Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 20, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
215241 7.5 危険 MetalGenix - MetalGenix GeniXCMS における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2015-2679 2015-03-25 12:25 2015-03-14 Show GitHub Exploit DB Packet Storm
215242 4.3 警告 MetalGenix - MetalGenix GeniXCMS におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2015-2678 2015-03-25 12:25 2015-03-14 Show GitHub Exploit DB Packet Storm
215243 3.5 注意 s9y - Serendipity の templates/2k11/admin/entries.tpl におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2015-2289 2015-03-25 11:30 2015-03-12 Show GitHub Exploit DB Packet Storm
215244 5 警告 CODOFORUM - Codoforum の sanitize 関数における任意のファイルを読まれる脆弱性 CWE-22
パス・トラバーサル 		CVE-2014-9261 2015-03-25 11:18 2014-11-23 Show GitHub Exploit DB Packet Storm
215245 6.4 警告 ヒューレット・パッカード
オラクル		 - Oracle E-Business Suite の Oracle Applications Framework における Diagnostics の処理に関する脆弱性 CWE-noinfo
情報不足 		CVE-2013-0397 2015-03-24 17:45 2013-01-15 Show GitHub Exploit DB Packet Storm
215246 6.4 警告 ヒューレット・パッカード
オラクル		 - Oracle E-Business Suite の Oracle CRM Technical Foundation における Application Framework の処理に関する脆弱性 CWE-noinfo
情報不足 		CVE-2013-0381 2015-03-24 17:44 2013-01-15 Show GitHub Exploit DB Packet Storm
215247 4.3 警告 ヒューレット・パッカード
オラクル		 - 複数の Oracle Enterprise Manager 製品における Distributed/Cross DB Features の処理に関する脆弱性 CWE-noinfo
情報不足 		CVE-2013-0372 2015-03-24 17:44 2013-01-15 Show GitHub Exploit DB Packet Storm
215248 4.3 警告 Apache Software Foundation - Apache ActiveMQ の Web デモにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2012-6092 2015-03-24 15:35 2012-10-18 Show GitHub Exploit DB Packet Storm
215249 10 危険 ヒューレット・パッカード
オラクル		 - Oracle Database Mobile Server および Oracle Database Lite における脆弱性 CWE-noinfo
情報不足 		CVE-2013-0366 2015-03-24 15:31 2013-01-15 Show GitHub Exploit DB Packet Storm
215250 7.8 危険 ヒューレット・パッカード
オラクル		 - Oracle Database Mobile Server および Oracle Database Lite における脆弱性 CWE-noinfo
情報不足 		CVE-2013-0364 2015-03-24 15:30 2013-01-15 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 20, 2026, 4:01 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
295131 - debian
cacti
opensuse 		debian_linux
cacti
opensuse 		SQL injection vulnerability in cacti/host.php in Cacti 0.8.8b and earlier allows remote attackers to execute arbitrary SQL commands via the id parameter. CWE-89
SQL Injection 		CVE-2013-5589 2024-11-21 10:57 2013-08-29 Show GitHub Exploit DB Packet Storm
295132 - cacti
opensuse 		cacti
opensuse 		Multiple cross-site scripting (XSS) vulnerabilities in Cacti 0.8.8b and earlier allow remote attackers to inject arbitrary web script or HTML via (1) the step parameter to install/index.php or (2) th… CWE-79
Cross-site Scripting 		CVE-2013-5588 2024-11-21 10:57 2013-08-29 Show GitHub Exploit DB Packet Storm
295133 - freebsd freebsd The sctp_send_initiate_ack function in sys/netinet/sctp_output.c in the SCTP implementation in the kernel in FreeBSD 8.3 through 9.2-PRERELEASE does not properly initialize the state-cookie data stru… CWE-200
Information Exposure 		CVE-2013-5209 2024-11-21 10:57 2013-08-29 Show GitHub Exploit DB Packet Storm
295134 - staruml staruml Buffer overflow in the ToDot method in the WINGRAPHVIZLib.NEATO ActiveX control in WinGraphviz.dll in StarUML allows remote attackers to execute arbitrary code via a long argument. CWE-119
Incorrect Access of Indexable Resource ('Range Error')  		CVE-2013-5578 2024-11-21 10:57 2013-08-25 Show GitHub Exploit DB Packet Storm
295135 - bestpractical rt Cross-site scripting (XSS) vulnerability in Request Tracker (RT) 4.x before 4.0.13, when MakeClicky is configured, allows remote attackers to inject arbitrary web script or HTML via a URL in a ticket… CWE-79
Cross-site Scripting 		CVE-2013-5587 2024-11-21 10:57 2013-08-24 Show GitHub Exploit DB Packet Storm
295136 - axel_jung js_css_optimizer Cross-site scripting (XSS) vulnerability in the Javascript and CSS Optimizer extension before 1.1.14 for TYPO3 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. CWE-79
Cross-site Scripting 		CVE-2013-5570 2024-11-21 10:57 2013-08-24 Show GitHub Exploit DB Packet Storm
295137 - heiko_sudar slideshare SQL injection vulnerability in the Slideshare extension 0.1.0 for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors. CWE-89
SQL Injection 		CVE-2013-5569 2024-11-21 10:57 2013-08-24 Show GitHub Exploit DB Packet Storm
295138 - stanislas_rolland static_info_tables Cross-site scripting (XSS) vulnerability in the Static Info Tables (static_info_tables) extension before 2.3.1 for TYPO3 allows remote attackers to inject arbitrary web script or HTML via unspecified… CWE-79
Cross-site Scripting 		CVE-2013-5323 2024-11-21 10:57 2013-08-21 Show GitHub Exploit DB Packet Storm
295139 - jan_bednarik cooluri SQL injection vulnerability in the CoolURI extension before 1.0.30 for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors. CWE-89
SQL Injection 		CVE-2013-5322 2024-11-21 10:57 2013-08-21 Show GitHub Exploit DB Packet Storm
295140 - alienvault open_source_security_information_management Multiple SQL injection vulnerabilities in AlienVault Open Source Security Information Management (OSSIM) 4.1 allow remote attackers to execute arbitrary SQL commands via the (1) sensor parameter in a… CWE-89
SQL Injection 		CVE-2013-5321 2024-11-21 10:57 2013-08-20 Show GitHub Exploit DB Packet Storm