Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 15, 2026, 6 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
254911 4.3 警告 オラクル - Oracle E-Business Suite の Oracle Applications Manager コンポーネントにおける脆弱性 CWE-noinfo
情報不足
CVE-2010-0905 2010-08-5 16:35 2010-07-13 Show GitHub Exploit DB Packet Storm
254912 4.3 警告 オラクル - Oracle E-Business Suite の Oracle Applications Framework コンポーネントにおける脆弱性 CWE-noinfo
情報不足
CVE-2010-0912 2010-08-5 16:35 2010-07-13 Show GitHub Exploit DB Packet Storm
254913 5.5 警告 オラクル - Oracle E-Business Suite の Oracle Advanced Product Catalog コンポーネントにおける脆弱性 CWE-noinfo
情報不足
CVE-2010-0915 2010-08-5 16:34 2010-07-13 Show GitHub Exploit DB Packet Storm
254914 7.5 危険 オラクル - Oracle E-Business Suite の Oracle Applications Framework コンポーネントにおける脆弱性 CWE-noinfo
情報不足
CVE-2010-0908 2010-08-5 16:34 2010-07-13 Show GitHub Exploit DB Packet Storm
254915 4.3 警告 オラクル - Oracle Enterprise Manager Grid Control の Console コンポーネントにおける脆弱性 CWE-noinfo
情報不足
CVE-2010-2373 2010-08-5 16:33 2010-07-13 Show GitHub Exploit DB Packet Storm
254916 4.3 警告 オラクル - Oracle Fusion Middleware の Oracle Business Process Management コンポーネントにおける脆弱性 CWE-noinfo
情報不足
CVE-2010-2370 2010-08-5 16:33 2010-07-13 Show GitHub Exploit DB Packet Storm
254917 5 警告 オラクル - Oracle Secure Backup における脆弱性 CWE-noinfo
情報不足
CVE-2010-0904 2010-08-5 16:33 2010-07-13 Show GitHub Exploit DB Packet Storm
254918 9 危険 オラクル - Oracle Secure Backup における脆弱性 CWE-noinfo
情報不足
CVE-2010-0906 2010-08-5 16:32 2010-07-13 Show GitHub Exploit DB Packet Storm
254919 9 危険 オラクル - Oracle Secure Backup における脆弱性 CWE-noinfo
情報不足
CVE-2010-0899 2010-08-5 16:32 2010-07-13 Show GitHub Exploit DB Packet Storm
254920 10 危険 オラクル - Oracle Secure Backup における脆弱性 CWE-noinfo
情報不足
CVE-2010-0907 2010-08-5 16:32 2010-07-13 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 15, 2026, 4:28 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
285691 6.1 MEDIUM
Network
pixelite events_manager The events-manager plugin before 5.5 for WordPress has XSS via EM_Ticket::get_post. CWE-79
Cross-site Scripting
CVE-2013-7478 2024-11-21 11:01 2019-08-22 Show GitHub Exploit DB Packet Storm
285692 6.1 MEDIUM
Network
pixelite events_manager The events-manager plugin before 5.5.2 for WordPress has XSS in the booking form. CWE-79
Cross-site Scripting
CVE-2013-7477 2024-11-21 11:01 2019-08-22 Show GitHub Exploit DB Packet Storm
285693 8.8 HIGH
Network
simple_fields_project simple_fields The simple-fields plugin before 1.2 for WordPress has CSRF in the admin interface. CWE-352
 Origin Validation Error
CVE-2013-7476 2024-11-21 11:01 2019-08-15 Show GitHub Exploit DB Packet Storm
285694 6.1 MEDIUM
Network
bestwebsoft contact_form The contact-form-plugin plugin before 3.52 for WordPress has XSS. CWE-79
Cross-site Scripting
CVE-2013-7475 2024-11-21 11:01 2019-08-14 Show GitHub Exploit DB Packet Storm
285695 6.1 MEDIUM
Network
windu windu_cms Windu CMS 2.2 allows XSS via the name parameter to admin/content/edit or admin/content/add, or the username parameter to admin/users. CWE-79
Cross-site Scripting
CVE-2013-7474 2024-11-21 11:01 2019-08-2 Show GitHub Exploit DB Packet Storm
285696 8.8 HIGH
Network
windu windu_cms Windu CMS 2.2 allows CSRF via admin/users/?mn=admin.message.error to add an admin account. CWE-352
 Origin Validation Error
CVE-2013-7473 2024-11-21 11:01 2019-08-2 Show GitHub Exploit DB Packet Storm
285697 6.1 MEDIUM
Network
count_per_day_project count_per_day The "Count per Day" plugin before 3.2.6 for WordPress allows XSS via the wp-admin/?page=cpd_metaboxes daytoshow parameter. CWE-79
Cross-site Scripting
CVE-2013-7472 2024-11-21 11:01 2019-06-16 Show GitHub Exploit DB Packet Storm
285698 9.8 CRITICAL
Network
dlink dir-300_firmware
dir-600_firmware
dir-645_firmware
dir-845_firmware
dir-865_firmware
An issue was discovered in soap.cgi?service=WANIPConn1 on D-Link DIR-845 before v1.02b03, DIR-600 before v2.17b01, DIR-645 before v1.04b11, DIR-300 rev. B, and DIR-865 devices. There is Command Injec… CWE-77
Command Injection
CVE-2013-7471 2024-11-21 11:01 2019-06-12 Show GitHub Exploit DB Packet Storm
285699 5.9 MEDIUM
Network
linux linux_kernel cipso_v4_validate in include/net/cipso_ipv4.h in the Linux kernel before 3.11.7, when CONFIG_NETLABEL is disabled, allows attackers to cause a denial of service (infinite loop and crash), as demonstr… CWE-400
 Uncontrolled Resource Consumption
CVE-2013-7470 2024-11-21 11:01 2019-04-23 Show GitHub Exploit DB Packet Storm
285700 8.1 HIGH
Network
simplemachines simple_machines_forum Simple Machines Forum (SMF) 2.0.4 allows PHP Code Injection via the index.php?action=admin;area=languages;sa=editlang dictionary parameter. CWE-94
Code Injection
CVE-2013-7468 2024-11-21 11:01 2019-03-8 Show GitHub Exploit DB Packet Storm