Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 17, 2026, noon

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
203011 5.6 警告
Network 		WP Ninjas, LLC. - WordPress 用プラグイン「Ninja Forms」における PHP オブジェクトインジェクションの脆弱性 CWE-20
不適切な入力確認 		CVE-2016-1209 2016-06-1 17:01 2016-05-13 Show GitHub Exploit DB Packet Storm
203012 4.3 警告
Adjacent 		株式会社アイ・オー・データ機器 - WN-GDN/R3 シリーズにおいて認証試行回数が制限されていない脆弱性 CWE-287
不適切な認証 		CVE-2016-1206 2016-06-1 16:50 2016-05-12 Show GitHub Exploit DB Packet Storm
203013 4.3 警告
Adjacent 		株式会社アイ・オー・データ機器 - WN-G300R シリーズにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2016-1207 2016-06-1 16:46 2016-05-12 Show GitHub Exploit DB Packet Storm
203014 6.3 警告
Network 		Apache Software Foundation - Apache Cordova において任意のプラグインが実行される脆弱性 CWE-20
不適切な入力確認 		CVE-2015-5208 2016-06-1 16:28 2016-05-11 Show GitHub Exploit DB Packet Storm
203015 2.5 低
Local 		サイボウズ - Android アプリ「kintone mobile for Android」における情報管理不備の脆弱性 CWE-200
情報漏えい 		CVE-2016-1185 2016-06-1 16:20 2016-04-25 Show GitHub Exploit DB Packet Storm
203016 9.8 緊急
Network 		Little CMS - Little CMS 2 の DefaultICCintents 関数に double-free の脆弱性 CWE-Other
その他 		CVE-2013-7455 2016-06-1 16:07 2016-05-4 Show GitHub Exploit DB Packet Storm
203017 5.3 警告
Local 		Electron - Electron における Node モジュール読み込みに関する問題 CWE-Other
その他 		CVE-2016-1202 2016-06-1 15:55 2016-04-22 Show GitHub Exploit DB Packet Storm
203018 7.5 危険 日立
Apache Software Foundation		 - Apache Standard Taglibs における任意のコードを実行される脆弱性 CWE-Other
その他 		CVE-2015-0254 2016-06-1 14:57 2015-02-27 Show GitHub Exploit DB Packet Storm
203019 6.5 警告
Network 		シスコシステムズ - Cisco Firepower Management Center の Web インターフェースにおけるページを変更される脆弱性 CWE-94
コード・インジェクション 		CVE-2016-1413 2016-06-1 14:28 2016-05-27 Show GitHub Exploit DB Packet Storm
203020 7.5 重要
Network 		シスコシステムズ - Cisco WebEx Meeting Center Original Release Base におけるユーザ名の有効性についての重要な情報を取得される脆弱性 CWE-200
情報漏えい 		CVE-2016-1410 2016-06-1 14:28 2016-01-4 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 17, 2026, 4:15 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
291031 - postgresql
canonical 		postgresql
ubuntu_linux 		Argument injection vulnerability in PostgreSQL 9.2.x before 9.2.4, 9.1.x before 9.1.9, and 9.0.x before 9.0.13 allows remote attackers to cause a denial of service (file corruption), and allows remot… CWE-94
Code Injection 		CVE-2013-1899 2024-11-21 10:50 2013-04-5 Show GitHub Exploit DB Packet Storm
291032 - mark_burns ldoce lib/ldoce/word.rb in the ldoce 0.0.2 gem for Ruby allows remote attackers to execute arbitrary commands via shell metacharacters in (1) an mp3 URL or (2) file name. CWE-20
 Improper Input Validation  		CVE-2013-1911 2024-11-21 10:50 2013-04-3 Show GitHub Exploit DB Packet Storm
291033 - openstack keystone_essex
folsom 		The XML libraries for Python 3.4, 3.3, 3.2, 3.1, 2.7, and 2.6, as used in OpenStack Keystone Essex and Folsom, Django, and possibly other products allow remote attackers to read arbitrary files via a… CWE-200
Information Exposure 		CVE-2013-1665 2024-11-21 10:50 2013-04-3 Show GitHub Exploit DB Packet Storm
291034 - openstack cinder_folsom
keystone_essex
grizzly
folsom
compute_\(nova\)_essex
compute_\(nova\)_folsom 		The XML libraries for Python 3.4, 3.3, 3.2, 3.1, 2.7, and 2.6, as used in OpenStack Keystone Essex, Folsom, and Grizzly; Compute (Nova) Essex and Folsom; Cinder Folsom; Django; and possibly other pro… CWE-119
Incorrect Access of Indexable Resource ('Range Error')  		CVE-2013-1664 2024-11-21 10:50 2013-04-3 Show GitHub Exploit DB Packet Storm
291035 - redhat subscription_asset_manager Cross-site scripting (XSS) vulnerability in the Notifications form in Red Hat Subscription Asset Manager before 1.2.1 allows remote attackers to inject arbitrary web script or HTML via the username f… CWE-79
Cross-site Scripting 		CVE-2013-1823 2024-11-21 10:50 2013-04-3 Show GitHub Exploit DB Packet Storm
291036 - zeroclipboard_project zeroclipboard Cross-site scripting (XSS) vulnerability in ZeroClipboard.swf and ZeroClipboard10.swf in ZeroClipboard before 1.0.8, as used in em-shorty, RepRapCalculator, Fulcrum, Django, aCMS, and other products,… CWE-79
Cross-site Scripting 		CVE-2013-1808 2024-11-21 10:50 2013-04-2 Show GitHub Exploit DB Packet Storm
291037 - gnome
canonical 		gnome_online_accounts
ubuntu_linux 		Gnome Online Accounts (GOA) 3.6.x before 3.6.3 and 3.7.x before 3.7.91, does not properly validate SSL certificates when creating accounts for providers who use the libsoup library, which allows man-… CWE-310
Cryptographic Issues 		CVE-2013-1799 2024-11-21 10:50 2013-04-2 Show GitHub Exploit DB Packet Storm
291038 - mariadb
oracle
redhat
debian
canonical
suse
opensuse 		mariadb
mysql
enterprise_linux
debian_linux
ubuntu_linux
linux_enterprise_desktop
linux_enterprise_server
opensuse
linux_enterprise_software_development_kit 		MariaDB 5.5.x before 5.5.30, 5.3.x before 5.3.13, 5.2.x before 5.2.15, and 5.1.x before 5.1.68, and Oracle MySQL 5.1.69 and earlier, 5.5.31 and earlier, and 5.6.11 and earlier allows remote attackers… CWE-119
Incorrect Access of Indexable Resource ('Range Error')  		CVE-2013-1861 2024-11-21 10:50 2013-03-29 Show GitHub Exploit DB Packet Storm
291039 - ngircd ngircd channel.c in ngIRCd 20 and 20.1 allows remote attackers to cause a denial of service (assertion failure and crash) via a KICK command for a user who is not on the associated channel. NVD-CWE-noinfo
CVE-2013-1747 2024-11-21 10:50 2013-03-29 Show GitHub Exploit DB Packet Storm
291040 - views_project views Multiple cross-site scripting (XSS) vulnerabilities in the Views module 7.x-3.x before 7.x-3.6 for Drupal allow remote authenticated users with certain permissions to inject arbitrary web script or H… CWE-79
Cross-site Scripting 		CVE-2013-1887 2024-11-21 10:50 2013-03-28 Show GitHub Exploit DB Packet Storm