Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 16, 2026, 2 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
218661 3.7 注意 オラクル - Oracle Supply Chain Products Suite の Oracle Transportation Management における Security に関する脆弱性性 CWE-noinfo
情報不足 		CVE-2014-2459 2014-04-18 10:10 2014-04-15 Show GitHub Exploit DB Packet Storm
218662 4.3 警告 オラクル - Oracle Supply Chain Products Suite の Oracle Agile Product Lifecycle における Install に関する脆弱性 CWE-noinfo
情報不足 		CVE-2014-2458 2014-04-18 10:09 2014-04-15 Show GitHub Exploit DB Packet Storm
218663 4.3 警告 オラクル - Oracle Supply Chain Products Suite の Oracle Agile Product Lifecycle における Install に関する脆弱性 CWE-noinfo
情報不足 		CVE-2014-2457 2014-04-18 10:09 2014-04-15 Show GitHub Exploit DB Packet Storm
218664 3.5 注意 オラクル - Oracle Supply Chain Products Suite の Oracle Agile PLM Framework における Security に関する脆弱性 CWE-noinfo
情報不足 		CVE-2014-2445 2014-04-18 10:08 2014-04-15 Show GitHub Exploit DB Packet Storm
218665 4.3 警告 オラクル - Oracle Siebel CRM の Siebel UI Framework における Open_UI に関する脆弱性 CWE-noinfo
情報不足 		CVE-2014-2468 2014-04-18 09:38 2014-04-15 Show GitHub Exploit DB Packet Storm
218666 4.3 警告 オラクル - Oracle Java SE における Scripting に関する脆弱性 CWE-noinfo
情報不足 		CVE-2014-0464 2014-04-17 19:41 2014-04-15 Show GitHub Exploit DB Packet Storm
218667 4.3 警告 オラクル - Oracle Java SE における Scripting に関する脆弱性 CWE-noinfo
情報不足 		CVE-2014-0463 2014-04-17 19:41 2014-04-15 Show GitHub Exploit DB Packet Storm
218668 9.3 危険 オラクル - Oracle Java SE における JavaFX に関する脆弱性 CWE-noinfo
情報不足 		CVE-2014-2410 2014-04-17 19:41 2014-04-15 Show GitHub Exploit DB Packet Storm
218669 6.8 警告 オラクル - Oracle Java SE および JavaFX における脆弱性 CWE-noinfo
情報不足 		CVE-2014-2422 2014-04-17 19:41 2014-04-15 Show GitHub Exploit DB Packet Storm
218670 7.8 危険 Ignite Realtime - Openfire にサービス運用妨害 (DoS) の脆弱性 CWE-Other
その他 		CVE-2014-0360 2014-04-17 17:44 2014-04-16 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 16, 2026, 4 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
291681 - moxiecode
wordpress
fedoraproject 		plupload
wordpress
fedora 		Cross-site scripting (XSS) vulnerability in Plupload.as in Moxiecode plupload before 1.5.5, as used in WordPress before 3.5.1 and other products, allows remote attackers to inject arbitrary web scrip… CWE-79
Cross-site Scripting 		CVE-2013-0237 2024-11-21 10:47 2013-07-9 Show GitHub Exploit DB Packet Storm
291682 - wordpress wordpress Multiple cross-site scripting (XSS) vulnerabilities in WordPress before 3.5.1 allow remote attackers to inject arbitrary web script or HTML via vectors involving (1) gallery shortcodes or (2) the con… CWE-79
Cross-site Scripting 		CVE-2013-0236 2024-11-21 10:47 2013-07-9 Show GitHub Exploit DB Packet Storm
291683 - wordpress wordpress The XMLRPC API in WordPress before 3.5.1 allows remote attackers to send HTTP requests to intranet servers, and conduct port-scanning attacks, by specifying a crafted source URL for a pingback, relat… NVD-CWE-Other
CVE-2013-0235 2024-11-21 10:47 2013-07-9 Show GitHub Exploit DB Packet Storm
291684 - ibm business_process_manager Multiple cross-site scripting (XSS) vulnerabilities in IBM Business Process Manager (BPM) 7.5.1.x, 8.0.0.x, and 8.0.1 before FP1 allow remote authenticated users to inject arbitrary web script or HTM… CWE-79
Cross-site Scripting 		CVE-2013-0581 2024-11-21 10:47 2013-07-6 Show GitHub Exploit DB Packet Storm
291685 - ibm sterling_b2b_integrator
sterling_file_gateway 		IBM Sterling B2B Integrator 5.1 and 5.2 and Sterling File Gateway 2.1 and 2.2 allow remote authenticated users to obtain sensitive information about application implementation via unspecified vectors… CWE-200
Information Exposure 		CVE-2013-0568 2024-11-21 10:47 2013-07-3 Show GitHub Exploit DB Packet Storm
291686 - ibm sterling_b2b_integrator
sterling_file_gateway 		IBM Sterling B2B Integrator 5.1 and 5.2 and Sterling File Gateway 2.1 and 2.2 allow remote authenticated users to obtain sensitive information about application implementation via unspecified vectors… CWE-200
Information Exposure 		CVE-2013-0567 2024-11-21 10:47 2013-07-3 Show GitHub Exploit DB Packet Storm
291687 - ibm sterling_b2b_integrator
sterling_file_gateway 		Multiple SQL injection vulnerabilities in IBM Sterling B2B Integrator 5.1 and 5.2 and Sterling File Gateway 2.1 and 2.2 allow remote authenticated users to execute arbitrary SQL commands via unspecif… CWE-89
SQL Injection 		CVE-2013-0560 2024-11-21 10:47 2013-07-3 Show GitHub Exploit DB Packet Storm
291688 - ibm sterling_b2b_integrator
sterling_file_gateway 		IBM Sterling B2B Integrator 5.1 and 5.2 and Sterling File Gateway 2.1 and 2.2 allow remote attackers to obtain sensitive information about application implementation via unspecified vectors. CWE-200
Information Exposure 		CVE-2013-0558 2024-11-21 10:47 2013-07-3 Show GitHub Exploit DB Packet Storm
291689 - ibm sterling_b2b_integrator
sterling_file_gateway 		An unspecified third-party component in IBM Sterling B2B Integrator 5.1 and 5.2 and Sterling File Gateway 2.1 and 2.2 uses short session ID values, which makes it easier for remote attackers to hijac… CWE-255
Credentials Management 		CVE-2013-0539 2024-11-21 10:47 2013-07-3 Show GitHub Exploit DB Packet Storm
291690 - ibm sterling_b2b_integrator
sterling_file_gateway 		The console in IBM Sterling B2B Integrator 5.1 and 5.2 and Sterling File Gateway 2.1 and 2.2 allows remote attackers to read stack traces by triggering (1) an error or (2) an exception. CWE-200
Information Exposure 		CVE-2013-0481 2024-11-21 10:47 2013-07-3 Show GitHub Exploit DB Packet Storm