Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 31, 2026, 6 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
201991 6.1 警告
Network
HDW Tube project - WordPress 用 HDW Tube プラグインにおける反射型クロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2016-1000135 2016-10-19 16:52 2016-02-9 Show GitHub Exploit DB Packet Storm
201992 6.1 警告
Network
HDW Tube project - WordPress 用 HDW Tube プラグインにおける反射型クロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2016-1000134 2016-10-19 16:52 2016-02-9 Show GitHub Exploit DB Packet Storm
201993 6.1 警告
Network
Designs & Code - WordPress 用 Forget About Shortcode Buttons プラグインにおける反射型クロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2016-1000133 2016-10-19 16:52 2016-02-9 Show GitHub Exploit DB Packet Storm
201994 6.1 警告
Network
CreativeMinds - WordPress 用 CM Enhanced Tooltip Glossary プラグインにおける反射型クロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2016-1000132 2016-10-19 16:52 2016-02-9 Show GitHub Exploit DB Packet Storm
201995 6.1 警告
Network
e-search project - WordPress 用 e-search プラグインにおける反射型クロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2016-1000131 2016-10-19 16:52 2016-02-9 Show GitHub Exploit DB Packet Storm
201996 6.1 警告
Network
e-search project - WordPress 用 e-search プラグインにおける反射型クロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2016-1000130 2016-10-19 16:52 2016-02-9 Show GitHub Exploit DB Packet Storm
201997 6.1 警告
Network
defa-online-image-protector project - WordPress 用 defa-online-image-protector プラグインにおける反射型クロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2016-1000129 2016-10-19 16:52 2016-02-9 Show GitHub Exploit DB Packet Storm
201998 6.1 警告
Network
anti-plagiarism project - WordPress 用 anti-plagiarism プラグインにおける反射型クロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2016-1000128 2016-10-19 16:52 2016-02-9 Show GitHub Exploit DB Packet Storm
201999 6.1 警告
Network
ajax-random-post project - WordPress 用 ajax-random-post プラグインにおける反射型クロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2016-1000127 2016-10-19 16:52 2016-02-9 Show GitHub Exploit DB Packet Storm
202000 6.1 警告
Network
Admin Font Editor - WordPress 用 Admin Font Editor プラグインにおける反射型クロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2016-1000126 2016-10-19 16:52 2016-02-9 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 31, 2026, 4:16 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
289741 - torproject tor Tor before 0.2.4.20, when OpenSSL 1.x is used in conjunction with a certain HardwareAccel setting on Intel Sandy Bridge and Ivy Bridge platforms, does not properly generate random numbers for (1) rel… CWE-310
Cryptographic Issues
CVE-2013-7295 2024-11-21 11:00 2014-01-18 Show GitHub Exploit DB Packet Storm
289742 - get-simple getsimple_cms Multiple cross-site scripting (XSS) vulnerabilities in GetSimple CMS 3.1.2 and 3.2.3 allow remote attackers to inject arbitrary web script or HTML via the (1) post-menu field to edit.php or (2) Displ… CWE-79
Cross-site Scripting
CVE-2013-7243 2024-11-21 11:00 2014-01-18 Show GitHub Exploit DB Packet Storm
289743 - conceptronic cipcamptiwl_1.0_firmware
cipcamptiwl
Cross-site request forgery (CSRF) vulnerability in set_users.cgi in Conceptronic CIPCAMPTIWL Camera 1.0 with firmware 21.37.2.49 allows remote attackers to hijack the authentication of administrators… CWE-352
 Origin Validation Error
CVE-2013-7204 2024-11-21 11:00 2014-01-18 Show GitHub Exploit DB Packet Storm
289744 - libreswan libreswan The ikev2parent_inI1outR1 function in pluto/ikev2_parent.c in libreswan before 3.7 allows remote attackers to cause a denial of service (restart) via an IKEv2 I1 notification without a KE payload. CWE-20
 Improper Input Validation 
CVE-2013-7294 2024-11-21 11:00 2014-01-16 Show GitHub Exploit DB Packet Storm
289745 - asus wl-330nul The ASUS WL-330NUL router has a configuration process that relies on accessing the 192.168.1.1 IP address, but the documentation advises users to instead access a DNS hostname that does not always re… CWE-16
CWE-284
Configuration
Improper Access Control
CVE-2013-7293 2024-11-21 11:00 2014-01-16 Show GitHub Exploit DB Packet Storm
289746 - nagios nagios Off-by-one error in the process_cgivars function in contrib/daemonchk.c in Nagios Core 3.5.1, 4.0.2, and earlier allows remote authenticated users to obtain sensitive information from process memory … CWE-119
Incorrect Access of Indexable Resource ('Range Error') 
CVE-2013-7205 2024-11-21 11:00 2014-01-16 Show GitHub Exploit DB Packet Storm
289747 - nagios
icinga
nagios
icinga
Multiple off-by-one errors in Nagios Core 3.5.1, 4.0.2, and earlier, and Icinga before 1.8.5, 1.9 before 1.9.4, and 1.10 before 1.10.2 allow remote authenticated users to obtain sensitive information… CWE-20
 Improper Input Validation 
CVE-2013-7108 2024-11-21 11:00 2014-01-16 Show GitHub Exploit DB Packet Storm
289748 - icinga icinga Cross-site request forgery (CSRF) vulnerability in cmd.cgi in Icinga 1.8.5, 1.9.4, 1.10.2, and earlier allows remote attackers to hijack the authentication of users for unspecified commands via unspe… CWE-352
 Origin Validation Error
CVE-2013-7107 2024-11-21 11:00 2014-01-16 Show GitHub Exploit DB Packet Storm
289749 - icinga icinga Multiple stack-based buffer overflows in Icinga before 1.8.5, 1.9 before 1.9.4, and 1.10 before 1.10.2 allow remote authenticated users to cause a denial of service (crash) and possibly execute arbit… CWE-119
Incorrect Access of Indexable Resource ('Range Error') 
CVE-2013-7106 2024-11-21 11:00 2014-01-16 Show GitHub Exploit DB Packet Storm
289750 - memcached memcached memcached before 1.4.17, when running in verbose mode, allows remote attackers to cause a denial of service (crash) via a request that triggers an "unbounded key print" during logging, related to an … CWE-119
Incorrect Access of Indexable Resource ('Range Error') 
CVE-2013-7291 2024-11-21 11:00 2014-01-14 Show GitHub Exploit DB Packet Storm