Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 30, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
202251 7.5 重要
Network 		wptf-image-gallery project - WordPress 用 wptf-image-gallery プラグインにおけるファイルをダウンロードされる脆弱性 CWE-200
CWE-Other
CVE-2015-1000007 2016-10-12 11:46 2015-07-17 Show GitHub Exploit DB Packet Storm
202252 7.5 重要
Network 		andycheeseman - WordPress 用 Recent Backups プラグインにおけるファイルをダウンロードされる脆弱性 CWE-22
パス・トラバーサル 		CVE-2015-1000006 2016-10-12 11:46 2015-07-13 Show GitHub Exploit DB Packet Storm
202253 7.5 重要
Network 		FlaxlandsConsulting - WordPress 用 Candidate Application Form プラグインにおけるファイルをダウンロードされる脆弱性 CWE-22
パス・トラバーサル 		CVE-2015-1000005 2016-10-12 11:46 2015-07-12 Show GitHub Exploit DB Packet Storm
202254 9.8 緊急
Network 		fast-image-adder project - WordPress 用 fast-image-adder プラグインにおけるファイルをアップロードされる脆弱性 CWE-Other
その他 		CVE-2015-1000001 2016-10-12 11:46 2015-07-10 Show GitHub Exploit DB Packet Storm
202255 9.8 緊急
Network 		MailCWP project - WordPress 用 MailCWP プラグインにおけるファイルをアップロードされる脆弱性 CWE-Other
その他 		CVE-2015-1000000 2016-10-12 11:46 2015-07-9 Show GitHub Exploit DB Packet Storm
202256 9.8 緊急
Network 		Huge-IT - Joomla 用 Huge-IT Catalog における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2016-1000125 2016-10-12 11:44 2016-09-16 Show GitHub Exploit DB Packet Storm
202257 9.8 緊急
Network 		Huge-IT - Huge-IT Portfolio Gallery における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2016-1000124 2016-10-12 11:44 2016-09-16 Show GitHub Exploit DB Packet Storm
202258 9.8 緊急
Network 		Huge-IT - Joomla 用 Huge-IT Video Gallery における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2016-1000123 2016-10-12 11:44 2016-09-15 Show GitHub Exploit DB Packet Storm
202259 6.1 警告
Network 		Huge-IT - Joomla 用 Huge-IT Image Gallery におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2016-1000114 2016-10-12 11:44 2016-07-14 Show GitHub Exploit DB Packet Storm
202260 9.8 緊急
Network 		Huge-IT - Joomla 用 Huge-IT Image Gallery における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2016-1000113 2016-10-12 11:44 2016-07-14 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 30, 2026, 4:16 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
289741 - cisco webex_training_center The training-registration page in Cisco WebEx Training Center allows remote attackers to modify unspecified fields via unknown vectors, aka Bug ID CSCul35990. CWE-20
 Improper Input Validation  		CVE-2013-6969 2024-11-21 11:00 2013-12-15 Show GitHub Exploit DB Packet Storm
289742 - cisco webex_training_center Cisco WebEx Training Center provides different error messages for registration attempts depending on whether the e-mail address exists, which allows remote attackers to enumerate attendees via a seri… CWE-200
Information Exposure 		CVE-2013-6968 2024-11-21 11:00 2013-12-15 Show GitHub Exploit DB Packet Storm
289743 - cisco webex_sales_center Open redirect vulnerability in the mobile-browser subsystem in Cisco WebEx Sales Center allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via unspecified v… CWE-20
 Improper Input Validation  		CVE-2013-6967 2024-11-21 11:00 2013-12-15 Show GitHub Exploit DB Packet Storm
289744 - cisco webex_training_center The registration component in Cisco WebEx Training Center provides the training-session URL before e-mail confirmation is completed, which allows remote attackers to bypass intended access restrictio… CWE-264
Permissions, Privileges, and Access Controls 		CVE-2013-6965 2024-11-21 11:00 2013-12-15 Show GitHub Exploit DB Packet Storm
289745 - cisco webex_meeting_center Cisco WebEx Meeting Center allows remote authenticated users to bypass access control and inject content from a different WebEx site via unspecified vectors, aka Bug ID CSCul36197. CWE-264
Permissions, Privileges, and Access Controls 		CVE-2013-6964 2024-11-21 11:00 2013-12-15 Show GitHub Exploit DB Packet Storm
289746 - cisco webex_training_center Cross-site scripting (XSS) vulnerability in the registration component in Cisco WebEx Training Center allows remote attackers to inject arbitrary web script or HTML via a crafted URL, aka Bug ID CSCu… CWE-79
Cross-site Scripting 		CVE-2013-6963 2024-11-21 11:00 2013-12-15 Show GitHub Exploit DB Packet Storm
289747 - cisco webex_meeting_center Cross-site scripting (XSS) vulnerability in the mobile-browser subsystem in Cisco WebEx Meeting Center allows remote attackers to inject arbitrary web script or HTML via a crafted URL, aka Bug ID CSC… CWE-79
Cross-site Scripting 		CVE-2013-6962 2024-11-21 11:00 2013-12-15 Show GitHub Exploit DB Packet Storm
289748 - cisco webex_meeting_center Cross-site scripting (XSS) vulnerability in the Collaboration Partner Access Console (CPAC) in Cisco WebEx Meeting Center allows remote attackers to inject arbitrary web script or HTML via a crafted … CWE-79
Cross-site Scripting 		CVE-2013-6961 2024-11-21 11:00 2013-12-15 Show GitHub Exploit DB Packet Storm
289749 - cisco webex_meeting_center Multiple cross-site scripting (XSS) vulnerabilities in Cisco WebEx Meeting Center allow remote attackers to inject arbitrary web script or HTML via a crafted URL, aka Bug ID CSCul36248. CWE-79
Cross-site Scripting 		CVE-2013-6960 2024-11-21 11:00 2013-12-15 Show GitHub Exploit DB Packet Storm
289750 - cisco webex_sales_center Open redirect vulnerability in Cisco WebEx Sales Center allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via unspecified vectors, aka Bug ID CSCul25557. CWE-20
 Improper Input Validation  		CVE-2013-6959 2024-11-21 11:00 2013-12-15 Show GitHub Exploit DB Packet Storm