Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 31, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
223941 7.1 危険 IBM - IBM WebSphere DataPower XC10 アプライアンスにおけるサービス運用妨害 (DoS) の脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2013-5428 2013-10-23 16:39 2013-10-18 Show GitHub Exploit DB Packet Storm
223942 5.8 警告 シスコシステムズ - Open Shortest Path First (OSPF) プロトコルの Link State Advertisement (LSA) に関する問題 CWE-noinfo
情報不足 		CVE-2013-0149 2013-10-23 14:46 2013-08-1 Show GitHub Exploit DB Packet Storm
223943 10 危険 MySQL AB
オラクル		 - MySQL における脆弱性 CWE-noinfo
情報不足 		CVE-2012-2750 2013-10-23 14:44 2012-08-17 Show GitHub Exploit DB Packet Storm
223944 7.8 危険 シスコシステムズ - Cisco IOS の DNS-over-TCP の実装におけるサービス運用妨害 (DoS) の脆弱性 CWE-20
不適切な入力確認 		CVE-2013-5480 2013-10-23 10:46 2013-09-25 Show GitHub Exploit DB Packet Storm
223945 7.8 危険 シスコシステムズ - Cisco IOS の DNS-over-TCP の実装におけるサービス運用妨害 (DoS) の脆弱性 CWE-20
不適切な入力確認 		CVE-2013-5479 2013-10-23 10:45 2013-09-25 Show GitHub Exploit DB Packet Storm
223946 7.8 危険 シスコシステムズ - Cisco IOS および IOS XE におけるサービス運用妨害 (DoS) の脆弱性 CWE-20
不適切な入力確認 		CVE-2013-5478 2013-10-23 10:44 2013-09-25 Show GitHub Exploit DB Packet Storm
223947 7.8 危険 シスコシステムズ - Cisco IOS の T1/E1 driver-queue 機能におけるサービス運用妨害 (DoS) の脆弱性 CWE-20
不適切な入力確認 		CVE-2013-5477 2013-10-23 10:43 2013-09-25 Show GitHub Exploit DB Packet Storm
223948 7.8 危険 シスコシステムズ - Cisco IOS および IOS XE におけるサービス運用妨害 (DoS) の脆弱性 CWE-399
リソース管理の問題 		CVE-2013-5473 2013-10-23 10:41 2013-09-25 Show GitHub Exploit DB Packet Storm
223949 4.3 警告 The phpMyAdmin Project
Novell		 - phpMyAdmin におけるクリックジャッキング防止メカニズムを回避される脆弱性 CWE-20
不適切な入力確認 		CVE-2013-5029 2013-10-23 10:40 2013-08-4 Show GitHub Exploit DB Packet Storm
223950 5.8 警告 Puppet - Puppet Enterprise のパスワードリセットページにおけるユーザパスワードを変更される脆弱性 CWE-255
証明書・パスワード管理 		CVE-2013-4962 2013-10-23 10:36 2013-08-15 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 31, 2026, 4:16 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
314031 6.3 MEDIUM
Network 		- - The Indeed Membership Pro plugin for WordPress is vulnerable to authorization bypass due to missing capability checks on various AJAX actions in versions 7.3 - 8.6. This makes it possible for authent… CWE-862
 Missing Authorization 		CVE-2020-36833 2024-10-16 16:15 2024-10-16 Show GitHub Exploit DB Packet Storm
314032 9.8 CRITICAL
Network 		- - The Ultimate Membership Pro plugin for WordPress is vulnerable to Authentication Bypass in versions between, and including, 7.3 to 8.6. This makes it possible for unauthenticated attackers to login a… CWE-287
Improper Authentication 		CVE-2020-36832 2024-10-16 16:15 2024-10-16 Show GitHub Exploit DB Packet Storm
314033 5.0 MEDIUM
Network 		- - The NextScripts: Social Networks Auto-Poster plugin for WordPress is vulnerable to authorization bypass due to missing capability checks on multiple user privilege/security functions provided in vers… CWE-284
Improper Access Control 		CVE-2020-36831 2024-10-16 16:15 2024-10-16 Show GitHub Exploit DB Packet Storm
314034 9.8 CRITICAL
Network 		- - The SiteGround Optimizer plugin for WordPress is vulnerable to authorization bypass leading to Remote Code Execution and Local File Inclusion in versions up to, and including, 5.0.12 due to incorrect… CWE-862
 Missing Authorization 		CVE-2019-25217 2024-10-16 16:15 2024-10-16 Show GitHub Exploit DB Packet Storm
314035 7.2 HIGH
Network 		- - The Rich Review plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the POST body 'update' parameter in versions up to, and including, 1.7.4 due to insufficient input sanitization a… CWE-79
Cross-site Scripting 		CVE-2019-25216 2024-10-16 16:15 2024-10-16 Show GitHub Exploit DB Packet Storm
314036 7.3 HIGH
Network 		- - The ARI-Adminer plugin for WordPress is vulnerable to authorization bypass due to a lack of file access controls in nearly every file of the plugin in versions up to, and including, 1.1.14. This make… CWE-862
 Missing Authorization 		CVE-2019-25215 2024-10-16 16:15 2024-10-16 Show GitHub Exploit DB Packet Storm
314037 7.2 HIGH
Network 		- - The ShopWP plugin for WordPress is vulnerable to authorization bypass due to a missing capability check on several REST API routes in versions up to, and including, 2.0.4. This makes it possible for … CWE-862
 Missing Authorization 		CVE-2019-25214 2024-10-16 16:15 2024-10-16 Show GitHub Exploit DB Packet Storm
314038 8.3 HIGH
Network 		- - The Formidable Form Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via multiple parameters submitted during form entries like 'after_html' in versions before 2.05.03 due to… CWE-79
Cross-site Scripting 		CVE-2017-20192 2024-10-16 16:15 2024-10-16 Show GitHub Exploit DB Packet Storm
314039 7.2 HIGH
Network 		- - The MainWP Dashboard – The Private WordPress Manager for Multiple Website Maintenance plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘mwp_setup_purchase_username’ parameter… - CVE-2016-15041 2024-10-16 16:15 2024-10-16 Show GitHub Exploit DB Packet Storm
314040 - - - The Kento Post View Counter plugin for WordPress is vulnerable to SQL Injection via the 'kento_pvc_geo' parameter in versions up to, and including, 2.8 due to insufficient escaping on the user suppli… CWE-89
SQL Injection 		CVE-2016-15040 2024-10-16 16:15 2024-10-16 Show GitHub Exploit DB Packet Storm