Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 9, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
241251 6.8 警告 シスコシステムズ - Linksys WRT160N ワイアレスルータにおけるクロスサイトリクエストフォージェリの脆弱性 CWE-352
同一生成元ポリシー違反 		CVE-2009-2073 2012-06-26 16:10 2009-06-15 Show GitHub Exploit DB Packet Storm
241252 5.4 警告 アップル - Apple Safari における任意の https サイトを偽装される脆弱性 CWE-287
不適切な認証 		CVE-2009-2072 2012-06-26 16:10 2009-06-15 Show GitHub Exploit DB Packet Storm
241253 6.8 警告 アップル - Apple Safari における https サイトのコンテキスト内の Web スクリプトを実行される脆弱性 CWE-287
不適切な認証 		CVE-2009-2066 2012-06-26 16:10 2009-06-15 Show GitHub Exploit DB Packet Storm
241254 6.8 警告 アップル - Apple Safari における https サイトコンテキスト内の任意の Web スクリプトを実行される脆弱性 CWE-287
不適切な認証 		CVE-2009-2062 2012-06-26 16:10 2009-06-15 Show GitHub Exploit DB Packet Storm
241255 6.8 警告 アップル - Apple Safari における任意の Web スクリプトを実行される脆弱性 CWE-287
不適切な認証 		CVE-2009-2058 2012-06-26 16:10 2009-06-15 Show GitHub Exploit DB Packet Storm
241256 7.5 危険 grestul - Grestul の admin/options.php における管理者アカウントを作成される脆弱性 CWE-287
不適切な認証 		CVE-2009-2040 2012-06-26 16:10 2009-06-12 Show GitHub Exploit DB Packet Storm
241257 7.5 危険 geekbill - Open Biller の index.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2009-2036 2012-06-26 16:10 2009-06-12 Show GitHub Exploit DB Packet Storm
241258 6.4 警告 Drupal - Drupal 用の Services モジュールにおける鍵を読み取られる脆弱性 CWE-noinfo
情報不足 		CVE-2009-2035 2012-06-26 16:10 2009-06-10 Show GitHub Exploit DB Packet Storm
241259 7.2 危険 アップル - Apple Safari の Installer における権限を取得される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2009-2027 2012-06-26 16:10 2009-06-10 Show GitHub Exploit DB Packet Storm
241260 7.5 危険 dutchmonkey - DM FileManager の admin/login.php における管理者のアクセス権を取得される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2009-2025 2012-06-26 16:10 2009-06-9 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 9, 2026, 5:07 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
267971 6.1 MEDIUM
Network 		nlb-creationst my_wish_list The my-wish-list plugin before 1.4.2 for WordPress has multiple XSS issues. CWE-79
Cross-site Scripting 		CVE-2015-9493 2024-11-21 11:40 2019-10-23 Show GitHub Exploit DB Packet Storm
267972 7.5 HIGH
Network 		smartit_premium_responsive_project smartit_premium_responsive The ThemeMakers SmartIT Premium Responsive theme through 2015-05-15 for WordPress allows remote attackers to obtain sensitive information (such as user_login, user_pass, and user_email values) via a … CWE-200
Information Exposure 		CVE-2015-9492 2024-11-21 11:40 2019-10-12 Show GitHub Exploit DB Packet Storm
267973 7.5 HIGH
Network 		blessing_premium_responsive_project blessing_premium_responsive The ThemeMakers Blessing Premium Responsive theme through 2015-05-15 for WordPress allows remote attackers to obtain sensitive information (such as user_login, user_pass, and user_email values) via a… CWE-200
Information Exposure 		CVE-2015-9491 2024-11-21 11:40 2019-10-12 Show GitHub Exploit DB Packet Storm
267974 7.5 HIGH
Network 		gamestheme_premium_project gamestheme_premium The ThemeMakers GamesTheme Premium theme through 2015-05-15 for WordPress allows remote attackers to obtain sensitive information (such as user_login, user_pass, and user_email values) via a direct r… CWE-200
Information Exposure 		CVE-2015-9490 2024-11-21 11:40 2019-10-12 Show GitHub Exploit DB Packet Storm
267975 7.5 HIGH
Network 		goodnex_premium_responsive_project goodnex_premium_responsive The ThemeMakers Goodnex Premium Responsive theme through 2015-05-15 for WordPress allows remote attackers to obtain sensitive information (such as user_login, user_pass, and user_email values) via a … CWE-200
Information Exposure 		CVE-2015-9489 2024-11-21 11:40 2019-10-12 Show GitHub Exploit DB Packet Storm
267976 7.5 HIGH
Network 		almera_responsive_portfolio_site_template_project almera_responsive_portfolio_site_template The ThemeMakers Almera Responsive Portfolio Site Template component through 2015-05-15 for WordPress allows remote attackers to obtain sensitive information (such as user_login, user_pass, and user_e… CWE-200
Information Exposure 		CVE-2015-9488 2024-11-21 11:40 2019-10-12 Show GitHub Exploit DB Packet Storm
267977 7.5 HIGH
Network 		almera_responsive_portfolio_project almera_responsive_portfolio The ThemeMakers Almera Responsive Portfolio theme through 2015-05-15 for WordPress allows remote attackers to obtain sensitive information (such as user_login, user_pass, and user_email values) via a… CWE-200
Information Exposure 		CVE-2015-9487 2024-11-21 11:40 2019-10-12 Show GitHub Exploit DB Packet Storm
267978 7.5 HIGH
Network 		axioma_premium_responsive_project axioma_premium_responsive The ThemeMakers Axioma Premium Responsive theme through 2015-05-15 for WordPress allows remote attackers to obtain sensitive information (such as user_login, user_pass, and user_email values) via a d… CWE-200
Information Exposure 		CVE-2015-9486 2024-11-21 11:40 2019-10-12 Show GitHub Exploit DB Packet Storm
267979 7.5 HIGH
Network 		accio_responsive_onepage_parallax_site_template_project accio_responsive_onepage_parallax_site_template The ThemeMakers Accio Responsive Parallax One Page Site Template component through 2015-05-15 for WordPress allows remote attackers to obtain sensitive information (such as user_login, user_pass, and… CWE-200
Information Exposure 		CVE-2015-9485 2024-11-21 11:40 2019-10-12 Show GitHub Exploit DB Packet Storm
267980 7.5 HIGH
Network 		accio_one_page_parallax_responsive_theme_project accio_one_page_parallax_responsive_theme The ThemeMakers Accio One Page Parallax Responsive theme through 2015-05-15 for WordPress allows remote attackers to obtain sensitive information (such as user_login, user_pass, and user_email values… CWE-200
Information Exposure 		CVE-2015-9484 2024-11-21 11:40 2019-10-12 Show GitHub Exploit DB Packet Storm