 		Square, Inc. - git-fastclone における任意のシェルコマンドを実行される脆弱性 CWE-Other
その他 		CVE-2015-8968 2016-11-7 14:55 2015-12-12 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 3, 2026, 4:18 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
291691 - juniper ive_os Multiple cross-site scripting (XSS) vulnerabilities in Juniper Junos Pulse Secure Access Service (aka SSL VPN) with IVE OS 7.1 before 7.1r15, 7.2 before 7.2r11, 7.3 before 7.3r6, and 7.4 before 7.4r3… CWE-79
Cross-site Scripting 		CVE-2013-5649 2024-11-21 10:57 2013-09-13 Show GitHub Exploit DB Packet Storm
291692 - cisco virtualization_experience_client_6000_series_firmware
virtualization_experience_client_6000 		The diagnostic module in the firmware on Cisco Virtualization Experience Client 6000 devices allows local users to bypass intended access restrictions and execute arbitrary commands via unspecified v… CWE-20
 Improper Input Validation  		CVE-2013-5493 2024-11-21 10:57 2013-09-13 Show GitHub Exploit DB Packet Storm
291693 - cisco socialminer administration.jsp in Cisco SocialMiner allows remote attackers to obtain sensitive information by sniffing the network for HTTP client-server traffic, aka Bug ID CSCuh76780. CWE-310
Cryptographic Issues 		CVE-2013-5492 2024-11-21 10:57 2013-09-13 Show GitHub Exploit DB Packet Storm
291694 - cisco socialminer The gadget implementation in Cisco SocialMiner does not properly restrict the content of GET requests, which allows remote attackers to obtain sensitive information by reading (1) web-server access l… CWE-264
Permissions, Privileges, and Access Controls 		CVE-2013-5489 2024-11-21 10:57 2013-09-13 Show GitHub Exploit DB Packet Storm
291695 - cisco prime_lan_management_solution Cisco Prime LAN Management Solution (LMS) does not properly restrict use of IFRAME elements, which makes it easier for remote attackers to conduct clickjacking attacks and unspecified other attacks v… CWE-264
Permissions, Privileges, and Access Controls 		CVE-2013-5482 2024-11-21 10:57 2013-09-13 Show GitHub Exploit DB Packet Storm
291696 - capasystems performance_guard Directory traversal vulnerability in logreader/uploadreader.jsp in CapaSystems Performance Guard before 6.2.102 allows remote attackers to read arbitrary files via unspecified vectors. CWE-22
Path Traversal 		CVE-2013-5216 2024-11-21 10:57 2013-09-13 Show GitHub Exploit DB Packet Storm
291697 - cisco unified_service_monitor
unified_operations_manager
security_manager
prime_lan_management_solution 		Cisco Common Services, as used in Cisco Prime LAN Management Solution (LMS), Cisco Security Manager, Cisco Unified Service Monitor, and Cisco Unified Operations Manager, does not properly interact wi… CWE-20
 Improper Input Validation  		CVE-2013-5488 2024-11-21 10:57 2013-09-12 Show GitHub Exploit DB Packet Storm
291698 - adobe flash_player
air
air_sdk 		Adobe Flash Player before 11.7.700.242 and 11.8.x before 11.8.800.168 on Windows and Mac OS X, before 11.2.202.310 on Linux, before 11.1.111.73 on Android 2.x and 3.x, and before 11.1.115.81 on Andro… CWE-119
Incorrect Access of Indexable Resource ('Range Error')  		CVE-2013-5324 2024-11-21 10:57 2013-09-12 Show GitHub Exploit DB Packet Storm
291699 - indianic testimonial_plugin SQL injection vulnerability in testimonial.php in the IndiaNIC Testimonial plugin 2.2 for WordPress allows remote attackers to execute arbitrary SQL commands via the custom_query parameter in a testi… CWE-89
SQL Injection 		CVE-2013-5673 2024-11-21 10:57 2013-09-11 Show GitHub Exploit DB Packet Storm
291700 - indianic testimonial_plugin Multiple cross-site request forgery (CSRF) vulnerabilities in the IndiaNIC Testimonial plugin 2.2 for WordPress allow remote attackers to hijack the authentication of administrators for requests that… CWE-352
 Origin Validation Error 		CVE-2013-5672 2024-11-21 10:57 2013-09-11 Show GitHub Exploit DB Packet Storm