Vulnerability Search Top
Show Search Menu
|
You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database). |
JVN Vulnerability Information
Update Date":June 7, 2026, 6 p.m.
| No | CVSS | Level Attach Vector |
Vendor Name | Project Name | Title | CWE | CVE | Update Date | Publication Date | Impact Show |
Exploit PoC Search |
|---|---|---|---|---|---|---|---|---|---|---|---|
| 222291 | 5 | 警告 | Craig Drummond | - | cantata における重要な情報を取得される脆弱性 |
CWE-264
認可・権限・アクセス制御 |
CVE-2013-7301 | 2014-02-4 15:44 | 2013-12-24 | Show | GitHub Exploit DB Packet Storm |
| 222292 | 5 | 警告 | Craig Drummond | - | cantata における絶対パストラバーサルの脆弱性 |
CWE-22
パス・トラバーサル |
CVE-2013-7300 | 2014-02-4 15:43 | 2013-12-24 | Show | GitHub Exploit DB Packet Storm |
| 222293 | 4.3 | 警告 | OpenStack レッドハット |
- | OpenStack Oslo の python-qpid クライアントにおける重要な情報を取得される脆弱性 |
CWE-310
暗号の問題 |
CVE-2013-6491 | 2014-02-4 14:23 | 2013-05-30 | Show | GitHub Exploit DB Packet Storm |
| 222294 | 5 | 警告 | Schneider Electric | - | Schneider Electric Telvent SAGE 3030 RTU のファームウェアにおけるサービス運用妨害 (DoS) の脆弱性 |
CWE-20 CWE-399 |
CVE-2013-6143 | 2014-02-4 14:21 | 2013-12-30 | Show | GitHub Exploit DB Packet Storm |
| 222295 | 7.5 | 危険 | タブローソフトウェア | - | Tableau Server における SQL インジェクションの脆弱性 |
CWE-89
SQLインジェクション |
CVE-2014-1204 | 2014-02-4 14:12 | 2014-01-8 | Show | GitHub Exploit DB Packet Storm |
| 222296 | 4.3 | 警告 | Steve Souza | - | JAMon におけるクロスサイトスクリプティングの脆弱性 |
CWE-79
クロスサイト・スクリプティング（XSS） |
CVE-2013-6235 | 2014-02-4 14:11 | 2013-01-23 | Show | GitHub Exploit DB Packet Storm |
| 222297 | 5.5 | 警告 | IBM | - | IBM Financial Transaction Manager の OAC コンポーネントにおけるアクセス制限を回避される脆弱性 |
CWE-264
認可・権限・アクセス制御 |
CVE-2014-0833 | 2014-02-4 14:08 | 2014-01-24 | Show | GitHub Exploit DB Packet Storm |
| 222298 | 3.5 | 注意 | IBM | - | IBM Financial Transaction Manager の OAC コンポーネントにおけるクロスサイトスクリプティングの脆弱性 |
CWE-79
クロスサイト・スクリプティング（XSS） |
CVE-2014-0832 | 2014-02-4 14:07 | 2014-01-24 | Show | GitHub Exploit DB Packet Storm |
| 222299 | 6.8 | 警告 | IBM | - | IBM Financial Transaction Manager の OAC コンポーネントにおけるクロスサイトリクエストフォージェリの脆弱性 |
CWE-352
同一生成元ポリシー違反 |
CVE-2014-0831 | 2014-02-4 14:07 | 2014-01-24 | Show | GitHub Exploit DB Packet Storm |
| 222300 | 4 | 警告 | IBM | - | IBM Financial Transaction Manager の OAC コンポーネントにおけるディレクトリトラバーサルの脆弱性 |
CWE-22
パス・トラバーサル |
CVE-2014-0830 | 2014-02-4 14:06 | 2014-01-24 | Show | GitHub Exploit DB Packet Storm |
NVD Vulnerability Information
Update Date:June 7, 2026, 4:13 a.m.
