Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 8, 2026, 2:12 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
229551 6.8 警告 shalwan - Opial の admin/index.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2009-2388 2012-12-20 19:10 2009-07-9 Show GitHub Exploit DB Packet Storm
229552 4.9 警告 サン・マイクロシステムズ - Sun OpenSolaris の proc filesystem におけるサービス運用妨害 (DoS) の脆弱性 CWE-noinfo
情報不足 		CVE-2009-2387 2012-12-20 19:10 2009-07-5 Show GitHub Exploit DB Packet Storm
229553 4.3 警告 tangocms - TangoCMS の application/libraries/Html.php におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2009-2376 2012-12-20 19:10 2009-07-8 Show GitHub Exploit DB Packet Storm
229554 6.8 警告 wxwidgets - wxWidgets の src/common/image.cpp における整数オーバーフローの脆弱性 CWE-189
数値処理の問題 		CVE-2009-2369 2012-12-20 19:10 2009-07-8 Show GitHub Exploit DB Packet Storm
229555 9.3 危険 yukudr - KUDRSOFT AudioPLUS におけるスタックベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2009-2363 2012-12-20 19:10 2009-07-8 Show GitHub Exploit DB Packet Storm
229556 9.3 危険 yukudr - KUDRSOFT AudioPLUS におけるスタックベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2009-2362 2012-12-20 19:10 2009-07-8 Show GitHub Exploit DB Packet Storm
229557 7.5 危険 yasinkaplan - TekRADIUS における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2009-2359 2012-12-20 19:10 2009-07-7 Show GitHub Exploit DB Packet Storm
229558 4.6 警告 yasinkaplan - TekRADIUS における難読化したデータベース資格情報を取得される脆弱性 CWE-255
証明書・パスワード管理 		CVE-2009-2358 2012-12-20 19:10 2009-07-7 Show GitHub Exploit DB Packet Storm
229559 10 危険 yasinkaplan - TekRADIUS のデフォルト設定におけるデータベースへのアクセス権限を取得される脆弱性 CWE-16
環境設定 		CVE-2009-2357 2012-12-20 19:10 2009-07-7 Show GitHub Exploit DB Packet Storm
229560 4 警告 dan cahill - NullLogic Groupware のフォーラムモジュールにおけるサービス運用妨害 (DoS) の脆弱性 CWE-189
数値処理の問題 		CVE-2009-2355 2012-12-20 19:10 2009-07-7 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 8, 2026, 4:09 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
292841 - juniper junos_space
junos_space_virtual_appliance
junos_space_ja1500_appliance 		Juniper Junos Space before 13.1R1.6, as used on the JA1500 appliance and in other contexts, does not properly restrict access to the list of user accounts and their MD5 password hashes, which makes i… CWE-264
Permissions, Privileges, and Access Controls 		CVE-2013-5097 2024-11-21 10:57 2013-08-16 Show GitHub Exploit DB Packet Storm
292842 - juniper junos_space
junos_space_virtual_appliance
junos_space_ja1500_appliance 		Juniper Junos Space before 13.1R1.6, as used on the JA1500 appliance and in other contexts, does not properly implement role-based access control, which allows remote authenticated users to modify th… CWE-264
Permissions, Privileges, and Access Controls 		CVE-2013-5096 2024-11-21 10:57 2013-08-16 Show GitHub Exploit DB Packet Storm
292843 - juniper junos_space
junos_space_virtual_appliance
junos_space_ja1500_appliance 		Cross-site scripting (XSS) vulnerability in the web-based interface in Juniper Junos Space before 13.1R1.6, as used on the JA1500 appliance and in other contexts, allows remote attackers to inject ar… CWE-79
Cross-site Scripting 		CVE-2013-5095 2024-11-21 10:57 2013-08-16 Show GitHub Exploit DB Packet Storm
292844 - alienvault open_source_security_information_management Multiple cross-site scripting (XSS) vulnerabilities in AlienVault Open Source Security Information Management (OSSIM) before 4.3.0 allow remote attackers to inject arbitrary web script or HTML via th… CWE-79
Cross-site Scripting 		CVE-2013-5300 2024-11-21 10:57 2013-08-16 Show GitHub Exploit DB Packet Storm
292845 - phpfox phpfox SQL injection vulnerability in PHPFox before 3.6.0 (build6) allows remote attackers to execute arbitrary SQL commands via the search[sort_by] parameter to user/browse/view_/. CWE-89
SQL Injection 		CVE-2013-5121 2024-11-21 10:57 2013-08-15 Show GitHub Exploit DB Packet Storm
292846 - phpfox phpfox SQL injection vulnerability in PHPFox before 3.6.0 (build4) allows remote attackers to execute arbitrary SQL commands via the search[gender] parameter to user/browse/view_/. CWE-89
SQL Injection 		CVE-2013-5120 2024-11-21 10:57 2013-08-15 Show GitHub Exploit DB Packet Storm
292847 - franz_holzinger static_methods Cross-site scripting (XSS) vulnerability in the Static Methods since 2007 (div2007) extension before 0.10.2 for TYPO3 allows remote attackers to inject arbitrary web script or HTML via unspecified ve… CWE-79
Cross-site Scripting 		CVE-2013-5100 2024-11-21 10:57 2013-08-10 Show GitHub Exploit DB Packet Storm
292848 - anchor anchor_cms Cross-site scripting (XSS) vulnerability in article.php in Anchor CMS 0.9.1, when comments are enabled, allows remote attackers to inject arbitrary web script or HTML via the Name field. NOTE: some … CWE-79
Cross-site Scripting 		CVE-2013-5099 2024-11-21 10:57 2013-08-10 Show GitHub Exploit DB Packet Storm
292849 - mikejolley download_monitor Cross-site scripting (XSS) vulnerability in admin/admin.php in the Download Monitor plugin before 3.3.6.2 for WordPress allows remote attackers to inject arbitrary web script or HTML via the sort par… CWE-79
Cross-site Scripting 		CVE-2013-5098 2024-11-21 10:57 2013-08-10 Show GitHub Exploit DB Packet Storm
292850 5.4 MEDIUM
Network 		otrs otrs_itsm
otrs 		Cross-site scripting (XSS) vulnerability in Open Ticket Request System (OTRS) ITSM 3.0.x before 3.0.9, 3.1.x before 3.1.10, and 3.2.x before 3.2.7 allows remote authenticated users to inject arbitrar… CWE-79
Cross-site Scripting 		CVE-2013-4718 2024-11-21 10:56 2021-08-10 Show GitHub Exploit DB Packet Storm