Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 14, 2026, 6 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
228711 5 警告 シスコシステムズ - Cisco Unity Connection におけるサービス運用妨害 (DoS) の脆弱性 CWE-399
リソース管理の問題
CVE-2013-1129 2013-02-21 16:41 2013-02-15 Show GitHub Exploit DB Packet Storm
228712 6.8 警告 シスコシステムズ - 複数の Cisco 製品のコマンドラインインターフェイスにおける root 権限を取得される脆弱性 CWE-20
不適切な入力確認
CVE-2013-1125 2013-02-21 16:40 2013-02-15 Show GitHub Exploit DB Packet Storm
228713 2.6 注意 コンクリートファイブ - concrete5 におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2012-5181 2013-02-20 16:01 2012-12-21 Show GitHub Exploit DB Packet Storm
228714 7.2 危険 マイクロソフト - Microsoft Windows のカーネルモードドライバ内の win32k.sys における権限昇格の脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2013-0008 2013-02-20 14:31 2013-01-8 Show GitHub Exploit DB Packet Storm
228715 7.5 危険 Google - Linux 上で稼働する Google Chrome における脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2013-0838 2013-02-20 13:41 2013-01-10 Show GitHub Exploit DB Packet Storm
228716 7.5 危険 Google - Google Chrome におけるサービス運用妨害 (DoS) の脆弱性 CWE-20
不適切な入力確認
CVE-2013-0837 2013-02-20 13:40 2013-01-10 Show GitHub Exploit DB Packet Storm
228717 6.8 警告 Google - Google Chrome で使用される Google V8 におけるサービス運用妨害 (DoS) の脆弱性 CWE-399
リソース管理の問題
CVE-2013-0836 2013-02-20 13:39 2013-01-10 Show GitHub Exploit DB Packet Storm
228718 5 警告 Google - Google Chrome の Geolocation の実装におけるサービス運用妨害 (アプリケーションクラッシュ) の脆弱性 CWE-noinfo
情報不足
CVE-2013-0835 2013-02-20 13:37 2013-01-10 Show GitHub Exploit DB Packet Storm
228719 5 警告 Google - Google Chrome におけるサービス運用妨害 (out-of-bounds read) の脆弱性 CWE-119
バッファエラー
CVE-2013-0834 2013-02-20 13:36 2013-01-10 Show GitHub Exploit DB Packet Storm
228720 5 警告 Google - Google Chrome のサービス運用妨害 (out-of-bounds read) の脆弱性 CWE-119
バッファエラー
CVE-2013-0833 2013-02-20 13:35 2013-01-10 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 14, 2026, 4:12 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
274681 8.8 HIGH
Network
buffalotech whr-1166dhp_firmware
whr-300hp2_firmware
wmr-300_firmware
bhr-4grv2_firmware
wex-300_firmware
whr-600d_firmware
wmr-433_firmware
wsr-1166dhp_firmware
Cross-site request forgery (CSRF) vulnerability on BUFFALO BHR-4GRV2 devices with firmware 1.04 and earlier, WEX-300 devices with firmware 1.90 and earlier, WHR-1166DHP devices with firmware 1.90 and… CWE-352
 Origin Validation Error
CVE-2016-1134 2024-11-21 11:45 2016-01-22 Show GitHub Exploit DB Packet Storm
274682 9.1 CRITICAL
Network
seeds acmailer Seeds acmailer before 3.8.21 and 3.9.x before 3.9.15 Beta allows remote authenticated users to execute arbitrary OS commands via unspecified vectors. CWE-78
OS Command 
CVE-2016-1142 2024-11-21 11:45 2016-01-16 Show GitHub Exploit DB Packet Storm
274683 3.7 LOW
Network
dena h2o CRLF injection vulnerability in the on_req function in lib/handler/redirect.c in H2O before 1.6.2 and 1.7.x before 1.7.0-beta3 allows remote attackers to inject arbitrary HTTP headers and conduct HTT… NVD-CWE-Other
CVE-2016-1133 2024-11-21 11:45 2016-01-16 Show GitHub Exploit DB Packet Storm
274684 7.8 HIGH
Local
dx_library_project dx_library Buffer overflow in the CL_vsprintf function in Takumi Yamada DX Library before 3.16 allows remote attackers to execute arbitrary code via a crafted string. CWE-119
Incorrect Access of Indexable Resource ('Range Error') 
CVE-2016-1131 2024-11-21 11:45 2016-01-8 Show GitHub Exploit DB Packet Storm
274685 6.1 MEDIUM
Network
pojo activity_log The aryo-activity-log plugin before 2.3.2 for WordPress has XSS. CWE-79
Cross-site Scripting
CVE-2016-10890 2024-11-21 11:44 2019-08-22 Show GitHub Exploit DB Packet Storm
274686 9.8 CRITICAL
Network
tipsandtricks-hq all_in_one_wp_security_\&_firewall The all-in-one-wp-security-and-firewall plugin before 4.0.7 for WordPress has multiple SQL injection issues. CWE-89
SQL Injection
CVE-2016-10888 2024-11-21 11:44 2019-08-15 Show GitHub Exploit DB Packet Storm
274687 9.8 CRITICAL
Network
tipsandtricks-hq all_in_one_wp_security_\&_firewall The all-in-one-wp-security-and-firewall plugin before 4.0.9 for WordPress has multiple SQL injection issues. CWE-89
SQL Injection
CVE-2016-10887 2024-11-21 11:44 2019-08-15 Show GitHub Exploit DB Packet Storm
274688 9.8 CRITICAL
Network
benjaminrojas wp_editor The wp-editor plugin before 1.2.6 for WordPress has incorrect permissions. CWE-264
Permissions, Privileges, and Access Controls
CVE-2016-10886 2024-11-21 11:44 2019-08-15 Show GitHub Exploit DB Packet Storm
274689 8.8 HIGH
Network
benjaminrojas wp_editor The wp-editor plugin before 1.2.6 for WordPress has CSRF. CWE-352
 Origin Validation Error
CVE-2016-10885 2024-11-21 11:44 2019-08-15 Show GitHub Exploit DB Packet Storm
274690 8.8 HIGH
Network
simple-membership-plugin simple_membership The simple-membership plugin before 3.3.3 for WordPress has multiple CSRF issues. CWE-352
 Origin Validation Error
CVE-2016-10884 2024-11-21 11:44 2019-08-15 Show GitHub Exploit DB Packet Storm