Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 3, 2026, 6:08 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
226611 2.9 注意 Wireshark - Wireshark の R3 解析機能におけるサービス運用妨害 (無限ループ) の脆弱性 CWE-20
不適切な入力確認
CVE-2013-1575 2013-04-9 16:18 2013-01-29 Show GitHub Exploit DB Packet Storm
226612 5.8 警告 Novell - Mac OS X 上で稼働する Novell OES 用 Novell Kanaka コンポーネントにおけるサーバになりすまされる脆弱性 CWE-20
不適切な入力確認
CVE-2013-2770 2013-04-9 16:09 2013-03-15 Show GitHub Exploit DB Packet Storm
226613 2.9 注意 Wireshark - Wireshark の Bluetooth HCI 解析機能におけるサービス運用妨害 (無限ループ) の脆弱性 CWE-20
不適切な入力確認
CVE-2013-1574 2013-04-9 16:09 2013-01-29 Show GitHub Exploit DB Packet Storm
226614 3.5 注意 IBM - IBM Scale Out Network Attached Storage における重要なサーバ情報を取得される脆弱性 CWE-255
CWE-264
CVE-2012-0706 2013-04-9 16:08 2013-03-28 Show GitHub Exploit DB Packet Storm
226615 7.2 危険 Linux - Linux Kernel の clone システムコールの実装における権限を取得される脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2013-1858 2013-04-9 16:07 2013-03-14 Show GitHub Exploit DB Packet Storm
226616 7.1 危険 Cogent Real-Time Systems Inc. - 複数の Cogent Real-Time Systems 製品におけるサービス運用妨害 (DoS) の脆弱性 CWE-16
環境設定
CVE-2013-0683 2013-04-9 16:05 2013-04-5 Show GitHub Exploit DB Packet Storm
226617 7.5 危険 Cogent Real-Time Systems Inc. - 複数の Cogent Real-Time Systems 製品におけるサービス運用妨害 (DoS) の脆弱性 CWE-119
バッファエラー
CVE-2013-0682 2013-04-9 16:03 2013-04-5 Show GitHub Exploit DB Packet Storm
226618 5 警告 Cogent Real-Time Systems Inc. - 複数の Cogent DataHub 製品におけるサービス運用妨害 (DoS) の脆弱性 CWE-20
不適切な入力確認
CVE-2013-0681 2013-04-9 16:02 2013-04-5 Show GitHub Exploit DB Packet Storm
226619 2.9 注意 Wireshark - Wireshark の CSN.1 解析機能におけるサービス運用妨害 (無限ループ) の脆弱性 CWE-20
不適切な入力確認
CVE-2013-1573 2013-04-9 15:59 2013-01-29 Show GitHub Exploit DB Packet Storm
226620 7.5 危険 Cogent Real-Time Systems Inc. - 複数の Cogent DataHub 製品の Web サーバにおけるスタックベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー
CVE-2013-0680 2013-04-9 15:59 2013-04-5 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 4, 2026, 4:17 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
274071 6.1 MEDIUM
Network
mailenable mailenable MailEnable before 8.60 allows Stored XSS via malformed use of "<img/src" with no ">" character in the body of an e-mail message. CWE-79
Cross-site Scripting
CVE-2015-9279 2024-11-21 11:40 2019-01-17 Show GitHub Exploit DB Packet Storm
274072 9.8 CRITICAL
Network
mailenable mailenable MailEnable before 8.60 allows Privilege Escalation because admin accounts could be created as a consequence of %0A mishandling in AUTH.TAB after a password-change request. CWE-255
Credentials Management
CVE-2015-9278 2024-11-21 11:40 2019-01-17 Show GitHub Exploit DB Packet Storm
274073 9.1 CRITICAL
Network
mailenable mailenable MailEnable before 8.60 allows Directory Traversal for reading the messages of other users, uploading files, and deleting files because "/../" and "/.. /" are mishandled. CWE-22
Path Traversal
CVE-2015-9277 2024-11-21 11:40 2019-01-17 Show GitHub Exploit DB Packet Storm
274074 6.1 MEDIUM
Network
smartertools smartermail SmarterTools SmarterMail before 13.3.5535 was vulnerable to stored XSS by bypassing the anti-XSS mechanisms. It was possible to run JavaScript code when a victim user opens or replies to the attacker… CWE-79
Cross-site Scripting
CVE-2015-9276 2024-11-21 11:40 2019-01-17 Show GitHub Exploit DB Packet Storm
274075 5.3 MEDIUM
Network
arc_project arc ARC 5.21q allows directory traversal via a full pathname in an archive file. CWE-22
Path Traversal
CVE-2015-9275 2024-11-21 11:40 2019-01-8 Show GitHub Exploit DB Packet Storm
274076 6.5 MEDIUM
Network
harfbuzz_project harfbuzz HarfBuzz before 1.0.4 allows remote attackers to cause a denial of service (invalid read of two bytes and application crash) because of GPOS and GSUB table mishandling, related to hb-ot-layout-gpos-t… CWE-125
Out-of-bounds Read
CVE-2015-9274 2024-11-21 11:40 2018-11-15 Show GitHub Exploit DB Packet Storm
274077 6.1 MEDIUM
Network
wp-slimstat slimstat_analytics The wp-slimstat (aka Slimstat Analytics) plugin before 4.1.6.1 for WordPress has XSS via an HTTP Referer header, or via a field associated with JavaScript-based Referer tracking. CWE-79
Cross-site Scripting
CVE-2015-9273 2024-11-21 11:40 2018-10-8 Show GitHub Exploit DB Packet Storm
274078 9.8 CRITICAL
Network
videowhisper video_presentation The videowhisper-video-presentation plugin 3.31.17 for WordPress allows remote attackers to execute arbitrary code because vp/vw_upload.php considers a file safe when "html" are the last four charact… CWE-94
Code Injection
CVE-2015-9272 2024-11-21 11:40 2018-10-5 Show GitHub Exploit DB Packet Storm
274079 9.8 CRITICAL
Network
videowhisper video_conference The VideoWhisper videowhisper-video-conference-integration plugin 4.91.8 for WordPress allows remote attackers to execute arbitrary code because vc/vw_upload.php considers a file safe when "html" are… CWE-434
 Unrestricted Upload of File with Dangerous Type 
CVE-2015-9271 2024-11-21 11:40 2018-10-5 Show GitHub Exploit DB Packet Storm
274080 6.1 MEDIUM
Network
theholidaycalendar holiday_calendar XSS exists in the the-holiday-calendar plugin before 1.11.3 for WordPress via the thc-month parameter. CWE-79
Cross-site Scripting
CVE-2015-9270 2024-11-21 11:40 2018-10-2 Show GitHub Exploit DB Packet Storm