Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 20, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
225381 7.5 危険 シスコシステムズ - Cisco Prime Network Control System アプライアンスにおけるデータベースの設定を変更される脆弱性 CWE-255
証明書・パスワード管理 		CVE-2013-1170 2013-04-15 11:34 2013-04-10 Show GitHub Exploit DB Packet Storm
225382 9.3 危険 シスコシステムズ - Cisco Unified MeetingPlace Web Conferencing Server におけるユーザになりすまされる脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2013-1169 2013-04-15 11:30 2013-04-10 Show GitHub Exploit DB Packet Storm
225383 7.6 危険 シスコシステムズ - Cisco Unified MeetingPlace Application Server の Web サーバにおけるセッションをハイジャックされる脆弱性 CWE-noinfo
情報不足 		CVE-2013-1168 2013-04-15 11:26 2013-04-10 Show GitHub Exploit DB Packet Storm
225384 7.1 危険 シスコシステムズ - Cisco ASR 1000 シリーズルータの Cisco IOS XE におけるサービス運用妨害 (DoS) の脆弱性 CWE-22
パス・トラバーサル 		CVE-2013-1167 2013-04-15 11:24 2013-04-10 Show GitHub Exploit DB Packet Storm
225385 7.8 危険 シスコシステムズ - Cisco ASR 1000 シリーズの Cisco IOS XE におけるサービス運用妨害 (DoS) の脆弱性 CWE-20
不適切な入力確認 		CVE-2013-1166 2013-04-15 11:21 2013-04-10 Show GitHub Exploit DB Packet Storm
225386 7.8 危険 シスコシステムズ - Cisco ASR 1000 シリーズの Cisco IOS XE におけるサービス運用妨害 (DoS) の脆弱性 CWE-20
不適切な入力確認 		CVE-2013-1165 2013-04-15 11:19 2013-04-10 Show GitHub Exploit DB Packet Storm
225387 7.8 危険 シスコシステムズ - Cisco ASR 1000 シリーズの Cisco IOS XE におけるサービス運用妨害 (DoS) の脆弱性 CWE-DesignError
CVE-2013-1164 2013-04-15 11:15 2013-04-10 Show GitHub Exploit DB Packet Storm
225388 7.8 危険 シスコシステムズ - Cisco FWSM ソフトウェアにおけるサービス運用妨害 (DOS) の脆弱性 CWE-287
不適切な認証 		CVE-2013-1155 2013-04-15 10:09 2013-04-10 Show GitHub Exploit DB Packet Storm
225389 7.8 危険 シスコシステムズ - Cisco Adaptive Security Appliances におけるサービス運用妨害 (DoS) の脆弱性 CWE-noinfo
情報不足 		CVE-2013-1152 2013-04-15 10:07 2013-04-10 Show GitHub Exploit DB Packet Storm
225390 7.8 危険 シスコシステムズ - Cisco ASR 1000 シリーズの Cisco IOS XE におけるサービス運用妨害 (DoS) の脆弱性 CWE-20
不適切な入力確認 		CVE-2013-2779 2013-04-15 10:05 2013-04-10 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 20, 2026, 4:14 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
313441 9.8 CRITICAL
Network 		stylemixthemes cost_calculator_builder Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in StylemixThemes Cost Calculator Builder allows SQL Injection.This issue affects Cost Calculator Bu… CWE-89
SQL Injection 		CVE-2024-43144 2024-09-20 06:47 2024-08-30 Show GitHub Exploit DB Packet Storm
313442 9.8 CRITICAL
Network 		templateinvaders ti_woocommerce_wishlist Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in TemplateInvaders TI WooCommerce Wishlist allows SQL Injection.This issue affects TI WooCommerce W… CWE-89
SQL Injection 		CVE-2024-43917 2024-09-20 06:46 2024-08-30 Show GitHub Exploit DB Packet Storm
313443 9.8 CRITICAL
Network 		nitropack nitropack Improper Control of Generation of Code ('Code Injection') vulnerability in NitroPack Inc. NitroPack allows Code Injection.This issue affects NitroPack: from n/a through 1.16.7. CWE-94
Code Injection 		CVE-2024-43922 2024-09-20 06:44 2024-08-30 Show GitHub Exploit DB Packet Storm
313444 8.8 HIGH
Adjacent 		dlink covr-x1870_firmware
dir-x4860_firmware 		Certain models of D-Link wireless routers contain hidden functionality. By sending specific packets to the web service, the attacker can forcibly enable the telnet service and log in using hard-coded… CWE-912
 Hidden Functionality 		CVE-2024-45696 2024-09-20 06:42 2024-09-16 Show GitHub Exploit DB Packet Storm
313445 9.8 CRITICAL
Network 		dlink dir-x4860_firmware Certain models of D-Link wireless routers have a hidden functionality where the telnet service is enabled when the WAN port is plugged in. Unauthorized remote attackers can log in and execute OS comm… CWE-912
 Hidden Functionality 		CVE-2024-45697 2024-09-20 06:40 2024-09-16 Show GitHub Exploit DB Packet Storm
313446 9.8 CRITICAL
Network 		pluck-cms pluck Pluck CMS 4.7.18 does not restrict failed login attempts, allowing attackers to execute a brute force attack. CWE-307
mproper Restriction of Excessive Authentication Attempts 		CVE-2024-43042 2024-09-20 06:01 2024-08-17 Show GitHub Exploit DB Packet Storm
313447 8.8 HIGH
Network 		nuxt nuxt Nuxt is a free and open-source framework to create full-stack web applications and websites with Vue.js. Due to the insufficient validation of the `path` parameter in the NuxtTestComponentWrapper, an… CWE-94
Code Injection 		CVE-2024-34344 2024-09-20 05:58 2024-08-6 Show GitHub Exploit DB Packet Storm
313448 7.5 HIGH
Network 		nuxt nuxt Nuxt is a free and open-source framework to create full-stack web applications and websites with Vue.js. `nuxt/icon` provides an API to allow client side icon lookup. This endpoint is at `/api/_nuxt_… CWE-918
Server-Side Request Forgery (SSRF)  		CVE-2024-42352 2024-09-20 05:55 2024-08-6 Show GitHub Exploit DB Packet Storm
313449 7.8 HIGH
Local 		mongodb mongodb
c_driver
php_driver 		Incorrect validation of files loaded from a local untrusted directory may allow local privilege escalation if the underlying operating systems is Windows. This may result in the application executing… NVD-CWE-noinfo
CVE-2024-7553 2024-09-20 05:46 2024-08-7 Show GitHub Exploit DB Packet Storm
313450 6.1 MEDIUM
Network 		mailcow mailcow\ mailcow: dockerized is an open source groupware/email suite based on docker. An unauthenticated attacker can inject a JavaScript payload into the API logs. This payload is executed whenever the API l… CWE-79
Cross-site Scripting 		CVE-2024-41959 2024-09-20 05:14 2024-08-6 Show GitHub Exploit DB Packet Storm