Vulnerability Search Top
Show Search Menu
|
You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database). |
JVN Vulnerability Information
Update Date":June 22, 2026, 6:01 p.m.
| No | CVSS | Level Attach Vector |
Vendor Name | Project Name | Title | CWE | CVE | Update Date | Publication Date | Impact Show |
Exploit PoC Search |
|---|---|---|---|---|---|---|---|---|---|---|---|
| 231121 | 7.5 | 危険 | TYPO3 Association | - | TYPO3 用の XDS Staff List エクステンションにおける SQL インジェクションの脆弱性 |
CWE-89
SQLインジェクション |
CVE-2009-4392 | 2012-12-20 19:28 | 2009-12-22 | Show | GitHub Exploit DB Packet Storm |
| 231122 | 5 | 警告 | robert puntigam | - | TYPO3 用の watchdog エクステンションにおける重要な情報を取得される脆弱性 |
CWE-noinfo
情報不足 |
CVE-2009-4389 | 2012-12-20 19:28 | 2009-12-22 | Show | GitHub Exploit DB Packet Storm |
| 231123 | 6.8 | 警告 | Scriptsez.net | - | Scriptsez.net EPH におけるクロスサイトリクエストフォージェリの脆弱性 |
CWE-352
同一生成元ポリシー違反 |
CVE-2009-4385 | 2012-12-20 19:28 | 2009-12-22 | Show | GitHub Exploit DB Packet Storm |
| 231124 | 4.3 | 警告 | Scriptsez.net | - | Scriptsez.net EPH におけるクロスサイトスクリプティングの脆弱性 |
CWE-79
クロスサイト・スクリプティング（XSS） |
CVE-2009-4384 | 2012-12-20 19:28 | 2009-12-22 | Show | GitHub Exploit DB Packet Storm |
| 231125 | 4.3 | 警告 | phpfaber | - | PHPFABER CMS の module.php におけるクロスサイトスクリプティングの脆弱性 |
CWE-79
クロスサイト・スクリプティング（XSS） |
CVE-2009-4382 | 2012-12-20 19:28 | 2009-12-22 | Show | GitHub Exploit DB Packet Storm |
| 231126 | 4.3 | 警告 | texmedia | - | texmedia Million Pixel Script の index.php におけるクロスサイトスクリプティングの脆弱性 |
CWE-79
クロスサイト・スクリプティング（XSS） |
CVE-2009-4381 | 2012-12-20 19:28 | 2009-12-22 | Show | GitHub Exploit DB Packet Storm |
| 231127 | 7.5 | 危険 | Wafer | - | Valarsoft Webmatic における SQL インジェクションの脆弱性 |
CWE-89
SQLインジェクション |
CVE-2009-4380 | 2012-12-20 19:28 | 2009-12-14 | Show | GitHub Exploit DB Packet Storm |
| 231128 | 4.3 | 警告 | Wafer | - | Valarsoft Webmatic におけるクロスサイトスクリプティングの脆弱性 |
CWE-79
クロスサイト・スクリプティング（XSS） |
CVE-2009-4379 | 2012-12-20 19:28 | 2009-12-14 | Show | GitHub Exploit DB Packet Storm |
| 231129 | 4.3 | 警告 | Wireshark | - | Windows 上で稼動している Wireshark の IPMI 解析子におけるサービス運用妨害 (DoS) の脆弱性 |
CWE-Other
その他 |
CVE-2009-4378 | 2012-12-20 19:28 | 2009-12-17 | Show | GitHub Exploit DB Packet Storm |
| 231130 | 9.3 | 危険 | Wireshark | - | Wireshark の Daintree SNA ファイルパーサーにおけるバッファオーバーフローの脆弱性 |
CWE-119
バッファエラー |
CVE-2009-4376 | 2012-12-20 19:28 | 2009-12-4 | Show | GitHub Exploit DB Packet Storm |
NVD Vulnerability Information
Update Date:June 23, 2026, 4 a.m.
