Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 27, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
228421 4.3 警告 IBM - 複数の IBM サーバ製品上で稼働する Integrated Management Module におけるアクセス権を取得される脆弱性 CWE-noinfo
情報不足 		CVE-2013-4037 2013-08-13 15:24 2013-08-1 Show GitHub Exploit DB Packet Storm
228422 10 危険 IBM - 複数の IBM サーバ製品上で稼働する Integrated Management Module における電源アクションを実行される脆弱性 CWE-255
証明書・パスワード管理 		CVE-2013-4031 2013-08-13 15:23 2013-08-1 Show GitHub Exploit DB Packet Storm
228423 4.3 警告 Mike Jolley - WordPress 用 Download Monitor プラグインにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2013-5098 2013-08-13 14:04 2013-06-5 Show GitHub Exploit DB Packet Storm
228424 4.3 警告 Mike Jolley - WordPress 用 Download Monitor プラグインにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2013-3262 2013-08-13 14:04 2013-06-5 Show GitHub Exploit DB Packet Storm
228425 4.3 警告 Life in the Grid - WordPress 用 Duplicator プラグインにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2013-4625 2013-08-13 13:43 2013-07-21 Show GitHub Exploit DB Packet Storm
228426 6.8 警告 Xhanch Studio - WordPress 用 Xhanch - My Twitter プラグインにおけるクロスサイトリクエストフォージェリの脆弱性 CWE-352
同一生成元ポリシー違反 		CVE-2013-3253 2013-08-13 13:35 2013-08-2 Show GitHub Exploit DB Packet Storm
228427 5 警告 Jason A. Donenfeld
Lars Hjemli		 - cgit の ui-summary.c の cgit_parse_readme 関数におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2013-2117 2013-08-13 12:29 2013-05-27 Show GitHub Exploit DB Packet Storm
228428 5 警告 シスコシステムズ - Cisco Finesse の Web インタフェースにおける絶対パストラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2013-3457 2013-08-13 11:08 2013-08-12 Show GitHub Exploit DB Packet Storm
228429 4.3 警告 OpenEMR - OpenEMR の interface/main/onotes/office_comments_full.php におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2013-4620 2013-08-13 10:46 2013-06-10 Show GitHub Exploit DB Packet Storm
228430 6.5 警告 OpenEMR - OpenEMR における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2013-4619 2013-08-13 10:41 2013-06-10 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 28, 2026, 4:01 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
276431 3.7 LOW
Network 		ntp
ntpsec 		ntp
ntpsec 		ntpd in NTP 4.2.8p3 and NTPsec a5fb34b9cc89b92a8fef2f459004865c93bb7f92 relies on the underlying operating system to protect it from requests that impersonate reference clocks. Because reference cloc… CWE-254
 7PK - Security Features 		CVE-2016-1551 2024-11-21 11:46 2017-01-28 Show GitHub Exploit DB Packet Storm
276432 5.3 MEDIUM
Network 		ntp ntp An exploitable vulnerability exists in the message authentication functionality of libntp in ntp 4.2.8p4 and NTPSec a5fb34b9cc89b92a8fef2f459004865c93bb7f92. An attacker can send a series of crafted … CWE-200
Information Exposure 		CVE-2016-1550 2024-11-21 11:46 2017-01-7 Show GitHub Exploit DB Packet Storm
276433 6.5 MEDIUM
Network 		ntp ntp A malicious authenticated peer can create arbitrarily-many ephemeral associations in order to win the clock selection algorithm in ntpd in NTP 4.2.8p4 and earlier and NTPsec 3e160db8dc248a0bcb053b56a… CWE-19
 Data Processing Errors 		CVE-2016-1549 2024-11-21 11:46 2017-01-7 Show GitHub Exploit DB Packet Storm
276434 7.2 HIGH
Network 		ntp ntp An attacker can spoof a packet from a legitimate ntpd server with an origin timestamp that matches the peer->dst timestamp recorded for that server. After making this switch, the client in NTP 4.2.8p… CWE-19
 Data Processing Errors 		CVE-2016-1548 2024-11-21 11:46 2017-01-7 Show GitHub Exploit DB Packet Storm
276435 5.3 MEDIUM
Network 		ntp ntp An off-path attacker can cause a preemptible client association to be demobilized in NTP 4.2.8p4 and earlier and NTPSec a5fb34b9cc89b92a8fef2f459004865c93bb7f92 by sending a crypto NAK packet to a vi… CWE-20
 Improper Input Validation  		CVE-2016-1547 2024-11-21 11:46 2017-01-7 Show GitHub Exploit DB Packet Storm
276436 5.9 MEDIUM
Network 		cisco content_security_management_appliance
email_security_appliance
web_security_appliance 		A vulnerability in the update functionality of Cisco AsyncOS Software for Cisco Email Security Appliance (ESA), Cisco Web Security Appliance (WSA), and Cisco Content Management Security Appliance (SM… CWE-310
Cryptographic Issues 		CVE-2016-1411 2024-11-21 11:46 2016-12-14 Show GitHub Exploit DB Packet Storm
276437 8.1 HIGH
Network 		dbd-mysql_project dbd-mysql There is a vulnerability of type use-after-free affecting DBD::mysql (aka DBD-mysql or the Database Interface (DBI) MySQL driver for Perl) 3.x and 4.x before 4.041 when used with mysql_server_prepare… CWE-416
 Use After Free 		CVE-2016-1251 2024-11-21 11:46 2016-11-30 Show GitHub Exploit DB Packet Storm
276438 7.8 HIGH
Local 		f5
fedoraproject 		nginx
fedora 		The nginx package before 1.6.2-5+deb8u3 on Debian jessie, the nginx packages before 1.4.6-1ubuntu3.6 on Ubuntu 14.04 LTS, before 1.10.0-0ubuntu0.16.04.3 on Ubuntu 16.04 LTS, and before 1.10.1-0ubuntu… CWE-59
Link Following 		CVE-2016-1247 2024-11-21 11:46 2016-11-30 Show GitHub Exploit DB Packet Storm
276439 7.8 HIGH
Local 		vim
debian 		vim
debian_linux 		vim before patch 8.0.0056 does not properly validate values for the 'filetype', 'syntax' and 'keymap' options, which may result in the execution of arbitrary code if a file with a specially crafted m… CWE-20
 Improper Input Validation  		CVE-2016-1248 2024-11-21 11:46 2016-11-24 Show GitHub Exploit DB Packet Storm
276440 6.1 MEDIUM
Network 		cisco email_security_appliance A vulnerability in the display of email messages in the Messages in Quarantine (MIQ) view in Cisco AsyncOS for Cisco Email Security Appliance (ESA) could allow an unauthenticated, remote attacker to … CWE-79
Cross-site Scripting 		CVE-2016-1423 2024-11-21 11:46 2016-10-28 Show GitHub Exploit DB Packet Storm