Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 27, 2026, 10 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
224281 4.3 警告 オラクル - Oracle E-Business Suite の Oracle Application Object Library における Signon に関する脆弱性 CWE-noinfo
情報不足 		CVE-2013-3777 2013-09-6 18:12 2013-07-16 Show GitHub Exploit DB Packet Storm
224282 4.3 警告 オラクル - Oracle E-Business Suite Access Gate の Oracle Application Object Library における脆弱性 CWE-noinfo
情報不足 		CVE-2013-3767 2013-09-6 18:10 2013-07-16 Show GitHub Exploit DB Packet Storm
224283 5.5 警告 オラクル - Oracle E-Business Suite の Oracle Landed Cost Management における Shipment Workbench に関する脆弱性 CWE-noinfo
情報不足 		CVE-2013-3756 2013-09-6 18:06 2013-07-16 Show GitHub Exploit DB Packet Storm
224284 4.3 警告 Open-Xchange - Open-Xchange Server における平文のパスワードを取得される脆弱性 CWE-200
情報漏えい 		CVE-2013-1649 2013-09-6 16:51 2013-03-13 Show GitHub Exploit DB Packet Storm
224285 6 警告 Open-Xchange - Open-Xchange Server のサブスクリプション機能における任意のアウトバウンド TCP トラフィックを誘発される脆弱性 CWE-20
不適切な入力確認 		CVE-2013-1648 2013-09-6 16:33 2013-03-13 Show GitHub Exploit DB Packet Storm
224286 5 警告 Open-Xchange - Open-Xchange Server における CRLF インジェクションの脆弱性 CWE-94
コード・インジェクション 		CVE-2013-1647 2013-09-6 16:20 2013-03-13 Show GitHub Exploit DB Packet Storm
224287 4.3 警告 Open-Xchange - Open-Xchange Server におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2013-1646 2013-09-6 16:18 2013-03-13 Show GitHub Exploit DB Packet Storm
224288 4 警告 Open-Xchange - Open-Xchange Server におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2013-1645 2013-09-6 16:14 2013-03-13 Show GitHub Exploit DB Packet Storm
224289 3.5 注意 Open-Xchange - Open-Xchange App Suite および Server におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2013-5698 2013-09-6 16:11 2013-06-3 Show GitHub Exploit DB Packet Storm
224290 3.5 注意 Open-Xchange - Open-Xchange App Suite における他のユーザの電子メールの認証情報を取得される脆弱性 CWE-255
証明書・パスワード管理 		CVE-2013-4790 2013-09-6 16:03 2013-07-31 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 27, 2026, 4:52 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
313951 - - - SEMCMS 4.8 is vulnerable to SQL Injection via SEMCMS_Main.php. - CVE-2024-46103 2024-09-26 22:32 2024-09-21 Show GitHub Exploit DB Packet Storm
313952 - - - GDidees CMS <= v3.9.1 has a file upload vulnerability. - CVE-2024-46101 2024-09-26 22:32 2024-09-21 Show GitHub Exploit DB Packet Storm
313953 - - - Confidant is a open source secret management service that provides user-friendly storage and access to secrets. The following endpoints are subject to a cross site scripting vulnerability: GET /v1/cr… CWE-79
Cross-site Scripting 		CVE-2024-45793 2024-09-26 22:32 2024-09-21 Show GitHub Exploit DB Packet Storm
313954 - - - Navidrome is an open source web-based music collection server and streamer. Navidrome automatically adds parameters in the URL to SQL queries. This can be exploited to access information by adding pa… CWE-89
SQL Injection 		CVE-2024-47062 2024-09-26 22:32 2024-09-21 Show GitHub Exploit DB Packet Storm
313955 - - - Plate is a javascript toolkit that makes it easier for you to develop with Slate, a popular framework for building text editors. One longstanding feature of Plate is the ability to add custom DOM att… CWE-79
Cross-site Scripting 		CVE-2024-47061 2024-09-26 22:32 2024-09-21 Show GitHub Exploit DB Packet Storm
313956 - - - A stored cross-site scripting (XSS) vulnerability in the Add Scheduled Task module of Maccms10 v2024.1000.4040 allows attackers to execute arbitrary web scripts or HTML via a crafted payload. - CVE-2024-46654 2024-09-26 22:32 2024-09-21 Show GitHub Exploit DB Packet Storm
313957 - - - Galaxy is a free, open-source system for analyzing data, authoring workflows, training and education, publishing tools, managing infrastructure, and more. An attacker can potentially replace the cont… CWE-200
Information Exposure 		CVE-2024-42351 2024-09-26 22:32 2024-09-21 Show GitHub Exploit DB Packet Storm
313958 - - - Galaxy is a free, open-source system for analyzing data, authoring workflows, training and education, publishing tools, managing infrastructure, and more. The editor visualization, /visualizations en… CWE-79
Cross-site Scripting 		CVE-2024-42346 2024-09-26 22:32 2024-09-21 Show GitHub Exploit DB Packet Storm
313959 - - - Cross Site Scripting vulnerability in Leotheme Leo Product Search Module v.2.1.6 and earlier allows a remote attacker to execute arbitrary code via the q parameter of the product search function. - CVE-2024-42697 2024-09-26 22:32 2024-09-21 Show GitHub Exploit DB Packet Storm
313960 - - - The Versa Director offers REST APIs for orchestration and management. By design, certain APIs, such as the login screen, banner display, and device registration, do not require authentication. Howeve… - CVE-2024-45229 2024-09-26 22:32 2024-09-21 Show GitHub Exploit DB Packet Storm