Vulnerability Search Top

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

Vulnerability Information Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 12, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
202521	7.8	重要 Local	Linux	-	Linux Kernel の kernel/bpf/verifier.c の replace_map_fd_with_map_ptr 関数における権限を取得される脆弱性	CWE-Other その他	CVE-2016-4557	2016-05-26 15:22	2016-05-18	Show	GitHub Exploit DB Packet Storm

202522	7.5	重要 Network	Linux	-	Linux Kernel の net/llc/af_llc.c の llc_cmsg_rcv 関数における重要な情報を取得される脆弱性	CWE-200 情報漏えい	CVE-2016-4485	2016-05-26 15:22	2016-05-18	Show	GitHub Exploit DB Packet Storm

202523	6.1	警告 Network	株式会社シロハチ	-	株式会社シロハチ製の複数の EC-CUBE 用フリーエリア追加プラグインにおけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2016-1205	2016-05-25 17:48	2016-04-26	Show	GitHub Exploit DB Packet Storm

202524	6.1	警告 Network	John Dyer WordPress.org	-	WordPress で使用される MediaElement.js の flash/FlashMediaElement.as におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2016-4567	2016-05-25 16:57	2016-05-5	Show	GitHub Exploit DB Packet Storm

202525	6.1	警告 Network	WordPress.org Moxiecode Systems	-	WordPress で使用される Plupload の plupload.flash.swf におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2016-4566	2016-05-25 16:57	2016-05-15	Show	GitHub Exploit DB Packet Storm

202526	8.6	重要 Network	WordPress.org	-	WordPress の wp-includes/http.php の wp_http_validate_url 関数におけるサーバサイドのリクエストフォージェリ攻撃を実行される脆弱性	CWE-Other その他	CVE-2016-2222	2016-05-25 16:57	2016-02-2	Show	GitHub Exploit DB Packet Storm

202527	7.4	重要 Network	WordPress.org	-	WordPress の wp-includes/pluggable.php の wp_validate_redirect 関数におけるオープンリダイレクトの脆弱性	CWE-Other その他	CVE-2016-2221	2016-05-25 16:57	2016-02-2	Show	GitHub Exploit DB Packet Storm

202528	6.1	警告 Network	WordPress.org	-	WordPress の wp-includes/class-wp-theme.php におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2016-1564	2016-05-25 16:57	2016-01-6	Show	GitHub Exploit DB Packet Storm

202529	6.1	警告 Network	WordPress.org	-	WordPress の wp-includes/wp-db.php におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2015-8834	2016-05-25 16:57	2015-05-6	Show	GitHub Exploit DB Packet Storm

202530	5.4	警告 Network	WordPress.org	-	WordPress のユーザリストのテーブルにおけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2015-7989	2016-05-25 16:57	2015-09-15	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 13, 2026, 5:05 a.m.

No	CVSS	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
290561	-	canonical michael_vogt	ubuntu_linux ubuntu-system-service	ubuntu-system-service 0.2.4 before 0.2.4.1. 0.2.3 before 0.2.3.1, and 0.2.2 before 0.2.2.1 does not properly use D-Bus for communication with a polkit authority, which allows local users to bypass in…	CWE-264 Permissions, Privileges, and Access Controls	CVE-2013-1062	2024-11-21 10:48	2013-10-4	Show	GitHub Exploit DB Packet Storm

290562	-	marc_deslauriers canonical	software-properties ubuntu_linux	dbus/SoftwarePropertiesDBus.py in Software Properties 0.92.17 before 0.92.17.3, 0.92.9 before 0.92.9.3, and 0.82.7 before 0.82.7.5 does not properly use D-Bus for communication with a polkit authorit…	CWE-264 Permissions, Privileges, and Access Controls	CVE-2013-1061	2024-11-21 10:48	2013-10-4	Show	GitHub Exploit DB Packet Storm

290563	-	enea emerson	ose dl_8000_remote_terminal_unit roc_800l_remote_terminal_unit roc_800_remote_terminal_unit	The Emerson Process Management ROC800 RTU with software 3.50 and earlier, DL8000 RTU with software 2.30 and earlier, and ROC800L RTU with software 1.20 and earlier have hardcoded credentials in a ROM…	CWE-255 Credentials Management	CVE-2013-0694	2024-11-21 10:48	2013-10-3	Show	GitHub Exploit DB Packet Storm

290564	-	enea emerson	ose roc_800l_remote_terminal_unit dl_8000_remote_terminal_unit roc_800_remote_terminal_unit	The kernel in ENEA OSE on the Emerson Process Management ROC800 RTU with software 3.50 and earlier, DL8000 RTU with software 2.30 and earlier, and ROC800L RTU with software 1.20 and earlier performs …	CWE-200 Information Exposure	CVE-2013-0693	2024-11-21 10:48	2013-10-3	Show	GitHub Exploit DB Packet Storm

290565	-	enea emerson	ose roc_800l_remote_terminal_unit roc_800_remote_terminal_unit dl_8000_remote_terminal_unit	The kernel in ENEA OSE on the Emerson Process Management ROC800 RTU with software 3.50 and earlier, DL8000 RTU with software 2.30 and earlier, and ROC800L RTU with software 1.20 and earlier allows re…	CWE-264 Permissions, Privileges, and Access Controls	CVE-2013-0692	2024-11-21 10:48	2013-10-3	Show	GitHub Exploit DB Packet Storm

290566	-	enea emerson	ose roc_800l_remote_terminal_unit roc_800_remote_terminal_unit dl_8000_remote_terminal_unit	The TFTP server on the Emerson Process Management ROC800 RTU with software 3.50 and earlier, DL8000 RTU with software 2.30 and earlier, and ROC800L RTU with software 1.20 and earlier allows remote at…	CWE-94 Code Injection	CVE-2013-0689	2024-11-21 10:48	2013-10-3	Show	GitHub Exploit DB Packet Storm

290567	-	canonical	ubuntu_linux	A certain Ubuntu build procedure for perf, as distributed in the Linux kernel packages in Ubuntu 10.04 LTS, 12.04 LTS, 12.10, 13.04, and 13.10, sets the HOME environment variable to the ~buildd direc…	CWE-264 Permissions, Privileges, and Access Controls	CVE-2013-1060	2024-11-21 10:48	2013-09-25	Show	GitHub Exploit DB Packet Storm

290568	-	cisco	anyconnect_secure_mobility_client	Cisco AnyConnect Secure Mobility Client on Mac OS X uses weak permissions for a library directory, which allows local users to gain privileges via a crafted library file, aka Bug ID CSCue33619.	CWE-264 Permissions, Privileges, and Access Controls	CVE-2013-1130	2024-11-21 10:48	2013-09-21	Show	GitHub Exploit DB Packet Storm

290569	-	cisco	nx-os	The regex engine in the BGP implementation in Cisco NX-OS, when a complex regular expression is configured for inbound routes, allows remote attackers to cause a denial of service (device reload) via…	CWE-399 Resource Management Errors	CVE-2013-1121	2024-11-21 10:48	2013-09-20	Show	GitHub Exploit DB Packet Storm

290570	-	apple	iphone_os safari itunes	WebKit, as used in Apple iOS before 7, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site, a different vul…	CWE-119 Incorrect Access of Indexable Resource ('Range Error')	CVE-2013-1047	2024-11-21 10:48	2013-09-19	Show	GitHub Exploit DB Packet Storm