Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 10, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
240741 4.3 警告 bloofox - BloofoxCMS の search.5.html におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2009-4522 2012-06-26 16:19 2009-12-31 Show GitHub Exploit DB Packet Storm
240742 4.3 警告 Eclipse Foundation - BIRT の birt-viewer/run におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2009-4521 2012-06-26 16:19 2009-12-17 Show GitHub Exploit DB Packet Storm
240743 3.5 注意 Drupal
astha bhatnagar		 - Drupal のモジュールの OpenSocial Shindig-Integrator モジュールにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2009-4514 2012-06-26 16:19 2009-12-31 Show GitHub Exploit DB Packet Storm
240744 9.3 危険 AzeoTech, Inc. - AzeoTech DAQFactory の Web サービスにおけるバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2009-4480 2012-06-26 16:19 2009-12-30 Show GitHub Exploit DB Packet Storm
240745 4.3 警告 Episerver - Ektron CMS400.NET におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2009-4473 2012-06-26 16:19 2009-12-30 Show GitHub Exploit DB Packet Storm
240746 7.5 危険 freeschool - FreeSchool における PHP リモートファイルインクルージョンの脆弱性 CWE-94
コード・インジェクション 		CVE-2009-4471 2012-06-26 16:18 2009-12-30 Show GitHub Exploit DB Packet Storm
240747 7.5 危険 dvbbs - DVBBS の boardrule.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2009-4470 2012-06-26 16:18 2009-12-30 Show GitHub Exploit DB Packet Storm
240748 4.3 警告 giombetti - phpPowerCards の pagenumber.inc.php におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2009-4469 2012-06-26 16:18 2009-12-30 Show GitHub Exploit DB Packet Storm
240749 4.3 警告 deluxebb - DeluxeBB の misc.php におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2009-4468 2012-06-26 16:18 2009-12-30 Show GitHub Exploit DB Packet Storm
240750 4 警告 deluxebb - DeluxeBB の misc.php におけるアカウント登録される脆弱性 CWE-20
不適切な入力確認 		CVE-2009-4467 2012-06-26 16:18 2009-12-30 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 11, 2026, 4:09 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
286111 - cisco identity_services_engine_software
identity_services_engine 		The Sponsor Portal in Cisco Identity Services Engine (ISE) uses weak permissions for uploaded files, which allows remote attackers to read arbitrary files via a direct request, aka Bug ID CSCui67506. CWE-264
Permissions, Privileges, and Access Controls 		CVE-2013-5538 2024-11-21 10:57 2013-10-16 Show GitHub Exploit DB Packet Storm
286112 - cisco video_surveillance_4500e_ip_camera
video_surveillance_4300e_ip_camera
video_surveillance_4000_ip_camera 		The analytics page on Cisco Video Surveillance 4000 IP cameras has hardcoded credentials, which allows remote attackers to watch the video feed by leveraging knowledge of the password, aka Bug IDs CS… CWE-255
Credentials Management 		CVE-2013-5535 2024-11-21 10:57 2013-10-16 Show GitHub Exploit DB Packet Storm
286113 - cisco webex_meetings_server The deployment module in the server in Cisco WebEx Meeting Center does not properly validate the passphrase, which allows remote attackers to launch a deployment or cause a denial of service (deploym… CWE-20
 Improper Input Validation  		CVE-2013-5529 2024-11-21 10:57 2013-10-16 Show GitHub Exploit DB Packet Storm
286114 - ibm websphere_extreme_scale The monitoring console in IBM WebSphere eXtreme Scale 7.1.0, 7.1.1, 8.5.0, and 8.6.0 allows remote authenticated users to conduct phishing attacks via unspecified vectors. CWE-20
 Improper Input Validation  		CVE-2013-5394 2024-11-21 10:57 2013-10-16 Show GitHub Exploit DB Packet Storm
286115 - ibm websphere_extreme_scale The monitoring console in IBM WebSphere eXtreme Scale 7.1.0, 7.1.1, 8.5.0, and 8.6.0 does not properly process logoff actions, which has unspecified impact and remote attack vectors. NVD-CWE-noinfo
CVE-2013-5393 2024-11-21 10:57 2013-10-16 Show GitHub Exploit DB Packet Storm
286116 - ibm websphere_extreme_scale Cross-site scripting (XSS) vulnerability in the monitoring console in IBM WebSphere eXtreme Scale 7.1.0, 7.1.1, 8.5.0, and 8.6.0 allows remote authenticated users to inject arbitrary web script or HT… CWE-79
Cross-site Scripting 		CVE-2013-5390 2024-11-21 10:57 2013-10-16 Show GitHub Exploit DB Packet Storm
286117 - infohr hr_human_resource_information_system HR Systems Strategies info:HR HRIS 7.9 does not properly protect the database password, which allows local users to bypass intended database restrictions by accessing the USERPW registry key and bypa… CWE-310
Cryptographic Issues 		CVE-2013-5208 2024-11-21 10:57 2013-10-16 Show GitHub Exploit DB Packet Storm
286118 - cisco adaptive_security_appliance_software The Clientless SSL VPN feature in Cisco Adaptive Security Appliance (ASA) Software 8.x before 8.2(5.44), 8.3.x before 8.3(2.39), 8.4.x before 8.4(5.7), 8.6.x before 8.6(1.12), 9.0.x before 9.0(2.6), … CWE-119
Incorrect Access of Indexable Resource ('Range Error')  		CVE-2013-5515 2024-11-21 10:57 2013-10-13 Show GitHub Exploit DB Packet Storm
286119 - cisco adaptive_security_appliance_software Cisco Adaptive Security Appliance (ASA) Software 8.2.x before 8.2(5.46), 8.3.x before 8.3(2.39), 8.4.x before 8.4(7), 8.5.x before 8.5(1.18), 8.6.x before 8.6(1.12), 8.7.x before 8.7(1.7), 9.0.x befo… CWE-119
Incorrect Access of Indexable Resource ('Range Error')  		CVE-2013-5513 2024-11-21 10:57 2013-10-13 Show GitHub Exploit DB Packet Storm
286120 - cisco adaptive_security_appliance_software Race condition in the HTTP Deep Packet Inspection (DPI) feature in Cisco Adaptive Security Appliance (ASA) Software 8.2.x before 8.2(5.46), 8.3.x before 8.3(2.39), 8.4.x before 8.4(5.5), 8.5.x before… CWE-362
Race Condition 		CVE-2013-5512 2024-11-21 10:57 2013-10-13 Show GitHub Exploit DB Packet Storm