Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 23, 2026, 2 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
202001 5.4 警告
Network
IBM - IBM Connections の Web UI におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2016-3001 2016-09-28 16:23 2016-09-15 Show GitHub Exploit DB Packet Storm
202002 4.3 警告
Network
IBM - IBM Connections のヘルプサービスにおけるサービス運用妨害 (DoS) の脆弱性 CWE-20
不適切な入力確認
CVE-2016-3000 2016-09-28 16:23 2016-09-15 Show GitHub Exploit DB Packet Storm
202003 6.5 警告
Network
IBM - IBM Connections における重要な情報を取得される脆弱性 CWE-200
情報漏えい
CVE-2016-2999 2016-09-28 16:23 2016-09-15 Show GitHub Exploit DB Packet Storm
202004 3.1
Network
IBM - IBM WebSphere MQ におけるサービス運用妨害 (DoS) の脆弱性 CWE-Other
その他
CVE-2016-0379 2016-09-28 16:23 2016-06-2 Show GitHub Exploit DB Packet Storm
202005 3.7
Network
IBM - IBM Security Guardium における重要なクエリ文字列情報を取得される脆弱性 CWE-200
情報漏えい
CVE-2016-0248 2016-09-28 16:23 2016-09-14 Show GitHub Exploit DB Packet Storm
202006 8.8 重要
Local
Moxa Inc. - Moxa Active OPC Server における権限を取得される脆弱性 CWE-Other
その他
CVE-2016-5793 2016-09-28 15:14 2016-09-20 Show GitHub Exploit DB Packet Storm
202007 7.5 重要
Network
シスコシステムズ - Cisco FirePOWER Management Center および FireSIGHT システム ソフトウェアにおける do-not-decrypt 設定を回避される脆弱性 CWE-20
不適切な入力確認
CVE-2016-6411 2016-09-28 15:06 2016-09-21 Show GitHub Exploit DB Packet Storm
202008 6.5 警告
Network
シスコシステムズ - Cisco IOS および IOS XE の Cisco Application-hosting Framework コンポーネントにおける任意のファイルを読まれる脆弱性 CWE-20
不適切な入力確認
CVE-2016-6410 2016-09-28 15:06 2016-09-21 Show GitHub Exploit DB Packet Storm
202009 7.5 重要
Network
シスコシステムズ - Cisco IOS および IOS XE の Data in Motion コンポーネントにおけるサービス運用妨害 (DoS) の脆弱性 CWE-399
リソース管理の問題
CVE-2016-6409 2016-09-28 15:05 2016-09-21 Show GitHub Exploit DB Packet Storm
202010 7.8 重要
Local
シスコシステムズ - Cisco IOS および IOS XE の iox におけるゲスト OS 上で任意の IOx Linux コマンドを実行される脆弱性 CWE-78
OSコマンド・インジェクション
CVE-2016-6414 2016-09-28 11:41 2016-09-21 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 23, 2026, 4:08 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
291001 - joomla joomla\! Joomla! 2.5.x before 2.5.10 and 3.0.x before 3.0.4 allows remote authenticated users to bypass intended privilege requirements and delete the private messages of arbitrary users via unspecified vecto… CWE-264
Permissions, Privileges, and Access Controls
CVE-2013-3056 2024-11-21 10:52 2013-05-3 Show GitHub Exploit DB Packet Storm
291002 - strongswan strongswan strongSwan 4.3.5 through 5.0.3, when using the OpenSSL plugin for ECDSA signature verification, allows remote attackers to authenticate as other users via an invalid signature. CWE-287
Improper Authentication
CVE-2013-2944 2024-11-21 10:52 2013-05-2 Show GitHub Exploit DB Packet Storm
291003 - vmware vcenter_server_appliance VMware vCenter Server Appliance (vCSA) 5.1 before Update 1 allows remote authenticated users to create or overwrite arbitrary files, and consequently execute arbitrary code or cause a denial of servi… CWE-264
Permissions, Privileges, and Access Controls
CVE-2013-3080 2024-11-21 10:52 2013-05-1 Show GitHub Exploit DB Packet Storm
291004 - vmware vcenter_server_appliance VMware vCenter Server Appliance (vCSA) 5.1 before Update 1 allows remote authenticated users to execute arbitrary programs with root privileges by leveraging Virtual Appliance Management Interface (V… CWE-94
Code Injection
CVE-2013-3079 2024-11-21 10:52 2013-05-1 Show GitHub Exploit DB Packet Storm
291005 - sap basis_communication_services SAP BASIS Communication Services 4.6B through 7.30 allows remote authenticated users to execute arbitrary commands via unspecified vectors. NVD-CWE-noinfo
CVE-2013-3063 2024-11-21 10:52 2013-05-1 Show GitHub Exploit DB Packet Storm
291006 - sap production_planning_and_control The CP_RC_TRANSACTION_CALL_BY_SET function in the Engineering Workbench component in SAP Production Planning and Control allows remote authenticated users to bypass intended transaction restrictions … CWE-264
Permissions, Privileges, and Access Controls
CVE-2013-3062 2024-11-21 10:52 2013-05-1 Show GitHub Exploit DB Packet Storm
291007 - sap healthcare_industry_solution
erp_central_component
The ISHMED-PATRED_TRANSACT_RFCCALL function in the IS-H Industry-Specific Component Hospital subsystem in SAP Healthcare Industry Solution, and the SAP ERP central component (aka ECC 6), allows remot… CWE-264
Permissions, Privileges, and Access Controls
CVE-2013-3061 2024-11-21 10:52 2013-05-1 Show GitHub Exploit DB Packet Storm
291008 - crunchify foursquare-checkins Cross-site request forgery (CSRF) vulnerability in the FourSquare Checkins plugin before 1.3 for WordPress allows remote attackers to hijack the authentication of arbitrary users for requests that in… CWE-352
 Origin Validation Error
CVE-2013-2709 2024-11-21 10:52 2013-04-26 Show GitHub Exploit DB Packet Storm
291009 - citrix netscaler_access_gateway_firmware
netscaler_access_gateway
Unspecified vulnerability in Citrix NetScaler Access Gateway Enterprise Edition (AGEE) before 9.3.62.4 and 10.x through 10.0.74.4, and NetScaler AGEE Common Criteria build before 9.3.53.6, allows rem… NVD-CWE-noinfo
CVE-2013-2767 2024-11-21 10:52 2013-04-26 Show GitHub Exploit DB Packet Storm
291010 - crunchify all-in-on-webmaster Cross-site request forgery (CSRF) vulnerability in the All in One Webmaster plugin before 8.2.4 for WordPress allows remote attackers to hijack the authentication of arbitrary users for requests that… CWE-352
 Origin Validation Error
CVE-2013-2696 2024-11-21 10:52 2013-04-26 Show GitHub Exploit DB Packet Storm