Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 10, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
230281 7.5 危険 xatrix - xGuestbook の login.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2009-0810 2012-12-20 19:10 2009-03-4 Show GitHub Exploit DB Packet Storm
230282 7.5 危険 simple cmms - SimpleCMMS における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2009-0808 2012-12-20 19:10 2009-03-4 Show GitHub Exploit DB Packet Storm
230283 7.5 危険 zfeeder - zFeeder における管理アクセス権限を取得される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2009-0807 2012-12-20 19:10 2009-03-4 Show GitHub Exploit DB Packet Storm
230284 5.4 警告 ziproxy - Ziproxy における Flash のアクセスコントロールを回避される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2009-0804 2012-12-20 19:10 2009-03-4 Show GitHub Exploit DB Packet Storm
230285 5.4 警告 Smoothwall - SmoothWall Firewall などで使用されている SmoothWall SmoothGuardian における Flash などに対するアクセスコントロールを回避される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2009-0803 2012-12-20 19:10 2009-03-4 Show GitHub Exploit DB Packet Storm
230286 5.4 警告 qbik - Qbik WinGate におけるアクセスコントロールを回避される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2009-0802 2012-12-20 19:10 2009-03-4 Show GitHub Exploit DB Packet Storm
230287 5 警告 サン・マイクロシステムズ - OpenJDK などの製品で使用されている Pulse-Java の src/java/org/classpath/icedtea/pulseaudio/PulseAudioTargetDataLine.java における整数オーバーフローの脆弱性 CWE-189
数値処理の問題 		CVE-2009-0794 2012-12-20 19:10 2009-04-7 Show GitHub Exploit DB Packet Storm
230288 4.3 警告 qip - QIP におけるサービス運用妨害 (DoS) の脆弱性 CWE-399
リソース管理の問題 		CVE-2009-0769 2012-12-20 19:10 2009-03-6 Show GitHub Exploit DB Packet Storm
230289 7.5 危険 yapbb - YapBB の forumhop.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2009-0768 2012-12-20 19:10 2009-03-6 Show GitHub Exploit DB Packet Storm
230290 10 危険 xvid - Windows Media Player などで使用される Xvid の xvidcore/src/decoder.c の初期化機能におけるヒープベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2009-0894 2012-12-20 19:10 2007-04-16 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 10, 2026, 5 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
293001 - hp operations_orchestration Cross-site scripting (XSS) vulnerability in HP Operations Orchestration before 9 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. CWE-79
Cross-site Scripting 		CVE-2013-6191 2024-11-21 10:58 2013-12-17 Show GitHub Exploit DB Packet Storm
293002 - google android Android 4.0 through 4.3 allows attackers to bypass intended access restrictions and remove device locks via a crafted application that invokes the updateUnlockMethodAndFinish method in the com.androi… CWE-264
Permissions, Privileges, and Access Controls 		CVE-2013-6271 2024-11-21 10:58 2013-12-15 Show GitHub Exploit DB Packet Storm
293003 - quagga quagga The bgp_attr_unknown function in bgp_attr.c in Quagga 0.99.21 does not properly initialize the total variable, which allows remote attackers to cause a denial of service (bgpd crash) via a crafted BG… NVD-CWE-noinfo
CVE-2013-6051 2024-11-21 10:58 2013-12-15 Show GitHub Exploit DB Packet Storm
293004 - munin-monitoring munin The get_group_tree function in lib/Munin/Master/HTMLConfig.pm in Munin before 2.0.18 allows remote nodes to cause a denial of service (infinite loop and memory consumption in the munin-html process) … CWE-20
 Improper Input Validation  		CVE-2013-6048 2024-11-21 10:58 2013-12-14 Show GitHub Exploit DB Packet Storm
293005 - cybozu dezie Cross-site scripting (XSS) vulnerability in Cybozu Dezie before 8.1.0 allows remote attackers to inject arbitrary web script or HTML via vectors related to the Cancel button. CWE-79
Cross-site Scripting 		CVE-2013-6005 2024-11-21 10:58 2013-12-14 Show GitHub Exploit DB Packet Storm
293006 - oracle fusion_middleware Unspecified vulnerability in the Oracle Outside In Technology component in Oracle Fusion Middleware 8.4.0 allows context-dependent attackers to affect availability via unknown vectors related to Outs… NVD-CWE-noinfo
CVE-2013-5763 2024-11-21 10:58 2013-12-13 Show GitHub Exploit DB Packet Storm
293007 - uclouvain openjpeg Heap-based buffer overflow in OpenJPEG 1.3 has unspecified impact and remote vectors, a different vulnerability than CVE-2013-6045. CWE-119
Incorrect Access of Indexable Resource ('Range Error')  		CVE-2013-6054 2024-11-21 10:58 2013-12-13 Show GitHub Exploit DB Packet Storm
293008 - uclouvain openjpeg OpenJPEG 1.3 and earlier allows remote attackers to obtain sensitive information via unspecified vectors that trigger a heap-based out-of-bounds read. CWE-200
Information Exposure 		CVE-2013-6052 2024-11-21 10:58 2013-12-13 Show GitHub Exploit DB Packet Storm
293009 - uclouvain openjpeg Multiple heap-based buffer overflows in OpenJPEG 1.3 and earlier might allow remote attackers to execute arbitrary code via unspecified vectors. CWE-119
Incorrect Access of Indexable Resource ('Range Error')  		CVE-2013-6045 2024-11-21 10:58 2013-12-13 Show GitHub Exploit DB Packet Storm
293010 - islonline isl_desktop_plugin
isl_light 		The ISL Desktop plugin for Windows before 1.4.7 for ISL Light 3.5.4 and earlier allows remote authenticated users to obtain sensitive information by pasting the clipboard contents that have been copi… CWE-200
Information Exposure 		CVE-2013-6237 2024-11-21 10:58 2013-12-11 Show GitHub Exploit DB Packet Storm