Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 18, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
208871 5 警告 CloudBees - CloudBees Jenkins におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2015-5322 2016-02-4 16:51 2015-11-11 Show GitHub Exploit DB Packet Storm
208872 5 警告 CloudBees - CloudBees Jenkins の CLI コマンドの overview および help ページのサイドパネルウィジェットにおける重要な情報を取得される脆弱性 CWE-200
情報漏えい 		CVE-2015-5321 2016-02-4 16:51 2015-11-11 Show GitHub Exploit DB Packet Storm
208873 5 警告 CloudBees - CloudBees Jenkins におけるスレーブとして接続される脆弱性 CWE-200
情報漏えい 		CVE-2015-5320 2016-02-4 16:51 2015-11-11 Show GitHub Exploit DB Packet Storm
208874 5 警告 CloudBees - CloudBees Jenkins のジョブ作成 CLI コマンドにおける XML 外部エンティティの脆弱性 CWE-Other
その他 		CVE-2015-5319 2016-02-4 16:51 2015-11-11 Show GitHub Exploit DB Packet Storm
208875 6.8 警告 CloudBees - CloudBees Jenkins における CSRF 保護メカニズムを回避される脆弱性 CWE-352
同一生成元ポリシー違反 		CVE-2015-5318 2016-02-4 16:51 2015-11-11 Show GitHub Exploit DB Packet Storm
208876 5 警告 CloudBees - CloudBees Jenkins の Fingerprints ページにおける重要なジョブを取得される脆弱性 CWE-200
情報漏えい 		CVE-2015-5317 2016-02-4 16:51 2015-11-11 Show GitHub Exploit DB Packet Storm
208877 7.5 危険 CloudBees - CloudBees Jenkins の API トークン発行サービスにおける権限を取得される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2015-1814 2016-02-4 16:51 2015-03-23 Show GitHub Exploit DB Packet Storm
208878 4.3 警告 CloudBees - CloudBees Jenkins におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2015-1813 2016-02-4 16:51 2015-03-23 Show GitHub Exploit DB Packet Storm
208879 7.5 危険 レッドハット
オラクル		 - 複数の Red Hat JBoss 製品で使用される Apache Commons FileUpload における任意のファイルに書き込まれる脆弱性 CWE-20
不適切な入力確認 		CVE-2013-2186 2016-02-4 16:51 2013-10-15 Show GitHub Exploit DB Packet Storm
208880 5 警告 CloudBees - CloudBees Jenkins におけるサービス運用妨害 (DoS) の脆弱性 CWE-399
リソース管理の問題 		CVE-2014-3661 2016-02-4 16:49 2014-10-1 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 18, 2026, 4 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
297721 8.3 HIGH
Adjacent 		silabs zgm130s037hgn_firmware
zm5202_firmware
zm5101_firmware
zgm2305a27hgn_firmware
zgm230sb27hgn_firmware 		Z-Wave devices from Sierra Designs (circa 2013) and Silicon Labs (using S0 security) may use a known, shared network key of all zeros, allowing an attacker within radio range to spoof Z-Wave traffic. CWE-338
 Use of Cryptographically Weak Pseudo-Random Number Generator (PRNG) 		CVE-2013-20003 2024-11-21 10:50 2022-02-5 Show GitHub Exploit DB Packet Storm
297722 9.8 CRITICAL
Network 		themify framework Elemin allows remote attackers to upload and execute arbitrary PHP code via the Themify framework (before 1.2.2) wp-content/themes/elemin/themify/themify-ajax.php file. CWE-434
 Unrestricted Upload of File with Dangerous Type  		CVE-2013-20002 2024-11-21 10:50 2021-06-18 Show GitHub Exploit DB Packet Storm
297723 7.5 HIGH
Network 		openzfs openzfs An issue was discovered in OpenZFS through 2.0.3. When an NFS share is exported to IPv6 addresses via the sharenfs feature, there is a silent failure to parse the IPv6 address data, and access is all… NVD-CWE-noinfo
CVE-2013-20001 2024-11-21 10:50 2021-02-13 Show GitHub Exploit DB Packet Storm
297724 7.5 HIGH
Network 		python python The gzip_decode function in the xmlrpc client library in Python 3.4 and earlier allows remote attackers to cause a denial of service (memory consumption) via a crafted HTTP request. NVD-CWE-noinfo
CVE-2013-1753 2024-11-21 10:50 2020-03-12 Show GitHub Exploit DB Packet Storm
297725 9.8 CRITICAL
Network 		berkeley boinc Multiple SQL injection vulnerabilities in BOINC allow remote attackers to execute arbitrary SQL commands via unspecified vectors. CWE-89
SQL Injection 		CVE-2013-2018 2024-11-21 10:50 2020-02-20 Show GitHub Exploit DB Packet Storm
297726 7.5 HIGH
Network 		intel 82574l_controller_firmware A denial of service vulnerability exists in some motherboard implementations of Intel e1000e/82574L network controller devices through 2013-02-06 where the device can be brought into a non-processing… CWE-665
 Improper Initialization 		CVE-2013-1634 2024-11-21 10:50 2020-02-14 Show GitHub Exploit DB Packet Storm
297727 6.1 MEDIUM
Network 		zimbra zimbra Zimbra 2013 has XSS in aspell.php CWE-79
Cross-site Scripting 		CVE-2013-1938 2024-11-21 10:50 2020-02-13 Show GitHub Exploit DB Packet Storm
297728 7.5 HIGH
Network 		skill commerce_skrill Commerce Skrill (Formerly Moneybookers) has an Access bypass vulnerability in all versions prior to 7.x-1.2 NVD-CWE-Other
CVE-2013-1924 2024-11-21 10:50 2020-02-13 Show GitHub Exploit DB Packet Storm
297729 9.8 CRITICAL
Network 		boldgrid
automattic 		w3_total_cache
wp_super_cache 		WordPress W3 Total Cache Plugin 0.9.2.8 has a Remote PHP Code Execution Vulnerability CWE-74
Injection 		CVE-2013-2010 2024-11-21 10:50 2020-02-13 Show GitHub Exploit DB Packet Storm
297730 9.8 CRITICAL
Network 		yabb yabb YaBB through 2.5.2: 'guestlanguage' Cookie Parameter Local File Include Vulnerability CWE-434
 Unrestricted Upload of File with Dangerous Type  		CVE-2013-2057 2024-11-21 10:50 2020-02-12 Show GitHub Exploit DB Packet Storm