Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 9, 2026, 6 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
220691 6.8 警告 Moxiecode Systems AB - WordPress 用 TinyMCE Color Picker プラグインにおけるクロスサイトリクエストフォージェリの脆弱性 CWE-352
同一生成元ポリシー違反
CVE-2014-3845 2014-05-26 15:33 2014-05-12 Show GitHub Exploit DB Packet Storm
220692 5 警告 Moxiecode Systems AB - WordPress 用 TinyMCE Color Picker プラグインにおけるプラグイン設定を変更される脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2014-3844 2014-05-26 15:32 2014-05-12 Show GitHub Exploit DB Packet Storm
220693 6.8 警告 Zemanta - WordPress 用 Search Everything プラグインにおけるクロスサイトリクエストフォージェリの脆弱性 CWE-352
同一生成元ポリシー違反
CVE-2014-3843 2014-05-26 15:32 2014-05-7 Show GitHub Exploit DB Packet Storm
220694 4.3 警告 iMember360 - WordPress 用 iMember360 プラグインにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2014-3842 2014-05-26 15:32 2014-04-24 Show GitHub Exploit DB Packet Storm
220695 4.3 警告 Tech Banker - WordPress 用 Contact Bank プラグインにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2014-3841 2014-05-26 15:31 2014-05-12 Show GitHub Exploit DB Packet Storm
220696 6.5 警告 DOTonPAPER - WordPress 用 Booking System プラグインの dopbs-backend-forms.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2014-3210 2014-05-26 15:31 2014-05-21 Show GitHub Exploit DB Packet Storm
220697 6.8 警告 Mail On Update Project - WordPress 用 Mail On Update プラグインにおけるクロスサイトリクエストフォージェリの脆弱性 CWE-352
同一生成元ポリシー違反
CVE-2013-2107 2014-05-26 15:28 2013-05-16 Show GitHub Exploit DB Packet Storm
220698 7.5 危険 MicroP project - MicroP におけるスタックベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー
CVE-2010-5299 2014-05-26 15:10 2010-08-23 Show GitHub Exploit DB Packet Storm
220699 7.5 危険 エマソン - Emerson DeltaV におけるアクセス制限を回避される脆弱性 CWE-255
証明書・パスワード管理
CVE-2014-2350 2014-05-26 14:52 2014-05-22 Show GitHub Exploit DB Packet Storm
220700 4.6 警告 エマソン - Emerson DeltaV における設定ファイルを変更される脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2014-2349 2014-05-26 14:51 2014-05-22 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 9, 2026, 4:16 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
295771 - mesa3d
canonical
redhat
opensuse
mesa
ubuntu_linux
enterprise_linux
opensuse
The Intel drivers in Mesa 8.0.x and 9.0.x allow context-dependent attackers to cause a denial of service (reachable assertion and crash) and possibly execute arbitrary code via vectors involving 3d g… CWE-119
Incorrect Access of Indexable Resource ('Range Error') 
CVE-2013-1872 2024-11-21 10:50 2013-08-20 Show GitHub Exploit DB Packet Storm
295772 - happyworm jplayer Multiple cross-site scripting (XSS) vulnerabilities in actionscript/Jplayer.as in the Flash SWF component (jplayer.swf) in jPlayer before 2.2.23 allow remote attackers to inject arbitrary web script … CWE-79
Cross-site Scripting
CVE-2013-2022 2024-11-21 10:50 2013-08-18 Show GitHub Exploit DB Packet Storm
295773 - pypa
fedoraproject
pip
fedora
pip before 1.3 allows local users to overwrite arbitrary files via a symlink attack on a file in the /tmp/pip-build temporary directory. CWE-59
Link Following
CVE-2013-1888 2024-11-21 10:50 2013-08-17 Show GitHub Exploit DB Packet Storm
295774 - happyworm jplayer Cross-site scripting (XSS) vulnerability in actionscript/Jplayer.as in the Flash SWF component (jplayer.swf) in jPlayer before 2.3.1 allows remote attackers to inject arbitrary web script or HTML via… CWE-79
Cross-site Scripting
CVE-2013-2023 2024-11-21 10:50 2013-08-16 Show GitHub Exploit DB Packet Storm
295775 - happyworm
owncloud
jplayer
owncloud
Multiple cross-site scripting (XSS) vulnerabilities in actionscript/Jplayer.as in the Flash SWF component (jplayer.swf) in jPlayer before 2.2.20, as used in ownCloud Server before 5.0.4 and other pro… CWE-79
Cross-site Scripting
CVE-2013-1942 2024-11-21 10:50 2013-08-16 Show GitHub Exploit DB Packet Storm
295776 - xen xen Xen 4.0.2 through 4.0.4, 4.1.x, and 4.2.x allows local PV guest users to cause a denial of service (hypervisor crash) via certain bit combinations to the XSETBV instruction. CWE-20
 Improper Input Validation 
CVE-2013-2078 2024-11-21 10:50 2013-08-15 Show GitHub Exploit DB Packet Storm
295777 - mozilla thunderbird_esr
firefox
seamonkey
thunderbird
Mozilla Firefox before 23.0, Firefox ESR 17.x before 17.0.8, Thunderbird before 17.0.8, Thunderbird ESR 17.x before 17.0.8, and SeaMonkey before 2.20 do not properly restrict local-filesystem access … CWE-264
Permissions, Privileges, and Access Controls
CVE-2013-1717 2024-11-21 10:50 2013-08-7 Show GitHub Exploit DB Packet Storm
295778 - mozilla firefox Multiple untrusted search path vulnerabilities in the (1) full installer and (2) stub installer in Mozilla Firefox before 23.0 on Windows allow local users to gain privileges via a Trojan horse DLL i… NVD-CWE-Other
CVE-2013-1715 2024-11-21 10:50 2013-08-7 Show GitHub Exploit DB Packet Storm
295779 - mozilla seamonkey
firefox
thunderbird
thunderbird_esr
The Web Workers implementation in Mozilla Firefox before 23.0, Firefox ESR 17.x before 17.0.8, Thunderbird before 17.0.8, Thunderbird ESR 17.x before 17.0.8, and SeaMonkey before 2.20 does not proper… CWE-264
Permissions, Privileges, and Access Controls
CVE-2013-1714 2024-11-21 10:50 2013-08-7 Show GitHub Exploit DB Packet Storm
295780 - mozilla firefox
seamonkey
thunderbird
thunderbird_esr
Mozilla Firefox before 23.0, Firefox ESR 17.x before 17.0.8, Thunderbird before 17.0.8, Thunderbird ESR 17.x before 17.0.8, and SeaMonkey before 2.20 use an incorrect URI within unspecified compariso… CWE-264
Permissions, Privileges, and Access Controls
CVE-2013-1713 2024-11-21 10:50 2013-08-7 Show GitHub Exploit DB Packet Storm