Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 16, 2026, 4 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
202451 5.9 警告
Network
VMware - VMware NSX Edge および vCNS Edge における重要な情報を取得される脆弱性 CWE-200
情報漏えい
CVE-2016-2079 2016-07-11 16:28 2016-06-9 Show GitHub Exploit DB Packet Storm
202452 6.3 警告
Network
DELL EMC (旧 EMC Corporation) - EMC RSA Archer GRC における web.config.bak ファイルを読まれる脆弱性 CWE-200
情報漏えい
CVE-2016-0899 2016-07-11 12:03 2016-06-13 Show GitHub Exploit DB Packet Storm
202453 6.1 警告
Network
VMware - VMware vRealize Log Insight におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2016-2081 2016-07-11 11:05 2016-06-9 Show GitHub Exploit DB Packet Storm
202454 6.1 警告
Network
VMware - VMware vCenter Server の vSphere Web Client におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2015-6931 2016-07-11 11:05 2015-09-14 Show GitHub Exploit DB Packet Storm
202455 9.8 緊急
Network
IBM - IBM Bluemix プラットフォーム上で稼動する Watson Developer Cloud サービスにおける暗号保護メカニズムを破られる脆弱性 CWE-Other
その他
CVE-2016-0391 2016-07-11 10:53 2016-05-11 Show GitHub Exploit DB Packet Storm
202456 6.1 警告
Network
The phpMyAdmin Project - phpMyAdmin におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2016-5099 2016-07-11 10:49 2016-05-25 Show GitHub Exploit DB Packet Storm
202457 5.3 警告
Network
The phpMyAdmin Project - phpMyAdmin の libraries/error_report.lib.php におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル
CVE-2016-5098 2016-07-11 10:49 2016-05-25 Show GitHub Exploit DB Packet Storm
202458 5.3 警告
Network
The phpMyAdmin Project - phpMyAdmin における重要な情報を取得される脆弱性 CWE-200
情報漏えい
CVE-2016-5097 2016-07-11 10:49 2016-05-25 Show GitHub Exploit DB Packet Storm
202459 6.5 警告
Network
IBM - IBM Security QRadar Incident Forensics における認証を回避される脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2016-2968 2016-07-8 16:04 2016-06-21 Show GitHub Exploit DB Packet Storm
202460 5.4 警告
Network
IBM - IBM TRIRIGA Application Platform におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2016-2883 2016-07-8 16:04 2016-05-20 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 16, 2026, 4 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
290361 - owncloud owncloud The contacts application in ownCloud before 4.5.10 and 5.x before 5.0.5 does not properly check the ownership of contacts, which allows remote authenticated users to download arbitrary contacts via u… CWE-264
Permissions, Privileges, and Access Controls
CVE-2013-1963 2024-11-21 10:50 2014-03-15 Show GitHub Exploit DB Packet Storm
290362 - fruux
owncloud
sabredav
owncloud
The HTML\Browser plugin in SabreDAV before 1.6.9, 1.7.x before 1.7.7, and 1.8.x before 1.8.5, as used in ownCloud, when running on Windows, does not properly check path separators in the base path, w… CWE-20
 Improper Input Validation 
CVE-2013-1939 2024-11-21 10:50 2014-03-15 Show GitHub Exploit DB Packet Storm
290363 - owncloud owncloud Incomplete blacklist vulnerability in lib/migrate.php in ownCloud before 4.0.13 and 4.5.x before 4.5.8, when the user_migrate application is enabled, allows remote authenticated users to import arbit… NVD-CWE-Other
CVE-2013-1851 2024-11-21 10:50 2014-03-15 Show GitHub Exploit DB Packet Storm
290364 - owncloud owncloud Multiple incomplete blacklist vulnerabilities in (1) import.php and (2) ajax/uploadimport.php in apps/contacts/ in ownCloud before 4.0.13 and 4.5.x before 4.5.8 allow remote authenticated users to ex… CWE-94
Code Injection
CVE-2013-1850 2024-11-21 10:50 2014-03-15 Show GitHub Exploit DB Packet Storm
290365 - owncloud owncloud Multiple cross-site scripting (XSS) vulnerabilities in ownCloud 4.5.x before 4.5.8 allow remote authenticated users with administrator privileges to inject arbitrary web script or HTML via the (1) qu… CWE-79
Cross-site Scripting
CVE-2013-1822 2024-11-21 10:50 2014-03-15 Show GitHub Exploit DB Packet Storm
290366 - opensource_technologies responsive_logo_slideshow Cross-site scripting (XSS) vulnerability in the Responsive Logo Slideshow plugin for WordPress allows remote attackers to inject arbitrary web script or HTML via the "URL and Image" field. CWE-79
Cross-site Scripting
CVE-2013-1759 2024-11-21 10:50 2014-03-14 Show GitHub Exploit DB Packet Storm
290367 - marekkis watermark Cross-site scripting (XSS) vulnerability in the Marekkis Watermark plugin 0.9.2 for WordPress allows remote attackers to inject arbitrary web script or HTML via the pfad parameter to wp-admin/options… CWE-79
Cross-site Scripting
CVE-2013-1758 2024-11-21 10:50 2014-03-14 Show GitHub Exploit DB Packet Storm
290368 - blair_williams
joobi
civicrm
pretty_link_lite
com_jnews
civicrm
Cross-site scripting (XSS) vulnerability in open-flash-chart.swf in Open Flash Chart (aka Open-Flash Chart), as used in the Pretty Link Lite plugin before 1.6.3 for WordPress, JNews (com_jnews) compo… CWE-79
Cross-site Scripting
CVE-2013-1636 2024-11-21 10:50 2014-03-12 Show GitHub Exploit DB Packet Storm
290369 - owncloud owncloud SQL injection vulnerability in lib/bookmarks.php in ownCloud Server 4.5.x before 4.5.11 and 5.x before 5.0.6 allows remote authenticated users to execute arbitrary SQL commands via unspecified vector… CWE-89
SQL Injection
CVE-2013-2046 2024-11-21 10:50 2014-03-9 Show GitHub Exploit DB Packet Storm
290370 - owncloud owncloud SQL injection vulnerability in lib/db.php in ownCloud Server 5.0.x before 5.0.6 allows remote authenticated users to execute arbitrary SQL commands via unspecified vectors. CWE-89
SQL Injection
CVE-2013-2045 2024-11-21 10:50 2014-03-9 Show GitHub Exploit DB Packet Storm