Vulnerability Search Top

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

Vulnerability Information Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":June 6, 2026, 2 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
224491	7.2	危険	Ruckus Wireless, Inc.	-	無線 LAN アクセスポイント ZoneFlex 2942 に認証回避の脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2013-5030	2013-10-18 19:59	2013-10-10	Show	GitHub Exploit DB Packet Storm

224492	4.3	警告	オラクル	-	Oracle iLearning における Learner Administration に関する脆弱性	CWE-noinfo 情報不足	CVE-2013-5845	2013-10-18 18:57	2013-10-15	Show	GitHub Exploit DB Packet Storm

224493	6.8	警告	オラクル	-	Oracle iLearning における Learner Administration に関する脆弱性	CWE-noinfo 情報不足	CVE-2013-5822	2013-10-18 18:56	2013-10-15	Show	GitHub Exploit DB Packet Storm

224494	4	警告	オラクル	-	Oracle PeopleSoft Products の PeopleSoft Enterprise HRMS eCompensation における eCompensation に関する脆弱性	CWE-noinfo 情報不足	CVE-2013-5847	2013-10-18 18:52	2013-10-15	Show	GitHub Exploit DB Packet Storm

224495	5	警告	オラクル	-	Oracle PeopleSoft Products の PeopleSoft Enterprise PeopleTools における Portal に関する脆弱性	CWE-noinfo 情報不足	CVE-2013-5841	2013-10-18 18:52	2013-10-15	Show	GitHub Exploit DB Packet Storm

224496	5	警告	オラクル	-	Oracle PeopleSoft Products の PeopleSoft Enterprise PeopleTools における Business Interlink に関する脆弱性	CWE-noinfo 情報不足	CVE-2013-5836	2013-10-18 18:51	2013-10-15	Show	GitHub Exploit DB Packet Storm

224497	5	警告	オラクル	-	Oracle Fusion Middleware の Oracle GlassFish Server における Metro に関する脆弱性	CWE-noinfo 情報不足	CVE-2013-5816	2013-10-18 17:57	2013-10-14	Show	GitHub Exploit DB Packet Storm

224498	7.5	危険	オラクル	-	Oracle Fusion Middleware の Oracle Identity Analytics および Sun Role Manager における Security に関する脆弱性	CWE-noinfo 情報不足	CVE-2013-5815	2013-10-18 17:57	2013-10-14	Show	GitHub Exploit DB Packet Storm

224499	5	警告	オラクル	-	Oracle Primavera Products Suite の Instantis EnterpriseTrack における脆弱性	CWE-noinfo 情報不足	CVE-2013-5859	2013-10-18 16:58	2013-10-15	Show	GitHub Exploit DB Packet Storm

224500	5.2	警告	オラクル	-	Oracle Sun Solaris における Kernel に関する脆弱性	CWE-noinfo 情報不足	CVE-2013-5866	2013-10-18 16:52	2013-10-15	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:June 6, 2026, 4:18 a.m.

No	CVSS	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
277071	-	mediawiki	mediawiki	Cross-site scripting (XSS) vulnerability in thumb.php in MediaWiki before 1.23.10, 1.24.x before 1.24.3, and 1.25.x before 1.25.2 allows remote attackers to inject arbitrary web script or HTML via th…	CWE-79 Cross-site Scripting	CVE-2015-6729	2024-11-21 11:35	2015-09-1	Show	GitHub Exploit DB Packet Storm

277072	-	mediawiki	mediawiki	The ApiBase::getWatchlistUser function in MediaWiki before 1.23.10, 1.24.x before 1.24.3, and 1.25.x before 1.25.2 does not perform token comparison in constant time, which allows remote attackers to…	CWE-352 Origin Validation Error	CVE-2015-6728	2024-11-21 11:35	2015-09-1	Show	GitHub Exploit DB Packet Storm

277073	-	mediawiki canonical	mediawiki ubuntu_linux	The Special:DeletedContributions page in MediaWiki before 1.23.10, 1.24.x before 1.24.3, and 1.25.x before 1.25.2 allows remote attackers to determine if an IP is autoblocked via the "Change block" t…	CWE-200 Information Exposure	CVE-2015-6727	2024-11-21 11:35	2015-09-1	Show	GitHub Exploit DB Packet Storm

277074	-	ippusbxd_project	ippusbxd	IPPUSBXD before 1.22 listens on all interfaces, which allows remote attackers to obtain access to USB connected printers via a direct request.	CWE-264 Permissions, Privileges, and Access Controls	CVE-2015-6520	2024-11-21 11:35	2015-09-1	Show	GitHub Exploit DB Packet Storm

277075	-	linux	linux_kernel	The perf_callchain_user_64 function in arch/powerpc/perf/callchain.c in the Linux kernel before 4.0.2 on ppc64 platforms allows local users to cause a denial of service (infinite loop) via a deep 64-…	CWE-399 Resource Management Errors	CVE-2015-6526	2024-11-21 11:35	2015-09-1	Show	GitHub Exploit DB Packet Storm

277076	-	path_breadcrumbs_project	path_breadcrumbs	Cross-site scripting (XSS) vulnerability in the administration interface in the Path Breadcrumbs module 7.x-3.x before 7.x-3.3 for Drupal allows remote authenticated users with the "Administer Path B…	CWE-79 Cross-site Scripting	CVE-2015-6754	2024-11-21 11:35	2015-09-1	Show	GitHub Exploit DB Packet Storm

277077	-	quick_edit_project	quick_edit	Multiple cross-site scripting (XSS) vulnerabilities in the Quick Edit module 7.x-1.x before 7.x-1.2 for Drupal allow remote authenticated users with certain permissions to inject arbitrary web script…	CWE-79 Cross-site Scripting	CVE-2015-6753	2024-11-21 11:35	2015-09-1	Show	GitHub Exploit DB Packet Storm

277078	-	pligg	pligg_cms	Cross-site request forgery (CSRF) vulnerability in Pligg CMS 2.0.2 allows remote attackers to hijack the authentication of administrators for requests that add an administrator via a request to admin…	CWE-352 Origin Validation Error	CVE-2015-6655	2024-11-21 11:35	2015-09-1	Show	GitHub Exploit DB Packet Storm

277079	-	search_api_autocomplete_project	search_api_autocomplete	Cross-site scripting (XSS) vulnerability in the Search API Autocomplete module 7.x-1.x before 7.x-1.3 for Drupal, when the search index is configured to use the HTML filter processor, allows remote a…	CWE-79 Cross-site Scripting	CVE-2015-6752	2024-11-21 11:35	2015-09-1	Show	GitHub Exploit DB Packet Storm

277080	-	time_tracker_project	time_tracker	Multiple cross-site scripting (XSS) vulnerabilities in the Time Tracker module 7.x-1.x before 7.x-1.4 for Drupal allow remote authenticated users with certain permissions to inject arbitrary web scri…	CWE-79 Cross-site Scripting	CVE-2015-6751	2024-11-21 11:35	2015-09-1	Show	GitHub Exploit DB Packet Storm