Vulnerability Search Top

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

Vulnerability Information Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":June 7, 2026, 10 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
224011	2.1	注意	オラクル	-	Oracle Supply Chain Products Suite の Oracle Agile PLM Framework における Security の処理に関する脆弱性	CWE-noinfo 情報不足	CVE-2013-0370	2013-11-8 10:54	2013-01-15	Show	GitHub Exploit DB Packet Storm

224012	5.5	警告	オラクル	-	Oracle PeopleSoft Products の PeopleSoft PeopleTools における Query の処理に関する脆弱性	CWE-noinfo 情報不足	CVE-2013-0369	2013-11-8 10:53	2013-01-15	Show	GitHub Exploit DB Packet Storm

224013	4	警告	MySQL AB オラクル	-	Oracle MySQL の MySQL Server における InnoDB の処理に関する脆弱性	CWE-noinfo 情報不足	CVE-2013-0368	2013-11-8 10:52	2013-01-15	Show	GitHub Exploit DB Packet Storm

224014	4	警告	MySQL AB オラクル	-	Oracle MySQL の MySQL Server における Server Partition の処理に関する脆弱性	CWE-noinfo 情報不足	CVE-2013-0367	2013-11-8 10:51	2013-01-15	Show	GitHub Exploit DB Packet Storm

224015	4	警告	オラクル	-	Oracle Siebel CRM における Security の処理に関する脆弱性	CWE-noinfo 情報不足	CVE-2013-0365	2013-11-8 10:48	2013-01-15	Show	GitHub Exploit DB Packet Storm

224016	7.8	危険	オラクル	-	Oracle Database Mobile Server および Oracle Database Lite における脆弱性	CWE-noinfo 情報不足	CVE-2013-0362	2013-11-8 10:44	2013-01-15	Show	GitHub Exploit DB Packet Storm

224017	5	警告	オラクル	-	Oracle Enterprise Manager Grid Control の APM における Business Transaction Management の処理に関する脆弱性	CWE-noinfo 情報不足	CVE-2013-0360	2013-11-8 10:43	2013-01-15	Show	GitHub Exploit DB Packet Storm

224018	7.5	危険	オラクル	-	Oracle Enterprise Manager Grid Control の APM における Business Transaction Management の処理に関する脆弱性	CWE-noinfo 情報不足	CVE-2013-0359	2013-11-8 10:42	2013-01-15	Show	GitHub Exploit DB Packet Storm

224019	4.3	警告	オラクル	-	複数の Oracle Enterprise Manager 製品における Resource Manager の処理に関する脆弱性	CWE-noinfo 情報不足	CVE-2013-0358	2013-11-8 10:41	2013-01-15	Show	GitHub Exploit DB Packet Storm

224020	4.3	警告	オラクル	-	Oracle PeopleSoft Products の PeopleSoft PeopleTools における PIA Core Technology の処理に関する脆弱性	CWE-noinfo 情報不足	CVE-2013-0357	2013-11-8 10:40	2013-01-15	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:June 7, 2026, 4:13 a.m.

No	CVSS	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
277171	-	mediawiki	mediawiki	The ApiBase::getWatchlistUser function in MediaWiki before 1.23.10, 1.24.x before 1.24.3, and 1.25.x before 1.25.2 does not perform token comparison in constant time, which allows remote attackers to…	CWE-352 Origin Validation Error	CVE-2015-6728	2024-11-21 11:35	2015-09-1	Show	GitHub Exploit DB Packet Storm

277172	-	mediawiki canonical	mediawiki ubuntu_linux	The Special:DeletedContributions page in MediaWiki before 1.23.10, 1.24.x before 1.24.3, and 1.25.x before 1.25.2 allows remote attackers to determine if an IP is autoblocked via the "Change block" t…	CWE-200 Information Exposure	CVE-2015-6727	2024-11-21 11:35	2015-09-1	Show	GitHub Exploit DB Packet Storm

277173	-	ippusbxd_project	ippusbxd	IPPUSBXD before 1.22 listens on all interfaces, which allows remote attackers to obtain access to USB connected printers via a direct request.	CWE-264 Permissions, Privileges, and Access Controls	CVE-2015-6520	2024-11-21 11:35	2015-09-1	Show	GitHub Exploit DB Packet Storm

277174	-	linux	linux_kernel	The perf_callchain_user_64 function in arch/powerpc/perf/callchain.c in the Linux kernel before 4.0.2 on ppc64 platforms allows local users to cause a denial of service (infinite loop) via a deep 64-…	CWE-399 Resource Management Errors	CVE-2015-6526	2024-11-21 11:35	2015-09-1	Show	GitHub Exploit DB Packet Storm

277175	-	path_breadcrumbs_project	path_breadcrumbs	Cross-site scripting (XSS) vulnerability in the administration interface in the Path Breadcrumbs module 7.x-3.x before 7.x-3.3 for Drupal allows remote authenticated users with the "Administer Path B…	CWE-79 Cross-site Scripting	CVE-2015-6754	2024-11-21 11:35	2015-09-1	Show	GitHub Exploit DB Packet Storm

277176	-	quick_edit_project	quick_edit	Multiple cross-site scripting (XSS) vulnerabilities in the Quick Edit module 7.x-1.x before 7.x-1.2 for Drupal allow remote authenticated users with certain permissions to inject arbitrary web script…	CWE-79 Cross-site Scripting	CVE-2015-6753	2024-11-21 11:35	2015-09-1	Show	GitHub Exploit DB Packet Storm

277177	-	pligg	pligg_cms	Cross-site request forgery (CSRF) vulnerability in Pligg CMS 2.0.2 allows remote attackers to hijack the authentication of administrators for requests that add an administrator via a request to admin…	CWE-352 Origin Validation Error	CVE-2015-6655	2024-11-21 11:35	2015-09-1	Show	GitHub Exploit DB Packet Storm

277178	-	search_api_autocomplete_project	search_api_autocomplete	Cross-site scripting (XSS) vulnerability in the Search API Autocomplete module 7.x-1.x before 7.x-1.3 for Drupal, when the search index is configured to use the HTML filter processor, allows remote a…	CWE-79 Cross-site Scripting	CVE-2015-6752	2024-11-21 11:35	2015-09-1	Show	GitHub Exploit DB Packet Storm

277179	-	time_tracker_project	time_tracker	Multiple cross-site scripting (XSS) vulnerabilities in the Time Tracker module 7.x-1.x before 7.x-1.4 for Drupal allow remote authenticated users with certain permissions to inject arbitrary web scri…	CWE-79 Cross-site Scripting	CVE-2015-6751	2024-11-21 11:35	2015-09-1	Show	GitHub Exploit DB Packet Storm

277180	-	youtube_embed_project	youtube_embed	Cross-site scripting (XSS) vulnerability in includes/options-profiles.php in the YouTube Embed plugin before 3.3.3 for WordPress allows remote administrators to inject arbitrary web script or HTML vi…	CWE-79 Cross-site Scripting	CVE-2015-6535	2024-11-21 11:35	2015-09-1	Show	GitHub Exploit DB Packet Storm