Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 11, 2026, 10 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
207311 6.9 警告 シスコシステムズ - Cisco Nexus 2000 Fabric Extender デバイス上で稼動する Cisco NX-OS における権限を取得される脆弱性 CWE-255
CWE-264
CVE-2016-1341 2016-03-14 14:53 2016-02-23 Show GitHub Exploit DB Packet Storm
207312 5 警告 シスコシステムズ - Cisco Web セキュリティ アプライアンスデバイス上で稼動する AsyncOS の HTTPS プロキシ機能におけるサービス運用妨害 (DoS) の脆弱性 CWE-20
不適切な入力確認
CVE-2016-1288 2016-03-14 14:53 2016-03-2 Show GitHub Exploit DB Packet Storm
207313 5 警告 ヒューレット・パッカード - 複数の HP プリンタ製品のファームウェアにおける重要な情報を取得される脆弱性 CWE-200
情報漏えい
CVE-2016-2244 2016-03-14 14:45 2016-03-1 Show GitHub Exploit DB Packet Storm
207314 5 警告 Novell - Novell ZENworks Configuration Management の ChangePassword RPC メソッドにおける XPath インジェクション攻撃を実行される脆弱性 CWE-94
コード・インジェクション
CVE-2015-5970 2016-03-14 14:14 2015-09-17 Show GitHub Exploit DB Packet Storm
207315 7.5 危険 Nettle project
Novell
Canonical
- Nettle の x86_64/ecc-384-modp.asm における不特定の脆弱性 CWE-310
CWE-Other
CVE-2015-8804 2016-03-14 14:08 2015-12-15 Show GitHub Exploit DB Packet Storm
207316 7.5 危険 Nettle project
Novell
Canonical
- Nettle の ecc-256.c の ecc_256_modp 関数における脆弱性 CWE-310
CWE-Other
CVE-2015-8803 2016-03-14 14:08 2015-12-10 Show GitHub Exploit DB Packet Storm
207317 5 警告 Debian
DidiWiki project
- didiwiki の wiki.c におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル
CVE-2013-7448 2016-03-14 14:05 2013-10-9 Show GitHub Exploit DB Packet Storm
207318 10 危険 マイクロソフト - Microsoft .NET Framework における XML ドキュメントの署名を偽造される脆弱性 CWE-20
不適切な入力確認
CVE-2016-0132 2016-03-14 12:18 2016-03-8 Show GitHub Exploit DB Packet Storm
207319 9.3 危険 マイクロソフト - 複数の Microsoft Windows 製品の PDF ライブラリにおける任意のコードを実行される脆弱性 CWE-20
不適切な入力確認
CVE-2016-0117 2016-03-14 11:43 2016-03-8 Show GitHub Exploit DB Packet Storm
207320 9.3 危険 マイクロソフト - 複数の Microsoft Office 製品における任意のコードを実行される脆弱性 CWE-119
バッファエラー
CVE-2016-0134 2016-03-14 10:15 2016-03-8 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 11, 2026, 5:13 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
346871 - afterlogic webmail_pro Multiple cross-site scripting (XSS) vulnerabilities in history-storage.aspx in AfterLogic WebMail Pro 4.7.10 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) Hist… CWE-79
Cross-site Scripting
CVE-2009-4743 2017-08-17 10:31 2010-03-27 Show GitHub Exploit DB Packet Storm
346872 - oicgroup exponent_cms Cross-site scripting (XSS) vulnerability in the Contact module in Exponent CMS 0.97-GA20090213 allows remote attackers to inject arbitrary web script or HTML via the email parameter. NOTE: the prove… CWE-79
Cross-site Scripting
CVE-2009-4744 2017-08-17 10:31 2010-03-27 Show GitHub Exploit DB Packet Storm
346873 - phppower top_paidmailer PHP remote file inclusion vulnerability in home.php in Top Paidmailer allows remote attackers to execute arbitrary PHP code via a URL in the page parameter. CWE-94
Code Injection
CVE-2009-4750 2017-08-17 10:31 2010-03-27 Show GitHub Exploit DB Packet Storm
346874 - phppower swinger_club_portal SQL injection vulnerability in anzeiger/start.php in Swinger Club Portal allows remote attackers to execute arbitrary SQL commands via the id parameter in a rubrik action. CWE-89
SQL Injection
CVE-2009-4751 2017-08-17 10:31 2010-03-27 Show GitHub Exploit DB Packet Storm
346875 - phppower swinger_club_portal PHP remote file inclusion vulnerability in anzeiger/start.php in Swinger Club Portal allows remote attackers to execute arbitrary PHP code via a URL in the go parameter. CWE-94
Code Injection
CVE-2009-4752 2017-08-17 10:31 2010-03-27 Show GitHub Exploit DB Packet Storm
346876 - phpmyvisites phpmyvisites Unspecified vulnerability in the ClickHeat plugin, as used in phpMyVisites before 2.4, has unknown impact and attack vectors. NOTE: due to lack of details from the vendor, it is not clear whether th… NVD-CWE-noinfo
CVE-2009-4763 2017-08-17 10:31 2010-03-31 Show GitHub Exploit DB Packet Storm
346877 - plohni shoutbox Multiple cross-site scripting (XSS) vulnerabilities in index.php in Plohni Shoutbox 1.0 allow remote attackers to inject arbitrary web script or HTML via the (1) input_name and (2) input_text paramet… CWE-79
Cross-site Scripting
CVE-2009-4767 2017-08-17 10:31 2010-04-20 Show GitHub Exploit DB Packet Storm
346878 - blizzard warcraft_3_the_frozen_throne Unspecified vulnerability in the JASS script interpreter in Warcraft III: The Frozen Throne 1.24b and earlier allows user-assisted remote attackers to execute arbitrary code via a crafted custom map.… CWE-94
Code Injection
CVE-2009-4768 2017-08-17 10:31 2010-04-20 Show GitHub Exploit DB Packet Storm
346879 - ubercart ubercart The PayPal Website Payments Standard functionality in the Ubercart module 5.x before 5.x-1.9 and 6.x before 6.x-2.1 for Drupal does not properly validate orders, which allows remote attackers to trig… CWE-20
 Improper Input Validation 
CVE-2009-4771 2017-08-17 10:31 2010-04-20 Show GitHub Exploit DB Packet Storm
346880 - ubercart ubercart Unspecified vulnerability in the PayPal Website Payments Standard functionality in the Ubercart module 5.x before 5.x-1.9 and 6.x before 6.x-2.1 for Drupal, when a custom checkout completion message … NVD-CWE-noinfo
CVE-2009-4772 2017-08-17 10:31 2010-04-20 Show GitHub Exploit DB Packet Storm