Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 14, 2026, 2 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
223121 7.5 危険 apptha.com - WordPress 用 Apptha WordPress Video Gallery におけるクロスサイトスクリプティングの脆弱性 CWE-89
SQLインジェクション 		CVE-2013-3478 2014-03-6 15:18 2013-05-14 Show GitHub Exploit DB Packet Storm
223122 3.5 注意 IBM - IBM Algo One の複数のコンポーネントにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2013-6333 2014-03-6 15:16 2013-10-31 Show GitHub Exploit DB Packet Storm
223123 6.5 警告 IBM - IBM Algo One の複数のコンポーネントにおける SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2013-6331 2014-03-6 15:15 2013-10-31 Show GitHub Exploit DB Packet Storm
223124 3.5 注意 IBM - IBM Algo One の複数のコンポーネントにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2013-6320 2014-03-6 15:13 2013-10-31 Show GitHub Exploit DB Packet Storm
223125 4 警告 IBM - IBM Algo One の複数のコンポーネントにおけるアクセス制限を回避される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2013-6319 2014-03-6 15:12 2013-10-31 Show GitHub Exploit DB Packet Storm
223126 4.3 警告 IBM - IBM Algo One の複数のコンポーネントにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2013-6318 2014-03-6 15:10 2013-10-31 Show GitHub Exploit DB Packet Storm
223127 4 警告 IBM - IBM Algo One の複数のコンポーネントにおけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2013-6303 2014-03-6 15:09 2013-10-31 Show GitHub Exploit DB Packet Storm
223128 6.5 警告 IBM - IBM Algo One の複数のコンポーネントにおけるSQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2013-6302 2014-03-6 15:08 2013-10-31 Show GitHub Exploit DB Packet Storm
223129 3.5 注意 IBM - IBM Algo One の複数のコンポーネントにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2013-6301 2014-03-6 15:07 2013-10-31 Show GitHub Exploit DB Packet Storm
223130 3.5 注意 IBM - IBM Algo One の複数のコンポーネントにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2013-6300 2014-03-6 15:06 2013-10-31 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 14, 2026, 4:12 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
314461 8.8 HIGH
Network 		eyecix jobsearch_wp_job_board The JobSearch WP Job Board plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the jobsearch_wp_handle_upload() function in all versions up to, and inc… CWE-434
 Unrestricted Upload of File with Dangerous Type  		CVE-2024-8614 2024-11-9 05:23 2024-11-6 Show GitHub Exploit DB Packet Storm
314462 5.3 MEDIUM
Network 		dlink dns-320_firmware
dns-320lw_firmware
dns-325_firmware
dns-340l_firmware 		A vulnerability classified as problematic has been found in D-Link DNS-320, DNS-320LW, DNS-325 and DNS-340L up to 20241028. This affects an unknown part of the file /xml/info.xml of the component HTT… NVD-CWE-Other
CVE-2024-10916 2024-11-9 05:11 2024-11-7 Show GitHub Exploit DB Packet Storm
314463 9.8 CRITICAL
Network 		dlink dns-320_firmware
dns-320lw_firmware
dns-325_firmware
dns-340l_firmware 		A vulnerability was found in D-Link DNS-320, DNS-320LW, DNS-325 and DNS-340L up to 20241028. It has been rated as critical. Affected by this issue is the function cgi_user_add of the file /cgi-bin/ac… CWE-78
OS Command  		CVE-2024-10915 2024-11-9 05:11 2024-11-6 Show GitHub Exploit DB Packet Storm
314464 7.8 HIGH
Local 		linux linux_kernel In the Linux kernel, the following vulnerability has been resolved: Bluetooth: SCO: Fix UAF on sco_sock_timeout conn->sk maybe have been unlinked/freed while waiting for sco_conn_lock so this check… CWE-416
 Use After Free 		CVE-2024-50125 2024-11-9 05:04 2024-11-6 Show GitHub Exploit DB Packet Storm
314465 7.8 HIGH
Local 		linux linux_kernel In the Linux kernel, the following vulnerability has been resolved: Bluetooth: ISO: Fix UAF on iso_sock_timeout conn->sk maybe have been unlinked/freed while waiting for iso_conn_lock so this check… CWE-416
 Use After Free 		CVE-2024-50124 2024-11-9 05:04 2024-11-6 Show GitHub Exploit DB Packet Storm
314466 7.1 HIGH
Local 		linux linux_kernel In the Linux kernel, the following vulnerability has been resolved: bpf: Add the missing BPF_LINK_TYPE invocation for sockmap There is an out-of-bounds read in bpf_link_show_fdinfo() for the sockma… CWE-125
Out-of-bounds Read 		CVE-2024-50123 2024-11-9 05:03 2024-11-6 Show GitHub Exploit DB Packet Storm
314467 5.4 MEDIUM
Network 		f5 nginx_ingress_controller
nginx_instance_manager
nginx_api_connectivity_manager
nginx_openid_connect 		A session fixation issue was discovered in the NGINX OpenID Connect reference implementation, where a nonce was not checked at login time. This flaw allows an attacker to fix a victim's session to an… CWE-384
 Session Fixation 		CVE-2024-10318 2024-11-9 04:51 2024-11-7 Show GitHub Exploit DB Packet Storm
314468 5.3 MEDIUM
Network 		erudika scoold Scoold is a Q&A and a knowledge sharing platform for teams. A semicolon path injection vulnerability was found on the /api;/config endpoint. By appending a semicolon in the URL, attackers can bypass … CWE-288
Authentication Bypass Using an Alternate Path or Channel 		CVE-2024-50334 2024-11-9 04:51 2024-10-30 Show GitHub Exploit DB Packet Storm
314469 7.1 HIGH
Local 		linux linux_kernel In the Linux kernel, the following vulnerability has been resolved: net: wwan: fix global oob in wwan_rtnl_policy The variable wwan_rtnl_link_ops assign a *bigger* maxtype which leads to a global o… CWE-125
Out-of-bounds Read 		CVE-2024-50128 2024-11-9 04:39 2024-11-6 Show GitHub Exploit DB Packet Storm
314470 5.4 MEDIUM
Network 		avecnous event_post The Event post plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's events_cal shortcode in all versions up to, and including, 5.9.6 due to insufficient input sanitizati… CWE-79
Cross-site Scripting 		CVE-2024-10186 2024-11-9 04:21 2024-11-6 Show GitHub Exploit DB Packet Storm