Vulnerability Search Top
Show Search Menu
|
You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database). |
JVN Vulnerability Information
Update Date":June 2, 2026, 6 p.m.
| No | CVSS | Level Attach Vector |
Vendor Name | Project Name | Title | CWE | CVE | Update Date | Publication Date | Impact Show |
Exploit PoC Search |
|---|---|---|---|---|---|---|---|---|---|---|---|
| 227381 | 2.6 | 注意 | Google Mozilla Foundation |
- | 複数の製品で使用される SPDY プロトコルにおける平文の HTTP ヘッダを取得される脆弱性 |
CWE-310
暗号の問題 |
CVE-2012-4930 | 2012-12-28 18:12 | 2012-09-15 | Show | GitHub Exploit DB Packet Storm |
| 227382 | 6.8 | 警告 | Google Mozilla Foundation |
- | Google Chrome の OpenType サニタイザにおける一つずれ (Off-by-one) エラーの脆弱性 |
CWE-189
数値処理の問題 |
CVE-2011-3062 | 2012-12-28 18:09 | 2012-03-28 | Show | GitHub Exploit DB Packet Storm |
| 227383 | 7.6 | 危険 | Post Oak Traffic Systems | - | Post Oak AWAM Bluetooth Reader Traffic System におけるデバイスを偽装される脆弱性 |
CWE-310
暗号の問題 |
CVE-2012-4687 | 2012-12-28 16:25 | 2011-11-30 | Show | GitHub Exploit DB Packet Storm |
| 227384 | 4.3 | 警告 | 日立 | - | 複数の日立製品に含まれる Collaboration - Bulletin board におけるクロスサイトスクリプティングの脆弱性 |
CWE-79
クロスサイト・スクリプティング（XSS） |
- | 2012-12-28 16:17 | 2012-12-25 | Show | GitHub Exploit DB Packet Storm |
| 227385 | 4.3 | 警告 | Catalin Florian Radut | - | Drupal 用 Zero Point モジュールにおけるクロスサイトスクリプティングの脆弱性 |
CWE-79
クロスサイト・スクリプティング（XSS） |
CVE-2012-5591 | 2012-12-28 16:06 | 2012-11-28 | Show | GitHub Exploit DB Packet Storm |
| 227386 | 7.5 | 危険 | Script Head | - | Drupal 用 Webmail Plus モジュールにおける SQL インジェクションの脆弱性 |
CWE-89
SQLインジェクション |
CVE-2012-5590 | 2012-12-28 16:06 | 2012-11-28 | Show | GitHub Exploit DB Packet Storm |
| 227387 | 3.5 | 注意 | Net Genius | - | Drupal 用 MultiLink モジュールにおける任意のノードタイトルを読まれる脆弱性 |
CWE-200
情報漏えい |
CVE-2012-5589 | 2012-12-28 16:04 | 2012-11-28 | Show | GitHub Exploit DB Packet Storm |
| 227388 | 2.6 | 注意 | Matthias Hutterer | - | Drupal 用 Email Field モジュールにおける電子メールを送信される脆弱性 |
CWE-264
認可・権限・アクセス制御 |
CVE-2012-5588 | 2012-12-28 16:02 | 2012-11-28 | Show | GitHub Exploit DB Packet Storm |
| 227389 | 4.3 | 警告 | Matthias Hutterer | - | Drupal 用 Email Field モジュールにおけるクロスサイトスクリプティングの脆弱性 |
CWE-79
クロスサイト・スクリプティング（XSS） |
CVE-2012-5587 | 2012-12-28 15:58 | 2012-11-28 | Show | GitHub Exploit DB Packet Storm |
| 227390 | 2.1 | 注意 | Marc Ingram | - | Drupal 用 Services モジュールにおける任意のユーザの電子メールにアクセスされる脆弱性 |
CWE-264
認可・権限・アクセス制御 |
CVE-2012-5586 | 2012-12-28 15:57 | 2012-11-28 | Show | GitHub Exploit DB Packet Storm |
NVD Vulnerability Information
Update Date:June 2, 2026, 4:18 a.m.
