Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 15, 2026, 2 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
230271 5 警告 roytanck - WordPress 用の WP-Cumulus プラグインにおける重要な情報を取得される脆弱性 CWE-200
情報漏えい 		CVE-2009-4170 2012-12-20 19:28 2009-12-2 Show GitHub Exploit DB Packet Storm
230272 4.3 警告 roytanck - WordPress 用の WP-Cumulus プラグインにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2009-4169 2012-12-20 19:28 2009-09-27 Show GitHub Exploit DB Packet Storm
230273 4.3 警告 roytanck - WordPress、Joomulus モジュール、および Joomla! 用の WP-Cumulus モジュールにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2009-4168 2012-12-20 19:28 2009-11-15 Show GitHub Exploit DB Packet Storm
230274 7.5 危険 simple glossar - TYPO3 用の simple_glossar エクステンションにおける SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2009-4165 2012-12-20 19:28 2009-12-2 Show GitHub Exploit DB Packet Storm
230275 4.3 警告 simple glossar - TYPO3 用の simple_glossar エクステンションにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2009-4164 2012-12-20 19:28 2009-12-2 Show GitHub Exploit DB Packet Storm
230276 7.5 危険 tw productfinder - TYPO3 用の TW Productfinder エクステンションにおける SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2009-4163 2012-12-20 19:28 2009-12-2 Show GitHub Exploit DB Packet Storm
230277 7.5 危険 Piwik
teethgrinder.co.uk		 - Piwik などの製品で使用される Open Flash Chart Lug Wyrm Charmer における任意のコードを実行される脆弱性 CWE-Other
その他 		CVE-2009-4140 2012-12-20 19:28 2009-10-21 Show GitHub Exploit DB Packet Storm
230278 7.5 危険 Piwik - Piwik の core/Cookie.php における任意のコードを実行される脆弱性 CWE-20
不適切な入力確認 		CVE-2009-4137 2012-12-20 19:28 2009-12-9 Show GitHub Exploit DB Packet Storm
230279 9.3 危険 wikipedia - Firefox の Wikipedia Toolbar エクステンションにおける Chrome 権限を伴う任意の JavaScript を実行される脆弱性 CWE-94
コード・インジェクション 		CVE-2009-4127 2012-12-20 19:28 2009-12-2 Show GitHub Exploit DB Packet Storm
230280 10 危険 Ruby-lang.org - Ruby の string.c におけるヒープベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2009-4124 2012-12-20 19:28 2009-12-11 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 15, 2026, 4:10 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
294561 - ibm spss_analytical_decision_management IBM SPSS Analytical Decision Management 6.1 before IF1, 6.2 before IF1, and 7.0 before FP1 IF6 might allow remote attackers to execute arbitrary code by deploying and accessing a service. CWE-94
Code Injection 		CVE-2013-5369 2024-11-21 10:57 2013-09-17 Show GitHub Exploit DB Packet Storm
294562 - moodle moodle badges/external.php in Moodle 2.5.x before 2.5.2 does not properly handle an object obtained by unserializing a description of an external badge, which allows remote attackers to conduct PHP object i… CWE-94
Code Injection 		CVE-2013-5674 2024-11-21 10:57 2013-09-16 Show GitHub Exploit DB Packet Storm
294563 - cisco nx-os Open Network Environment Platform (ONEP) in Cisco NX-OS allows remote authenticated users to cause a denial of service (network-element reload) via a crafted packet, aka Bug ID CSCui51551. CWE-20
 Improper Input Validation  		CVE-2013-5496 2024-11-21 10:57 2013-09-16 Show GitHub Exploit DB Packet Storm
294564 - cisco unified_meetingplace
unified_meetingplace_web_conferencing 		Cross-site request forgery (CSRF) vulnerability in the web framework in Cisco Unified MeetingPlace Solution, as used in Unified MeetingPlace Web Conferencing and Unified MeetingPlace, allows remote a… CWE-352
 Origin Validation Error 		CVE-2013-5494 2024-11-21 10:57 2013-09-16 Show GitHub Exploit DB Packet Storm
294565 - cisco unified_meetingplace Cross-site scripting (XSS) vulnerability in the web framework in the Application Server in Cisco Unified MeetingPlace allows remote attackers to inject arbitrary web script or HTML via an unspecified… CWE-79
Cross-site Scripting 		CVE-2013-5495 2024-11-21 10:57 2013-09-16 Show GitHub Exploit DB Packet Storm
294566 - juniper ive_os Multiple cross-site scripting (XSS) vulnerabilities in Juniper Junos Pulse Secure Access Service (aka SSL VPN) with IVE OS 7.1 before 7.1r15, 7.2 before 7.2r11, 7.3 before 7.3r6, and 7.4 before 7.4r3… CWE-79
Cross-site Scripting 		CVE-2013-5649 2024-11-21 10:57 2013-09-13 Show GitHub Exploit DB Packet Storm
294567 - cisco virtualization_experience_client_6000_series_firmware
virtualization_experience_client_6000 		The diagnostic module in the firmware on Cisco Virtualization Experience Client 6000 devices allows local users to bypass intended access restrictions and execute arbitrary commands via unspecified v… CWE-20
 Improper Input Validation  		CVE-2013-5493 2024-11-21 10:57 2013-09-13 Show GitHub Exploit DB Packet Storm
294568 - cisco socialminer administration.jsp in Cisco SocialMiner allows remote attackers to obtain sensitive information by sniffing the network for HTTP client-server traffic, aka Bug ID CSCuh76780. CWE-310
Cryptographic Issues 		CVE-2013-5492 2024-11-21 10:57 2013-09-13 Show GitHub Exploit DB Packet Storm
294569 - cisco socialminer The gadget implementation in Cisco SocialMiner does not properly restrict the content of GET requests, which allows remote attackers to obtain sensitive information by reading (1) web-server access l… CWE-264
Permissions, Privileges, and Access Controls 		CVE-2013-5489 2024-11-21 10:57 2013-09-13 Show GitHub Exploit DB Packet Storm
294570 - cisco prime_lan_management_solution Cisco Prime LAN Management Solution (LMS) does not properly restrict use of IFRAME elements, which makes it easier for remote attackers to conduct clickjacking attacks and unspecified other attacks v… CWE-264
Permissions, Privileges, and Access Controls 		CVE-2013-5482 2024-11-21 10:57 2013-09-13 Show GitHub Exploit DB Packet Storm