Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 26, 2026, noon

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
201991 5.4 警告
Network
レッドハット - Red Hat JBoss BPM Suite の Business Process Editor におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2016-5398 2016-10-6 11:31 2016-09-28 Show GitHub Exploit DB Packet Storm
201992 9.1 緊急
Network
Apache Software Foundation - Apache Derby の SqlXmlUtil コードにおける XML 外部エンティティの脆弱性 CWE-399
CWE-Other
CVE-2015-1832 2016-10-6 11:29 2015-08-30 Show GitHub Exploit DB Packet Storm
201993 7.5 重要
Network
FreeRDP Project - FreeRDP におけるサービス運用妨害 (DoS) の脆弱性 CWE-Other
その他
CVE-2013-4119 2016-10-6 11:22 2013-07-2 Show GitHub Exploit DB Packet Storm
201994 7.5 重要
Network
openSUSE project
FreeRDP Project
- FreeRDP におけるサービス運用妨害 (DoS) の脆弱性 CWE-Other
その他
CVE-2013-4118 2016-10-6 11:22 2013-03-5 Show GitHub Exploit DB Packet Storm
201995 9.8 緊急
Network
Apache Software Foundation - Apache MyFaces Trinidad の CoreResponseStateManager におけるデシリアライゼーション攻撃を実行される脆弱性 CWE-Other
その他
CVE-2016-5019 2016-10-6 11:19 2016-09-29 Show GitHub Exploit DB Packet Storm
201996 9.8 緊急
Network
Apache Software Foundation - Apache Struts 2 における脆弱性 CWE-noinfo
情報不足
CVE-2016-4436 2016-10-6 11:02 2016-09-13 Show GitHub Exploit DB Packet Storm
201997 8.8 重要
Network
Pivotal Software, Inc. - 複数の Pivotal Cloud Foundry 製品および UAA 製品の /oauth/token エンドポイントにおける権限を取得される脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2016-6651 2016-10-5 17:21 2016-09-26 Show GitHub Exploit DB Packet Storm
201998 9.6 緊急
Network
Pivotal Software, Inc. - 複数の Pivotal Cloud Foundry 製品におけるクロスサイトリクエストフォージェリの脆弱性 CWE-352
同一生成元ポリシー違反
CVE-2016-6637 2016-10-5 17:21 2016-09-26 Show GitHub Exploit DB Packet Storm
201999 5.3 警告
Network
Pivotal Software, Inc. - 複数の Pivotal Cloud Foundry 製品の OAuth 認証の実装における暗黙的アクセストークンを取得される脆弱性 CWE-Other
その他
CVE-2016-6636 2016-10-5 17:20 2016-09-26 Show GitHub Exploit DB Packet Storm
202000 9.8 緊急
Network
Haxx
Debian
- c-ares の ares_create_query 関数におけるヒープベースのバッファオーバーフローの脆弱性 CWE-Other
その他
CVE-2016-5180 2016-10-5 17:11 2016-09-29 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 26, 2026, 4:05 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
290121 - sun sunos Unspecified vulnerability in Oracle Solaris 8, 9, 10, and 11 allows local users to affect availability via unknown vectors related to Libraries/Libc. NVD-CWE-noinfo
CVE-2013-3745 2024-11-21 10:54 2013-07-17 Show GitHub Exploit DB Packet Storm
290122 - anshul_sharma category-grid-view-gallery Cross-site scripting (XSS) vulnerability in includes/CatGridPost.php in the Category Grid View Gallery plugin 2.3.1 for WordPress allows remote attackers to inject arbitrary web script or HTML via th… CWE-79
Cross-site Scripting
CVE-2013-4117 2024-11-21 10:54 2013-07-16 Show GitHub Exploit DB Packet Storm
290123 - linux linux_kernel The fib6_add_rt2node function in net/ipv6/ip6_fib.c in the IPv6 stack in the Linux kernel through 3.10.1 does not properly handle Router Advertisement (RA) messages in certain circumstances involving… CWE-399
 Resource Management Errors
CVE-2013-4125 2024-11-21 10:54 2013-07-16 Show GitHub Exploit DB Packet Storm
290124 - php php ext/xml/xml.c in PHP before 5.3.27 does not properly consider parsing depth, which allows remote attackers to cause a denial of service (heap memory corruption) or possibly have unspecified other imp… CWE-787
 Out-of-bounds Write
CVE-2013-4113 2024-11-21 10:54 2013-07-13 Show GitHub Exploit DB Packet Storm
290125 - blackberry blackberry_os
z10
BlackBerry 10 OS before 10.0.10.648 on BlackBerry Z10 smartphones uses weak permissions for a BlackBerry Protect object, which allows physically proximate attackers to bypass intended access restrict… CWE-264
Permissions, Privileges, and Access Controls
CVE-2013-3692 2024-11-21 10:54 2013-07-13 Show GitHub Exploit DB Packet Storm
290126 - sharp aquos_hn-pp150_firmware
aquos_hn-pp150
The Sharp AQUOS PhotoPlayer HN-PP150 with firmware before 1.04.00.04 allows remote attackers to cause a denial of service (networking outage) via crafted packet data. NVD-CWE-noinfo
CVE-2013-3655 2024-11-21 10:54 2013-07-13 Show GitHub Exploit DB Packet Storm
290127 - phpmyadmin phpmyadmin Cross-site scripting (XSS) vulnerability in view_create.php (aka the Create View page) in phpMyAdmin 4.x before 4.0.3 allows remote authenticated users to inject arbitrary web script or HTML via an i… CWE-79
Cross-site Scripting
CVE-2013-3742 2024-11-21 10:54 2013-07-4 Show GitHub Exploit DB Packet Storm
290128 - atlassian crowd Atlassian Crowd 2.6.3 allows remote attackers to execute arbitrary commands via unspecified vectors related to a "symmetric backdoor." NOTE: as of 20130704, the vendor could not reproduce the issue,… NVD-CWE-Other
CVE-2013-3926 2024-11-21 10:54 2013-07-2 Show GitHub Exploit DB Packet Storm
290129 - atlassian crowd Atlassian Crowd 2.5.x before 2.5.4, 2.6.x before 2.6.3, 2.3.8, and 2.4.9 allows remote attackers to read arbitrary files and send HTTP requests to intranet servers via a request to (1) /services/2 or… CWE-20
 Improper Input Validation 
CVE-2013-3925 2024-11-21 10:54 2013-07-2 Show GitHub Exploit DB Packet Storm
290130 - lockon ec-cube Multiple cross-site scripting (XSS) vulnerabilities in the RecommendSearch feature in the management screen in LOCKON EC-CUBE before 2.12.5 allow remote attackers to inject arbitrary web script or HT… CWE-79
Cross-site Scripting
CVE-2013-3653 2024-11-21 10:54 2013-07-1 Show GitHub Exploit DB Packet Storm