Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 14, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
215411 6.8 警告 Redirection Page project - WordPress 用 Redirection Page プラグインにおけるクロスサイトリクエストフォージェリの脆弱性 CWE-352
同一生成元ポリシー違反 		CVE-2015-1580 2015-02-18 13:54 2015-01-26 Show GitHub Exploit DB Packet Storm
215412 4.3 警告 Web-Dorado - WordPress 用 Spider Facebook プラグインにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2015-1582 2015-02-18 13:54 2015-01-26 Show GitHub Exploit DB Packet Storm
215413 6.8 警告 Mobile Domain project - WordPress 用 Mobile Domain プラグインにおけるクロスサイトリクエストフォージェリの脆弱性 CWE-352
同一生成元ポリシー違反 		CVE-2015-1581 2015-02-18 13:54 2015-01-26 Show GitHub Exploit DB Packet Storm
215414 10 危険 アドバンテック株式会社 - Advantech EKI-1200 ゲートウェイのファームウェアにおけるバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2014-8385 2015-02-18 12:13 2014-10-22 Show GitHub Exploit DB Packet Storm
215415 7.5 危険 Pragyan CMS Project - Pragyan CMS の userprofile.lib.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2015-1471 2015-02-18 12:03 2015-02-4 Show GitHub Exploit DB Packet Storm
215416 4.3 警告 Apache Software Foundation - Apache ActiveMQ の Web ベースの管理コンソールにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2014-8110 2015-02-17 18:49 2014-10-10 Show GitHub Exploit DB Packet Storm
215417 2.1 注意 GNU Project
Novell		 - grep の kwset.c の bmexec_trans 関数におけるサービス運用妨害 (DoS) の脆弱性 CWE-119
バッファエラー 		CVE-2015-1345 2015-02-17 18:49 2015-01-9 Show GitHub Exploit DB Packet Storm
215418 4.3 警告 yuba.ch - u5CMS におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2015-1575 2015-02-17 18:05 2015-02-9 Show GitHub Exploit DB Packet Storm
215419 7.5 危険 yuba.ch - u5CMS における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2015-1576 2015-02-17 18:05 2015-02-9 Show GitHub Exploit DB Packet Storm
215420 6.4 警告 yuba.ch - u5CMS の u5admin/deletefile.php におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2015-1577 2015-02-17 18:05 2015-02-9 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 15, 2026, 4:10 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
295441 5.4 MEDIUM
Network 		jomres jomres Cross-site scripting (XSS) vulnerability in the Jomres (com_jomres) component before 7.3.1 for Joomla! allows remote authenticated users with the "Business Manager" permission to inject arbitrary web… CWE-79
Cross-site Scripting 		CVE-2013-3931 2024-11-21 10:54 2020-01-3 Show GitHub Exploit DB Packet Storm
295442 7.8 HIGH
Local 		extensis mrsid Heap-based buffer overflow in the MrSID plugin (MrSID.dll) before 4.37 for IrfanView allows remote attackers to execute arbitrary code via a levels header. CWE-787
 Out-of-bounds Write 		CVE-2013-3946 2024-11-21 10:54 2020-01-3 Show GitHub Exploit DB Packet Storm
295443 7.8 HIGH
Local 		extensis mrsid The MrSID plugin (MrSID.dll) before 4.37 for IrfanView allows remote attackers to execute arbitrary code via a nband tag. CWE-20
 Improper Input Validation  		CVE-2013-3945 2024-11-21 10:54 2020-01-3 Show GitHub Exploit DB Packet Storm
295444 7.8 HIGH
Local 		extensis mrsid Stack-based buffer overflow in the MrSID plugin (MrSID.dll) before 4.37 for IrfanView allows remote attackers to execute arbitrary code via an IMAGE tag. CWE-787
 Out-of-bounds Write 		CVE-2013-3944 2024-11-21 10:54 2020-01-3 Show GitHub Exploit DB Packet Storm
295445 7.5 HIGH
Network 		supermicro
citrix 		smt_x9_firmware
smt_x8_firmware
netscaler_sdx_firmware
netscaler_firmware
netscaler_sd-wan_firmware 		Hardcoded WSMan credentials in Intelligent Platform Management Interface (IPMI) with firmware for Supermicro X9 generation motherboards before 3.15 (SMT_X9_315) and firmware for Supermicro X8 generat… CWE-522
 Insufficiently Protected Credentials 		CVE-2013-3620 2024-11-21 10:54 2020-01-3 Show GitHub Exploit DB Packet Storm
295446 6.1 MEDIUM
Network 		opsview opsview
opsview_core 		Multiple cross-site scripting (XSS) vulnerabilities in Opsview before 4.4.1 and Opsview Core before 20130522 allow remote attackers to inject arbitrary web script or HTML. CWE-79
Cross-site Scripting 		CVE-2013-3936 2024-11-21 10:54 2020-01-3 Show GitHub Exploit DB Packet Storm
295447 8.8 HIGH
Network 		opsview opsview
opsview_core 		Cross-site request forgery (CSRF) vulnerability in Opsview before 4.4.1 and Opsview Core before 20130522 allows remote attackers to hijack the authentication of administrators for requests that chang… CWE-352
 Origin Validation Error 		CVE-2013-3935 2024-11-21 10:54 2020-01-3 Show GitHub Exploit DB Packet Storm
295448 7.8 HIGH
Local 		gksu-polkit_project
fedoraproject 		gksu-polkit
fedora 		gksu-polkit-0.0.3-6.fc18 was reported as fixing the issue in CVE-2012-5617 but the patch was improperly applied and it did not fixed the security issue. CWE-269
 Improper Privilege Management 		CVE-2013-4161 2024-11-21 10:54 2020-01-1 Show GitHub Exploit DB Packet Storm
295449 7.5 HIGH
Network 		ovislink airlive_poe2600hd_firmware AirLive POE-2600HD allows remote attackers to cause a denial of service (device reset) via a long URL. CWE-400
 Uncontrolled Resource Consumption 		CVE-2013-3691 2024-11-21 10:54 2019-12-12 Show GitHub Exploit DB Packet Storm
295450 6.1 MEDIUM
Network 		smokeping
debian
fedoraproject 		smokeping
debian_linux
fedora 		smokeping before 2.6.9 has XSS (incomplete fix for CVE-2012-0790) CWE-79
Cross-site Scripting 		CVE-2013-4158 2024-11-21 10:54 2019-12-11 Show GitHub Exploit DB Packet Storm