Vulnerability Search Top

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

Vulnerability Information Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 17, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
224811	7.2	危険	IBM	-	IBM Security AppScan Enterprise および Rational Policy Tester における権限を取得される脆弱性	CWE-DesignError	CVE-2013-0513	2013-04-2 15:58	2013-03-25	Show	GitHub Exploit DB Packet Storm

224812	4.3	警告	IBM	-	IBM Security AppScan Enterprise および IBM Rational Policy Tester におけるスタックベースのバッファオーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2013-0512	2013-04-2 15:16	2013-03-25	Show	GitHub Exploit DB Packet Storm

224813	6.5	警告	IBM	-	IBM Security AppScan Enterprise における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2013-0511	2013-04-2 15:12	2013-03-25	Show	GitHub Exploit DB Packet Storm

224814	4.3	警告	IBM	-	IBM Security AppScan Enterprise におけるテストアカウントをハイジャックされる脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2013-0510	2013-04-2 15:11	2013-03-25	Show	GitHub Exploit DB Packet Storm

224815	4.3	警告	IBM	-	IBM Security AppScan Enterprise および Rational Policy Tester における認証資格情報を取得される脆弱性	CWE-200 情報漏えい	CVE-2013-0474	2013-04-2 15:09	2013-03-25	Show	GitHub Exploit DB Packet Storm

224816	4.3	警告	IBM	-	IBM Security AppScan Enterprise および IBM Rational Policy Tester におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2013-0473	2013-04-2 15:03	2013-03-25	Show	GitHub Exploit DB Packet Storm

224817	6.8	警告	IBM	-	IBM Tivoli Endpoint Manager の SUA アプリケーションにおけるクロスサイトリクエストフォージェリの脆弱性	CWE-352 同一生成元ポリシー違反	CVE-2013-0452	2013-04-2 14:59	2013-03-20	Show	GitHub Exploit DB Packet Storm

224818	5	警告	Digium	-	複数の Asterisk 製品におけるサービス運用妨害 (デーモンクラッシュ) 状態にされる脆弱性	CWE-119 バッファエラー	CVE-2013-2686	2013-04-2 14:35	2013-03-27	Show	GitHub Exploit DB Packet Storm

224819	7.5	危険	Digium	-	Asterisk Open Source の res/res_format_attr_h264.c におけるスタックベースのバッファオーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2013-2685	2013-04-2 14:35	2013-03-27	Show	GitHub Exploit DB Packet Storm

224820	5	警告	Digium	-	複数の Asterisk 製品の SIP チャンネルドライバにおけるアカウント名を列挙される脆弱性	CWE-200 情報漏えい	CVE-2013-2264	2013-04-2 14:34	2013-02-21	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 17, 2026, 4:15 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
314291	8.1	HIGH Network	zyxel	zld_firmware	A command injection vulnerability in the IPSec VPN feature of Zyxel ATP series firmware versions from V4.32 through V5.38, USG FLEX series firmware versions from V4.50 through V5.38, USG FLEX 50(W) s…	CWE-78 OS Command	CVE-2024-42057	2024-09-5 23:40	2024-09-3	Show	GitHub Exploit DB Packet Storm

314292	6.1	MEDIUM Network	semtekyazilim	semtek_sempos	Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Semtek Informatics Software Consulting Inc. Semtek Sempos allows Reflected XSS.This issue affects…	CWE-79 Cross-site Scripting	CVE-2024-7077	2024-09-5 23:39	2024-09-5	Show	GitHub Exploit DB Packet Storm

314293	9.8	CRITICAL Network	semtekyazilim	semtek_sempos	Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Semtek Informatics Software Consulting Inc. Semtek Sempos allows Blind SQL Injection.This issue a…	CWE-89 SQL Injection	CVE-2024-7076	2024-09-5 23:39	2024-09-5	Show	GitHub Exploit DB Packet Storm

314294	7.5	HIGH Network	zyxel	zld_firmware	A null pointer dereference vulnerability in Zyxel ATP series firmware versions from V4.32 through V5.38, USG FLEX series firmware versions from V4.50 through V5.38, USG FLEX 50(W) series firmware ver…	CWE-476 NULL Pointer Dereference	CVE-2024-42058	2024-09-5 23:39	2024-09-3	Show	GitHub Exploit DB Packet Storm

314295	4.3	MEDIUM Network	discourse	discourse_calendar	discourse-calendar is a discourse plugin which adds the ability to create a dynamic calendar in the first post of a topic. The limit on region value length is too generous. This allows a malicious ac…	CWE-770 Allocation of Resources Without Limits or Throttling	CVE-2024-21658	2024-09-5 23:39	2024-08-31	Show	GitHub Exploit DB Packet Storm

314296	5.4	MEDIUM Network	azurecurve	toggle_show\/hide	Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in azurecurve azurecurve Toggle Show/Hide allows Stored XSS.This issue affects azurecurve Tog…	CWE-79 Cross-site Scripting	CVE-2024-43961	2024-09-5 23:39	2024-08-30	Show	GitHub Exploit DB Packet Storm

314297	9.8	CRITICAL Network	semtekyazilim	semtek_sempos	Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Semtek Informatics Software Consulting Inc. Semtek Sempos allows SQL Injection.This issue affects…	CWE-89 SQL Injection	CVE-2024-7078	2024-09-5 23:38	2024-09-5	Show	GitHub Exploit DB Packet Storm

314298	7.2	HIGH Network	zyxel	zld_firmware	A post-authentication command injection vulnerability in Zyxel ATP series firmware versions from V5.00 through V5.38, USG FLEX series firmware versions from V5.00 through V5.38, USG FLEX 50(W) series…	CWE-78 OS Command	CVE-2024-42059	2024-09-5 23:38	2024-09-3	Show	GitHub Exploit DB Packet Storm

314299	7.2	HIGH Network	zyxel	zld_firmware	A post-authentication command injection vulnerability in Zyxel ATP series firmware versions from V4.32 through V5.38, USG FLEX series firmware versions from V4.50 through V5.38, USG FLEX 50(W) series…	CWE-78 OS Command	CVE-2024-42060	2024-09-5 23:37	2024-09-3	Show	GitHub Exploit DB Packet Storm

314300	-		-	-	Webmin before 2.202 and Virtualmin before 7.20.2 allow a network traffic loop via spoofed UDP packets on port 10000.	-	CVE-2024-45692	2024-09-5 23:35	2024-09-5	Show	GitHub Exploit DB Packet Storm