Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 18, 2026, 6 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
251511 10 危険 ヒューレット・パッカード - HP Database Archiving Software における任意のコードを実行される脆弱性 CWE-noinfo
情報不足
CVE-2011-4164 2012-01-5 10:46 2011-12-22 Show GitHub Exploit DB Packet Storm
251512 10 危険 ヒューレット・パッカード - HP Database Archiving Software における任意のコードを実行される脆弱性 CWE-noinfo
情報不足
CVE-2011-4163 2012-01-5 10:44 2011-12-22 Show GitHub Exploit DB Packet Storm
251513 4.3 警告 Yaws - Yaws の wiki アプリケーションにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2011-5025 2012-01-5 10:21 2011-12-29 Show GitHub Exploit DB Packet Storm
251514 4.3 警告 GNU Project - Mailman 用の Mailman/htdig integration patch の mmsearch/design におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2011-5024 2012-01-5 10:21 2011-12-29 Show GitHub Exploit DB Packet Storm
251515 4.3 警告 Pligg - Pligg CMS の search.php におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2011-5023 2012-01-5 10:17 2011-12-29 Show GitHub Exploit DB Packet Storm
251516 7.5 危険 Pligg - Pligg CMS の search.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2011-5022 2012-01-5 10:16 2011-12-29 Show GitHub Exploit DB Packet Storm
251517 4.3 警告 Winn GuestBook - Winn GuestBook におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2011-5026 2012-01-5 10:16 2011-12-27 Show GitHub Exploit DB Packet Storm
251518 7.5 危険 PHPIDS - PHPIDS におけるルールセット回避の脆弱性 CWE-94
コード・インジェクション
CVE-2011-5021 2012-01-5 10:15 2011-12-29 Show GitHub Exploit DB Packet Storm
251519 5 警告 GoAhead Software, Inc. - GoAhead WebServer におけるサービス運用妨害 (デーモン停止) の脆弱性 CWE-399
リソース管理の問題
CVE-2009-5111 2012-01-5 10:13 2011-12-27 Show GitHub Exploit DB Packet Storm
251520 5 警告 DHTTPD - dhttpd におけるサービス運用妨害 (デーモン停止) の脆弱性 CWE-399
リソース管理の問題
CVE-2009-5110 2012-01-5 10:13 2011-12-27 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 18, 2026, 4:12 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
286931 6.1 MEDIUM
Network
miwisoft mijosearch Cross-site scripting (XSS) vulnerability in the Mijosoft MijoSearch component 2.0.4 and earlier for Joomla! allows remote attackers to inject arbitrary web script or HTML via the query parameter to c… CWE-79
Cross-site Scripting
CVE-2013-6878 2024-11-21 10:59 2019-11-23 Show GitHub Exploit DB Packet Storm
286932 6.1 MEDIUM
Network
elvedia flashcanvas Open redirect in proxy.php in FlashCanvas before 1.6 allows remote attackers to redirect users to arbitrary web sites and conduct cross-site scripting (XSS) attacks via the HTTP Referer header. CWE-79
Cross-site Scripting
CVE-2013-6880 2024-11-21 10:59 2019-11-23 Show GitHub Exploit DB Packet Storm
286933 8.8 HIGH
Network
d-link dsl6740u_firmware Multiple cross-site request forgery (CSRF) vulnerabilities in the D-Link DSL-6740U gateway (Rev. H1) allow remote attackers to hijack the authentication of administrators for requests that change adm… CWE-352
 Origin Validation Error
CVE-2013-6811 2024-11-21 10:59 2019-11-23 Show GitHub Exploit DB Packet Storm
286934 6.5 MEDIUM
Network
nokogiri
debian
redhat
nokogiri
debian_linux
openstack
cloudforms_management_engine
satellite
subscription_asset_manager
enterprise_mrg
Nokogiri gem 1.5.x and 1.6.x has DoS while parsing XML entities by failing to apply limits CWE-776
XML Entity Expansion
CVE-2013-6461 2024-11-21 10:59 2019-11-6 Show GitHub Exploit DB Packet Storm
286935 6.5 MEDIUM
Network
nokogiri
debian
redhat
nokogiri
debian_linux
openstack
cloudforms_management_engine
satellite
subscription_asset_manager
enterprise_mrg
Nokogiri gem 1.5.x has Denial of Service via infinite loop when parsing XML documents CWE-776
XML Entity Expansion
CVE-2013-6460 2024-11-21 10:59 2019-11-6 Show GitHub Exploit DB Packet Storm
286936 5.3 MEDIUM
Network
horde
opensuse
debian
groupware
opensuse
debian_linux
Horde Groupware Web mail 5.1.2 has CSRF with requests to change permissions CWE-352
 Origin Validation Error
CVE-2013-6365 2024-11-21 10:59 2019-11-5 Show GitHub Exploit DB Packet Storm
286937 8.8 HIGH
Network
horde
debian
groupware
debian_linux
Horde Groupware Webmail Edition has CSRF and XSS when saving search as a virtual address book CWE-352
CWE-79
 Origin Validation Error
Cross-site Scripting
CVE-2013-6364 2024-11-21 10:59 2019-11-5 Show GitHub Exploit DB Packet Storm
286938 5.4 MEDIUM
Network
ibm spss_modeler IBM SPSS Modeler before 16 on UNIX allows remote authenticated users to bypass intended access restrictions via an SSO token. IBM X-Force ID: 89855. CWE-284
Improper Access Control
CVE-2013-6739 2024-11-21 10:59 2018-04-28 Show GitHub Exploit DB Packet Storm
286939 7.8 HIGH
Local
s3dvt_project s3dvt The (1) pty_init_terminal and (2) pipe_init_terminal functions in main.c in s3dvt 0.2.2 and earlier allows local users to gain privileges by leveraging setuid permissions and usage of bash 4.3 and ea… CWE-264
Permissions, Privileges, and Access Controls
CVE-2013-6876 2024-11-21 10:59 2018-04-7 Show GitHub Exploit DB Packet Storm
286940 5.4 MEDIUM
Network
redhat jbpm Multiple cross-site scripting (XSS) vulnerabilities in JBPM KIE Workbench 6.0.x allow remote authenticated users to inject arbitrary web script or HTML via vectors related to task name html inputs. CWE-79
Cross-site Scripting
CVE-2013-6465 2024-11-21 10:59 2017-12-20 Show GitHub Exploit DB Packet Storm