Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 30, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
222181	7.5	危険	オラクル	-	Oracle Fusion Middleware の Oracle Reports Developer における Security および Authentication に関する脆弱性	CWE-noinfo 情報不足	CVE-2013-5785	2014-01-17 12:06	2014-01-14	Show	GitHub Exploit DB Packet Storm

222182	5	警告	Google	-	Google Chrome の url/url_canon_relative.cc の DoResolveRelativeHost 関数におけるサービス運用妨害 (DoS) の脆弱性	CWE-119 バッファエラー	CVE-2013-2920	2014-01-17 11:57	2013-10-1	Show	GitHub Exploit DB Packet Storm

222183	6.8	警告	Google	-	Google Chrome で使用される Blink のリソースローダにおけるメモリ二重解放の脆弱性	CWE-399 リソース管理の問題	CVE-2013-2921	2014-01-17 11:56	2013-10-1	Show	GitHub Exploit DB Packet Storm

222184	6.8	警告	Google	-	Google Chrome で使用される Blink の core/html/HTMLTemplateElement.cpp におけるサービス運用妨害 (DoS) の脆弱性	CWE-399 リソース管理の問題	CVE-2013-2922	2014-01-17 11:55	2013-10-1	Show	GitHub Exploit DB Packet Storm

222185	7.5	危険	Google	-	Google Chrome におけるサービス運用妨害 (DoS) の脆弱性	CWE-noinfo 情報不足	CVE-2013-2923	2014-01-17 11:53	2013-10-1	Show	GitHub Exploit DB Packet Storm

222186	7.1	危険	オラクル	-	Oracle Hyperion の Hyperion Strategic Finance における Server に関する脆弱性	CWE-noinfo 情報不足	CVE-2013-3830	2014-01-17 11:45	2014-01-14	Show	GitHub Exploit DB Packet Storm

222187	4	警告	オラクル	-	Oracle Database Server の Core RDBMS における脆弱性	CWE-noinfo 情報不足	CVE-2013-5858	2014-01-17 11:37	2014-01-14	Show	GitHub Exploit DB Packet Storm

222188	5	警告	オラクル	-	Oracle Database Server の Core RDBMS における脆弱性	CWE-noinfo 情報不足	CVE-2013-5853	2014-01-17 11:36	2014-01-14	Show	GitHub Exploit DB Packet Storm

222189	3.5	注意	オラクル	-	Oracle Database Server の Core RDBMS における脆弱性	CWE-noinfo 情報不足	CVE-2013-5764	2014-01-17 11:35	2014-01-14	Show	GitHub Exploit DB Packet Storm

222190	5	警告	Node.js Foundation	-	Node.js の HTTP サーバにおけるサービス運用妨害 (DoS) の脆弱性	CWE-20 不適切な入力確認	CVE-2013-4450	2014-01-17 11:31	2013-10-18	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 30, 2026, 4:16 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
272961	8.8	HIGH Network	ad_inserter_project	ad_inserter	The ad-inserter plugin before 1.5.3 for WordPress has CSRF with resultant XSS via wp-admin/options-general.php?page=ad-inserter.php.	CWE-352 Origin Validation Error	CVE-2015-9497	2024-11-21 11:40	2019-10-23	Show	GitHub Exploit DB Packet Storm

272962	8.8	HIGH Network	freshmail	freshmail-newsletter	The freshmail-newsletter plugin before 1.6 for WordPress has shortcode.php SQL Injection via the 'FM_form id=' substring.	CWE-89 SQL Injection	CVE-2015-9496	2024-11-21 11:40	2019-10-23	Show	GitHub Exploit DB Packet Storm

272963	6.1	MEDIUM Network	syndication_links_project	syndication_links	The syndication-links plugin before 1.0.3 for WordPress has XSS via the genericons/example.html anchor identifier.	CWE-79 Cross-site Scripting	CVE-2015-9495	2024-11-21 11:40	2019-10-23	Show	GitHub Exploit DB Packet Storm

272964	6.1	MEDIUM Network	indieweb_post_kinds_project	indieweb_post_kinds	The indieweb-post-kinds plugin before 1.3.1.1 for WordPress has XSS via the genericons/example.html anchor identifier.	CWE-79 Cross-site Scripting	CVE-2015-9494	2024-11-21 11:40	2019-10-23	Show	GitHub Exploit DB Packet Storm

272965	6.1	MEDIUM Network	nlb-creationst	my_wish_list	The my-wish-list plugin before 1.4.2 for WordPress has multiple XSS issues.	CWE-79 Cross-site Scripting	CVE-2015-9493	2024-11-21 11:40	2019-10-23	Show	GitHub Exploit DB Packet Storm

272966	7.5	HIGH Network	smartit_premium_responsive_project	smartit_premium_responsive	The ThemeMakers SmartIT Premium Responsive theme through 2015-05-15 for WordPress allows remote attackers to obtain sensitive information (such as user_login, user_pass, and user_email values) via a …	CWE-200 Information Exposure	CVE-2015-9492	2024-11-21 11:40	2019-10-12	Show	GitHub Exploit DB Packet Storm

272967	7.5	HIGH Network	blessing_premium_responsive_project	blessing_premium_responsive	The ThemeMakers Blessing Premium Responsive theme through 2015-05-15 for WordPress allows remote attackers to obtain sensitive information (such as user_login, user_pass, and user_email values) via a…	CWE-200 Information Exposure	CVE-2015-9491	2024-11-21 11:40	2019-10-12	Show	GitHub Exploit DB Packet Storm

272968	7.5	HIGH Network	gamestheme_premium_project	gamestheme_premium	The ThemeMakers GamesTheme Premium theme through 2015-05-15 for WordPress allows remote attackers to obtain sensitive information (such as user_login, user_pass, and user_email values) via a direct r…	CWE-200 Information Exposure	CVE-2015-9490	2024-11-21 11:40	2019-10-12	Show	GitHub Exploit DB Packet Storm

272969	7.5	HIGH Network	goodnex_premium_responsive_project	goodnex_premium_responsive	The ThemeMakers Goodnex Premium Responsive theme through 2015-05-15 for WordPress allows remote attackers to obtain sensitive information (such as user_login, user_pass, and user_email values) via a …	CWE-200 Information Exposure	CVE-2015-9489	2024-11-21 11:40	2019-10-12	Show	GitHub Exploit DB Packet Storm

272970	7.5	HIGH Network	almera_responsive_portfolio_site_template_project	almera_responsive_portfolio_site_template	The ThemeMakers Almera Responsive Portfolio Site Template component through 2015-05-15 for WordPress allows remote attackers to obtain sensitive information (such as user_login, user_pass, and user_e…	CWE-200 Information Exposure	CVE-2015-9488	2024-11-21 11:40	2019-10-12	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed