Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 9, 2026, 6 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
224351 7.2 危険 VMware - Linux 上で稼働する VMware Workstation および VMware Player におけるホスト OS の権限を取得される脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2013-5972 2013-11-20 17:14 2013-11-14 Show GitHub Exploit DB Packet Storm
224352 5.8 警告 Google - Google Chrome におけるサンドボックスの制限を回避される脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2013-6802 2013-11-20 16:56 2013-11-14 Show GitHub Exploit DB Packet Storm
224353 4.3 警告 Percipient Studios - Umbraco CMS 用 Percipient Studios ImageGen の imagegen.ashx におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2013-0741 2013-11-20 16:46 2013-10-31 Show GitHub Exploit DB Packet Storm
224354 3.5 注意 D-Link Systems, Inc. - D-Link DSL-2760U ゲートウェイにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2013-5223 2013-11-20 15:18 2013-11-12 Show GitHub Exploit DB Packet Storm
224355 7.6 危険 D-Link Systems, Inc. - D-Link DSL-2740B ゲートウェイのファームウェアにおける認証を回避される脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2013-2271 2013-11-20 15:18 2013-11-14 Show GitHub Exploit DB Packet Storm
224356 6.8 警告 Sunil Nanda - WordPress 用 Blue Wrench Video Widget プラグインにおけるクロスサイトリクエストフォージェリの脆弱性 CWE-352
同一生成元ポリシー違反
CVE-2013-6797 2013-11-20 15:01 2013-10-23 Show GitHub Exploit DB Packet Storm
224357 4.3 警告 Softaculous - Softaculous Webuzo の File Manager モジュールの filemanager/login.php におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2013-6042 2013-11-20 14:34 2013-10-3 Show GitHub Exploit DB Packet Storm
224358 4.3 警告 Beanbag - Review Board におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2013-4519 2013-11-20 14:21 2013-11-5 Show GitHub Exploit DB Packet Storm
224359 5.7 警告 Xen プロジェクト - Xen におけるサービス運用妨害 (DoS) の脆弱性 CWE-20
不適切な入力確認
CVE-2013-4551 2013-11-20 14:09 2013-11-8 Show GitHub Exploit DB Packet Storm
224360 6.8 警告 BlackBerry - Windows または Mac OS X 上で稼働する BlackBerry Link における任意のファイルを読まれる脆弱性 CWE-352
同一生成元ポリシー違反
CVE-2013-3694 2013-11-20 13:39 2013-11-12 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 10, 2026, 5 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
278011 - quiz_project quiz The Quiz extension for MediaWiki allows remote attackers to cause a denial of service via regex metacharacters in a regular expression. CWE-17
Code
CVE-2015-6736 2024-11-21 11:35 2015-09-1 Show GitHub Exploit DB Packet Storm
278012 - timedmediahandler_project timedmediahandler The reset functionality in the TimedMediaHandler extension for MediaWiki does not create a new transcode, which allows remote attackers to cause a denial of service (transcode deletion) by resetting … CWE-17
Code
CVE-2015-6735 2024-11-21 11:35 2015-09-1 Show GitHub Exploit DB Packet Storm
278013 - mediawiki mediawiki Cross-site scripting (XSS) vulnerability in contrib/cssgen.php in the GeSHi, as used in the SyntaxHighlight_GeSHi extension and MediaWiki before 1.23.10, 1.24.x before 1.24.3, and 1.25.x before 1.25.… CWE-79
Cross-site Scripting
CVE-2015-6734 2024-11-21 11:35 2015-09-1 Show GitHub Exploit DB Packet Storm
278014 - mediawiki mediawiki GeSHi, as used in the SyntaxHighlight_GeSHi extension and MediaWiki before 1.23.10, 1.24.x before 1.24.3, and 1.25.x before 1.25.2, allows remote attackers to cause a denial of service (resource cons… CWE-399
 Resource Management Errors
CVE-2015-6733 2024-11-21 11:35 2015-09-1 Show GitHub Exploit DB Packet Storm
278015 - semanticforms_project semanticforms Multiple cross-site scripting (XSS) vulnerabilities in the SemanticForms extension for MediaWiki allow remote attackers to inject arbitrary web script or HTML via the (1) wpSummary parameter to Speci… CWE-79
Cross-site Scripting
CVE-2015-6732 2024-11-21 11:35 2015-09-1 Show GitHub Exploit DB Packet Storm
278016 - semanticforms_project semanticforms Multiple cross-site scripting (XSS) vulnerabilities in the SemanticForms extension for MediaWiki allow remote attackers to inject arbitrary web script or HTML via a (1) section_*, (2) template_*, (3)… CWE-79
Cross-site Scripting
CVE-2015-6731 2024-11-21 11:35 2015-09-1 Show GitHub Exploit DB Packet Storm
278017 - mediawiki mediawiki Cross-site scripting (XSS) vulnerability in thumb.php in MediaWiki before 1.23.10, 1.24.x before 1.24.3, and 1.25.x before 1.25.2 allows remote attackers to inject arbitrary web script or HTML via th… CWE-79
Cross-site Scripting
CVE-2015-6730 2024-11-21 11:35 2015-09-1 Show GitHub Exploit DB Packet Storm
278018 - mediawiki mediawiki Cross-site scripting (XSS) vulnerability in thumb.php in MediaWiki before 1.23.10, 1.24.x before 1.24.3, and 1.25.x before 1.25.2 allows remote attackers to inject arbitrary web script or HTML via th… CWE-79
Cross-site Scripting
CVE-2015-6729 2024-11-21 11:35 2015-09-1 Show GitHub Exploit DB Packet Storm
278019 - mediawiki mediawiki The ApiBase::getWatchlistUser function in MediaWiki before 1.23.10, 1.24.x before 1.24.3, and 1.25.x before 1.25.2 does not perform token comparison in constant time, which allows remote attackers to… CWE-352
 Origin Validation Error
CVE-2015-6728 2024-11-21 11:35 2015-09-1 Show GitHub Exploit DB Packet Storm
278020 - mediawiki
canonical
mediawiki
ubuntu_linux
The Special:DeletedContributions page in MediaWiki before 1.23.10, 1.24.x before 1.24.3, and 1.25.x before 1.25.2 allows remote attackers to determine if an IP is autoblocked via the "Change block" t… CWE-200
Information Exposure
CVE-2015-6727 2024-11-21 11:35 2015-09-1 Show GitHub Exploit DB Packet Storm