| No | CVSS | Level Attach Vector |
Vendor Name | Project Name | Title | CWE | CVE | Update Date | Publication Date | Show Affected | Exploit PoC Search |
|---|---|---|---|---|---|---|---|---|---|---|---|
| 273501 | 9.8 |
CRITICAL
Network |
newstatpress_project | newstatpress | The newstatpress plugin before 1.0.1 for WordPress has SQL injection. |
CWE-89
SQL Injection |
CVE-2015-9315 | 2024-11-21 11:40 | 2019-08-15 | Show | GitHub Exploit DB Packet Storm |
| 273502 | 6.1 |
MEDIUM
Network |
newstatpress_project | newstatpress | The newstatpress plugin before 1.0.4 for WordPress has XSS related to the Referer header. |
CWE-79
Cross-site Scripting |
CVE-2015-9314 | 2024-11-21 11:40 | 2019-08-15 | Show | GitHub Exploit DB Packet Storm |
| 273503 | 9.8 |
CRITICAL
Network |
newstatpress_project | newstatpress | The newstatpress plugin before 1.0.5 for WordPress has SQL injection related to an IMG element. |
CWE-89
SQL Injection |
CVE-2015-9313 | 2024-11-21 11:40 | 2019-08-15 | Show | GitHub Exploit DB Packet Storm |
| 273504 | 6.1 |
MEDIUM
Network |
newstatpress_project | newstatpress | The newstatpress plugin before 1.0.5 for WordPress has XSS related to an IMG element. |
CWE-79
Cross-site Scripting |
CVE-2015-9312 | 2024-11-21 11:40 | 2019-08-15 | Show | GitHub Exploit DB Packet Storm |
| 273505 | 6.1 |
MEDIUM
Network |
newstatpress_project | newstatpress | The newstatpress plugin before 1.0.6 for WordPress has reflected XSS. |
CWE-79
Cross-site Scripting |
CVE-2015-9311 | 2024-11-21 11:40 | 2019-08-15 | Show | GitHub Exploit DB Packet Storm |
| 273506 | 6.1 |
MEDIUM
Network |
simple_fields_project | simple_fields | The simple-fields plugin before 1.4.11 for WordPress has XSS. |
CWE-79
Cross-site Scripting |
CVE-2015-9302 | 2024-11-21 11:40 | 2019-08-14 | Show | GitHub Exploit DB Packet Storm |
| 273507 | 9.8 |
CRITICAL
Network |
w3eden | live_forms | The liveforms plugin before 3.2.0 for WordPress has SQL injection. |
CWE-89
SQL Injection |
CVE-2015-9301 | 2024-11-21 11:40 | 2019-08-14 | Show | GitHub Exploit DB Packet Storm |
| 273508 | 6.1 |
MEDIUM
Network |
pixelite | events_manager | The events-manager plugin before 5.5.7 for WordPress has multiple XSS issues. |
CWE-79
Cross-site Scripting |
CVE-2015-9300 | 2024-11-21 11:40 | 2019-08-14 | Show | GitHub Exploit DB Packet Storm |
| 273509 | 6.1 |
MEDIUM
Network |
pixelite | events_manager | The events-manager plugin before 5.5.7.1 for WordPress has DOM XSS. |
CWE-79
Cross-site Scripting |
CVE-2015-9299 | 2024-11-21 11:40 | 2019-08-14 | Show | GitHub Exploit DB Packet Storm |
| 273510 | 9.8 |
CRITICAL
Network |
pixelite | events_manager | The events-manager plugin before 5.6 for WordPress has code injection. |
CWE-94
Code Injection |
CVE-2015-9298 | 2024-11-21 11:40 | 2019-08-14 | Show | GitHub Exploit DB Packet Storm |