Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 2, 2026, noon

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
202811 5.3 警告
Adjacent 		シスコシステムズ - Cisco Wireless LAN Controller デバイスにおけるサービス運用妨害 (DoS) の脆弱性 CWE-399
リソース管理の問題 		CVE-2016-6375 2016-09-14 12:00 2016-08-31 Show GitHub Exploit DB Packet Storm
202812 7.5 重要
Network 		シスコシステムズ - 複数の Cisco SPA デバイスの HTTP フレームワークにおけるサービス運用妨害 (DoS) の脆弱性 CWE-399
リソース管理の問題 		CVE-2016-1469 2016-09-14 12:00 2016-08-31 Show GitHub Exploit DB Packet Storm
202813 5.5 警告
Local 		IBM - IBM Tivoli Storage Manager for Space Management における暗号化されたパスワードを取得される脆弱性 CWE-200
情報漏えい 		CVE-2016-5927 2016-09-13 15:45 2016-06-2 Show GitHub Exploit DB Packet Storm
202814 9.8 緊急
Network 		The PHP Group - PHP の ext/curl/interface.c におけるサービス運用妨害 (DoS) の脆弱性 CWE-119
バッファエラー 		CVE-2016-7134 2016-09-13 15:39 2016-08-18 Show GitHub Exploit DB Packet Storm
202815 8.1 重要
Network 		The PHP Group - PHP の Zend/zend_alloc.c におけるサービス運用妨害 (DoS) の脆弱性 CWE-Other
その他 		CVE-2016-7133 2016-09-13 15:39 2016-08-18 Show GitHub Exploit DB Packet Storm
202816 7.5 重要
Network 		The PHP Group - PHP の ext/wddx/wddx.c におけるサービス運用妨害 (DoS) の脆弱性 CWE-Other
その他 		CVE-2016-7132 2016-09-13 15:39 2016-08-18 Show GitHub Exploit DB Packet Storm
202817 7.5 重要
Network 		The PHP Group - PHP の ext/wddx/wddx.c におけるサービス運用妨害 (DoS) の脆弱性 CWE-Other
その他 		CVE-2016-7131 2016-09-13 15:39 2016-08-18 Show GitHub Exploit DB Packet Storm
202818 7.5 重要
Network 		The PHP Group - PHP の ext/wddx/wddx.c の php_wddx_pop_element 関数におけるサービス運用妨害 (DoS) の脆弱性 CWE-Other
その他 		CVE-2016-7130 2016-09-13 15:39 2016-08-18 Show GitHub Exploit DB Packet Storm
202819 9.8 緊急
Network 		The PHP Group - PHP の ext/wddx/wddx.c の php_wddx_process_data 関数におけるサービス運用妨害 (DoS) の脆弱性 CWE-20
不適切な入力確認 		CVE-2016-7129 2016-09-13 15:39 2016-08-18 Show GitHub Exploit DB Packet Storm
202820 5.3 警告
Network 		The PHP Group - PHP の ext/exif/exif.c の exif_process_IFD_in_TIFF 関数におけるプロセスメモリから重要な情報を取得される脆弱性 CWE-200
情報漏えい 		CVE-2016-7128 2016-09-13 15:39 2016-08-18 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 2, 2026, 4:18 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
291901 - hitmyserver hms_testimonials Multiple cross-site request forgery (CSRF) vulnerabilities in the HMS Testimonials plugin before 2.0.11 for WordPress allow remote attackers to hijack the authentication of administrators for request… CWE-352
 Origin Validation Error 		CVE-2013-4240 2024-11-21 10:55 2014-04-3 Show GitHub Exploit DB Packet Storm
291902 - samba
canonical 		samba
ubuntu_linux 		Samba 3.x before 3.6.23, 4.0.x before 4.0.16, and 4.1.x before 4.1.6 does not enforce the password-guessing protection mechanism for all interfaces, which makes it easier for remote attackers to obta… CWE-255
Credentials Management 		CVE-2013-4496 2024-11-21 10:55 2014-03-14 Show GitHub Exploit DB Packet Storm
291903 - vicidial vicidial Multiple SQL injection vulnerabilities in the agent interface (agc/) in VICIDIAL dialer (aka Asterisk GUI client) 2.8-403a, 2.7, 2.7RC1, and earlier allow (1) remote attackers to execute arbitrary SQ… CWE-89
SQL Injection 		CVE-2013-4467 2024-11-21 10:55 2014-03-12 Show GitHub Exploit DB Packet Storm
291904 - php xhprof Cross-site scripting (XSS) vulnerability in XHProf before 0.9.4 allows remote attackers to inject arbitrary web script or HTML via the run parameter. CWE-79
Cross-site Scripting 		CVE-2013-4433 2024-11-21 10:55 2014-03-12 Show GitHub Exploit DB Packet Storm
291905 - schneems wicked Directory traversal vulnerability in controller/concerns/render_redirect.rb in the Wicked gem before 1.0.1 for Ruby allows remote attackers to read arbitrary files via a %2E%2E%2F (encoded dot dot sl… CWE-22
Path Traversal 		CVE-2013-4413 2024-11-21 10:55 2014-03-12 Show GitHub Exploit DB Packet Storm
291906 - plone plone mail_password.py in Plone 2.1 through 4.1, 4.2.x through 4.2.5, and 4.3.x through 4.3.1 allows remote authenticated users to bypass the prohibition on password changes via the forgotten password emai… CWE-264
Permissions, Privileges, and Access Controls 		CVE-2013-4198 2024-11-21 10:55 2014-03-12 Show GitHub Exploit DB Packet Storm
291907 - plone plone (1) cb_decode.py and (2) linkintegrity.py in Plone 2.1 through 4.1, 4.2.x through 4.2.5, and 4.3.x through 4.3.1 allow remote authenticated users to cause a denial of service (resource consumption) v… CWE-20
 Improper Input Validation  		CVE-2013-4199 2024-11-21 10:55 2014-03-12 Show GitHub Exploit DB Packet Storm
291908 - plone plone member_portrait.py in Plone 2.1 through 4.1, 4.2.x through 4.2.5, and 4.3.x through 4.3.1 allows remote authenticated users to modify or delete portraits of other users via unspecified vectors. CWE-20
 Improper Input Validation  		CVE-2013-4197 2024-11-21 10:55 2014-03-12 Show GitHub Exploit DB Packet Storm
291909 - plone plone Multiple open redirect vulnerabilities in (1) marmoset_patch.py, (2) publish.py, and (3) principiaredirect.py in Plone 2.1 through 4.1, 4.2.x through 4.2.5, and 4.3.x through 4.3.1 allow remote attac… CWE-20
 Improper Input Validation  		CVE-2013-4195 2024-11-21 10:55 2014-03-12 Show GitHub Exploit DB Packet Storm
291910 - plone plone The object manager implementation (objectmanager.py) in Plone 2.1 through 4.1, 4.2.x through 4.2.5, and 4.3.x through 4.3.1 does not properly restrict access to internal methods, which allows remote … CWE-264
Permissions, Privileges, and Access Controls 		CVE-2013-4196 2024-11-21 10:55 2014-03-12 Show GitHub Exploit DB Packet Storm