Vulnerability Search Top
Show Search Menu
|
You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database). |
JVN Vulnerability Information
Update Date":June 4, 2026, 4 p.m.
| No | CVSS | Level Attach Vector |
Vendor Name | Project Name | Title | CWE | CVE | Update Date | Publication Date | Impact Show |
Exploit PoC Search |
|---|---|---|---|---|---|---|---|---|---|---|---|
| 226551 | 7.5 | 危険 | ZAPms | - | ZAPms における SQL インジェクションの脆弱性 |
CWE-89
SQLインジェクション |
CVE-2013-3050 | 2013-04-16 15:40 | 2013-04-10 | Show | GitHub Exploit DB Packet Storm |
| 226552 | 7.1 | 危険 | シスコシステムズ | - | Cisco Adaptive Security Appliances におけるサービス運用妨害 (DoS) の脆弱性 |
CWE-20
不適切な入力確認 |
CVE-2013-1151 | 2013-04-15 11:42 | 2013-04-10 | Show | GitHub Exploit DB Packet Storm |
| 226553 | 5.7 | 警告 | シスコシステムズ | - | Cisco ユニバーサルブロードバンド 10000 シリーズルータにおけるサービス運用妨害 (DoS) の脆弱性 |
CWE-20
不適切な入力確認 |
CVE-2013-1189 | 2013-04-15 11:39 | 2013-04-10 | Show | GitHub Exploit DB Packet Storm |
| 226554 | 6.6 | 警告 | シスコシステムズ | - | Cisco AnyConnect Secure Mobility Client におけるヒープベースのバッファオーバーフローの脆弱性 |
CWE-119
バッファエラー |
CVE-2013-1173 | 2013-04-15 11:38 | 2013-04-10 | Show | GitHub Exploit DB Packet Storm |
| 226555 | 6.6 | 警告 | シスコシステムズ | - | Cisco AnyConnect Secure Mobility Client における権限を取得される脆弱性 |
CWE-20
不適切な入力確認 |
CVE-2013-1172 | 2013-04-15 11:38 | 2013-04-10 | Show | GitHub Exploit DB Packet Storm |
| 226556 | 7.5 | 危険 | シスコシステムズ | - | Cisco Prime Network Control System アプライアンスにおけるデータベースの設定を変更される脆弱性 |
CWE-255
証明書・パスワード管理 |
CVE-2013-1170 | 2013-04-15 11:34 | 2013-04-10 | Show | GitHub Exploit DB Packet Storm |
| 226557 | 9.3 | 危険 | シスコシステムズ | - | Cisco Unified MeetingPlace Web Conferencing Server におけるユーザになりすまされる脆弱性 |
CWE-264
認可・権限・アクセス制御 |
CVE-2013-1169 | 2013-04-15 11:30 | 2013-04-10 | Show | GitHub Exploit DB Packet Storm |
| 226558 | 7.6 | 危険 | シスコシステムズ | - | Cisco Unified MeetingPlace Application Server の Web サーバにおけるセッションをハイジャックされる脆弱性 |
CWE-noinfo
情報不足 |
CVE-2013-1168 | 2013-04-15 11:26 | 2013-04-10 | Show | GitHub Exploit DB Packet Storm |
| 226559 | 7.1 | 危険 | シスコシステムズ | - | Cisco ASR 1000 シリーズルータの Cisco IOS XE におけるサービス運用妨害 (DoS) の脆弱性 |
CWE-22
パス・トラバーサル |
CVE-2013-1167 | 2013-04-15 11:24 | 2013-04-10 | Show | GitHub Exploit DB Packet Storm |
| 226560 | 7.8 | 危険 | シスコシステムズ | - | Cisco ASR 1000 シリーズの Cisco IOS XE におけるサービス運用妨害 (DoS) の脆弱性 |
CWE-20
不適切な入力確認 |
CVE-2013-1166 | 2013-04-15 11:21 | 2013-04-10 | Show | GitHub Exploit DB Packet Storm |
NVD Vulnerability Information
Update Date:June 4, 2026, 4:17 a.m.
