Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 21, 2026, 6 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
209331 6.1 警告
Network
ASUS JAPAN株式会社 - WL-330NUL におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2015-7790 2016-01-13 17:38 2015-12-9 Show GitHub Exploit DB Packet Storm
209332 4.3 警告
Adjacent
ASUS JAPAN株式会社 - WL-330NUL におけるサービス運用妨害 (DoS) の脆弱性 CWE-20
不適切な入力確認
CVE-2015-7789 2016-01-13 17:38 2015-12-9 Show GitHub Exploit DB Packet Storm
209333 6.3 警告
Adjacent
ASUS JAPAN株式会社 - WL-330NUL において任意のコマンドを実行される脆弱性 CWE-78
OSコマンド・インジェクション
CVE-2015-7788 2016-01-13 17:38 2015-12-9 Show GitHub Exploit DB Packet Storm
209334 4.3 警告
Adjacent
ASUS JAPAN株式会社 - WL-330NUL における情報管理不備の脆弱性 CWE-Other
その他
CVE-2015-7787 2016-01-13 17:38 2015-12-9 Show GitHub Exploit DB Packet Storm
209335 3.5 注意 Field Group project - Drupal 用 Field Group モジュールにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2016-1565 2016-01-13 17:33 2016-01-5 Show GitHub Exploit DB Packet Storm
209336 6 警告 Values project - Drupal 用 Values モジュールにおける任意の PHP コードを実行される脆弱性 CWE-94
コード・インジェクション
CVE-2015-8761 2016-01-13 17:33 2015-11-24 Show GitHub Exploit DB Packet Storm
209337 5 警告 Acquia Inc. - Drupal 用 Mollom モジュールにおけるアクセス制限を回避される脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2015-8754 2016-01-13 17:33 2015-12-1 Show GitHub Exploit DB Packet Storm
209338 1.9 注意 Puppet - Puppet Enterprise の Puppet Server における重要な情報を取得される脆弱性 CWE-200
情報漏えい
CVE-2015-7328 2016-01-13 17:10 2015-11-5 Show GitHub Exploit DB Packet Storm
209339 9.4 危険 SAP - SAP Afaria における認証チェックを回避される脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2015-8753 2016-01-13 16:55 2015-05-12 Show GitHub Exploit DB Packet Storm
209340 4.3 警告 TYPO3 Association - TYPO3 の Flvplayer コンポーネントにおける外部のドメインから Flash の動画を埋め込まれる脆弱性 CWE-20
不適切な入力確認
CVE-2015-8760 2016-01-13 16:45 2015-12-15 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 21, 2026, 4:01 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
297271 - schneider-electric modicon_m340_bmx_noc_0401_firmware
modicon_m340_bmx_noe_0100_firmware
modicon_m340_bmx_noe_0100h_firmware
modicon_m340_bmx_noe_0110_firmware
modicon_m340_bmx_noe_0110h_firmware
modicon…
The Schneider Electric M340 PLC modules allow remote attackers to cause a denial of service (resource consumption) via unspecified vectors. NOTE: the vendor reportedly disputes this issue because it… CWE-400
 Uncontrolled Resource Consumption
CVE-2013-2763 2024-11-21 10:52 2013-04-4 Show GitHub Exploit DB Packet Storm
297272 - ithemes backupbuddy importbuddy.php in the BackupBuddy plugin 2.2.25 for WordPress allows remote attackers to obtain configuration information via a step 0 phpinfo action, which calls the phpinfo function. CWE-200
Information Exposure
CVE-2013-2744 2024-11-21 10:52 2013-04-2 Show GitHub Exploit DB Packet Storm
297273 - ithemes backupbuddy importbuddy.php in the BackupBuddy plugin 1.3.4, 2.1.4, 2.2.25, 2.2.28, and 2.2.4 for WordPress allows remote attackers to bypass authentication via a crafted integer in the step parameter. CWE-287
Improper Authentication
CVE-2013-2743 2024-11-21 10:52 2013-04-2 Show GitHub Exploit DB Packet Storm
297274 - ithemes backupbuddy importbuddy.php in the BackupBuddy plugin 1.3.4, 2.1.4, 2.2.25, 2.2.28, and 2.2.4 for WordPress does not reliably delete itself after completing a restore operation, which makes it easier for remote … NVD-CWE-Other
CVE-2013-2742 2024-11-21 10:52 2013-04-2 Show GitHub Exploit DB Packet Storm
297275 - ithemes backupbuddy importbuddy.php in the BackupBuddy plugin 1.3.4, 2.1.4, 2.2.25, 2.2.28, and 2.2.4 for WordPress does not require that authentication be enabled, which allows remote attackers to obtain sensitive info… CWE-287
Improper Authentication
CVE-2013-2741 2024-11-21 10:52 2013-04-2 Show GitHub Exploit DB Packet Storm
297276 - asterisk open_source
certified_asterisk
digiumphones
main/http.c in the HTTP server in Asterisk Open Source 1.8.x before 1.8.20.2, 10.x before 10.12.2, and 11.x before 11.2.2; Certified Asterisk 1.8.15 before 1.8.15-cert2; and Asterisk Digiumphones 10.… CWE-119
Incorrect Access of Indexable Resource ('Range Error') 
CVE-2013-2686 2024-11-21 10:52 2013-04-2 Show GitHub Exploit DB Packet Storm
297277 - asterisk open_source Stack-based buffer overflow in res/res_format_attr_h264.c in Asterisk Open Source 11.x before 11.2.2 allows remote attackers to execute arbitrary code via a long sprop-parameter-sets H.264 media attr… CWE-119
Incorrect Access of Indexable Resource ('Range Error') 
CVE-2013-2685 2024-11-21 10:52 2013-04-2 Show GitHub Exploit DB Packet Storm
297278 - synchroweb synconnect SQL injection vulnerability in index.php in Synchroweb Technology SynConnect 2.0 allows remote attackers to execute arbitrary SQL commands via the loginid parameter in a logoff action. CWE-89
SQL Injection
CVE-2013-2690 2024-11-21 10:52 2013-03-29 Show GitHub Exploit DB Packet Storm
297279 - emc smarts_network_configuration_manager Multiple unspecified vulnerabilities in the System Management (aka SysAdmin) Console in EMC Smarts Network Configuration Manager (NCM) through 9.2 have unknown impact and attack vectors, a different … NVD-CWE-noinfo
CVE-2013-2717 2024-11-21 10:52 2013-03-29 Show GitHub Exploit DB Packet Storm
297280 - thomas_seidl search_api Cross-site scripting (XSS) vulnerability in the admin view in the Search API (search_api) module 7.x-1.x before 7.x-1.4 for Drupal allows remote authenticated users with certain permissions to inject… CWE-79
Cross-site Scripting
CVE-2013-2715 2024-11-21 10:52 2013-03-28 Show GitHub Exploit DB Packet Storm