Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 6, 2026, 10 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
224631 4.3 警告 WordPress.org - WordPress の wp-includes/functions.php におけるクロスサイトスクリプティングの脆弱性 CWE-20
不適切な入力確認 		CVE-2013-5738 2013-10-11 19:28 2013-09-10 Show GitHub Exploit DB Packet Storm
224632 5.7 警告 シスコシステムズ - Cisco IOS および IOS XE の OSPF 機能におけるサービス運用妨害 (DoS) の脆弱性 CWE-20
不適切な入力確認 		CVE-2013-5527 2013-10-11 19:26 2013-10-10 Show GitHub Exploit DB Packet Storm
224633 7.1 危険 シスコシステムズ - Cisco 9900 Fourth-Generation IP Phone におけるサービス運用妨害 (DoS) の脆弱性 CWE-20
不適切な入力確認 		CVE-2013-5526 2013-10-11 19:24 2013-10-10 Show GitHub Exploit DB Packet Storm
224634 7.5 危険 Moodle - Moodle の badges/external.php における PHP オブジェクトインジェクション攻撃を実行される脆弱性 CWE-94
コード・インジェクション 		CVE-2013-5674 2013-10-11 19:23 2013-09-16 Show GitHub Exploit DB Packet Storm
224635 6.5 警告 シスコシステムズ - Cisco Identity Services Engine の Web フレームワークにおける SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2013-5525 2013-10-11 19:22 2013-10-9 Show GitHub Exploit DB Packet Storm
224636 4.7 警告 FreeBSD - FreeBSD のカーネルの sys/kern/uipc_syscalls.c における重要な情報を取得される脆弱性 CWE-200
情報漏えい 		CVE-2013-5666 2013-10-11 19:18 2013-09-10 Show GitHub Exploit DB Packet Storm
224637 4.3 警告 日本ナショナルインスツルメンツ - National Instruments LabWindows/CVI の Help サブシステムにおける脆弱性 CWE-noinfo
情報不足 		CVE-2013-5025 2013-10-11 19:16 2013-03-22 Show GitHub Exploit DB Packet Storm
224638 4.3 警告 シスコシステムズ - Cisco Identity Services Engine のトラブルシューティングページにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2013-5524 2013-10-11 19:15 2013-10-9 Show GitHub Exploit DB Packet Storm
224639 4.3 警告 日本ナショナルインスツルメンツ - National Instruments LabWindows/CVI の NI .NET クラスライブラリヘルプにおける脆弱性 CWE-noinfo
情報不足 		CVE-2013-5024 2013-10-11 19:15 2013-03-22 Show GitHub Exploit DB Packet Storm
224640 4.3 警告 シスコシステムズ - Cisco Identity Services Engine の Sponsor Portal におけるクリックジャッキング攻撃を実行される脆弱性 CWE-20
不適切な入力確認 		CVE-2013-5523 2013-10-11 19:13 2013-10-9 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 6, 2026, 4:18 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
197921 4.9 MEDIUM
Network 		zte zxcdn The management system of ZXCDN is impacted by the information leak vulnerability. Attackers can make further analysis according to the information returned by the program, and then obtain some sensit… CWE-200
Information Exposure 		CVE-2021-21733 2024-11-21 14:48 2021-05-19 Show GitHub Exploit DB Packet Storm
197922 7.5 HIGH
Network 		zte axon_11_5g_firmware A mobile phone of ZTE is impacted by improper access control vulnerability. Due to improper permission settings, third-party applications can read some files in the proc file system without authoriza… NVD-CWE-Other
CVE-2021-21732 2024-11-21 14:48 2021-05-19 Show GitHub Exploit DB Packet Storm
197923 5.3 MEDIUM
Network 		sensiolabs
fedoraproject 		symfony
fedora 		Symfony is a PHP framework for web and console applications and a set of reusable PHP components. The ability to enumerate users was possible without relevant permissions due to different handling de… - CVE-2021-21424 2024-11-21 14:48 2021-05-14 Show GitHub Exploit DB Packet Storm
197924 7.1 HIGH
Network 		jenkins xcode_integration Jenkins Xcode integration Plugin 2.0.14 and earlier does not configure its XML parser to prevent XML external entity (XXE) attacks. - CVE-2021-21656 2024-11-21 14:48 2021-05-12 Show GitHub Exploit DB Packet Storm
197925 7.1 HIGH
Network 		jenkins p4 A cross-site request forgery (CSRF) vulnerability in Jenkins P4 Plugin 1.11.4 and earlier allows attackers to connect to an attacker-specified Perforce server using attacker-specified username and pa… CWE-352
 Origin Validation Error 		CVE-2021-21655 2024-11-21 14:48 2021-05-12 Show GitHub Exploit DB Packet Storm
197926 4.3 MEDIUM
Network 		jenkins p4 Jenkins P4 Plugin 1.11.4 and earlier does not perform permission checks in multiple HTTP endpoints, allowing attackers with Overall/Read permission to connect to an attacker-specified Perforce server… - CVE-2021-21654 2024-11-21 14:48 2021-05-12 Show GitHub Exploit DB Packet Storm
197927 4.3 MEDIUM
Network 		jenkins xray_-_test_management_for_jira Jenkins Xray - Test Management for Jira Plugin 2.4.0 and earlier does not perform a permission check in an HTTP endpoint, allowing with Overall/Read permission to enumerate credentials IDs of credent… - CVE-2021-21653 2024-11-21 14:48 2021-05-12 Show GitHub Exploit DB Packet Storm
197928 7.1 HIGH
Network 		jenkins xray_-_test_management_for_jira A cross-site request forgery (CSRF) vulnerability in Jenkins Xray - Test Management for Jira Plugin 2.4.0 and earlier allows attackers to connect to an attacker-specified URL using attacker-specified… CWE-352
 Origin Validation Error 		CVE-2021-21652 2024-11-21 14:48 2021-05-12 Show GitHub Exploit DB Packet Storm
197929 4.3 MEDIUM
Network 		jenkins s3_publisher Jenkins S3 publisher Plugin 0.11.6 and earlier does not perform a permission check in an HTTP endpoint, allowing attackers with Overall/Read permission to obtain the list of configured profiles. - CVE-2021-21651 2024-11-21 14:48 2021-05-12 Show GitHub Exploit DB Packet Storm
197930 4.3 MEDIUM
Network 		jenkins s3_publisher Jenkins S3 publisher Plugin 0.11.6 and earlier does not perform Run/Artifacts permission checks in various HTTP endpoints and API models, allowing attackers with Item/Read permission to obtain inform… - CVE-2021-21650 2024-11-21 14:48 2021-05-12 Show GitHub Exploit DB Packet Storm