Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 27, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
222391 4.3 警告 CRU Acquisition Group - CRU Ditto Forensic FieldStation のファームウェアにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2013-6882 2013-12-19 15:52 2013-12-12 Show GitHub Exploit DB Packet Storm
222392 2.1 注意 valve software - Valve SteamOS の valve-bugreporter パッケージの Valve Bug Reporter における重要な情報を取得される脆弱性 CWE-310
暗号の問題 		CVE-2013-7128 2013-12-19 15:51 2013-12-14 Show GitHub Exploit DB Packet Storm
222393 4.3 警告 ThemeBeans - WordPress 用 ThemeBeans Blooog Theme におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2013-7129 2013-12-19 14:47 2013-12-2 Show GitHub Exploit DB Packet Storm
222394 2.1 注意 アップル - Apple Mac OS X 上で稼働する Safari における重要な情報を取得される脆弱性 CWE-310
暗号の問題 		CVE-2013-7127 2013-12-19 14:41 2013-12-13 Show GitHub Exploit DB Packet Storm
222395 8.8 危険 Google - Android におけるアクセス制限を回避される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2013-6271 2013-12-19 12:13 2013-11-27 Show GitHub Exploit DB Packet Storm
222396 4.7 警告 Eaton - 複数の Cooper Power Systems 製品 の DNP3 コンポーネントにおけるサービス運用妨害 (DoS) の脆弱性 CWE-20
不適切な入力確認 		CVE-2013-2816 2013-12-19 11:58 2013-12-12 Show GitHub Exploit DB Packet Storm
222397 7.1 危険 Eaton - Cooper Power Systems Cybectec DNP3 Master OPC Server におけるサービス運用妨害 (DoS) の脆弱性 CWE-20
不適切な入力確認 		CVE-2013-2814 2013-12-19 11:56 2013-12-12 Show GitHub Exploit DB Packet Storm
222398 7.1 危険 Eaton - 複数の Cooper Power Systems 製品 の DNP3 コンポーネントにおけるサービス運用妨害 (DoS) の脆弱性 CWE-20
不適切な入力確認 		CVE-2013-2813 2013-12-19 11:55 2013-12-12 Show GitHub Exploit DB Packet Storm
222399 8 危険 シーメンス - Siemens RuggedCom ROS の統合された HTTPS サーバにおける管理者アクションの制限を回避される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2013-6926 2013-12-18 16:56 2013-12-6 Show GitHub Exploit DB Packet Storm
222400 8.3 危険 シーメンス - Siemens RuggedCom ROS の統合された HTTPS サーバにおける Web セッションをハイジャックされる脆弱性 CWE-Other
その他 		CVE-2013-6925 2013-12-18 16:55 2013-12-6 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 28, 2026, 4:16 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
273531 2.3 LOW
Local 		linux linux_kernel The vivid_fb_ioctl function in drivers/media/platform/vivid/vivid-osd.c in the Linux kernel through 4.3.3 does not initialize a certain structure member, which allows local users to obtain sensitive … CWE-200
Information Exposure 		CVE-2015-7884 2024-11-21 11:37 2015-12-28 Show GitHub Exploit DB Packet Storm
273532 6.1 MEDIUM
Network 		let\'s_php\! pbbs Cross-site scripting (XSS) vulnerability in Let's PHP! p++BBS before 4.10 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. CWE-79
Cross-site Scripting 		CVE-2015-7783 2024-11-21 11:37 2015-12-28 Show GitHub Exploit DB Packet Storm
273533 5.3 MEDIUM
Network 		tails_project tails Tails before 1.7 includes the wget program but does not prevent automatic fallback from passive FTP to active FTP, which allows remote FTP servers to discover the Tor client IP address by reading a (… CWE-200
Information Exposure 		CVE-2015-7665 2024-11-21 11:37 2015-12-28 Show GitHub Exploit DB Packet Storm
273534 8.6 HIGH
Network 		adcon a840_telemetry_gateway_base_station_firmware The Java client in Adcon Telemetry A840 Telemetry Gateway Base Station allows remote attackers to discover log-file pathnames via unspecified vectors. CWE-200
Information Exposure 		CVE-2015-7934 2024-11-21 11:37 2015-12-24 Show GitHub Exploit DB Packet Storm
273535 8.6 HIGH
Network 		adcon a840_telemetry_gateway_base_station_firmware Adcon Telemetry A840 Telemetry Gateway Base Station allows remote attackers to obtain sensitive information by sniffing the network. CWE-200
Information Exposure 		CVE-2015-7932 2024-11-21 11:37 2015-12-24 Show GitHub Exploit DB Packet Storm
273536 8.7 HIGH
Network 		adcon a840_telemetry_gateway_base_station_firmware The Java client in Adcon Telemetry A840 Telemetry Gateway Base Station does not authenticate the station device, which allows man-in-the-middle attackers to spoof devices and obtain sensitive informa… CWE-200
CWE-20
Information Exposure
 Improper Input Validation  		CVE-2015-7931 2024-11-21 11:37 2015-12-24 Show GitHub Exploit DB Packet Storm
273537 10.0 CRITICAL
Network 		adcon a840_telemetry_gateway_base_station_firmware Adcon Telemetry A840 Telemetry Gateway Base Station has hardcoded credentials, which allows remote attackers to obtain administrative access via unspecified vectors. NVD-CWE-Other
CVE-2015-7930 2024-11-21 11:37 2015-12-24 Show GitHub Exploit DB Packet Storm
273538 4.3 MEDIUM
Network 		ewon ewon_firmware eWON devices with firmware through 10.1s0 support unspecified GET requests, which might allow remote attackers to obtain sensitive information by reading (1) web-server access logs, (2) web-server Re… CWE-200
Information Exposure 		CVE-2015-7929 2024-11-21 11:37 2015-12-23 Show GitHub Exploit DB Packet Storm
273539 8.5 HIGH
Network 		ewon ewon_firmware eWON devices with firmware before 10.1s0 do not have an off autocomplete attribute for a password field, which makes it easier for remote attackers to obtain access by leveraging an unattended workst… CWE-200
Information Exposure 		CVE-2015-7928 2024-11-21 11:37 2015-12-23 Show GitHub Exploit DB Packet Storm
273540 6.1 MEDIUM
Network 		ewon ewon_firmware Cross-site scripting (XSS) vulnerability on eWON devices with firmware through 10.1s0 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. CWE-79
Cross-site Scripting 		CVE-2015-7927 2024-11-21 11:37 2015-12-23 Show GitHub Exploit DB Packet Storm