Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 18, 2026, 10 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
228181 6.8 警告 IBM - UNIX 用の IBM Sterling Connect:Direct におけるファイルシステムの読み取り権限および書き込み権限を回避される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2013-2989 2013-05-30 16:37 2013-05-14 Show GitHub Exploit DB Packet Storm
228182 4.3 警告 IBM - IBM Tivoli Monitoring の Tivoli Enterprise Portal browser クライアントにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2013-0576 2013-05-30 16:36 2013-05-17 Show GitHub Exploit DB Packet Storm
228183 4.3 警告 IBM - IBM WebSphere DataPower SOA アプライアンスにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2013-0499 2013-05-30 16:34 2013-05-17 Show GitHub Exploit DB Packet Storm
228184 7.2 危険 レッドハット - Red Hat livecd-tools における権限を取得される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2013-2069 2013-05-30 14:07 2013-05-23 Show GitHub Exploit DB Packet Storm
228185 4.9 警告 マイクロソフト - Microsoft Windows の win32k.sys の EPATHOBJ::bFlatten 関数におけるサービス運用妨害 (DoS) の脆弱性 CWE-22
パス・トラバーサル 		CVE-2013-3661 2013-05-29 16:54 2013-05-17 Show GitHub Exploit DB Packet Storm
228186 5 警告 IBM - IBM InfoSphere Optim Data Growth for Oracle E-Business Suite における重要な情報を取得される脆弱性 CWE-255
証明書・パスワード管理 		CVE-2013-2959 2013-05-29 16:37 2013-05-13 Show GitHub Exploit DB Packet Storm
228187 3.5 注意 IBM - IBM InfoSphere Optim Data Growth for Oracle E-Business Suite におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2013-2957 2013-05-29 16:37 2013-05-13 Show GitHub Exploit DB Packet Storm
228188 7.5 危険 IBM - IBM InfoSphere Optim Data Growth for Oracle E-Business Suite における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2013-2956 2013-05-29 16:36 2013-05-13 Show GitHub Exploit DB Packet Storm
228189 3.5 注意 IBM - IBM InfoSphere Optim Data Growth for Oracle E-Business Suite におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2013-2955 2013-05-29 16:35 2013-05-13 Show GitHub Exploit DB Packet Storm
228190 5 警告 IBM - IBM InfoSphere Optim Data Growth for Oracle E-Business Suite におけるアクセス権を取得される脆弱性 CWE-287
不適切な認証 		CVE-2013-2954 2013-05-29 16:35 2013-05-13 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 18, 2026, 4 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
194111 7.1 HIGH
Local 		google android An issue was discovered on LG mobile devices with Android OS 4.4 through 11 software. Attackers can leverage ISMS services to bypass access control on specific content providers. The LG ID is LVE-SMP… NVD-CWE-Other
CVE-2021-30162 2024-11-21 15:03 2021-04-6 Show GitHub Exploit DB Packet Storm
194112 5.5 MEDIUM
Local 		google android An issue was discovered on LG mobile devices with Android OS 11 software. Attackers can bypass the lockscreen protection mechanism after an incoming call has been terminated. The LG ID is LVE-SMP-210… NVD-CWE-noinfo
CVE-2021-30161 2024-11-21 15:03 2021-04-6 Show GitHub Exploit DB Packet Storm
194113 5.3 MEDIUM
Network 		mediawiki
debian
fedoraproject 		mediawiki
debian_linux
fedora 		An issue was discovered in MediaWiki before 1.31.12 and 1.32.x through 1.35.x before 1.35.2. Blocked users are unable to use Special:ResetTokens. This has security relevance because a blocked user mi… CWE-287
Improper Authentication 		CVE-2021-30158 2024-11-21 15:03 2021-04-6 Show GitHub Exploit DB Packet Storm
194114 6.1 MEDIUM
Network 		mediawiki
debian
fedoraproject 		mediawiki
debian_linux
fedora 		An issue was discovered in MediaWiki before 1.31.12 and 1.32.x through 1.35.x before 1.35.2. On ChangesList special pages such as Special:RecentChanges and Special:Watchlist, some of the rcfilters-fi… CWE-79
Cross-site Scripting 		CVE-2021-30157 2024-11-21 15:03 2021-04-6 Show GitHub Exploit DB Packet Storm
194115 6.1 MEDIUM
Network 		mediawiki
debian
fedoraproject 		mediawiki
debian_linux
fedora 		An issue was discovered in MediaWiki before 1.31.12 and 1.32.x through 1.35.x before 1.35.2. On Special:NewFiles, all the mediastatistics-header-* messages are output in HTML unescaped, leading to XS… CWE-79
Cross-site Scripting 		CVE-2021-30154 2024-11-21 15:03 2021-04-6 Show GitHub Exploit DB Packet Storm
194116 6.1 MEDIUM
Network 		contribsys
debian 		sidekiq
debian_linux 		Sidekiq through 5.1.3 and 6.x through 6.2.0 allows XSS via the queue name of the live-poll feature when Internet Explorer is used. CWE-79
Cross-site Scripting 		CVE-2021-30151 2024-11-21 15:03 2021-04-6 Show GitHub Exploit DB Packet Storm
194117 6.1 MEDIUM
Network 		ocproducts composr Composr 10.0.36 allows XSS in an XML script. CWE-79
Cross-site Scripting 		CVE-2021-30150 2024-11-21 15:03 2021-04-6 Show GitHub Exploit DB Packet Storm
194118 9.8 CRITICAL
Network 		ocproducts composr Composr 10.0.36 allows upload and execution of PHP files. CWE-434
 Unrestricted Upload of File with Dangerous Type  		CVE-2021-30149 2024-11-21 15:03 2021-04-6 Show GitHub Exploit DB Packet Storm
194119 4.3 MEDIUM
Network 		glpi-project dashboard The Dashboard plugin through 1.0.2 for GLPI allows remote low-privileged users to bypass access control on viewing information about the last ten events, the connected users, and the users in the tec… CWE-425
 Direct Request ('Forced Browsing') 		CVE-2021-30144 2024-11-21 15:03 2021-04-6 Show GitHub Exploit DB Packet Storm
194120 7.5 HIGH
Network 		friendica friendica Module/Settings/UserExport.php in Friendica through 2021.01 allows settings/userexport to be used by anonymous users, as demonstrated by an attempted access to an array offset on a value of type null… CWE-401
 Missing Release of Memory after Effective Lifetime 		CVE-2021-30141 2024-11-21 15:03 2021-04-6 Show GitHub Exploit DB Packet Storm