Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 7, 2026, 10 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
224001 6.4 警告 オラクル - Oracle E-Business Suite の Oracle Marketing におけるキャンペーン管理の処理に関する脆弱性 CWE-noinfo
情報不足 		CVE-2013-0382 2013-11-8 11:14 2013-01-15 Show GitHub Exploit DB Packet Storm
224002 4.3 警告 オラクル - Oracle E-Business Suite の Oracle Payroll における給与明細書表示の処理に関する脆弱性 CWE-noinfo
情報不足 		CVE-2013-0380 2013-11-8 11:12 2013-01-15 Show GitHub Exploit DB Packet Storm
224003 4.3 警告 オラクル - Oracle Siebel CRM における Siebel Calendar の処理に関する脆弱性 CWE-noinfo
情報不足 		CVE-2013-0379 2013-11-8 11:11 2013-01-15 Show GitHub Exploit DB Packet Storm
224004 4.3 警告 オラクル - Oracle Siebel CRM における Siebel Calendar の処理に関する脆弱性 CWE-noinfo
情報不足 		CVE-2013-0378 2013-11-8 11:02 2013-01-15 Show GitHub Exploit DB Packet Storm
224005 4.3 警告 オラクル - Oracle E-Business Suite の Oracle アプリケーション・テクノロジ・スタックにおける脆弱性 CWE-noinfo
情報不足 		CVE-2013-0377 2013-11-8 11:01 2013-01-15 Show GitHub Exploit DB Packet Storm
224006 4.3 警告 オラクル - Oracle E-Business Suite の Oracle Applications Framework における Diagnostics の処理に関する脆弱性 CWE-noinfo
情報不足 		CVE-2013-0376 2013-11-8 11:00 2013-01-15 Show GitHub Exploit DB Packet Storm
224007 5.5 警告 MySQL AB
オラクル		 - Oracle MySQL の MySQL Server における Server Replication の処理に関する脆弱性 CWE-noinfo
情報不足 		CVE-2013-0375 2013-11-8 10:59 2013-01-15 Show GitHub Exploit DB Packet Storm
224008 4.3 警告 オラクル - 複数の Oracle Enterprise Manager 製品における Database Cloning の処理に関する脆弱性 CWE-noinfo
情報不足 		CVE-2013-0374 2013-11-8 10:58 2013-01-15 Show GitHub Exploit DB Packet Storm
224009 4.3 警告 オラクル - 複数の Oracle Enterprise Manager 製品における Distributed/Cross DB Features の処理に関する脆弱性 CWE-noinfo
情報不足 		CVE-2013-0373 2013-11-8 10:57 2013-01-15 Show GitHub Exploit DB Packet Storm
224010 4 警告 MySQL AB
オラクル		 - Oracle MySQL の MySQL Server における MyISAM の処理に関する脆弱性 CWE-noinfo
情報不足 		CVE-2013-0371 2013-11-8 10:55 2013-01-15 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 7, 2026, 4:13 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
277171 - mediawiki mediawiki The ApiBase::getWatchlistUser function in MediaWiki before 1.23.10, 1.24.x before 1.24.3, and 1.25.x before 1.25.2 does not perform token comparison in constant time, which allows remote attackers to… CWE-352
 Origin Validation Error 		CVE-2015-6728 2024-11-21 11:35 2015-09-1 Show GitHub Exploit DB Packet Storm
277172 - mediawiki
canonical 		mediawiki
ubuntu_linux 		The Special:DeletedContributions page in MediaWiki before 1.23.10, 1.24.x before 1.24.3, and 1.25.x before 1.25.2 allows remote attackers to determine if an IP is autoblocked via the "Change block" t… CWE-200
Information Exposure 		CVE-2015-6727 2024-11-21 11:35 2015-09-1 Show GitHub Exploit DB Packet Storm
277173 - ippusbxd_project ippusbxd IPPUSBXD before 1.22 listens on all interfaces, which allows remote attackers to obtain access to USB connected printers via a direct request. CWE-264
Permissions, Privileges, and Access Controls 		CVE-2015-6520 2024-11-21 11:35 2015-09-1 Show GitHub Exploit DB Packet Storm
277174 - linux linux_kernel The perf_callchain_user_64 function in arch/powerpc/perf/callchain.c in the Linux kernel before 4.0.2 on ppc64 platforms allows local users to cause a denial of service (infinite loop) via a deep 64-… CWE-399
 Resource Management Errors 		CVE-2015-6526 2024-11-21 11:35 2015-09-1 Show GitHub Exploit DB Packet Storm
277175 - path_breadcrumbs_project path_breadcrumbs Cross-site scripting (XSS) vulnerability in the administration interface in the Path Breadcrumbs module 7.x-3.x before 7.x-3.3 for Drupal allows remote authenticated users with the "Administer Path B… CWE-79
Cross-site Scripting 		CVE-2015-6754 2024-11-21 11:35 2015-09-1 Show GitHub Exploit DB Packet Storm
277176 - quick_edit_project quick_edit Multiple cross-site scripting (XSS) vulnerabilities in the Quick Edit module 7.x-1.x before 7.x-1.2 for Drupal allow remote authenticated users with certain permissions to inject arbitrary web script… CWE-79
Cross-site Scripting 		CVE-2015-6753 2024-11-21 11:35 2015-09-1 Show GitHub Exploit DB Packet Storm
277177 - pligg pligg_cms Cross-site request forgery (CSRF) vulnerability in Pligg CMS 2.0.2 allows remote attackers to hijack the authentication of administrators for requests that add an administrator via a request to admin… CWE-352
 Origin Validation Error 		CVE-2015-6655 2024-11-21 11:35 2015-09-1 Show GitHub Exploit DB Packet Storm
277178 - search_api_autocomplete_project search_api_autocomplete Cross-site scripting (XSS) vulnerability in the Search API Autocomplete module 7.x-1.x before 7.x-1.3 for Drupal, when the search index is configured to use the HTML filter processor, allows remote a… CWE-79
Cross-site Scripting 		CVE-2015-6752 2024-11-21 11:35 2015-09-1 Show GitHub Exploit DB Packet Storm
277179 - time_tracker_project time_tracker Multiple cross-site scripting (XSS) vulnerabilities in the Time Tracker module 7.x-1.x before 7.x-1.4 for Drupal allow remote authenticated users with certain permissions to inject arbitrary web scri… CWE-79
Cross-site Scripting 		CVE-2015-6751 2024-11-21 11:35 2015-09-1 Show GitHub Exploit DB Packet Storm
277180 - youtube_embed_project youtube_embed Cross-site scripting (XSS) vulnerability in includes/options-profiles.php in the YouTube Embed plugin before 3.3.3 for WordPress allows remote administrators to inject arbitrary web script or HTML vi… CWE-79
Cross-site Scripting 		CVE-2015-6535 2024-11-21 11:35 2015-09-1 Show GitHub Exploit DB Packet Storm