Vulnerability Search Top

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

Vulnerability Information Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 13, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
207111	7.9	危険	シマンテック	-	Symantec Web Gateway アプライアンスのソフトウェア上で稼動する管理コンソールにおける任意のコマンドを実行される脆弱性	CWE-94 コード・インジェクション	CVE-2015-5693	2015-09-29 15:05	2015-09-16	Show	GitHub Exploit DB Packet Storm

207112	7.9	危険	シマンテック	-	Symantec Web Gateway アプライアンスのソフトウェア上で稼動する管理コンソールの admin_messages.php における任意のコードを実行される脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2015-5692	2015-09-29 15:05	2015-09-16	Show	GitHub Exploit DB Packet Storm

207113	4.3	警告	シマンテック	-	Symantec Web Gateway アプライアンスのソフトウェア上で稼動する管理コンソールの PHP スクリプトにおけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2015-5691	2015-09-29 15:05	2015-09-16	Show	GitHub Exploit DB Packet Storm

207114	8.5	危険	シマンテック	-	Symantec Web Gateway アプライアンスのソフトウェア上で稼動する管理コンソールにおけるアクセス制限を回避される脆弱性	CWE-78 OSコマンド・インジェクション	CVE-2015-5690	2015-09-29 15:05	2015-09-16	Show	GitHub Exploit DB Packet Storm

207115	6.8	警告	シマンテック	-	Symantec Ghost Solutions Suite および Symantec Deployment Solution の Ghost Explorer ユーティリティの ghostexp.exe における任意のコードを実行される脆弱性	CWE-119 バッファエラー	CVE-2015-5689	2015-09-29 15:05	2015-09-2	Show	GitHub Exploit DB Packet Storm

207116	6.5	警告	シマンテック	-	Symantec Endpoint Protection の Manager コンポーネントの PHP スクリプトにおける SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2014-9229	2015-09-29 15:05	2014-12-3	Show	GitHub Exploit DB Packet Storm

207117	4.9	警告	シマンテック	-	Symantec Endpoint Protection の Manager コンポーネントの sysplant.sys におけるサービス運用妨害 (DoS) の脆弱性	CWE-399 リソース管理の問題	CVE-2014-9228	2015-09-29 15:05	2014-12-3	Show	GitHub Exploit DB Packet Storm

207118	4.4	警告	シマンテック	-	Symantec Endpoint Protection の Manager コンポーネントにおける権限を取得される脆弱性	CWE-Other その他	CVE-2014-9227	2015-09-29 15:05	2014-12-3	Show	GitHub Exploit DB Packet Storm

207119	4.3	警告	Securifi	-	Securifi Almond および Almond-2015 デバイスのファームウェアにおけるクリックジャッキング攻撃を実行される脆弱性	CWE-20 不適切な入力確認	CVE-2015-2917	2015-09-29 11:50	2015-09-10	Show	GitHub Exploit DB Packet Storm

207120	6.8	警告	Securifi	-	Securifi Almond および Almond-2015 デバイスのファームウェアにおけるクロスサイトリクエストフォージェリの脆弱性	CWE-352 同一生成元ポリシー違反	CVE-2015-2916	2015-09-29 11:50	2015-09-10	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 13, 2026, 5:05 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
581	9.8	CRITICAL Network	-	-	WordPress MStore API 2.0.6 contains an arbitrary file upload vulnerability that allows unauthenticated attackers to upload malicious files by sending POST requests to the REST API endpoint. Attackers… New	CWE-306 Missing Authentication for Critical Function	CVE-2021-47933	2026-05-12 23:24	2026-05-10	Show	GitHub Exploit DB Packet Storm

582	9.8	CRITICAL Network	-	-	OpenCATS 0.9.4 contains a remote code execution vulnerability that allows unauthenticated attackers to execute arbitrary commands by uploading malicious PHP files disguised as resume attachments. Att… New	CWE-306 Missing Authentication for Critical Function	CVE-2021-47936	2026-05-12 23:24	2026-05-10	Show	GitHub Exploit DB Packet Storm

583	8.8	HIGH Network	-	-	e107 CMS 2.3.0 contains a remote code execution vulnerability that allows authenticated users with theme installation permissions to execute arbitrary commands by uploading malicious theme files. Att… New	CWE-434 Unrestricted Upload of File with Dangerous Type	CVE-2021-47937	2026-05-12 23:24	2026-05-10	Show	GitHub Exploit DB Packet Storm

584	8.8	HIGH Network	-	-	ImpressCMS 1.4.2 contains a remote code execution vulnerability in the autotasks administrative interface that allows authenticated attackers to execute arbitrary PHP code by injecting malicious code… New	CWE-94 Code Injection	CVE-2021-47938	2026-05-12 23:24	2026-05-10	Show	GitHub Exploit DB Packet Storm

585	8.8	HIGH Network	-	-	Evolution CMS 3.1.6 contains a remote code execution vulnerability that allows authenticated users with module creation permissions to execute arbitrary system commands by injecting PHP code into mod… New	CWE-94 Code Injection	CVE-2021-47939	2026-05-12 23:24	2026-05-10	Show	GitHub Exploit DB Packet Storm

586	9.8	CRITICAL Network	-	-	WordPress Plugin Download From Files version 1.48 and earlier contains an arbitrary file upload vulnerability that allows unauthenticated attackers to upload malicious files by exploiting the AJAX fi… New	CWE-306 Missing Authentication for Critical Function	CVE-2021-47940	2026-05-12 23:24	2026-05-10	Show	GitHub Exploit DB Packet Storm

587	8.2	HIGH Network	-	-	WordPress Plugin Survey & Poll 1.5.7.3 contains an SQL injection vulnerability that allows unauthenticated attackers to execute arbitrary SQL queries by injecting malicious code through the wp_sap co… New	CWE-89 SQL Injection	CVE-2021-47941	2026-05-12 23:24	2026-05-10	Show	GitHub Exploit DB Packet Storm

588	8.8	HIGH Network	-	-	TextPattern CMS 4.8.7 contains a remote code execution vulnerability that allows authenticated attackers to execute arbitrary commands by uploading malicious PHP files through the file upload functio… New	CWE-434 Unrestricted Upload of File with Dangerous Type	CVE-2021-47943	2026-05-12 23:24	2026-05-10	Show	GitHub Exploit DB Packet Storm

589	5.3	MEDIUM Network	-	-	OpenCart 3.0.3.6 contains a cross-site request forgery vulnerability in the /account/edit endpoint that allows unauthenticated attackers to modify victim account details by tricking users into visiti… New	CWE-352 Origin Validation Error	CVE-2021-47946	2026-05-12 23:24	2026-05-10	Show	GitHub Exploit DB Packet Storm

590	5.4	MEDIUM Network	-	-	WordPress GetPaid Plugin 2.4.6 contains an HTML injection vulnerability that allows authenticated attackers to inject arbitrary HTML code by exploiting the Help Text field in payment forms. Attackers… New	CWE-80 Basic XSS	CVE-2021-47948	2026-05-12 23:24	2026-05-10	Show	GitHub Exploit DB Packet Storm