Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 1, 2026, 6 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
225051 7.5 危険 Appnitro Software - Machform の view.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2013-4948 2013-07-31 15:27 2013-07-2 Show GitHub Exploit DB Packet Storm
225052 7.5 危険 Sawmill - Sawmill のデータベースのページの更新および作成における脆弱性 CWE-noinfo
情報不足
CVE-2013-4947 2013-07-31 15:18 2013-07-9 Show GitHub Exploit DB Packet Storm
225053 4.3 警告 BMC Software - BMC Service Desk Express におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2013-4946 2013-07-31 15:11 2013-06-12 Show GitHub Exploit DB Packet Storm
225054 7.5 危険 BMC Software - BMC Service Desk Express における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2013-4945 2013-07-31 15:08 2013-06-12 Show GitHub Exploit DB Packet Storm
225055 2.1 注意 Drupal Indonesia - Drupal 用 TinyBox モジュールにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2013-4140 2013-07-31 14:44 2013-07-10 Show GitHub Exploit DB Packet Storm
225056 2.6 注意 BuddyDev.com - WordPress 用 BuddyPress Extended Friendship Request プラグインにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2013-4944 2013-07-31 14:36 2013-07-2 Show GitHub Exploit DB Packet Storm
225057 4.3 警告 OpenX - OpenX Source におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2013-3515 2013-07-31 14:08 2013-05-8 Show GitHub Exploit DB Packet Storm
225058 4.3 警告 Monkey Project - Monkey HTTP Daemon の Directory Listing プラグインにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2013-2181 2013-07-31 13:55 2013-06-14 Show GitHub Exploit DB Packet Storm
225059 9.3 危険 キングソフト株式会社 - Kingsoft Spreadsheets 2012 におけるヒープベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー
CVE-2013-0723 2013-07-31 13:47 2013-07-29 Show GitHub Exploit DB Packet Storm
225060 5 警告 ヒューレット・パッカード
レッドハット
- 複数の Red Hat JBoss 製品の JBossWS Native におけるサービス運用妨害 (DoS) の脆弱性 CWE-noinfo
情報不足
CVE-2011-1483 2013-07-30 17:40 2011-04-4 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 1, 2026, 4:12 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
277701 - church_admin_project church_admin Cross-site scripting (XSS) vulnerability in the church_admin plugin before 0.810 for WordPress allows remote attackers to inject arbitrary web script or HTML via the address parameter, as demonstrate… CWE-79
Cross-site Scripting
CVE-2015-4127 2024-11-21 11:30 2015-05-28 Show GitHub Exploit DB Packet Storm
277702 - free-counter free_counter Cross-site scripting (XSS) vulnerability in the Free Counter plugin 1.1 for WordPress allows remote attackers to inject arbitrary web script or HTML via the value_ parameter in a check_stat action to… CWE-79
Cross-site Scripting
CVE-2015-4084 2024-11-21 11:30 2015-05-28 Show GitHub Exploit DB Packet Storm
277703 - tri gigpress Multiple SQL injection vulnerabilities in admin/handlers.php in the GigPress plugin before 2.3.9 for WordPress allow remote authenticated users to execute arbitrary SQL commands via the (1) show_arti… CWE-89
SQL Injection
CVE-2015-4066 2024-11-21 11:30 2015-05-28 Show GitHub Exploit DB Packet Storm
277704 - landing_pages_project landing_pages Cross-site scripting (XSS) vulnerability in shared/shortcodes/inbound-shortcodes.php in the Landing Pages plugin before 1.8.5 for WordPress allows remote authenticated users to inject arbitrary web s… CWE-79
Cross-site Scripting
CVE-2015-4065 2024-11-21 11:30 2015-05-28 Show GitHub Exploit DB Packet Storm
277705 - landing_pages_project landing_pages SQL injection vulnerability in modules/module.ab-testing.php in the Landing Pages plugin before 1.8.5 for WordPress allows remote authenticated users to execute arbitrary SQL commands via the post pa… CWE-89
SQL Injection
CVE-2015-4064 2024-11-21 11:30 2015-05-28 Show GitHub Exploit DB Packet Storm
277706 - newstatpress_project newstatpress Cross-site scripting (XSS) vulnerability in includes/nsp_search.php in the NewStatPress plugin before 0.9.9 for WordPress allows remote authenticated users to inject arbitrary web script or HTML via … CWE-79
Cross-site Scripting
CVE-2015-4063 2024-11-21 11:30 2015-05-28 Show GitHub Exploit DB Packet Storm
277707 - newstatpress_project newstatpress SQL injection vulnerability in includes/nsp_search.php in the NewStatPress plugin before 0.9.9 for WordPress allows remote authenticated users to execute arbitrary SQL commands via the where1 paramet… CWE-89
SQL Injection
CVE-2015-4062 2024-11-21 11:30 2015-05-28 Show GitHub Exploit DB Packet Storm
277708 - coppermine-gallery coppermine_photo_gallery Open redirect vulnerability in mode.php in Coppermine Photo Gallery before 1.5.36 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a URL in the refere… NVD-CWE-Other
CVE-2015-3922 2024-11-21 11:30 2015-05-28 Show GitHub Exploit DB Packet Storm
277709 - coppermine-gallery coppermine_photo_gallery Cross-site scripting (XSS) vulnerability in contact.php in Coppermine Photo Gallery before 1.5.36 allows remote authenticated users to inject arbitrary web script or HTML via the referer parameter. CWE-79
Cross-site Scripting
CVE-2015-3921 2024-11-21 11:30 2015-05-28 Show GitHub Exploit DB Packet Storm
277710 - wireshark wireshark The logcat_dump_text function in wiretap/logcat.c in the Android Logcat file parser in Wireshark 1.12.x before 1.12.5 does not properly handle a lack of \0 termination, which allows remote attackers … CWE-119
Incorrect Access of Indexable Resource ('Range Error') 
CVE-2015-3906 2024-11-21 11:30 2015-05-27 Show GitHub Exploit DB Packet Storm