Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 24, 2026, 4 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
226841 7.5 危険 i-GEN Solutions - i-GEN opLYNX の Central アプリケーションにおける認証を回避される脆弱性 CWE-287
不適切な認証
CVE-2012-4688 2013-01-4 16:31 2012-12-27 Show GitHub Exploit DB Packet Storm
226842 5.8 警告 vBulletin Solutions, Inc. - vBulletin の forum/login.php におけるオープンリダイレクトの脆弱性 CWE-20
不適切な入力確認
CVE-2011-5251 2013-01-4 16:23 2011-06-2 Show GitHub Exploit DB Packet Storm
226843 4.3 警告 AgileBits - AgileBits 1Password におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2012-6369 2013-01-4 16:20 2012-12-28 Show GitHub Exploit DB Packet Storm
226844 4.3 警告 Simple Invoices - SimpleInvoices におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2012-4932 2013-01-4 16:16 2012-12-28 Show GitHub Exploit DB Packet Storm
226845 5 警告 ModSecurity - Apache HTTP Server 用 mod_security2 モジュールにおけるルールを回避される脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2012-4528 2013-01-4 16:14 2012-10-15 Show GitHub Exploit DB Packet Storm
226846 4.3 警告 MediaWiki - MediaWiki 用 RSS Reader 拡張機能におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2012-6453 2013-01-4 14:54 2012-12-31 Show GitHub Exploit DB Packet Storm
226847 4.3 警告 Cerberus, LLC - Cerberus FTP Server の管理用 Web インターフェースにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2012-6339 2013-01-4 14:51 2012-12-11 Show GitHub Exploit DB Packet Storm
226848 6.5 警告 Open Constructor - Open Constructor における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2012-3873 2013-01-4 14:47 2012-12-28 Show GitHub Exploit DB Packet Storm
226849 4.3 警告 Open Constructor - Open Constructor におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2012-3872 2013-01-4 14:46 2012-12-28 Show GitHub Exploit DB Packet Storm
226850 3.5 注意 Open Constructor - Open Constructor におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2012-3871 2013-01-4 14:22 2012-12-28 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 24, 2026, 4:05 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
274301 8.8 HIGH
Network
moodle moodle Multiple cross-site request forgery (CSRF) vulnerabilities in the lesson module in Moodle through 2.6.11, 2.7.x before 2.7.11, 2.8.x before 2.8.9, and 2.9.x before 2.9.3 allow remote attackers to hij… CWE-352
 Origin Validation Error
CVE-2015-5338 2024-11-21 11:32 2016-02-22 Show GitHub Exploit DB Packet Storm
274302 6.1 MEDIUM
Network
moodle moodle Moodle through 2.6.11, 2.7.x before 2.7.11, 2.8.x before 2.8.9, and 2.9.x before 2.9.3 does not properly restrict the availability of Flowplayer, which allows remote attackers to conduct cross-site s… CWE-79
Cross-site Scripting
CVE-2015-5337 2024-11-21 11:32 2016-02-22 Show GitHub Exploit DB Packet Storm
274303 5.4 MEDIUM
Network
moodle moodle Multiple cross-site scripting (XSS) vulnerabilities in the survey module in Moodle through 2.6.11, 2.7.x before 2.7.11, 2.8.x before 2.8.9, and 2.9.x before 2.9.3 allow remote authenticated users to … CWE-79
Cross-site Scripting
CVE-2015-5336 2024-11-21 11:32 2016-02-22 Show GitHub Exploit DB Packet Storm
274304 4.3 MEDIUM
Network
moodle moodle Cross-site request forgery (CSRF) vulnerability in admin/registration/register.php in Moodle through 2.6.11, 2.7.x before 2.7.11, 2.8.x before 2.8.9, and 2.9.x before 2.9.3 allows remote attackers to… CWE-352
CWE-200
 Origin Validation Error
Information Exposure
CVE-2015-5335 2024-11-21 11:32 2016-02-22 Show GitHub Exploit DB Packet Storm
274305 6.8 MEDIUM
Network
moodle moodle Atto in Moodle 2.8.x before 2.8.9 and 2.9.x before 2.9.3 allows remote attackers to cause a denial of service (disk consumption) by leveraging the guest role and entering drafts with the editor-autos… CWE-399
 Resource Management Errors
CVE-2015-5332 2024-11-21 11:32 2016-02-22 Show GitHub Exploit DB Packet Storm
274306 4.3 MEDIUM
Network
moodle moodle Moodle 2.9.x before 2.9.3 does not properly check the contact list before authorizing message transmission, which allows remote authenticated users to bypass intended access restrictions and conduct … CWE-254
 7PK - Security Features
CVE-2015-5331 2024-11-21 11:32 2016-02-22 Show GitHub Exploit DB Packet Storm
274307 4.3 MEDIUM
Network
moodle moodle The Forum module in Moodle 2.7.x before 2.7.10 allows remote authenticated users to post to arbitrary groups by leveraging the teacher role, as demonstrated by a post directed to "all participants." CWE-264
Permissions, Privileges, and Access Controls
CVE-2015-5272 2024-11-21 11:32 2016-02-22 Show GitHub Exploit DB Packet Storm
274308 5.4 MEDIUM
Network
moodle moodle Cross-site scripting (XSS) vulnerability in group/overview.php in Moodle through 2.6.11, 2.7.x before 2.7.10, 2.8.x before 2.8.8, and 2.9.x before 2.9.2 allows remote authenticated users to inject ar… CWE-79
Cross-site Scripting
CVE-2015-5269 2024-11-21 11:32 2016-02-22 Show GitHub Exploit DB Packet Storm
274309 4.3 MEDIUM
Network
moodle moodle The rating component in Moodle through 2.6.11, 2.7.x before 2.7.10, 2.8.x before 2.8.8, and 2.9.x before 2.9.2 mishandles group-based authorization checks, which allows remote authenticated users to … CWE-264
CWE-200
Permissions, Privileges, and Access Controls
Information Exposure
CVE-2015-5268 2024-11-21 11:32 2016-02-22 Show GitHub Exploit DB Packet Storm
274310 7.5 HIGH
Network
moodle moodle lib/moodlelib.php in Moodle through 2.6.11, 2.7.x before 2.7.10, 2.8.x before 2.8.8, and 2.9.x before 2.9.2 relies on the PHP mt_rand function to implement the random_string and complex_random_string… CWE-200
CWE-254
Information Exposure
 7PK - Security Features
CVE-2015-5267 2024-11-21 11:32 2016-02-22 Show GitHub Exploit DB Packet Storm