Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 12, 2026, 10 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
240461	4.3	警告	アドビシステムズ日立	-	Adobe RoboHelp および RoboHelp Server におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2009-0524	2012-06-27 13:52	2009-02-24	Show	GitHub Exploit DB Packet Storm

240462	3.5	注意	Apache Software Foundation	-	Apache Roller におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2012-2381	2012-06-27 11:20	2012-06-26	Show	GitHub Exploit DB Packet Storm

240463	9.3	危険	Apache Software Foundation	-	Apache Roller の admin/editor コンソールにおけるクロスサイトリクエストフォージェリの脆弱性	CWE-352 同一生成元ポリシー違反	CVE-2012-2380	2012-06-27 11:18	2012-06-26	Show	GitHub Exploit DB Packet Storm

240464	5.8	警告	nicholas thompson	-	Drupal 用の Global Redirect モジュールにおけるオープンリダイレクトの脆弱性	CWE-20 不適切な入力確認	CVE-2010-2021	2012-06-27 11:09	2012-06-13	Show	GitHub Exploit DB Packet Storm

240465	4.3	警告	アドビシステムズ日立	-	Adobe RoboHelp Server におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2009-0523	2012-06-27 11:05	2009-02-24	Show	GitHub Exploit DB Packet Storm

240466	4.3	警告	アドビシステムズ日立	-	Adobe RoboHelp によって作成されたファイルにおけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2008-0642	2012-06-27 11:02	2008-02-12	Show	GitHub Exploit DB Packet Storm

240467	4.3	警告	Webmin Project	-	Webmin におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2011-1937	2012-06-27 10:56	2011-05-31	Show	GitHub Exploit DB Packet Storm

240468	5.1	警告	ターボリナックス ImageMagick レッドハットオラクル	-	ImageMagick における不正な Sun Rasterfile ファイルによるヒープオーバーフローの脆弱性	-	CVE-2006-3744	2012-06-27 10:50	2006-08-14	Show	GitHub Exploit DB Packet Storm

240469	6.8	警告	galeriashqip	-	GaleriaSHQIP の index.php における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2010-3207	2012-06-26 16:19	2010-09-3	Show	GitHub Exploit DB Packet Storm

240470	7.5	危険	diy-cms	-	DiY-CMS における PHP リモートファイルインクルージョンの脆弱性	CWE-94 コード・インジェクション	CVE-2010-3206	2012-06-26 16:19	2010-09-3	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 12, 2026, 5:06 a.m.

No	CVSS	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
286221	-	opsview	opsview	SQL injection vulnerability in status/service/acknowledge in Opsview before 4.4.1 allows remote attackers to execute arbitrary SQL commands via the service_selection parameter.	CWE-89 SQL Injection	CVE-2013-5694	2024-11-21 10:57	2013-11-6	Show	GitHub Exploit DB Packet Storm

286222	-	s9y	serendipity	Cross-site scripting (XSS) vulnerability in spell-check-savedicts.php in the htmlarea SpellChecker module, as used in Serendipity before 1.7.3 and possibly other products, allows remote attackers to …	CWE-79 Cross-site Scripting	CVE-2013-5670	2024-11-21 10:57	2013-11-6	Show	GitHub Exploit DB Packet Storm

286223	-	cisco	prime_central_for_hosted_collaboration_solution	The Java process in the Impact server in Cisco Prime Central for Hosted Collaboration Solution (HCS) allows remote attackers to cause a denial of service (process crash) via a flood of TCP packets, a…	CWE-119 Incorrect Access of Indexable Resource ('Range Error')	CVE-2013-5564	2024-11-21 10:57	2013-11-5	Show	GitHub Exploit DB Packet Storm

286224	-	cisco	adaptive_security_appliance_cx_context-aware_security_software	The Safe Search enforcement feature in Cisco Adaptive Security Appliance (ASA) CX Context-Aware Security Software does not properly perform filtering, which allows remote attackers to bypass intended…	CWE-20 Improper Input Validation	CVE-2013-5561	2024-11-21 10:57	2013-11-5	Show	GitHub Exploit DB Packet Storm

286225	-	cisco	anyconnect_secure_mobility_client	Buffer overflow in the Active Template Library (ATL) framework in the VPNAPI COM module in Cisco AnyConnect Secure Mobility Client 2.x allows user-assisted remote attackers to execute arbitrary code …	CWE-119 Incorrect Access of Indexable Resource ('Range Error')	CVE-2013-5559	2024-11-21 10:57	2013-11-5	Show	GitHub Exploit DB Packet Storm

286226	-	cisco	unified_communications_manager	Cisco Unified Communications Manager (aka CUCM or Unified CM) allows remote attackers to cause a denial of service (service restart) via a crafted SIP message, aka Bug ID CSCub54349.	CWE-119 Incorrect Access of Indexable Resource ('Range Error')	CVE-2013-5555	2024-11-21 10:57	2013-11-1	Show	GitHub Exploit DB Packet Storm

286227	-	cisco	adaptive_security_appliance_software	Cisco Adaptive Security Appliance (ASA) Software, when certain same-security-traffic and management-access options are enabled, allows remote authenticated users to cause a denial of service (stack o…	CWE-119 Incorrect Access of Indexable Resource ('Range Error')	CVE-2013-5551	2024-11-21 10:57	2013-11-1	Show	GitHub Exploit DB Packet Storm

286228	-	cisco	ios	The IKEv2 implementation in Cisco IOS, when AES-GCM or AES-GMAC is used, allows remote attackers to bypass certain IPsec anti-replay features via IPsec tunnel traffic, aka Bug ID CSCuj47795.	CWE-264 Permissions, Privileges, and Access Controls	CVE-2013-5548	2024-11-21 10:57	2013-11-1	Show	GitHub Exploit DB Packet Storm

286229	-	ibm	tivoli_federated_identity_manager tivoli_federated_identity_manager_business_gateway	Open redirect vulnerability in IBM Tivoli Federated Identity Manager (TFIM) 6.1.1 before IF 15, 6.2.0 before IF 14, 6.2.1, and 6.2.2 before IF 8 and Tivoli Federated Identity Manager Business Gateway…	CWE-20 Improper Input Validation	CVE-2013-5431	2024-11-21 10:57	2013-11-1	Show	GitHub Exploit DB Packet Storm

286230	-	cisco	ios_xe asr_1001 asr_1002 asr_1002-x asr_1004 asr_1006 asr_1023_router	Cisco IOS XE 3.9 before 3.9.2S on 1000 ASR devices allows remote attackers to cause a denial of service (device reload) by sending malformed EoGRE packets over (1) IPv4 or (2) IPv6, aka Bug ID CSCuf0…	CWE-20 Improper Input Validation	CVE-2013-5547	2024-11-21 10:57	2013-11-1	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed