Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 28, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
223981 4.3 警告 オラクル - Oracle Fusion Middleware の Oracle Containers for J2EE における Servlet Runtime に関する脆弱性 CWE-noinfo
情報不足 		CVE-2013-5773 2013-10-17 16:50 2013-10-15 Show GitHub Exploit DB Packet Storm
223982 3.5 注意 オラクル - Oracle Fusion Middleware の Oracle Web Cache における ESI/Partial Page Caching に関する脆弱性 CWE-noinfo
情報不足 		CVE-2013-3836 2013-10-17 16:49 2013-10-15 Show GitHub Exploit DB Packet Storm
223983 4.3 警告 オラクル - Oracle Fusion Middleware の Oracle Access Manager における Authentication Engine に関する脆弱性 CWE-noinfo
情報不足 		CVE-2013-3833 2013-10-17 16:49 2013-10-15 Show GitHub Exploit DB Packet Storm
223984 5.5 警告 オラクル - Oracle Fusion Middleware の Oracle Portal における Demos に関する脆弱性 CWE-noinfo
情報不足 		CVE-2013-3831 2013-10-17 16:48 2013-10-15 Show GitHub Exploit DB Packet Storm
223985 5 警告 オラクル - Oracle Fusion Middleware の Oracle Web Services における Test Page に関する脆弱性 CWE-noinfo
情報不足 		CVE-2013-3828 2013-10-17 16:48 2013-10-15 Show GitHub Exploit DB Packet Storm
223986 6.8 警告 シスコシステムズ - Cisco NX-OS における権限を取得される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2012-4121 2013-10-17 10:39 2013-10-8 Show GitHub Exploit DB Packet Storm
223987 4.3 警告 シスコシステムズ - Cisco NX-OS の BGP の実装におけるサービス運用妨害 (DoS) の脆弱性 CWE-20
不適切な入力確認 		CVE-2012-4099 2013-10-17 10:38 2013-10-4 Show GitHub Exploit DB Packet Storm
223988 4.3 警告 シスコシステムズ - Cisco NX-OS の BGP の実装におけるサービス運用妨害 (DoS) の脆弱性 CWE-20
不適切な入力確認 		CVE-2012-4097 2013-10-17 10:36 2013-10-4 Show GitHub Exploit DB Packet Storm
223989 6.8 警告 シスコシステムズ - Cisco NX-OS における権限を取得される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2012-4077 2013-10-17 10:35 2013-10-9 Show GitHub Exploit DB Packet Storm
223990 7.2 危険 シスコシステムズ - Cisco NX-OS における権限を取得される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2012-4076 2013-10-17 10:35 2013-10-9 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 28, 2026, 4:16 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
314211 5.4 MEDIUM
Network 		alefypimentel gf_custom_style The GF Custom Style plugin for WordPress is vulnerable to Stored Cross-Site Scripting via SVG File uploads in all versions up to, and including, 2.0 due to insufficient input sanitization and output … CWE-79
Cross-site Scripting 		CVE-2024-9173 2024-10-1 23:12 2024-09-26 Show GitHub Exploit DB Packet Storm
314212 5.4 MEDIUM
Network 		codecabin super_testimonials The Super Testimonials plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘alignment’ parameter in all versions up to, and including, 3.0.0 due to insufficient input sanitizati… CWE-79
Cross-site Scripting 		CVE-2024-9127 2024-10-1 23:09 2024-09-26 Show GitHub Exploit DB Packet Storm
314213 5.4 MEDIUM
Network 		kingblack king_ie The king_IE plugin for WordPress is vulnerable to Stored Cross-Site Scripting via SVG File uploads in all versions up to, and including, 1.0 due to insufficient input sanitization and output escaping… CWE-79
Cross-site Scripting 		CVE-2024-9125 2024-10-1 23:00 2024-09-26 Show GitHub Exploit DB Packet Storm
314214 5.4 MEDIUM
Network 		mapplic mapplic The Mapplic Lite plugin for WordPress is vulnerable to Stored Cross-Site Scripting via SVG File uploads in all versions up to, and including, 1.0 due to insufficient input sanitization and output esc… CWE-79
Cross-site Scripting 		CVE-2024-9117 2024-10-1 22:56 2024-09-26 Show GitHub Exploit DB Packet Storm
314215 5.4 MEDIUM
Network 		chetanvaghela common_tools_for_site The Common Tools for Site plugin for WordPress is vulnerable to Stored Cross-Site Scripting via SVG File uploads in all versions up to, and including, 1.0.2 due to insufficient input sanitization and… CWE-79
Cross-site Scripting 		CVE-2024-9115 2024-10-1 22:47 2024-09-26 Show GitHub Exploit DB Packet Storm
314216 6.1 MEDIUM
Network 		nitinmaurya wordpress_visitors The WordPress Visitors plugin for WordPress is vulnerable to Stored Cross-Site Scripting via a spoofed HTTP Header value in versions up to, and including, 1.0 due to insufficient input sanitization a… CWE-79
Cross-site Scripting 		CVE-2022-4541 2024-10-1 22:46 2024-09-26 Show GitHub Exploit DB Packet Storm
314217 5.3 MEDIUM
Network 		codesupply sight The Sight – Professional Image Gallery and Portfolio plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the 'handler_post_title' function in all ve… CWE-862
 Missing Authorization 		CVE-2024-9025 2024-10-1 22:44 2024-09-26 Show GitHub Exploit DB Packet Storm
314218 6.1 MEDIUM
Network 		bizswoop store_hours_for_woocommerce The Store Hours for WooCommerce plugin for WordPress is vulnerable to Reflected Cross-Site Scripting due to the use of add_query_arg without appropriate escaping on the URL in all versions up to, and… CWE-79
Cross-site Scripting 		CVE-2024-8872 2024-10-1 22:42 2024-09-26 Show GitHub Exploit DB Packet Storm
314219 5.4 MEDIUM
Network 		metagauss profilegrid The ProfileGrid – User Profiles, Groups and Communities plugin for WordPress is vulnerable to Stored Cross-Site Scripting in all versions up to, and including, 5.9.3.2 due to incorrect use of the wp_… CWE-79
Cross-site Scripting 		CVE-2024-8861 2024-10-1 22:41 2024-09-26 Show GitHub Exploit DB Packet Storm
314220 6.3 MEDIUM
Network 		oretnom23 railway_reservation_system A vulnerability was found in SourceCodester Online Railway Reservation System 1.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file /admin/. Th… CWE-862
 Missing Authorization 		CVE-2024-9297 2024-10-1 22:39 2024-09-28 Show GitHub Exploit DB Packet Storm