Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 12, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
230051 6.8 警告 phpgroupware - phpGroupWare の phpgwapi /inc/class.auth_sql.inc.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2009-4414 2012-12-20 19:28 2009-12-24 Show GitHub Exploit DB Packet Storm
230052 5 警告 pps.jussieu - Polipo の client.c におけるサービス運用妨害 (DoS) の脆弱性 CWE-189
数値処理の問題 		CVE-2009-4413 2012-12-20 19:28 2009-12-24 Show GitHub Exploit DB Packet Storm
230053 6 警告 s9y - Serendipity における任意のコードを実行される脆弱性 CWE-Other
その他 		CVE-2009-4412 2012-12-20 19:28 2009-12-21 Show GitHub Exploit DB Packet Storm
230054 3.7 注意 xfs - XFS acl の setfacl および getfacl コマンドにおける任意のファイルなど対する ACL を変更される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2009-4411 2012-12-20 19:28 2009-12-24 Show GitHub Exploit DB Packet Storm
230055 4.3 警告 pyforum - PyForum および zForum の models.parser におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2009-4408 2012-12-20 19:28 2009-12-23 Show GitHub Exploit DB Packet Storm
230056 6.8 警告 pyforum - PyForum などにおけるクロスサイトリクエストフォージェリの脆弱性 CWE-352
同一生成元ポリシー違反 		CVE-2009-4407 2012-12-20 19:28 2009-12-23 Show GitHub Exploit DB Packet Storm
230057 4.3 警告 rumbacms - Rumba XML の index.php におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2009-4403 2012-12-20 19:28 2009-12-23 Show GitHub Exploit DB Packet Storm
230058 7.5 危険 sql-ledger - SQL-Ledger の初期設定における管理操作を実行される脆弱性 CWE-16
環境設定 		CVE-2009-4402 2012-12-20 19:28 2009-12-23 Show GitHub Exploit DB Packet Storm
230059 7.5 危険 fr.simon rundell
TYPO3 Association		 - TYPO3 用の Portsmouth Resources Database エクステンションにおける SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2009-4396 2012-12-20 19:28 2009-12-22 Show GitHub Exploit DB Packet Storm
230060 7.5 危険 TYPO3 Association - TYPO3 用の XDS Staff List エクステンションにおける SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2009-4392 2012-12-20 19:28 2009-12-22 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 12, 2026, 4:20 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
294611 5.3 MEDIUM
Network 		oracle jre
jdk 		jarsigner in OpenJDK and Oracle Java SE before 7u51 allows remote attackers to bypass a code-signing protection mechanism and inject unsigned bytecode into a signed JAR file by leveraging improper fi… CWE-74
Injection 		CVE-2013-4578 2024-11-21 10:55 2017-12-30 Show GitHub Exploit DB Packet Storm
294612 9.8 CRITICAL
Network 		apache httpclient http/impl/client/HttpClientBuilder.java in Apache HttpClient 4.3.x before 4.3.1 does not ensure that X509HostnameVerifier is not null, which allows attackers to have unspecified impact via vectors in… CWE-20
 Improper Input Validation  		CVE-2013-4366 2024-11-21 10:55 2017-10-31 Show GitHub Exploit DB Packet Storm
294613 8.8 HIGH
Network 		apache subversion libsvn_fs_fs/fs_fs.c in Apache Subversion 1.8.x before 1.8.2 might allow remote authenticated users with commit access to corrupt FSFS repositories and cause a denial of service or obtain sensitive i… CWE-284
Improper Access Control 		CVE-2013-4246 2024-11-21 10:55 2017-10-30 Show GitHub Exploit DB Packet Storm
294614 6.2 MEDIUM
Local 		oracle
linux 		linux
linux_kernel 		The Linux kernel before 4.4.1 allows local users to bypass file-descriptor limits and cause a denial of service (memory consumption) by sending each descriptor over a UNIX socket before closing it, r… CWE-119
Incorrect Access of Indexable Resource ('Range Error')  		CVE-2013-4312 2024-11-21 10:55 2016-02-8 Show GitHub Exploit DB Packet Storm
294615 - pwgen_project pwgen Password Generator (aka Pwgen) before 2.07 uses weak pseudo generated numbers when /dev/urandom is unavailable, which makes it easier for context-dependent attackers to guess the numbers. CWE-310
Cryptographic Issues 		CVE-2013-4442 2024-11-21 10:55 2014-12-20 Show GitHub Exploit DB Packet Storm
294616 - pwgen_project pwgen Password Generator (aka Pwgen) before 2.07 generates weak non-tty passwords, which makes it easier for context-dependent attackers to guess the password via a brute-force attack. CWE-255
Credentials Management 		CVE-2013-4440 2024-11-21 10:55 2014-12-20 Show GitHub Exploit DB Packet Storm
294617 - redhat libvirt The remoteClientFreeFunc function in daemon/remote.c in libvirt before 1.1.3, when ACLs are used, does not set an identity, which causes event handler removal to be denied and remote attackers to cau… NVD-CWE-Other
CVE-2013-4399 2024-11-21 10:55 2014-12-13 Show GitHub Exploit DB Packet Storm
294618 - qemu qemu The virtio_scsi_load_request function in hw/scsi/scsi-bus.c in QEMU before 1.7.2 might allow remote attackers to execute arbitrary code via a crafted savevm image, which triggers an out-of-bounds arr… CWE-119
Incorrect Access of Indexable Resource ('Range Error')  		CVE-2013-4542 2024-11-21 10:55 2014-11-5 Show GitHub Exploit DB Packet Storm
294619 - qemu qemu The usb_device_post_load function in hw/usb/bus.c in QEMU before 1.7.2 might allow remote attackers to execute arbitrary code via a crafted savevm image, related to a negative setup_len or setup_inde… CWE-119
Incorrect Access of Indexable Resource ('Range Error')  		CVE-2013-4541 2024-11-21 10:55 2014-11-5 Show GitHub Exploit DB Packet Storm
294620 - qemu
opensuse 		qemu
opensuse 		Buffer overflow in scoop_gpio_handler_update in QEMU before 1.7.2 might allow remote attackers to execute arbitrary code via a large (1) prev_level, (2) gpio_level, or (3) gpio_dir value in a savevm … CWE-119
Incorrect Access of Indexable Resource ('Range Error')  		CVE-2013-4540 2024-11-21 10:55 2014-11-5 Show GitHub Exploit DB Packet Storm