| No | CVSS | Level Attach Vector |
Vendor Name | Project Name | Title | CWE | CVE | Update Date | Publication Date | Show Affected | Exploit PoC Search |
|---|---|---|---|---|---|---|---|---|---|---|---|
| 274051 | 6.1 |
MEDIUM
Network |
never5 | download_monitor | The download-monitor plugin before 1.7.1 for WordPress has XSS related to add_query_arg. |
CWE-79
Cross-site Scripting |
CVE-2015-9296 | 2024-11-21 11:40 | 2019-08-14 | Show | GitHub Exploit DB Packet Storm |
| 274052 | 6.1 |
MEDIUM
Network |
bestwebsoft | contact_form | The contact-form-plugin plugin before 3.96 for WordPress has XSS. |
CWE-79
Cross-site Scripting |
CVE-2015-9295 | 2024-11-21 11:40 | 2019-08-14 | Show | GitHub Exploit DB Packet Storm |
| 274053 | 6.1 |
MEDIUM
Network |
tipsandtricks-hq | all_in_one_wp_security_\&_firewall | The all-in-one-wp-security-and-firewall plugin before 3.9.5 for WordPress has XSS in add_query_arg and remove_query_arg function instances. |
CWE-79
Cross-site Scripting |
CVE-2015-9294 | 2024-11-21 11:40 | 2019-08-14 | Show | GitHub Exploit DB Packet Storm |
| 274054 | 6.1 |
MEDIUM
Network |
tipsandtricks-hq | all_in_one_wp_security_\&_firewall | The all-in-one-wp-security-and-firewall plugin before 3.9.8 for WordPress has XSS in the unlock request feature. |
CWE-79
Cross-site Scripting |
CVE-2015-9293 | 2024-11-21 11:40 | 2019-08-14 | Show | GitHub Exploit DB Packet Storm |
| 274055 | 6.1 |
MEDIUM
Network |
ultimatemember | ultimate_member | The ultimate-member plugin before 1.3.18 for WordPress has XSS via text input. |
CWE-79
Cross-site Scripting |
CVE-2015-9304 | 2024-11-21 11:40 | 2019-08-13 | Show | GitHub Exploit DB Packet Storm |
| 274056 | 6.1 |
MEDIUM
Network |
simplesharebuttons | simple_share_buttons_adder | The simple-share-buttons-adder plugin before 6.0.0 for WordPress has XSS. |
CWE-79
Cross-site Scripting |
CVE-2015-9303 | 2024-11-21 11:40 | 2019-08-13 | Show | GitHub Exploit DB Packet Storm |
| 274057 | 6.1 |
MEDIUM
Network |
smackcoders |
import_all_pages\ _post_types\ _products\ _orders\ _and_users_as_xml_\&_csv |
The wp-ultimate-csv-importer plugin before 3.8.1 for WordPress has XSS. |
CWE-79
Cross-site Scripting |
CVE-2015-9306 | 2024-11-21 11:40 | 2019-08-13 | Show | GitHub Exploit DB Packet Storm |
| 274058 | 6.1 |
MEDIUM
Network |
flippercode | wp_google_map | The wp-google-map-plugin plugin before 2.3.7 for WordPress has XSS related to the add_query_arg() and remove_query_arg() functions. |
CWE-79
Cross-site Scripting |
CVE-2015-9305 | 2024-11-21 11:40 | 2019-08-13 | Show | GitHub Exploit DB Packet Storm |
| 274059 | 8.8 |
HIGH
Network |
6kbbs | 6kbbs | 6kbbs 7.1 and 8.0 allows CSRF via portalchannel_ajax.php (id or code parameter) or admin.php (fileids parameter). |
CWE-352
Origin Validation Error |
CVE-2015-9292 | 2024-11-21 11:40 | 2019-08-9 | Show | GitHub Exploit DB Packet Storm |
| 274060 | 7.5 |
HIGH
Network |
cpanel | cpanel | cPanel before 11.52.0.13 does not prevent arbitrary file-read operations via get_information_for_applications (CPANEL-1221). |
CWE-284
Improper Access Control |
CVE-2015-9291 | 2024-11-21 11:40 | 2019-08-2 | Show | GitHub Exploit DB Packet Storm |