Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 22, 2026, 6:01 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
227391 2.6 注意 Opera Software ASA - Opera におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2013-4705 2013-09-17 14:19 2013-09-12 Show GitHub Exploit DB Packet Storm
227392 2.1 注意 phpBB - Debian GNU/Linux 用 phpbb3 におけるファイルコンテンツを変更される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2013-5724 2013-09-17 13:26 2013-09-7 Show GitHub Exploit DB Packet Storm
227393 4.3 警告 LiquidThreads Project - MediaWiki 用 LiquidThreads 拡張機能におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2013-4308 2013-09-17 13:25 2013-09-3 Show GitHub Exploit DB Packet Storm
227394 4.3 警告 MediaWiki - MediaWiki 用 Wikibase 拡張機能におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2013-4307 2013-09-17 12:38 2013-09-3 Show GitHub Exploit DB Packet Storm
227395 5 警告 シスコシステムズ - 複数の Cisco 製品で使用される Cisco Common Services におけるサービス運用妨害 (DoS) の脆弱性 CWE-20
不適切な入力確認 		CVE-2013-5488 2013-09-17 12:36 2013-09-12 Show GitHub Exploit DB Packet Storm
227396 5.8 警告 シスコシステムズ - Cisco Digital Media Manager のログインページにおけるオープンリダイレクトの脆弱性 CWE-20
不適切な入力確認 		CVE-2013-3446 2013-09-17 12:35 2013-09-12 Show GitHub Exploit DB Packet Storm
227397 5.4 警告 IBM - IBM Rational Requirements Composer における脆弱性 CWE-287
不適切な認証 		CVE-2013-3039 2013-09-13 16:21 2013-09-6 Show GitHub Exploit DB Packet Storm
227398 5.4 警告 IBM - IBM Rational Requirements Composer における認証情報を取得される脆弱性 CWE-255
証明書・パスワード管理 		CVE-2013-3038 2013-09-13 16:20 2013-09-6 Show GitHub Exploit DB Packet Storm
227399 4.4 警告 IBM - IBM Rational Requirements Composer における権限を取得される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2013-3037 2013-09-13 16:19 2013-09-6 Show GitHub Exploit DB Packet Storm
227400 4.9 警告 IBM - IBM Rational Requirements Composer におけるオープンリダイレクトの脆弱性 CWE-20
不適切な入力確認 		CVE-2013-3036 2013-09-13 16:18 2013-09-6 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 23, 2026, 4 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
273011 6.5 MEDIUM
Network 		cloudera cloudera_manager Cloudera Manager 5.x before 5.7.1 places Sensitive Data in cleartext Readable Files. CWE-312
 Cleartext Storage of Sensitive Information 		CVE-2016-3192 2024-11-21 11:49 2019-11-26 Show GitHub Exploit DB Packet Storm
273012 6.5 MEDIUM
Network 		cloudera cdh Cloudera CDH before 5.6.1 allows authorization bypass via direct internal API calls. CWE-863
 Incorrect Authorization 		CVE-2016-3131 2024-11-21 11:49 2019-11-26 Show GitHub Exploit DB Packet Storm
273013 5.9 MEDIUM
Network 		ibm rational_clearquest IBM Rational ClearQuest 8.0 through 8.0.1.9 and 9.0 through 9.0.1.3 (CQ OSLC linkages, EmailRelay) fails to check the SSL certificate against the requested hostname. It is subject to a man-in-the-mid… CWE-295
Improper Certificate Validation  		CVE-2016-2922 2024-11-21 11:49 2018-08-14 Show GitHub Exploit DB Packet Storm
273014 8.1 HIGH
Network 		ibm tealeaf_customer_experience IBM Tealeaf Customer Experience 8.7, 8.8, and 9.0.2 could allow a remote attacker under unusual circumstances to read operational data or TLS session state for any active sessions, cause denial of se… CWE-20
 Improper Input Validation  		CVE-2016-2983 2024-11-21 11:49 2018-01-27 Show GitHub Exploit DB Packet Storm
273015 5.4 MEDIUM
Network 		ibm openpages_grc_platform IBM OpenPages GRC Platform 7.1, 7.2, and 7.3 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functio… CWE-79
Cross-site Scripting 		CVE-2016-3048 2024-11-21 11:49 2017-11-2 Show GitHub Exploit DB Packet Storm
273016 8.8 HIGH
Network 		apache struts The TextParseUtil.translateVariables method in Apache Struts 2.x before 2.3.20 allows remote attackers to execute arbitrary code via a crafted OGNL expression with ANTLR tooling. CWE-20
 Improper Input Validation  		CVE-2016-3090 2024-11-21 11:49 2017-10-30 Show GitHub Exploit DB Packet Storm
273017 5.4 MEDIUM
Network 		ibm openpages_grc_platform IBM OpenPages GRC Platform 7.1, 7.2, and 7.3 is vulnerable to HTML injection. A remote attacker could inject malicious HTML code, which when viewed, would be executed in the victim's Web browser with… CWE-79
Cross-site Scripting 		CVE-2016-3049 2024-11-21 11:49 2017-10-25 Show GitHub Exploit DB Packet Storm
273018 9.8 CRITICAL
Network 		apache hadoop The YARN NodeManager in Apache Hadoop 2.6.x before 2.6.5 and 2.7.x before 2.7.3 can leak the password for credential store provider used by the NodeManager to YARN Applications. CWE-200
Information Exposure 		CVE-2016-3086 2024-11-21 11:49 2017-09-5 Show GitHub Exploit DB Packet Storm
273019 6.3 MEDIUM
Network 		ibm sametime The Sametime WebPlayer 8.5.2 and 9.0 is vulnerable to a script injection where a malicious site can inject their own script by exploiting a vulnerability in the way that the WebPlayer works. IBM X-Fo… CWE-74
Injection 		CVE-2016-2980 2024-11-21 11:49 2017-08-30 Show GitHub Exploit DB Packet Storm
273020 3.3 LOW
Local 		ibm sametime IBM Sametime 8.5.2 and 9.0 could store potentially sensitive information from the browser cache locally that could be available to a local user. IBM X-Force ID: 113938. CWE-200
Information Exposure 		CVE-2016-2978 2024-11-21 11:49 2017-08-30 Show GitHub Exploit DB Packet Storm