Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 23, 2026, 2 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
250971 7.2 危険 GNOME Project - gnome-power-manager における無人のラップトップにアクセスされる脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2009-4997 2012-03-27 18:42 2010-09-7 Show GitHub Exploit DB Packet Storm
250972 6.8 警告 TWiki - TWiki におけるクロスサイトリクエストフォージェリ脆弱性 CWE-352
同一生成元ポリシー違反
CVE-2009-4898 2012-03-27 18:42 2010-09-7 Show GitHub Exploit DB Packet Storm
250973 4.7 警告 Linux - Linux kernel の tty_fasync 関数におけるサービス運用妨害 (DoS) の脆弱性 CWE-362
競合状態
CVE-2009-4895 2012-03-27 18:42 2010-09-8 Show GitHub Exploit DB Packet Storm
250974 4 警告 g.rodola - pyftpdlib の on_dtp_close 関数におけるサービス運用妨害 (DoS) の脆弱性 CWE-399
リソース管理の問題
CVE-2009-5013 2012-03-27 18:42 2009-07-29 Show GitHub Exploit DB Packet Storm
250975 4 警告 g.rodola - pyftpdlib の ftpserver.py におけるアクセス制限を回避される脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2009-5012 2012-03-27 18:42 2009-04-20 Show GitHub Exploit DB Packet Storm
250976 4.3 警告 g.rodola - pyftpdlib の FTPHandler クラスにおけるサービス運用妨害 (DoS) の脆弱性 CWE-362
競合状態
CVE-2009-5011 2012-03-27 18:42 2009-02-27 Show GitHub Exploit DB Packet Storm
250977 6.8 警告 シマンテック - Symantec Altiris Deployment Solution などの製品で使用される Altiris eXpress NS SC Download ActiveX コントロールにおける任意のファイルをダウンロードされる脆弱性 CWE-DesignError
CVE-2009-3028 2012-03-27 18:42 2009-09-14 Show GitHub Exploit DB Packet Storm
250978 4.3 警告 g.rodola - pyftpdlib の FTPHandler クラスにおけるサービス運用妨害 (DoS) の脆弱性 CWE-362
競合状態
CVE-2009-5010 2012-03-27 18:42 2008-11-16 Show GitHub Exploit DB Packet Storm
250979 5 警告 IBM - IBM TFIM におけるアサーションを偽造される脆弱性 CWE-20
不適切な入力確認
CVE-2008-7299 2012-03-27 18:42 2011-08-12 Show GitHub Exploit DB Packet Storm
250980 5.8 警告 Android - Android の Android ブラウザにおける任意クッキーが上書きまたは削除される脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2008-7298 2012-03-27 18:42 2011-08-9 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 23, 2026, 4:08 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
286201 - getusedtoit wp_slimstat Cross-site scripting (XSS) vulnerability in the WP SlimStat plugin before 3.5.6 for WordPress allows remote attackers to inject arbitrary web script or HTML via a crafted URL. CWE-79
Cross-site Scripting
CVE-2014-100027 2024-11-21 11:03 2015-01-14 Show GitHub Exploit DB Packet Storm
286202 - april\'s_super_functions_pack_project april\'s_super_functions_pack Cross-site scripting (XSS) vulnerability in readme.php in the April's Super Functions Pack plugin before 1.4.8 for WordPress allows remote attackers to inject arbitrary web script or HTML via the pag… CWE-79
Cross-site Scripting
CVE-2014-100026 2024-11-21 11:03 2015-01-14 Show GitHub Exploit DB Packet Storm
286203 - savsoft_technologies savsoft_quiz Cross-site request forgery (CSRF) vulnerability in index.php/user_data/insert_user in Savsoft Quiz allows remote attackers to hijack the authentication of administrators for requests that create an a… CWE-352
 Origin Validation Error
CVE-2014-100025 2024-11-21 11:03 2015-01-14 Show GitHub Exploit DB Packet Storm
286204 - seopanel seo_panel Cross-site scripting (XSS) vulnerability in Seo Panel before 3.4.0 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. CWE-79
Cross-site Scripting
CVE-2014-100024 2024-11-21 11:03 2015-01-14 Show GitHub Exploit DB Packet Storm
286205 - mtouch_quiz_project mtouch_quiz Multiple cross-site scripting (XSS) vulnerabilities in question.php in the mTouch Quiz before 3.0.7 for WordPress allow remote attackers to inject arbitrary web script or HTML via the quiz parameter … CWE-79
Cross-site Scripting
CVE-2014-100023 2024-11-21 11:03 2015-01-14 Show GitHub Exploit DB Packet Storm
286206 - mtouch_quiz_project mtouch_quiz SQL injection vulnerability in question.php in the mTouch Quiz before 3.0.7 for WordPress allows remote attackers to execute arbitrary SQL commands via the quiz parameter to wp-admin/edit.php. CWE-89
SQL Injection
CVE-2014-100022 2024-11-21 11:03 2015-01-14 Show GitHub Exploit DB Packet Storm
286207 - orangehrm orangehrm Cross-site scripting (XSS) vulnerability in symfony/web/index.php/pim/viewEmployeeList in OrangeHRM before 3.1.2 allows remote attackers to inject arbitrary web script or HTML via the empsearch[emplo… CWE-79
Cross-site Scripting
CVE-2014-100021 2024-11-21 11:03 2015-01-14 Show GitHub Exploit DB Packet Storm
286208 - itechscripts itechclassifieds SQL injection vulnerability in ChangeEmail.php in iTechClassifieds 3.03.057 allows remote attackers to execute arbitrary SQL commands via the PreviewNum parameter. NOTE: the CatID parameter is alrea… CWE-89
SQL Injection
CVE-2014-100020 2024-11-21 11:03 2015-01-14 Show GitHub Exploit DB Packet Storm
286209 - pomm-project pomm SQL injection vulnerability in the LTree converter in Pomm before 1.1.5 allows remote attackers to execute arbitrary SQL commands via unspecified vectors. CWE-89
SQL Injection
CVE-2014-100019 2024-11-21 11:03 2015-01-14 Show GitHub Exploit DB Packet Storm
286210 - unconfirmed_project unconfirmed Cross-site scripting (XSS) vulnerability in the Unconfirmed plugin before 1.2.5 for WordPress allows remote attackers to inject arbitrary web script or HTML via the s parameter in the unconfirmed pag… CWE-79
Cross-site Scripting
CVE-2014-100018 2024-11-21 11:03 2015-01-14 Show GitHub Exploit DB Packet Storm