Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 27, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
224431 7.2 危険 マイクロソフト - 複数の Microsoft Windows 製品のカーネルの NT Virtual DOS Machine サブシステムにおける権限昇格の脆弱性 CWE-119
バッファエラー 		CVE-2013-3198 2013-08-23 17:56 2013-08-13 Show GitHub Exploit DB Packet Storm
224432 7.2 危険 マイクロソフト - 複数の Microsoft Windows 製品のカーネルの NT Virtual DOS Machine サブシステムにおける権限昇格の脆弱性 CWE-119
バッファエラー 		CVE-2013-3197 2013-08-23 17:55 2013-08-13 Show GitHub Exploit DB Packet Storm
224433 7.2 危険 マイクロソフト - 複数の Microsoft Windows 製品のカーネルの NT Virtual DOS Machine サブシステムにおける権限昇格の脆弱性 CWE-119
バッファエラー 		CVE-2013-3196 2013-08-23 17:54 2013-08-13 Show GitHub Exploit DB Packet Storm
224434 7.5 危険 マイクロソフト - 複数の Microsoft Windows 製品における ASLR 保護メカニズムを回避される脆弱性 CWE-noinfo
情報不足 		CVE-2013-2556 2013-08-23 17:53 2013-03-11 Show GitHub Exploit DB Packet Storm
224435 6.8 警告 IBM - IBM WebSphere Application Server の管理コンソールにおけるクロスサイトリクエストフォージェリの脆弱性 CWE-352
同一生成元ポリシー違反 		CVE-2013-3029 2013-08-23 16:46 2013-08-19 Show GitHub Exploit DB Packet Storm
224436 5 警告 OSIsoft - OSIsoft PI Interface for IEEE におけるサービス運用妨害 (DoS) の脆弱性 CWE-399
リソース管理の問題 		CVE-2013-2801 2013-08-23 16:44 2013-08-13 Show GitHub Exploit DB Packet Storm
224437 5 警告 OSIsoft - OSIsoft PI Interface for IEEE におけるサービス運用妨害 (DoS) の脆弱性 CWE-399
リソース管理の問題 		CVE-2013-2800 2013-08-23 16:43 2013-08-13 Show GitHub Exploit DB Packet Storm
224438 7.8 危険 Kepware Technologies - KEPServerEX 用 Kepware DNP Master Driver におけるサービス運用妨害 (DoS) の脆弱性 CWE-399
リソース管理の問題 		CVE-2013-2789 2013-08-23 16:39 2013-08-14 Show GitHub Exploit DB Packet Storm
224439 3.5 注意 アドバンテック株式会社 - Advantech WebAccess におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2013-2299 2013-08-23 16:31 2013-08-13 Show GitHub Exploit DB Packet Storm
224440 3.5 注意 IBM - IBM WebSphere Application Server の管理コンソールにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2013-4005 2013-08-23 15:59 2013-08-19 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 27, 2026, 4:52 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
313801 5.4 MEDIUM
Network 		allprices beauty The Beauty theme for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘tpl_featured_cat_id’ parameter in all versions up to, and including, 1.1.4 due to insufficient input sanitization … CWE-79
Cross-site Scripting 		CVE-2024-5884 2024-09-27 05:13 2024-09-14 Show GitHub Exploit DB Packet Storm
313802 8.8 HIGH
Network 		xwp stream The Stream plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 4.0.1. This is due to missing or incorrect nonce validation on the network_options_ac… CWE-352
 Origin Validation Error 		CVE-2024-7423 2024-09-27 05:08 2024-09-14 Show GitHub Exploit DB Packet Storm
313803 6.1 MEDIUM
Network 		slicewp affiliate_program_suite The WordPress Affiliates Plugin — SliceWP Affiliates plugin for WordPress is vulnerable to Reflected Cross-Site Scripting due to the use of remove_query_arg without appropriate escaping on the URL in… CWE-79
Cross-site Scripting 		CVE-2024-8714 2024-09-27 05:06 2024-09-14 Show GitHub Exploit DB Packet Storm
313804 6.1 MEDIUM
Network 		lucasstad lucas_string_replace The Lucas String Replace plugin for WordPress is vulnerable to Reflected Cross-Site Scripting due to the use of add_query_arg without appropriate escaping on the URL in all versions up to, and includ… CWE-79
Cross-site Scripting 		CVE-2024-8734 2024-09-27 04:30 2024-09-14 Show GitHub Exploit DB Packet Storm
313805 5.4 MEDIUM
Network 		khromov email_obfuscate_shortcode The Email Obfuscate Shortcode plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'email-obfuscate' shortcode in all versions up to, and including, 2.0 due to insuffici… CWE-79
Cross-site Scripting 		CVE-2024-8747 2024-09-27 04:23 2024-09-14 Show GitHub Exploit DB Packet Storm
313806 6.1 MEDIUM
Network 		kubiq pdf_thumbnail_generator The PDF Thumbnail Generator plugin for WordPress is vulnerable to Reflected Cross-Site Scripting due to the use of add_query_arg without appropriate escaping on the URL in all versions up to, and inc… CWE-79
Cross-site Scripting 		CVE-2024-8737 2024-09-27 04:18 2024-09-14 Show GitHub Exploit DB Packet Storm
313807 4.3 MEDIUM
Network 		sentry sentry Sentry is a developer-first error tracking and performance monitoring platform. An authenticated user can mute alert rules from arbitrary organizations and projects with a know rule ID. The user does… CWE-639
 Authorization Bypass Through User-Controlled Key 		CVE-2024-45606 2024-09-27 04:16 2024-09-18 Show GitHub Exploit DB Packet Storm
313808 4.3 MEDIUM
Network 		sentry sentry Sentry is a developer-first error tracking and performance monitoring platform. An authenticated user delete the user issue alert notifications for arbitrary users given a know alert ID. A patch was … CWE-639
 Authorization Bypass Through User-Controlled Key 		CVE-2024-45605 2024-09-27 04:14 2024-09-18 Show GitHub Exploit DB Packet Storm
313809 9.8 CRITICAL
Network 		apexsoftcell ld_geo
ld_dp_back_office 		This vulnerability exists in Apex Softcell LD Geo due to missing restrictions for excessive failed authentication attempts on its API based login. A remote attacker could exploit this vulnerability b… CWE-307
mproper Restriction of Excessive Authentication Attempts 		CVE-2024-47088 2024-09-27 04:12 2024-09-19 Show GitHub Exploit DB Packet Storm
313810 6.5 MEDIUM
Network 		apexsoftcell ld_geo
ld_dp_back_office 		This vulnerability exists in the Apex Softcell LD Geo due to improper validation of the transaction token ID in the API endpoint. An authenticated remote attacker could exploit this vulnerability by … CWE-354
 Improper Validation of Integrity Check Value 		CVE-2024-47089 2024-09-27 04:09 2024-09-19 Show GitHub Exploit DB Packet Storm