Vulnerability Search Top

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

Vulnerability Information Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 18, 2026, 10 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
202661	6.4	警告	オラクル	-	Oracle Enterprise Manager Grid Control の Oracle Application Testing Suite における Load Testing for Web Apps に関する脆弱性	CWE-noinfo 情報不足	CVE-2016-0488	2016-06-27 15:48	2016-01-19	Show	GitHub Exploit DB Packet Storm

202662	6.4	警告	オラクル	-	Oracle Enterprise Manager Grid Control の Oracle Application Testing Suite における Test Manager for Web Apps に関する脆弱性	CWE-noinfo 情報不足	CVE-2016-0490	2016-06-27 15:48	2016-01-19	Show	GitHub Exploit DB Packet Storm

202663	6.4	警告	オラクル	-	Oracle Enterprise Manager Grid Control の Oracle Application Testing Suite における Test Manager for Web Apps に関する脆弱性	CWE-noinfo 情報不足	CVE-2016-0487	2016-06-27 15:47	2016-01-19	Show	GitHub Exploit DB Packet Storm

202664	9.8	緊急 Network	ヒューレット・パッカード・エンタープライズ	-	HPE Insight Control における重要な情報を取得される脆弱性	CWE-noinfo 情報不足	CVE-2016-2024	2016-06-27 15:43	2016-06-1	Show	GitHub Exploit DB Packet Storm

202665	4.3	警告 Network	バッファロー	-	バッファロー製の複数の無線 LAN ルータにおける情報漏えいの脆弱性	CWE-200 情報漏えい	CVE-2016-4816	2016-06-27 14:56	2016-05-27	Show	GitHub Exploit DB Packet Storm

202666	6.5	警告 Network	バッファロー	-	バッファロー製の複数の無線 LAN ルータにおけるディレクトリトラバーサルの脆弱性	CWE-22 パス・トラバーサル	CVE-2016-4815	2016-06-27 14:55	2016-05-27	Show	GitHub Exploit DB Packet Storm

202667	2.8	低 Local	ABB	-	ABB PCM600 における重要な平文情報を取得される脆弱性	CWE-310 暗号の問題	CVE-2016-4511	2016-06-27 14:31	2016-05-31	Show	GitHub Exploit DB Packet Storm

202668	6.5	警告 Network	マイクロソフト	-	複数の Microsoft Windows 製品におけるプロセスメモリから重要な情報を取得される脆弱性	CWE-200 情報漏えい	CVE-2016-3201	2016-06-27 14:28	2016-06-14	Show	GitHub Exploit DB Packet Storm

202669	5	警告	オラクル	-	Oracle Enterprise Manager Grid Control の Oracle Application Testing Suite における Load Testing for Web Apps に関する脆弱性	CWE-noinfo 情報不足	CVE-2016-0478	2016-06-27 14:12	2016-01-19	Show	GitHub Exploit DB Packet Storm

202670	5	警告	オラクル	-	Oracle Enterprise Manager Grid Control の Oracle Application Testing Suite における Load Testing for Web Apps に関する脆弱性	CWE-noinfo 情報不足	CVE-2016-0477	2016-06-27 14:12	2016-01-19	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 18, 2026, 4:12 a.m.

No	CVSS	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
291201	-	xmonad	xmonad-contrab	The XMonad.Hooks.DynamicLog module in xmonad-contrib before 0.11.2 allows remote attackers to execute arbitrary commands via a web page title, which activates the commands when the user clicks on the…	CWE-94 Code Injection	CVE-2013-1436	2024-11-21 10:49	2014-10-7	Show	GitHub Exploit DB Packet Storm

291202	-	dleviet	datalife_engine	DataLife Engine (DLE) 9.7 allows remote attackers to execute arbitrary PHP code via the catlist[] parameter to engine/preview.php, which is used in a preg_replace function call with an e modifier.	CWE-94 Code Injection	CVE-2013-1412	2024-11-21 10:49	2014-06-3	Show	GitHub Exploit DB Packet Storm

291203	-	sensiolabs	symfony	Symfony 2.0.x before 2.0.22, 2.1.x before 2.1.7, and 2.2.x remote attackers to execute arbitrary PHP code via a serialized PHP object to the (1) Yaml::parse or (2) Yaml\Parser::parse function, a diff…	CWE-94 Code Injection	CVE-2013-1397	2024-11-21 10:49	2014-06-3	Show	GitHub Exploit DB Packet Storm

291204	-	sensiolabs	symfony	The Yaml::parse function in Symfony 2.0.x before 2.0.22 remote attackers to execute arbitrary PHP code via a PHP file, a different vulnerability than CVE-2013-1397.	CWE-94 Code Injection	CVE-2013-1348	2024-11-21 10:49	2014-06-3	Show	GitHub Exploit DB Packet Storm

291205	-	cisco	nx-os nexus_7000 nexus_7000_10-slot nexus_7000_18-slot nexus_7000_9-slot	Cisco NX-OS 6.1 before 6.1(5) on Nexus 7000 devices, when local authentication and multiple VDCs are enabled, allows remote authenticated users to gain privileges within an unintended VDC via crafted…	CWE-264 Permissions, Privileges, and Access Controls	CVE-2013-1191	2024-11-21 10:49	2014-05-26	Show	GitHub Exploit DB Packet Storm

291206	-	netweblogic	events_manager events_manager_pro	Multiple cross-site scripting (XSS) vulnerabilities in the Events Manager plugin before 5.3.5 and Events Manager Pro plugin before 2.2.9 for WordPress allow remote attackers to inject arbitrary web s…	CWE-79 Cross-site Scripting	CVE-2013-1407	2024-11-21 10:49	2014-05-13	Show	GitHub Exploit DB Packet Storm

291207	-	webcalendar_project	webcalendar	Cross-site scripting (XSS) vulnerability in Craig Knudsen WebCalendar before 1.2.5, 1.2.6, and other versions before 1.2.7 allows remote attackers to inject arbitrary web script or HTML via the Categ…	CWE-79 Cross-site Scripting	CVE-2013-1421	2024-11-21 10:49	2014-04-22	Show	GitHub Exploit DB Packet Storm

291208	-	maygion	ip_camera_firmware	Buffer overflow in MayGion IP Cameras with firmware before 2013.04.22 (05.53) allows remote attackers to execute arbitrary code via a long filename in a GET request.	CWE-119 Incorrect Access of Indexable Resource ('Range Error')	CVE-2013-1605	2024-11-21 10:49	2014-03-26	Show	GitHub Exploit DB Packet Storm

291209	-	maygion	ip_camera_firmware	Directory traversal vulnerability in MayGion IP Cameras with firmware before 2013.04.22 (05.53) allows remote attackers to read arbitrary files via a .. (dot dot) in the default URI.	CWE-22 Path Traversal	CVE-2013-1604	2024-11-21 10:49	2014-03-26	Show	GitHub Exploit DB Packet Storm

291210	-	wysija_newsletters_project	wysija_newsletters	Multiple SQL injection vulnerabilities in the Wysija Newsletters plugin before 2.2.1 for WordPress allow remote authenticated administrators to execute arbitrary SQL commands via the (1) search or (2…	CWE-89 SQL Injection	CVE-2013-1408	2024-11-21 10:49	2014-03-25	Show	GitHub Exploit DB Packet Storm