Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":Feb. 9, 2026, 12:59 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
218741 4.6 警告 Canonical
Evan Dandrea
- usb-creator におけるアクセス制限を回避される脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2013-1063 2013-10-7 19:31 2013-09-18 Show GitHub Exploit DB Packet Storm
218742 6.6 警告 ウォッチガード・テクノロジー - WatchGuard Server Center における権限を取得される脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2013-5701 2013-10-7 19:27 2013-09-8 Show GitHub Exploit DB Packet Storm
218743 4.6 警告 Michael Vogt
Canonical
- ubuntu-system-service におけるアクセス制限を回避される脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2013-1062 2013-10-7 19:24 2013-09-18 Show GitHub Exploit DB Packet Storm
218744 4.6 警告 Canonical
Marc Deslauriers
- software-properties の dbus/SoftwarePropertiesDBus.py におけるアクセス制限を回避される脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2013-1061 2013-10-7 19:20 2013-09-18 Show GitHub Exploit DB Packet Storm
218745 4.3 警告 Gumball - WordPress 用 Comment Attachment プラグインにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2013-6010 2013-10-7 19:08 2013-09-20 Show GitHub Exploit DB Packet Storm
218746 4.3 警告 Open-Xchange - Open-Xchange AppSuite における CRLF インジェクションの脆弱性 CWE-94
コード・インジェクション
CVE-2013-6009 2013-10-7 18:54 2013-09-30 Show GitHub Exploit DB Packet Storm
218747 3.5 注意 Open-Xchange - Open-Xchange AppSuite におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2013-5690 2013-10-7 18:53 2013-09-30 Show GitHub Exploit DB Packet Storm
218748 9 危険 エニア株式会社
エマソン
- 複数の Emerson Process Management RTU 製品のソフトウェアにおけるシェルアクセス権を取得される脆弱性 CWE-255
証明書・パスワード管理
CVE-2013-0694 2013-10-7 15:44 2013-09-26 Show GitHub Exploit DB Packet Storm
218749 10 危険 エニア株式会社
エマソン
- 複数の Emerson Process Management RTU 製品上で稼働する ENEA OSE における重要な情報を取得される脆弱性 CWE-200
情報漏えい
CVE-2013-0693 2013-10-7 15:44 2013-09-26 Show GitHub Exploit DB Packet Storm
218750 10 危険 エニア株式会社
エマソン
- 複数の Emerson Process Management RTU 製品上で稼働する ENEA OSE における任意のコードを実行される脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2013-0692 2013-10-7 15:41 2013-09-26 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:April 25, 2026, 4:08 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
278171 - sun jdk
jre
sdk
The MessageDigest.isEqual function in Java Runtime Environment (JRE) in Sun Java SE in JDK and JRE 5.0 before Update 22, JDK and JRE 6 before Update 17, SDK and JRE 1.3.x before 1.3.1_27, and SDK and… CWE-310
Cryptographic Issues
CVE-2009-3875 2018-10-31 01:26 2009-11-6 Show GitHub Exploit DB Packet Storm
278172 - sun jdk
jre
sdk
Unspecified vulnerability in Sun Java SE in JDK and JRE 5.0 before Update 22, JDK and JRE 6 before Update 17, SDK and JRE 1.3.x before 1.3.1_27, and SDK and JRE 1.4.x before 1.4.2_24 allows remote at… CWE-399
 Resource Management Errors
CVE-2009-3876 2018-10-31 01:26 2009-11-6 Show GitHub Exploit DB Packet Storm
278173 - sun jdk
jre
sdk
Unspecified vulnerability in Sun Java SE in JDK and JRE 5.0 before Update 22, JDK and JRE 6 before Update 17, SDK and JRE 1.3.x before 1.3.1_27, and SDK and JRE 1.4.x before 1.4.2_24 allows remote at… CWE-399
 Resource Management Errors
CVE-2009-3877 2018-10-31 01:26 2009-11-6 Show GitHub Exploit DB Packet Storm
278174 - sun openjdk
jre
jdk
Multiple unspecified vulnerabilities in the Swing implementation in Sun Java SE 5.0 before Update 22 and 6 before Update 17, and OpenJDK, have unknown impact and remote attack vectors, related to "in… CWE-200
Information Exposure
CVE-2009-3882 2018-10-31 01:26 2009-11-10 Show GitHub Exploit DB Packet Storm
278175 - sun openjdk
jre
jdk
Multiple unspecified vulnerabilities in the Windows Pluggable Look and Feel (PL&F) feature in the Swing implementation in Sun Java SE 5.0 before Update 22 and 6 before Update 17, and OpenJDK, have un… CWE-200
Information Exposure
CVE-2009-3883 2018-10-31 01:26 2009-11-10 Show GitHub Exploit DB Packet Storm
278176 - adobe adobe_air
flash_player
Unspecified vulnerability in the Flash Player ActiveX control in Adobe Flash Player before 10.0.42.34 and Adobe AIR before 1.5.3 on Windows allows remote attackers to obtain the names of local files … CWE-200
Information Exposure
CVE-2009-3951 2018-10-31 01:26 2009-12-11 Show GitHub Exploit DB Packet Storm
278177 - php php The proc_open function in ext/standard/proc_open.c in PHP before 5.2.11 and 5.3.x before 5.3.1 does not enforce the (1) safe_mode_allowed_env_vars and (2) safe_mode_protected_env_vars directives, whi… CWE-264
Permissions, Privileges, and Access Controls
CVE-2009-4018 2018-10-31 01:26 2009-11-29 Show GitHub Exploit DB Packet Storm
278178 - opera opera_browser Opera before 10.10, when exception stacktraces are enabled, places scripting error messages from a web site into variables that can be read by a different web site, which allows remote attackers to o… CWE-16
Configuration
CVE-2009-4071 2018-10-31 01:26 2009-11-25 Show GitHub Exploit DB Packet Storm
278179 - opera opera_browser Unspecified vulnerability in Opera before 10.10 has unknown impact and attack vectors, related to a "moderately severe issue." NVD-CWE-noinfo
CVE-2009-4072 2018-10-31 01:26 2009-11-25 Show GitHub Exploit DB Packet Storm
278180 - php php The htmlspecialchars function in PHP before 5.2.12 does not properly handle (1) overlong UTF-8 sequences, (2) invalid Shift_JIS sequences, and (3) invalid EUC-JP sequences, which allows remote attack… CWE-79
Cross-site Scripting
CVE-2009-4142 2018-10-31 01:26 2009-12-22 Show GitHub Exploit DB Packet Storm