Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 4, 2026, 4 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
202291 6.1 警告
Network 		Designs & Code - WordPress 用 Forget About Shortcode Buttons プラグインにおける反射型クロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2016-1000133 2016-10-19 16:52 2016-02-9 Show GitHub Exploit DB Packet Storm
202292 6.1 警告
Network 		CreativeMinds - WordPress 用 CM Enhanced Tooltip Glossary プラグインにおける反射型クロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2016-1000132 2016-10-19 16:52 2016-02-9 Show GitHub Exploit DB Packet Storm
202293 6.1 警告
Network 		e-search project - WordPress 用 e-search プラグインにおける反射型クロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2016-1000131 2016-10-19 16:52 2016-02-9 Show GitHub Exploit DB Packet Storm
202294 6.1 警告
Network 		e-search project - WordPress 用 e-search プラグインにおける反射型クロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2016-1000130 2016-10-19 16:52 2016-02-9 Show GitHub Exploit DB Packet Storm
202295 6.1 警告
Network 		defa-online-image-protector project - WordPress 用 defa-online-image-protector プラグインにおける反射型クロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2016-1000129 2016-10-19 16:52 2016-02-9 Show GitHub Exploit DB Packet Storm
202296 6.1 警告
Network 		anti-plagiarism project - WordPress 用 anti-plagiarism プラグインにおける反射型クロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2016-1000128 2016-10-19 16:52 2016-02-9 Show GitHub Exploit DB Packet Storm
202297 6.1 警告
Network 		ajax-random-post project - WordPress 用 ajax-random-post プラグインにおける反射型クロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2016-1000127 2016-10-19 16:52 2016-02-9 Show GitHub Exploit DB Packet Storm
202298 6.1 警告
Network 		Admin Font Editor - WordPress 用 Admin Font Editor プラグインにおける反射型クロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2016-1000126 2016-10-19 16:52 2016-02-9 Show GitHub Exploit DB Packet Storm
202299 7.5 重要
Network 		OpenStack - 複数の OpenStack 製品のイメージパーサにおけるサービス運用妨害 (DoS) の脆弱性 CWE-399
リソース管理の問題 		CVE-2015-5162 2016-10-19 16:26 2015-04-27 Show GitHub Exploit DB Packet Storm
202300 7.8 重要
Local 		インテル - Intel SSD Toolbox の updater サブシステムにおける権限を取得される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2016-8101 2016-10-19 14:19 2016-10-4 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 5, 2026, 4:11 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
292011 - x2engine x2crm Directory traversal vulnerability in X2Engine X2CRM before 3.5 allows remote authenticated administrators to include and execute arbitrary local files via a .. (dot dot) in the file parameter to inde… CWE-22
Path Traversal 		CVE-2013-5692 2024-11-21 10:57 2013-10-1 Show GitHub Exploit DB Packet Storm
292012 - simone_tellini mod_accounting SQL injection vulnerability in mod_accounting.c in the mod_accounting module 0.5 and earlier for Apache allows remote attackers to execute arbitrary SQL commands via a Host header. CWE-89
SQL Injection 		CVE-2013-5697 2024-11-21 10:57 2013-10-1 Show GitHub Exploit DB Packet Storm
292013 - redhat libvirt The virBitmapParse function in util/virbitmap.c in libvirt before 1.1.2 allows context-dependent attackers to cause a denial of service (out-of-bounds read and crash) via a crafted bitmap, as demonst… CWE-119
Incorrect Access of Indexable Resource ('Range Error')  		CVE-2013-5651 2024-11-21 10:57 2013-10-1 Show GitHub Exploit DB Packet Storm
292014 - owasp enterprise_security_api The authenticated-encryption feature in the symmetric-encryption implementation in the OWASP Enterprise Security API (ESAPI) for Java 2.x before 2.1.0 does not properly resist tampering with serializ… CWE-310
Cryptographic Issues 		CVE-2013-5679 2024-11-21 10:57 2013-10-1 Show GitHub Exploit DB Packet Storm
292015 - cisco identity_services_engine_software Cross-site scripting (XSS) vulnerability in an administration page in Cisco Identity Services Engine (ISE) allows remote attackers to inject arbitrary web script or HTML via an unspecified parameter,… CWE-79
Cross-site Scripting 		CVE-2013-5505 2024-11-21 10:57 2013-10-1 Show GitHub Exploit DB Packet Storm
292016 - cisco identity_services_engine_software Cross-site scripting (XSS) vulnerability in the Mobile Device Management (MDM) portal in Cisco Identity Services Engine (ISE) allows remote attackers to inject arbitrary web script or HTML via an uns… CWE-79
Cross-site Scripting 		CVE-2013-5504 2024-11-21 10:57 2013-10-1 Show GitHub Exploit DB Packet Storm
292017 - apple iphone_os Passcode Lock in Apple iOS before 7.0.2 does not properly manage the lock state, which allows physically proximate attackers to bypass an intended passcode requirement, and open the Camera app or rea… CWE-264
Permissions, Privileges, and Access Controls 		CVE-2013-5161 2024-11-21 10:57 2013-09-28 Show GitHub Exploit DB Packet Storm
292018 - apple iphone_os Passcode Lock in Apple iOS before 7.0.2 on iPhone devices allows physically proximate attackers to bypass an intended passcode requirement, and dial arbitrary telephone numbers, by making a series of… CWE-264
Permissions, Privileges, and Access Controls 		CVE-2013-5160 2024-11-21 10:57 2013-09-28 Show GitHub Exploit DB Packet Storm
292019 - cisco ios_xr The PPTP-ALG component in CRS Carrier Grade Services Engine (CGSE) and ASR 9000 Integrated Service Module (ISM) in Cisco IOS XR allows remote attackers to cause a denial of service (module reset) via… CWE-20
 Improper Input Validation  		CVE-2013-5498 2024-11-21 10:57 2013-09-28 Show GitHub Exploit DB Packet Storm
292020 - ibm websphere_datapower_xc10_appliance_firmware Unspecified vulnerability on the IBM WebSphere DataPower XC10 appliance 2.0 through 2.5.0.1 allows remote attackers to obtain administrative access via unknown vectors. NVD-CWE-noinfo
CVE-2013-5403 2024-11-21 10:57 2013-09-28 Show GitHub Exploit DB Packet Storm