Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 23, 2026, 4 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
202001 5.4 警告
Network
IBM - IBM Connections の Web UI におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2016-3001 2016-09-28 16:23 2016-09-15 Show GitHub Exploit DB Packet Storm
202002 4.3 警告
Network
IBM - IBM Connections のヘルプサービスにおけるサービス運用妨害 (DoS) の脆弱性 CWE-20
不適切な入力確認
CVE-2016-3000 2016-09-28 16:23 2016-09-15 Show GitHub Exploit DB Packet Storm
202003 6.5 警告
Network
IBM - IBM Connections における重要な情報を取得される脆弱性 CWE-200
情報漏えい
CVE-2016-2999 2016-09-28 16:23 2016-09-15 Show GitHub Exploit DB Packet Storm
202004 3.1
Network
IBM - IBM WebSphere MQ におけるサービス運用妨害 (DoS) の脆弱性 CWE-Other
その他
CVE-2016-0379 2016-09-28 16:23 2016-06-2 Show GitHub Exploit DB Packet Storm
202005 3.7
Network
IBM - IBM Security Guardium における重要なクエリ文字列情報を取得される脆弱性 CWE-200
情報漏えい
CVE-2016-0248 2016-09-28 16:23 2016-09-14 Show GitHub Exploit DB Packet Storm
202006 8.8 重要
Local
Moxa Inc. - Moxa Active OPC Server における権限を取得される脆弱性 CWE-Other
その他
CVE-2016-5793 2016-09-28 15:14 2016-09-20 Show GitHub Exploit DB Packet Storm
202007 7.5 重要
Network
シスコシステムズ - Cisco FirePOWER Management Center および FireSIGHT システム ソフトウェアにおける do-not-decrypt 設定を回避される脆弱性 CWE-20
不適切な入力確認
CVE-2016-6411 2016-09-28 15:06 2016-09-21 Show GitHub Exploit DB Packet Storm
202008 6.5 警告
Network
シスコシステムズ - Cisco IOS および IOS XE の Cisco Application-hosting Framework コンポーネントにおける任意のファイルを読まれる脆弱性 CWE-20
不適切な入力確認
CVE-2016-6410 2016-09-28 15:06 2016-09-21 Show GitHub Exploit DB Packet Storm
202009 7.5 重要
Network
シスコシステムズ - Cisco IOS および IOS XE の Data in Motion コンポーネントにおけるサービス運用妨害 (DoS) の脆弱性 CWE-399
リソース管理の問題
CVE-2016-6409 2016-09-28 15:05 2016-09-21 Show GitHub Exploit DB Packet Storm
202010 7.8 重要
Local
シスコシステムズ - Cisco IOS および IOS XE の iox におけるゲスト OS 上で任意の IOx Linux コマンドを実行される脆弱性 CWE-78
OSコマンド・インジェクション
CVE-2016-6414 2016-09-28 11:41 2016-09-21 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 23, 2026, 4:08 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
291031 - schneider-electric magelis_xbt_hmi The Schneider Electric Magelis XBT HMI controller has a default password for authentication of configuration uploads, which makes it easier for remote attackers to bypass intended access restrictions… CWE-255
CWE-352
Credentials Management
 Origin Validation Error
CVE-2013-2762 2024-11-21 10:52 2013-04-4 Show GitHub Exploit DB Packet Storm
291032 - schneider-electric modicon_m340 The Schneider Electric M340 BMXNOE01xx and BMXP3420xx PLC modules allow remote authenticated users to cause a denial of service (module crash) via crafted FTP traffic, as demonstrated by the FileZill… CWE-119
Incorrect Access of Indexable Resource ('Range Error') 
CVE-2013-2761 2024-11-21 10:52 2013-04-4 Show GitHub Exploit DB Packet Storm
291033 - schneider-electric modicon_m340_bmx_noc_0401_firmware
modicon_m340_bmx_noe_0100_firmware
modicon_m340_bmx_noe_0100h_firmware
modicon_m340_bmx_noe_0110_firmware
modicon_m340_bmx_noe_0110h_firmware
modicon…
The Schneider Electric M340 PLC modules allow remote attackers to cause a denial of service (resource consumption) via unspecified vectors. NOTE: the vendor reportedly disputes this issue because it… CWE-400
 Uncontrolled Resource Consumption
CVE-2013-2763 2024-11-21 10:52 2013-04-4 Show GitHub Exploit DB Packet Storm
291034 - ithemes backupbuddy importbuddy.php in the BackupBuddy plugin 2.2.25 for WordPress allows remote attackers to obtain configuration information via a step 0 phpinfo action, which calls the phpinfo function. CWE-200
Information Exposure
CVE-2013-2744 2024-11-21 10:52 2013-04-2 Show GitHub Exploit DB Packet Storm
291035 - ithemes backupbuddy importbuddy.php in the BackupBuddy plugin 1.3.4, 2.1.4, 2.2.25, 2.2.28, and 2.2.4 for WordPress allows remote attackers to bypass authentication via a crafted integer in the step parameter. CWE-287
Improper Authentication
CVE-2013-2743 2024-11-21 10:52 2013-04-2 Show GitHub Exploit DB Packet Storm
291036 - ithemes backupbuddy importbuddy.php in the BackupBuddy plugin 1.3.4, 2.1.4, 2.2.25, 2.2.28, and 2.2.4 for WordPress does not reliably delete itself after completing a restore operation, which makes it easier for remote … NVD-CWE-Other
CVE-2013-2742 2024-11-21 10:52 2013-04-2 Show GitHub Exploit DB Packet Storm
291037 - ithemes backupbuddy importbuddy.php in the BackupBuddy plugin 1.3.4, 2.1.4, 2.2.25, 2.2.28, and 2.2.4 for WordPress does not require that authentication be enabled, which allows remote attackers to obtain sensitive info… CWE-287
Improper Authentication
CVE-2013-2741 2024-11-21 10:52 2013-04-2 Show GitHub Exploit DB Packet Storm
291038 - asterisk open_source
certified_asterisk
digiumphones
main/http.c in the HTTP server in Asterisk Open Source 1.8.x before 1.8.20.2, 10.x before 10.12.2, and 11.x before 11.2.2; Certified Asterisk 1.8.15 before 1.8.15-cert2; and Asterisk Digiumphones 10.… CWE-119
Incorrect Access of Indexable Resource ('Range Error') 
CVE-2013-2686 2024-11-21 10:52 2013-04-2 Show GitHub Exploit DB Packet Storm
291039 - asterisk open_source Stack-based buffer overflow in res/res_format_attr_h264.c in Asterisk Open Source 11.x before 11.2.2 allows remote attackers to execute arbitrary code via a long sprop-parameter-sets H.264 media attr… CWE-119
Incorrect Access of Indexable Resource ('Range Error') 
CVE-2013-2685 2024-11-21 10:52 2013-04-2 Show GitHub Exploit DB Packet Storm
291040 - synchroweb synconnect SQL injection vulnerability in index.php in Synchroweb Technology SynConnect 2.0 allows remote attackers to execute arbitrary SQL commands via the loginid parameter in a logoff action. CWE-89
SQL Injection
CVE-2013-2690 2024-11-21 10:52 2013-03-29 Show GitHub Exploit DB Packet Storm