| No | CVSS | Level Attach Vector |
Vendor Name | Project Name | Title | CWE | CVE | Update Date | Publication Date | Show Affected | Exploit PoC Search |
|---|---|---|---|---|---|---|---|---|---|---|---|
| 294741 | 7.8 |
HIGH
Local |
fuzezip_project | fuzezip | FuzeZip 1.0.0.131625 has a Local Buffer Overflow vulnerability |
CWE-787
Out-of-bounds Write |
CVE-2013-5656 | 2024-11-21 10:57 | 2020-01-8 | Show | GitHub Exploit DB Packet Storm |
| 294742 | 5.4 |
MEDIUM
Network |
transcend-info | wifisd_firmware | Transcend WiFiSD 1.8 has persistent XSS |
CWE-79
Cross-site Scripting |
CVE-2013-5638 | 2024-11-21 10:57 | 2020-01-8 | Show | GitHub Exploit DB Packet Storm |
| 294743 | 5.4 |
MEDIUM
Network |
pqigroup | air_card_firmware | PQI AirCard has persistent XSS |
CWE-79
Cross-site Scripting |
CVE-2013-5637 | 2024-11-21 10:57 | 2020-01-8 | Show | GitHub Exploit DB Packet Storm |
| 294744 | 5.9 |
MEDIUM
Network |
hmailserver | hmailserver | HMailServer 5.3.x and prior: Memory Corruption which could cause DOS |
CWE-119
Incorrect Access of Indexable Resource ('Range Error') |
CVE-2013-5571 | 2024-11-21 10:57 | 2020-01-7 | Show | GitHub Exploit DB Packet Storm |
| 294745 | 9.8 |
CRITICAL
Network |
cisco |
linksys_ea2700_firmware linksys_ea3500_firmware linksys_e4200_firmware linksys_ea4500_firmware |
Cisco Linksys Routers EA2700, EA3500, E4200, EA4500: A bug can cause an unsafe TCP port to open which leads to unauthenticated access |
CWE-287
Improper Authentication |
CVE-2013-5122 | 2024-11-21 10:57 | 2020-01-7 | Show | GitHub Exploit DB Packet Storm |
| 294746 | 5.9 |
MEDIUM
Network |
pypa virtualenv fedoraproject redhat debian |
pip virtualenv fedora openshift software_collections debian_linux |
The mirroring support (-M, --use-mirrors) in Python Pip before 1.5 uses insecure DNS querying and authenticity checks which allows attackers to perform man-in-the-middle attacks. |
CWE-287
Improper Authentication |
CVE-2013-5123 | 2024-11-21 10:57 | 2019-11-6 | Show | GitHub Exploit DB Packet Storm |
| 294747 | 5.9 |
MEDIUM
Network |
isc nlnetlabs nic redhat |
bind nsd knot_resolver enterprise_linux |
Cache Poisoning issue exists in DNS Response Rate Limiting. |
CWE-290
Authentication Bypass by Spoofing |
CVE-2013-5661 | 2024-11-21 10:57 | 2019-11-6 | Show | GitHub Exploit DB Packet Storm |
| 294748 | 9.1 |
CRITICAL
Network |
yingzhipython_project | yingzhipython | Vulnerability in YingZhi Python Programming Language v1.9 allows arbitrary anonymous uploads to the phone's storage |
CWE-284
Improper Access Control |
CVE-2013-5654 | 2024-11-21 10:57 | 2019-02-16 | Show | GitHub Exploit DB Packet Storm |
| 294749 | 8.8 |
HIGH
Network |
ibm |
endpoint_manager_for_remote_control tivoli_remote_control |
IBM Endpoint Manager for Remote Control 9.0.0 and 9.0.1 and Tivoli Remote Control 5.1.2 store multiple hashes of partial passwords, which makes it easier for remote attackers to decrypt passwords by … |
CWE-255
Credentials Management |
CVE-2013-5461 | 2024-11-21 10:57 | 2018-04-28 | Show | GitHub Exploit DB Packet Storm |
| 294750 | 5.3 |
MEDIUM
Network |
ibm |
worklight mobile_foundation |
IBM Worklight Consumer and Enterprise Editions 5.0.x before 5.0.6 Fix Pack 2 and 6.0.x before 6.0.0 Fix Pack 2, and Mobile Foundation Consumer and Enterprise Editions 5.0.x before 5.0.6 Fix Pack 2 an… |
CWE-310
Cryptographic Issues |
CVE-2013-5391 | 2024-11-21 10:57 | 2018-04-28 | Show | GitHub Exploit DB Packet Storm |