Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 19, 2026, 6 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
202111 8.6 重要
Network
Mozilla Foundation - Mozilla Netscape Portable Runtime の io/prprf.c における整数オーバーフローの脆弱性 CWE-Other
その他
CVE-2016-1951 2016-08-17 11:40 2016-02-17 Show GitHub Exploit DB Packet Storm
202112 8.8 重要
Network
WordPress.org - WordPress の wp-admin/includes/ajax-actions.php におけるクロスサイトリクエストフォージェリの脆弱性 CWE-352
同一生成元ポリシー違反
CVE-2016-6635 2016-08-17 11:31 2016-04-12 Show GitHub Exploit DB Packet Storm
202113 6.1 警告
Network
WordPress.org - WordPress のネットワーク設定ページにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2016-6634 2016-08-17 11:31 2016-04-12 Show GitHub Exploit DB Packet Storm
202114 8.6 重要
Network
WordPress.org - WordPress における SSRF 保護メカニズムを回避される脆弱性 CWE-Other
その他
CVE-2016-4029 2016-08-17 11:31 2016-04-12 Show GitHub Exploit DB Packet Storm
202115 7.5 重要
Network
シスコシステムズ - Cisco IOS におけるサービス運用妨害 (DoS) の脆弱性 CWE-20
不適切な入力確認
CVE-2016-1478 2016-08-17 11:16 2016-08-4 Show GitHub Exploit DB Packet Storm
202116 5.3 警告
Network
マイクロソフト - 複数の Microsoft Windows 製品におけるネットワークトラフィックをハイジャックされる脆弱性 CWE-Other
その他
CVE-2016-3299 2016-08-15 18:18 2016-08-9 Show GitHub Exploit DB Packet Storm
202117 7 重要
Local
マイクロソフト - 複数の Microsoft 製品の PDF ライブラリにおける任意のコードを実行される脆弱性 CWE-Other
その他
CVE-2016-3319 2016-08-15 17:22 2016-08-9 Show GitHub Exploit DB Packet Storm
202118 7.5 重要
Network
マイクロソフト - Microsoft Edge の Chakra JavaScript エンジンにおける任意のコードを実行される脆弱性 CWE-119
バッファエラー
CVE-2016-3296 2016-08-15 16:59 2016-08-9 Show GitHub Exploit DB Packet Storm
202119 4.9 警告
Network
マイクロソフト - 複数の Microsoft Windows 製品におけるセキュアブート保護メカニズムを回避される脆弱性 CWE-Other
その他
CVE-2016-3320 2016-08-15 16:58 2016-08-9 Show GitHub Exploit DB Packet Storm
202120 9.1 緊急
Network
マイクロソフト - Microsoft Windows 10 の ActiveSyncProvider における認証情報を取得される脆弱性 CWE-200
情報漏えい
CVE-2016-3312 2016-08-15 16:58 2016-08-9 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 19, 2026, 4:16 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
290561 - haxx
canonical
redhat
opensuse
curl
libcurl
ubuntu_linux
enterprise_linux
opensuse
Heap-based buffer overflow in the curl_easy_unescape function in lib/escape.c in cURL and libcurl 7.7 through 7.30.0 allows remote attackers to cause a denial of service (application crash) or possib… CWE-119
Incorrect Access of Indexable Resource ('Range Error') 
CVE-2013-2174 2024-11-21 10:51 2013-07-31 Show GitHub Exploit DB Packet Storm
290562 - theforeman
redhat
foreman
openstack
Eval injection vulnerability in the create method in the Bookmarks controller in Foreman before 1.2.0-RC2 allows remote authenticated users with permissions to create bookmarks to execute arbitrary c… CWE-94
Code Injection
CVE-2013-2121 2024-11-21 10:51 2013-07-31 Show GitHub Exploit DB Packet Storm
290563 - theforeman
redhat
foreman
openstack
The create method in app/controllers/users_controller.rb in Foreman before 1.2.0-RC2 allows remote authenticated users with permissions to create or edit other users to gain privileges by (1) changin… CWE-264
Permissions, Privileges, and Access Controls
CVE-2013-2113 2024-11-21 10:51 2013-07-31 Show GitHub Exploit DB Packet Storm
290564 - apache
collabnet
canonical
opensuse
subversion
ubuntu_linux
opensuse
The svnserve server in Subversion before 1.6.23 and 1.7.x before 1.7.10 allows remote attackers to cause a denial of service (exit) by aborting a connection. NVD-CWE-noinfo
CVE-2013-2112 2024-11-21 10:51 2013-07-31 Show GitHub Exploit DB Packet Storm
290565 - apache
collabnet
opensuse
subversion
opensuse
contrib/hook-scripts/svn-keyword-check.pl in Subversion before 1.6.23 allows remote authenticated users with commit permissions to execute arbitrary commands via shell metacharacters in a filename. CWE-20
 Improper Input Validation 
CVE-2013-2088 2024-11-21 10:51 2013-07-31 Show GitHub Exploit DB Packet Storm
290566 - hp sitescope Multiple unspecified vulnerabilities in HP SiteScope 11.20 and 11.21, when SOAP is used, allow remote attackers to execute arbitrary code via unknown vectors, aka ZDI-CAN-1678. NVD-CWE-noinfo
CVE-2013-2367 2024-11-21 10:51 2013-07-31 Show GitHub Exploit DB Packet Storm
290567 - monkey-project monkey Cross-site scripting (XSS) vulnerability in the Directory Listing plugin in Monkey HTTP Daemon (monkeyd) 1.2.2 allows attackers to inject arbitrary web script or HTML via a file name. CWE-79
Cross-site Scripting
CVE-2013-2181 2024-11-21 10:51 2013-07-30 Show GitHub Exploit DB Packet Storm
290568 - moodle moodle mod/feedback/lib.php in Moodle through 2.1.10, 2.2.x before 2.2.11, 2.3.x before 2.3.8, 2.4.x before 2.4.5, and 2.5.x before 2.5.1 does not consider the mod/feedback:view capability before displaying… CWE-264
Permissions, Privileges, and Access Controls
CVE-2013-2246 2024-11-21 10:51 2013-07-29 Show GitHub Exploit DB Packet Storm
290569 - moodle moodle rss/file.php in Moodle through 2.1.10, 2.2.x before 2.2.11, 2.3.x before 2.3.8, 2.4.x before 2.4.5, and 2.5.x before 2.5.1 does not properly implement the use of RSS tokens for impersonation, which a… CWE-287
Improper Authentication
CVE-2013-2245 2024-11-21 10:51 2013-07-29 Show GitHub Exploit DB Packet Storm
290570 - moodle moodle Multiple cross-site scripting (XSS) vulnerabilities in lib/conditionlib.php in Moodle 2.4.x before 2.4.5 and 2.5.x before 2.5.1 allow remote attackers to inject arbitrary web script or HTML via the c… CWE-79
Cross-site Scripting
CVE-2013-2244 2024-11-21 10:51 2013-07-29 Show GitHub Exploit DB Packet Storm