| No | CVSS | Level Attach Vector |
Vendor Name | Project Name | Title | CWE | CVE | Update Date | Publication Date | Show Affected | Exploit PoC Search |
|---|---|---|---|---|---|---|---|---|---|---|---|
| 273841 | 9.8 |
CRITICAL
Network |
huge-it | portfolio_gallery | Unauthenticated SQL Injection in Huge-IT Portfolio Gallery Plugin v1.0.6 |
CWE-89
SQL Injection |
CVE-2016-1000124 | 2024-11-21 11:42 | 2016-10-6 | Show | GitHub Exploit DB Packet Storm |
| 273842 | 9.8 |
CRITICAL
Network |
huge-it | video_gallery | Unauthenticated SQL Injection in Huge-IT Video Gallery v1.0.9 for Joomla |
CWE-89
SQL Injection |
CVE-2016-1000123 | 2024-11-21 11:42 | 2016-10-6 | Show | GitHub Exploit DB Packet Storm |
| 273843 | 6.1 |
MEDIUM
Network |
huge-it | gallery | XSS in huge IT gallery v1.1.5 for Joomla |
CWE-79
Cross-site Scripting |
CVE-2016-1000114 | 2024-11-21 11:42 | 2016-10-6 | Show | GitHub Exploit DB Packet Storm |
| 273844 | 9.8 |
CRITICAL
Network |
huge-it | gallery | XSS and SQLi in huge IT gallery v1.1.5 for Joomla |
CWE-89
SQL Injection |
CVE-2016-1000113 | 2024-11-21 11:42 | 2016-10-6 | Show | GitHub Exploit DB Packet Storm |
| 273845 | 9.1 |
CRITICAL
Network |
contussupport | contus-video-comments | Unauthenticated remote .jpg file upload in contus-video-comments v1.0 wordpress plugin |
CWE-22
Path Traversal |
CVE-2016-1000112 | 2024-11-21 11:42 | 2016-10-6 | Show | GitHub Exploit DB Packet Storm |
| 273846 | 7.5 |
HIGH
Network |
tp-link | tp-link | TP-LINK lost control of two domains, www.tplinklogin.net and tplinkextender.net. Please note that these domains are physically printed on many of the devices. |
CWE-254
7PK - Security Features |
CVE-2016-1000009 | 2024-11-21 11:42 | 2016-10-6 | Show | GitHub Exploit DB Packet Storm |
| 273847 | 8.8 |
HIGH
Network |
progress | whatsup_gold | Ipswitch WhatsUp Gold 16.4.1 WrFreeFormText.asp sUniqueID Parameter Blind SQL Injection |
CWE-89
SQL Injection |
CVE-2016-1000000 | 2024-11-21 11:42 | 2016-10-6 | Show | GitHub Exploit DB Packet Storm |
| 273848 | 9.8 |
CRITICAL
Network |
emc |
networker_module_for_microsoft_applications replication_manager |
The client in EMC Replication Manager (RM) before 5.5.3.0_01-PatchHotfix, EMC Network Module for Microsoft 3.x, and EMC Networker Module for Microsoft 8.2.x before 8.2.3.6 allows remote RM servers to… |
CWE-20
Improper Input Validation |
CVE-2016-0913 | 2024-11-21 11:42 | 2016-10-5 | Show | GitHub Exploit DB Packet Storm |
| 273849 | 5.5 |
MEDIUM
Local |
oracle | linux | Unspecified vulnerability in the kernel-uek component in Oracle Linux 6 allows local users to affect availability via unknown vectors. |
NVD-CWE-noinfo
|
CVE-2016-0617 | 2024-11-21 11:42 | 2016-09-30 | Show | GitHub Exploit DB Packet Storm |
| 273850 | 4.3 |
MEDIUM
Network |
emc |
rsa_via_lifecycle_and_governance rsa_identity_management_and_governance |
EMC RSA Identity Management and Governance before 6.8.1 P25 and 6.9.x before 6.9.1 P15 and RSA Via Lifecycle and Governance before 7.0.0 P04 allow remote authenticated users to obtain User Detail Pop… |
CWE-200
Information Exposure |
CVE-2016-0918 | 2024-11-21 11:42 | 2016-09-24 | Show | GitHub Exploit DB Packet Storm |