Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 28, 2026, 2:01 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
224031 4.3 警告 アップル - Apple Mac OS X Server の Wiki サーバにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2013-1034 2013-09-27 18:10 2013-09-17 Show GitHub Exploit DB Packet Storm
224032 4.3 警告 Inpsyde - WordPress 用 BackWPup プラグインにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2013-4626 2013-09-27 14:31 2013-08-12 Show GitHub Exploit DB Packet Storm
224033 5.8 警告 シスコシステムズ - Cisco Unified Computing System の Central Software コンポーネントにおけるデバイス間のデータストリームを読まれる脆弱性 CWE-20
不適切な入力確認
CVE-2012-4092 2013-09-27 14:30 2013-09-27 Show GitHub Exploit DB Packet Storm
224034 4.3 警告 シスコシステムズ - Cisco Unified Computing System の FTP サーバにおけるファイルを読まれる脆弱性 CWE-255
証明書・パスワード管理
CVE-2012-4088 2013-09-27 14:24 2013-09-26 Show GitHub Exploit DB Packet Storm
224035 5 警告 シスコシステムズ - Cisco Unified Computing System のファブリックインターコネクトコンポーネントの XML API サービスにおけるサービス運用妨害 (DoS) の脆弱性 CWE-20
不適切な入力確認
CVE-2012-4079 2013-09-27 14:23 2013-09-27 Show GitHub Exploit DB Packet Storm
224036 4.3 警告 Click2Sell - Drupal 用 Click2Sell Suite モジュールにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2013-5938 2013-09-27 11:50 2013-09-11 Show GitHub Exploit DB Packet Storm
224037 6.8 警告 Click2Sell - Drupal 用 Click2Sell Suite モジュールにおけるクロスサイトリクエストフォージェリの脆弱性 CWE-352
同一生成元ポリシー違反
CVE-2013-5937 2013-09-27 11:46 2013-09-11 Show GitHub Exploit DB Packet Storm
224038 4.3 警告 Wikka Development Team - WikkaWiki の wikka.php におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2013-5586 2013-09-27 11:44 2013-08-31 Show GitHub Exploit DB Packet Storm
224039 4.3 警告 Linux - ARM プラットフォーム上で稼働する Linux Kernel の arch/arm/kvm/arm.c におけるサービス運用妨害 (DoS) の脆弱性 CWE-399
リソース管理の問題
CVE-2013-5634 2013-09-27 11:41 2013-06-3 Show GitHub Exploit DB Packet Storm
224040 9.7 危険 日立 - JP1/Cm2/Network Node Manager i に同梱されている Java における複数の脆弱性 CWE-noinfo
情報不足
- 2013-09-26 20:41 2013-09-20 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 28, 2026, 4:16 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
314781 6.5 MEDIUM
Adjacent
apple iphone_os
ipados
This issue was addressed through improved state management. This issue is fixed in iOS 18 and iPadOS 18. A malicious Bluetooth input device may bypass pairing. NVD-CWE-noinfo
CVE-2024-44124 2024-09-26 00:14 2024-09-17 Show GitHub Exploit DB Packet Storm
314782 5.4 MEDIUM
Network
webhammer wp_custom_fields_search The WP Custom Fields Search plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's wpcfs-preset shortcode in all versions up to, and including, 1.2.35 due to insufficient … CWE-79
Cross-site Scripting
CVE-2024-8364 2024-09-26 00:08 2024-09-19 Show GitHub Exploit DB Packet Storm
314783 9.8 CRITICAL
Network
freeimage_project freeimage libfreeimage in FreeImage 3.4.0 through 3.18.0 has a stack-based buffer overflow in the PluginXPM.cpp Load function via an XPM file. CWE-787
 Out-of-bounds Write
CVE-2024-31570 2024-09-25 23:57 2024-09-20 Show GitHub Exploit DB Packet Storm
314784 9.8 CRITICAL
Network
spx spx_graphics_controller An issue in TuomoKu SPx-GC v.1.3.0 and before allows a remote attacker to execute arbitrary code via the child_process.js function. CWE-94
Code Injection
CVE-2024-44623 2024-09-25 23:53 2024-09-17 Show GitHub Exploit DB Packet Storm
314785 9.8 CRITICAL
Network
ergophone
yealink
tiptel_ip_286_firmware
sip-t28p_firmware
Directory Traversal in the web interface of the Tiptel IP 286 with firmware version 2.61.13.10 allows attackers to overwrite arbitrary files on the phone via the Ringtone upload function. CWE-22
Path Traversal
CVE-2024-33109 2024-09-25 23:47 2024-09-20 Show GitHub Exploit DB Packet Storm
314786 9.8 CRITICAL
Network
closed-loop cless_server An arbitrary file upload vulnerability in the Media Manager function of Closed-Loop Technology CLESS Server v4.5.2 allows attackers to execute arbitrary code via uploading a crafted PHP file to the u… CWE-434
 Unrestricted Upload of File with Dangerous Type 
CVE-2024-40125 2024-09-25 23:46 2024-09-20 Show GitHub Exploit DB Packet Storm
314787 6.1 MEDIUM
Network
surecart surecart Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in SureCart allows Reflected XSS.This issue affects SureCart: from n/a through 2.29.3. CWE-79
Cross-site Scripting
CVE-2024-43970 2024-09-25 23:18 2024-09-18 Show GitHub Exploit DB Packet Storm
314788 4.8 MEDIUM
Network
pagelayer pagelayer Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Pagelayer Team PageLayer allows Stored XSS.This issue affects PageLayer: from n/a through … CWE-79
Cross-site Scripting
CVE-2024-43972 2024-09-25 23:16 2024-09-18 Show GitHub Exploit DB Packet Storm
314789 5.4 MEDIUM
Network
podlove podlove_podcast_publisher Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Podlove Podlove Podcast Publisher allows Stored XSS.This issue affects Podlove Podcast Pub… CWE-79
Cross-site Scripting
CVE-2024-43983 2024-09-25 23:11 2024-09-18 Show GitHub Exploit DB Packet Storm
314790 5.4 MEDIUM
Network
wayneconnor sliding_door Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in wayneconnor Sliding Door allows Stored XSS.This issue affects Sliding Door: from n/a throu… CWE-79
Cross-site Scripting
CVE-2024-43987 2024-09-25 23:08 2024-09-18 Show GitHub Exploit DB Packet Storm