Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 17, 2026, 10 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
251541	3.5	注意	デル	-	Dell KACE K2000 System Deployment Appliance にクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2011-4436	2011-11-28 14:47	2011-11-9	Show	GitHub Exploit DB Packet Storm

251542	9.3	危険	デル	-	Dell KACE K2000 System Deployment Appliance にコマンドインジェクションの脆弱性	CWE-94 コード・インジェクション	CVE-2011-4047	2011-11-28 14:46	2011-11-9	Show	GitHub Exploit DB Packet Storm

251543	10	危険	Google サムスン日本エイサー	-	Chromebook プラットフォームで稼働する Google Chrome における詳細不明な脆弱性	CWE-noinfo 情報不足	CVE-2011-4548	2011-11-28 10:32	2011-11-22	Show	GitHub Exploit DB Packet Storm

251544	9.3	危険	リアルネットワークス	-	RealNetworks RealPlayer における任意のコードを実行される脆弱性	CWE-noinfo 情報不足	CVE-2011-4262	2011-11-28 10:30	2011-11-18	Show	GitHub Exploit DB Packet Storm

251545	9.3	危険	リアルネットワークス	-	RealNetworks RealPlayer における任意のコードを実行される脆弱性	CWE-94 コード・インジェクション	CVE-2011-4260	2011-11-28 10:28	2011-11-18	Show	GitHub Exploit DB Packet Storm

251546	9.3	危険	リアルネットワークス	-	RealNetworks RealPlayer における整数アンダーフローの脆弱性	CWE-189 数値処理の問題	CVE-2011-4259	2011-11-28 10:28	2011-11-18	Show	GitHub Exploit DB Packet Storm

251547	9.3	危険	リアルネットワークス	-	RealNetworks RealPlayer の Cook コーデックにおける任意のコードを実行される脆弱性	CWE-94 コード・インジェクション	CVE-2011-4257	2011-11-28 10:25	2011-11-18	Show	GitHub Exploit DB Packet Storm

251548	10	危険	リアルネットワークス	-	RealNetworks RealPlayer および Mac RealPlayer における任意のコードを実行される脆弱性	CWE-noinfo 情報不足	CVE-2011-4255	2011-11-28 10:23	2011-11-18	Show	GitHub Exploit DB Packet Storm

251549	10	危険	リアルネットワークス	-	RealNetworks RealPlayer における任意のコードを実行される脆弱性	CWE-94 コード・インジェクション	CVE-2011-4254	2011-11-28 10:22	2011-11-18	Show	GitHub Exploit DB Packet Storm

251550	9.3	危険	リアルネットワークス	-	RealNetworks RealPlayer における任意のコードを実行される脆弱性	CWE-94 コード・インジェクション	CVE-2011-4251	2011-11-28 10:18	2011-11-18	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 17, 2026, 4:15 a.m.

No	CVSS	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
286791	-	mike_stefanello	og_features	The OG Features module 6.x-1.x before 6.x-1.4 for Drupal does not properly override pages that have an access callback set to false, which allows remote attackers to bypass intended access restrictio…	CWE-264 Permissions, Privileges, and Access Controls	CVE-2013-7067	2024-11-21 11:00	2013-12-19	Show	GitHub Exploit DB Packet Storm

286792	-	dlink	dsr-150_firmware dsr-150 dsr-250_firmware dsr-250 dsr-1000n_firmware dsr-1000n dsr-150n_firmware dsr-150n dsr-500_firmware dsr-500 dsr-1000_firmware dsr-1000 dsr-2…	D-Link DSR-150 with firmware before 1.08B44; DSR-150N with firmware before 1.05B64; DSR-250 and DSR-250N with firmware before 1.08B44; and DSR-500, DSR-500N, DSR-1000, and DSR-1000N with firmware bef…	CWE-200 Information Exposure	CVE-2013-7005	2024-11-21 11:00	2013-12-19	Show	GitHub Exploit DB Packet Storm

286793	-	dlink	dsr-500_firmware dsr-500 dsr-150n_firmware dsr-150n dsr-250n_firmware dsr-150_firmware dsr-150 dsr-500n_firmware dsr-500n dsr-1000n_firmware dsr-1000n dsr-250_firmwar…	D-Link DSR-150 with firmware before 1.08B44; DSR-150N with firmware before 1.05B64; DSR-250 and DSR-250N with firmware before 1.08B44; and DSR-500, DSR-500N, DSR-1000, and DSR-1000N with firmware bef…	CWE-255 Credentials Management	CVE-2013-7004	2024-11-21 11:00	2013-12-19	Show	GitHub Exploit DB Packet Storm

286794	-	themebeans	blooog_theme	Cross-site scripting (XSS) vulnerability in ThemeBeans Blooog theme 1.1 for WordPress allows remote attackers to inject arbitrary web script or HTML via the jQuery parameter to assets/js/jplayer.swf.	CWE-79 Cross-site Scripting	CVE-2013-7129	2024-11-21 11:00	2013-12-18	Show	GitHub Exploit DB Packet Storm

286795	-	valvesoftware	steamos	Valve Bug Reporter in the valve-bugreporter package 2.10+bsos1 in Valve SteamOS Beta stores cleartext credentials in a .valve-bugreporter.cfg file upon a Remember Credentials action, which allows loc…	CWE-310 Cryptographic Issues	CVE-2013-7128	2024-11-21 11:00	2013-12-18	Show	GitHub Exploit DB Packet Storm

286796	-	apple	safari mac_os_x	Apple Safari 6.0.5 on Mac OS X 10.7.5 and 10.8.5 stores cleartext credentials in LastSession.plist, which allows local users to obtain sensitive information by reading this file.	CWE-310 Cryptographic Issues	CVE-2013-7127	2024-11-21 11:00	2013-12-18	Show	GitHub Exploit DB Packet Storm

286797	-	cisco	webex_training_center	Open redirect vulnerability in Cisco WebEx Training Center allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via unspecified vectors, aka Bug ID CSCul36031.	CWE-20 Improper Input Validation	CVE-2013-6966	2024-11-21 11:00	2013-12-17	Show	GitHub Exploit DB Packet Storm

286798	-	cisco	webex_training_center	Cisco WebEx Training Center allows remote attackers to discover registration IDs via a crafted URL, aka Bug ID CSCul57121.	CWE-200 Information Exposure	CVE-2013-6973	2024-11-21 11:00	2013-12-15	Show	GitHub Exploit DB Packet Storm

286799	-	cisco	webex_training_center	Cisco WebEx Training Center allows remote attackers to discover session numbers, and bypass host approval for audio-conference attendance, by reading HTML source code, aka Bug ID CSCul57126.	CWE-200 Information Exposure	CVE-2013-6972	2024-11-21 11:00	2013-12-15	Show	GitHub Exploit DB Packet Storm

286800	-	cisco	webex_training_center	Open redirect vulnerability in Cisco WebEx Training Center allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via unspecified vectors, aka Bug ID CSCul57140.	CWE-20 Improper Input Validation	CVE-2013-6971	2024-11-21 11:00	2013-12-15	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed