Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 12, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
226991 7.2 危険 IBM - IBM AIX および VIOS の InfiniBand サブシステムにおける権限を取得される脆弱性 CWE-noinfo
情報不足 		CVE-2013-4011 2013-07-22 16:32 2013-06-3 Show GitHub Exploit DB Packet Storm
226992 10 危険 シーメンス - Siemens Enterprise OpenScape Branch および OpenScape Session Border Controller における任意のコマンドを実行される脆弱性 CWE-78
OSコマンド・インジェクション 		CVE-2013-4781 2013-07-22 16:31 2012-09-14 Show GitHub Exploit DB Packet Storm
226993 7.8 危険 シーメンス - Siemens Enterprise OpenScape Branch および OpenScape Session Border Controller における任意のファイルを読まれる脆弱性 CWE-200
情報漏えい 		CVE-2013-4780 2013-07-22 16:31 2012-09-14 Show GitHub Exploit DB Packet Storm
226994 4.3 警告 シーメンス - Siemens Enterprise OpenScape Branch および OpenScape Session Border Controller におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2013-4779 2013-07-22 16:29 2012-09-14 Show GitHub Exploit DB Packet Storm
226995 7.8 危険 シーメンス - Siemens Enterprise OpenScape Branch および OpenScape Session Border Controller における重要なサーバおよび統計情報を取得される脆弱性 CWE-200
情報漏えい 		CVE-2013-4778 2013-07-22 16:29 2012-09-14 Show GitHub Exploit DB Packet Storm
226996 5 警告 シスコシステムズ - Cisco IOS の GET VPN 機能のデフォルト設定における暗号化ポリシーを回避される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2013-3436 2013-07-22 16:25 2013-07-19 Show GitHub Exploit DB Packet Storm
226997 4.3 警告 DELL EMC (旧 EMC Corporation) - Data Store Gen プラットフォーム上で稼働する EMC Avamar Server および Avamar Virtual Edition における重要な情報を取得される脆弱性 CWE-20
不適切な入力確認 		CVE-2013-3275 2013-07-22 16:23 2013-07-17 Show GitHub Exploit DB Packet Storm
226998 9 危険 DELL EMC (旧 EMC Corporation) - Data Store Gen プラットフォーム上で稼働する EMC Avamar Server および Avamar Virtual Edition における任意のコードを実行される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2013-3274 2013-07-22 16:22 2013-07-17 Show GitHub Exploit DB Packet Storm
226999 2.6 注意 Verizon - Verizon Wireless Network Extender における ESN および MIN 値を取得される脆弱性 CWE-287
不適切な認証 		CVE-2013-4877 2013-07-22 16:20 2013-07-15 Show GitHub Exploit DB Packet Storm
227000 6.2 警告 Verizon - Verizon Wireless Network Extender における管理アクセス権を取得される脆弱性 CWE-255
証明書・パスワード管理 		CVE-2013-4876 2013-07-22 16:19 2013-07-15 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 12, 2026, 4:20 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
273981 6.1 MEDIUM
Network 		icegram icegram_engage The icegram plugin before 1.9.19 for WordPress has XSS. CWE-79
Cross-site Scripting 		CVE-2016-10963 2024-11-21 11:45 2019-09-16 Show GitHub Exploit DB Packet Storm
273982 6.5 MEDIUM
Network 		icegram icegram_engage The icegram plugin before 1.9.19 for WordPress has CSRF via the wp-admin/edit.php option_name parameter. CWE-352
 Origin Validation Error 		CVE-2016-10962 2024-11-21 11:45 2019-09-16 Show GitHub Exploit DB Packet Storm
273983 6.1 MEDIUM
Network 		inkthemes colorway The colorway theme before 3.4.2 for WordPress has XSS via the contactName parameter. CWE-79
Cross-site Scripting 		CVE-2016-10961 2024-11-21 11:45 2019-09-16 Show GitHub Exploit DB Packet Storm
273984 8.8 HIGH
Network 		joomlaserviceprovider wsecure The wsecure plugin before 2.4 for WordPress has remote code execution via shell metacharacters in the wsecure-config.php publish parameter. CWE-20
 Improper Input Validation  		CVE-2016-10960 2024-11-21 11:45 2019-09-16 Show GitHub Exploit DB Packet Storm
273985 6.5 MEDIUM
Network 		estatik estatik The estatik plugin before 2.3.1 for WordPress has authenticated arbitrary file upload (exploitable with CSRF) via es_media_images[] to wp-admin/admin-ajax.php. CWE-434
 Unrestricted Upload of File with Dangerous Type  		CVE-2016-10959 2024-11-21 11:45 2019-09-16 Show GitHub Exploit DB Packet Storm
273986 7.5 HIGH
Network 		estatik estatik The estatik plugin before 2.3.0 for WordPress has unauthenticated arbitrary file upload via es_media_images[] to wp-admin/admin-ajax.php. CWE-434
 Unrestricted Upload of File with Dangerous Type  		CVE-2016-10958 2024-11-21 11:45 2019-09-16 Show GitHub Exploit DB Packet Storm
273987 6.1 MEDIUM
Network 		akal_project akal The Akal theme through 2016-08-22 for WordPress has XSS via the framework/brad-shortcodes/tinymce/preview.php sc parameter. CWE-79
Cross-site Scripting 		CVE-2016-10957 2024-11-21 11:45 2019-09-16 Show GitHub Exploit DB Packet Storm
273988 7.5 HIGH
Network 		mail-masta_project mail-masta The mail-masta plugin 1.0 for WordPress has local file inclusion in count_of_send.php and csvexport.php. CWE-20
 Improper Input Validation  		CVE-2016-10956 2024-11-21 11:45 2019-09-16 Show GitHub Exploit DB Packet Storm
273989 9.8 CRITICAL
Network 		cysteme cysteme-finder The cysteme-finder plugin before 1.4 for WordPress has unrestricted file upload because of incorrect session tracking. CWE-434
 Unrestricted Upload of File with Dangerous Type  		CVE-2016-10955 2024-11-21 11:45 2019-09-13 Show GitHub Exploit DB Packet Storm
273990 9.8 CRITICAL
Network 		dynamicpress neosense The Neosense theme before 1.8 for WordPress has qquploader unrestricted file upload. CWE-434
 Unrestricted Upload of File with Dangerous Type  		CVE-2016-10954 2024-11-21 11:45 2019-09-13 Show GitHub Exploit DB Packet Storm