Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 3, 2026, 6:08 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
224701 7.5 危険 Rodrigo Coimbra - WordPress 用 NOSpam PTI プラグインの wp-comments-post.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2013-5917 2013-09-25 11:57 2013-09-20 Show GitHub Exploit DB Packet Storm
224702 5 警告 シスコシステムズ - Cisco MediaSense の Web インターフェイスにおける重要なクエリ文字列または Cookie の情報を取得される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2013-5502 2013-09-25 11:53 2013-09-23 Show GitHub Exploit DB Packet Storm
224703 7.8 危険 シスコシステムズ - Cisco Prime Data Center Network Manager における任意のテキストファイルを読まれる脆弱性 CWE-200
情報漏えい 		CVE-2013-5490 2013-09-25 11:52 2013-09-18 Show GitHub Exploit DB Packet Storm
224704 7.8 危険 シスコシステムズ - Cisco Prime Data Center Network Manager の DCNM-SAN サーバにおける任意のファイルを読まれる脆弱性 CWE-200
情報漏えい 		CVE-2013-5487 2013-09-25 11:51 2013-09-18 Show GitHub Exploit DB Packet Storm
224705 7.8 危険 シスコシステムズ - Cisco Prime Central for Hosted Collaboration Solution Assurance の Web フレームワークにおけるユーザ名およびパスワードを取得される脆弱性 CWE-287
不適切な認証 		CVE-2013-3473 2013-09-25 11:49 2013-09-18 Show GitHub Exploit DB Packet Storm
224706 6.8 警告 シスコシステムズ - Cisco Unified Computing System の Cisco Management Controller における権限を取得される脆弱性 CWE-20
不適切な入力確認 		CVE-2012-4082 2013-09-25 11:45 2013-09-19 Show GitHub Exploit DB Packet Storm
224707 4.6 警告 シスコシステムズ - Cisco Unified Computing System の Cisco Management Controller におけるサービス運用妨害 (DoS) の脆弱性 CWE-119
バッファエラー 		CVE-2012-4081 2013-09-25 11:42 2013-09-18 Show GitHub Exploit DB Packet Storm
224708 4.3 警告 シスコシステムズ - Cisco MediaSense の oraservice ページにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2013-5501 2013-09-25 11:39 2013-09-20 Show GitHub Exploit DB Packet Storm
224709 4.3 警告 シスコシステムズ - Cisco MediaSense の oraadmin サービスページにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2013-5500 2013-09-25 11:37 2013-09-20 Show GitHub Exploit DB Packet Storm
224710 6.8 警告 シスコシステムズ - Mac OS X 上で稼働する Cisco AnyConnect Secure Mobility Client における権限を取得される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2013-1130 2013-09-25 11:33 2013-09-19 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 3, 2026, 4:18 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
313201 - - - Tenda AC7 v.15.03.06.44 ate_ifconfig_set has pre-authentication command injection allowing remote attackers to execute arbitrary code. - CVE-2024-48825 2024-10-29 23:34 2024-10-29 Show GitHub Exploit DB Packet Storm
313202 - - - The Chef Habitat builder-api on-prem-builder package  with any version lower than habitat/builder-api/10315/20240913162802 is vulnerable to indirect object reference (IDOR) by un-authorized deletion … CWE-863
 Incorrect Authorization 		CVE-2024-9825 2024-10-29 23:34 2024-10-29 Show GitHub Exploit DB Packet Storm
313203 - - - Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in OpenText™ Operations Agent.  The XSS vulnerability could allow an attacker with local adm… - CVE-2024-5532 2024-10-29 23:34 2024-10-29 Show GitHub Exploit DB Packet Storm
313204 - - - The Contact Form 7 + Telegram plugin for WordPress is vulnerable to unauthorized modification of data and loss of data due to a missing capability check on the 'wpcf7_Telegram::ajax' function in vers… CWE-862
 Missing Authorization 		CVE-2024-9629 2024-10-29 23:34 2024-10-29 Show GitHub Exploit DB Packet Storm
313205 - - - MPXJ is an open source library to read and write project plans from a variety of file formats and databases. The patch for the historical vulnerability CVE-2020-35460 in MPXJ is incomplete as there i… CWE-22
Path Traversal 		CVE-2024-49771 2024-10-29 23:34 2024-10-29 Show GitHub Exploit DB Packet Storm
313206 - - - A Local privilege escalation vulnerability found in a Self-Hosted UniFi Network Server with UniFi Network Application (Version 8.4.62 and earlier) allows a malicious actor with a local operational sy… - CVE-2024-42028 2024-10-29 23:34 2024-10-29 Show GitHub Exploit DB Packet Storm
313207 - - - dingfanzu CMS 1.0 was discovered to contain a Cross-Site Request Forgery (CSRF) via /admin/doAdminAction.php?act=editAdmin&id=17 - CVE-2024-48291 2024-10-29 23:34 2024-10-29 Show GitHub Exploit DB Packet Storm
313208 - - - Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Post Grid Team by WPXPO PostX allows Stored XSS.This issue affects PostX: from n/a through… CWE-79
Cross-site Scripting 		CVE-2024-50443 2024-10-29 23:34 2024-10-28 Show GitHub Exploit DB Packet Storm
313209 - - - dingfanzu CMS 1.0 was discovered to contain a Cross-Site Request Forgery (CSRF) via the component /admin/doAdminAction.php?act=delAdmin&id=17 - CVE-2024-48191 2024-10-29 23:34 2024-10-28 Show GitHub Exploit DB Packet Storm
313210 - - - Reachable Assertion in BPv7 parser in µD3TN v0.14.0 allows attacker to disrupt service via malformed Extension Block - CVE-2024-10455 2024-10-29 23:34 2024-10-28 Show GitHub Exploit DB Packet Storm