Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 28, 2026, 2:01 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
222051 6.8 警告 Irfan Skiljan - IrfanView におけるバッファオーバーフローの脆弱性 CWE-119
バッファエラー
CVE-2013-6932 2014-01-7 19:24 2013-12-24 Show GitHub Exploit DB Packet Storm
222052 6.5 警告 サイボウズ - サイボウズ ガルーンにおける SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2013-6929 2014-01-7 19:20 2013-12-25 Show GitHub Exploit DB Packet Storm
222053 5 警告 WesternDeal - WordPress 用 Advanced Dewplayer プラグインの download-file.php におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル
CVE-2013-7240 2014-01-7 18:50 2013-12-30 Show GitHub Exploit DB Packet Storm
222054 4.3 警告 Ad-minister Project - WordPress 用 Ad-minister プラグインにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2013-6993 2014-01-7 18:49 2013-12-26 Show GitHub Exploit DB Packet Storm
222055 6.8 警告 AskApache - WordPress 用 AskApache Firefox Adsense プラグインの askapache-firefox-adsense.php におけるクロスサイトリクエストフォージェリの脆弱性 CWE-352
同一生成元ポリシー違反
CVE-2013-6992 2014-01-7 18:49 2013-12-26 Show GitHub Exploit DB Packet Storm
222056 4.3 警告 OKAMOTO Wataru - WordPress 用 WP-Cron Dashboard プラグインにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2013-6991 2014-01-7 18:49 2013-12-26 Show GitHub Exploit DB Packet Storm
222057 8.5 危険 IBM - IBM i および zSeries サーバ上で稼働する z/OS の OSPF の実装におけるサービス運用妨害 (DoS) の脆弱性 CWE-20
不適切な入力確認
CVE-2013-5385 2014-01-7 17:35 2013-08-1 Show GitHub Exploit DB Packet Storm
222058 4.3 警告 Codiad - Codiad におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2013-7257 2014-01-7 17:22 2013-12-20 Show GitHub Exploit DB Packet Storm
222059 6.8 警告 Opsview - Opsview におけるクロスサイトリクエストフォージェリの脆弱性 CWE-352
同一生成元ポリシー違反
CVE-2013-7256 2014-01-7 17:13 2013-12-23 Show GitHub Exploit DB Packet Storm
222060 5.8 警告 Opsview - Opsview におけるオープンリダイレクトの脆弱性 CWE-20
不適切な入力確認
CVE-2013-7255 2014-01-7 17:12 2013-12-23 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 28, 2026, 4:16 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
273381 7.5 HIGH
Network
mediawiki
fedoraproject
mediawiki
fedora
The OAuth extension for MediaWiki improperly negotiates a new client token only over Special:OAuth/initiate, which allows attackers to bypass intended IP address access restrictions by making an API … CWE-284
Improper Access Control
CVE-2015-8008 2024-11-21 11:37 2017-12-30 Show GitHub Exploit DB Packet Storm
273382 5.5 MEDIUM
Local
google android The SecEmailComposer/EmailComposer application in the Samsung S6 Edge before the October 2015 MR uses weak permissions for the com.samsung.android.email.intent.action.QUICK_REPLY_BACKGROUND service a… CWE-275
 Permission Issues
CVE-2015-7889 2024-11-21 11:37 2017-12-28 Show GitHub Exploit DB Packet Storm
273383 9.8 CRITICAL
Network
easy2map easy2map Multiple directory traversal vulnerabilities in (1) includes/MapImportCSV2.php and (2) includes/MapImportCSV.php in the Easy2Map plugin before 1.3.0 for WordPress allow remote attackers to include an… CWE-22
Path Traversal
CVE-2015-7669 2024-11-21 11:37 2017-12-28 Show GitHub Exploit DB Packet Storm
273384 6.1 MEDIUM
Network
easy2map easy2map Cross-site scripting (XSS) vulnerability in includes/MapPinImageSave.php in the Easy2Map plugin before 1.3.0 for WordPress allows remote attackers to inject arbitrary web script or HTML via the map_i… CWE-79
Cross-site Scripting
CVE-2015-7668 2024-11-21 11:37 2017-12-28 Show GitHub Exploit DB Packet Storm
273385 6.1 MEDIUM
Network
web-mv resads Multiple cross-site scripting (XSS) vulnerabilities in (1) templates/admanagement/admanagement.php and (2) templates/adspot/adspot.php in the ResAds plugin before 1.0.2 for WordPress allow remote att… CWE-79
Cross-site Scripting
CVE-2015-7667 2024-11-21 11:37 2017-12-28 Show GitHub Exploit DB Packet Storm
273386 6.1 MEDIUM
Network
codepeople payment_form_for_paypal_pro Multiple cross-site scripting (XSS) vulnerabilities in the (1) cp_updateMessageItem and (2) cp_deleteMessageItem functions in cp_ppp_admin_int_message_list.inc.php in the Payment Form for PayPal Pro … CWE-79
Cross-site Scripting
CVE-2015-7666 2024-11-21 11:37 2017-12-28 Show GitHub Exploit DB Packet Storm
273387 5.4 MEDIUM
Network
taxonomy_find_project taxonomy_find Cross-site scripting (XSS) vulnerability in the Taxonomy Find module 6.x-2.x through 6.x-1.2 and 7.x-2.x through 7.x-1.0 in Drupal allows remote authenticated users with certain permissions to inject… CWE-79
Cross-site Scripting
CVE-2015-7878 2024-11-21 11:37 2017-11-7 Show GitHub Exploit DB Packet Storm
273388 6.1 MEDIUM
Network
drupal
jquery_update_project
labjs_project
drupal
jquery_update
labjs
Open redirect vulnerability in the Overlay module in Drupal 7.x before 7.41, the jQuery Update module 7.x-2.x before 7.x-2.7 for Drupal, and the LABjs module 7.x-1.x before 7.x-1.8 allows remote atta… CWE-601
Open Redirect
CVE-2015-7943 2024-11-21 11:37 2017-10-19 Show GitHub Exploit DB Packet Storm
273389 8.8 HIGH
Network
realtyna realtyna_property_listing Cross-site request forgery (CSRF) vulnerability in the Realtyna RPL (com_rpl) component before 8.9.5 for Joomla! allows remote attackers to hijack the authentication of administrators for requests th… CWE-352
 Origin Validation Error
CVE-2015-7715 2024-11-21 11:37 2017-10-19 Show GitHub Exploit DB Packet Storm
273390 7.2 HIGH
Network
realtyna realtyna_property_listing Multiple SQL injection vulnerabilities in the Realtyna RPL (com_rpl) component before 8.9.5 for Joomla! allow remote administrators to execute arbitrary SQL commands via the (1) id, (2) copy_field in… CWE-89
SQL Injection
CVE-2015-7714 2024-11-21 11:37 2017-10-19 Show GitHub Exploit DB Packet Storm