Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 12, 2026, 6 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
227361 4.3 警告 Google - Google Chrome の Flash プラグインにおける重要な情報を取得される脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2013-2866 2013-06-21 15:08 2013-06-18 Show GitHub Exploit DB Packet Storm
227362 3.5 注意 IBM - IBM Sterling Control Center におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2013-2969 2013-06-21 14:59 2013-06-11 Show GitHub Exploit DB Packet Storm
227363 6.3 警告 IBM - IBM Sterling Control Center におけるサービス運用妨害 (DoS) の脆弱性 CWE-119
バッファエラー
CVE-2013-2968 2013-06-21 14:58 2013-06-11 Show GitHub Exploit DB Packet Storm
227364 7.8 危険 日本電気 - NEC Mobile Handset におけるサービス運用妨害 (DoS) の脆弱性 CWE-20
不適切な入力確認
CVE-2007-5557 2013-06-21 14:55 2007-10-18 Show GitHub Exploit DB Packet Storm
227365 4.3 警告 Vocera - Vocera Communications Wireless Handset におけるハッシュ化されたパスワードを盗まれる脆弱性 CWE-20
不適切な入力確認
CVE-2008-1114 2013-06-21 14:39 2008-02-23 Show GitHub Exploit DB Packet Storm
227366 5 警告 オラクル - Oracle Secure Backup の Oracle Secure Backup コンポーネントにおける脆弱性 CWE-noinfo
情報不足
CVE-2008-3981 2013-06-21 14:36 2009-01-13 Show GitHub Exploit DB Packet Storm
227367 7.5 危険 kamads - Bloginator の articleCall.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2009-1049 2013-06-21 14:34 2009-03-20 Show GitHub Exploit DB Packet Storm
227368 3.5 注意 Ivan Jaros - Drupal 用モジュールの Feed Block におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2009-1738 2013-06-21 14:33 2009-05-4 Show GitHub Exploit DB Packet Storm
227369 7.5 危険 Google - Google Chrome の PDF 機能におけるサービス運用妨害 (DoS) の脆弱性 CWE-119
バッファエラー
CVE-2013-2864 2013-06-20 17:26 2013-06-4 Show GitHub Exploit DB Packet Storm
227370 9.3 危険 マイクロソフト - Microsoft Internet Explorer 6 から 10 における任意のコードを実行される脆弱性 CWE-119
バッファエラー
CVE-2013-3142 2013-06-20 17:19 2013-06-11 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 12, 2026, 4:20 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
203081 9.8 CRITICAL
Network
fasterxml
netapp
debian
oracle
jackson-databind
active_iq_unified_manager
debian_linux
retail_xstore_point_of_service
primavera_unifier
weblogic_server
enterprise_manager_base_platform
communications_instant_m…
FasterXML jackson-databind 2.x before 2.9.10.4 mishandles the interaction between serialization gadgets and typing, related to com.ibatis.sqlmap.engine.transaction.jta.JtaTransactionConfig (aka ibati… CWE-502
 Deserialization of Untrusted Data
CVE-2020-9547 2024-11-21 14:40 2020-03-2 Show GitHub Exploit DB Packet Storm
203082 9.8 CRITICAL
Network
fasterxml
netapp
debian
oracle
jackson-databind
active_iq_unified_manager
debian_linux
retail_xstore_point_of_service
primavera_unifier
retail_service_backbone
weblogic_server
retail_merchandising_system
ag…
FasterXML jackson-databind 2.x before 2.9.10.4 mishandles the interaction between serialization gadgets and typing, related to org.apache.hadoop.shaded.com.zaxxer.hikari.HikariConfig (aka shaded hika… CWE-502
 Deserialization of Untrusted Data
CVE-2020-9546 2024-11-21 14:40 2020-03-2 Show GitHub Exploit DB Packet Storm
203083 7.8 HIGH
Local
sophos hitmanpro.alert Sophos HitmanPro.Alert before build 861 allows local elevation of privilege. NVD-CWE-noinfo
CVE-2020-9540 2024-11-21 14:40 2020-03-2 Show GitHub Exploit DB Packet Storm
203084 8.8 HIGH
Network
dlink dir-615jx10_firmware fmwlan.c on D-Link DIR-615Jx10 devices has a stack-based buffer overflow via the formWlanSetup_Wizard webpage parameter when f_radius_ip1 is malformed. CWE-787
 Out-of-bounds Write
CVE-2020-9535 2024-11-21 14:40 2020-03-2 Show GitHub Exploit DB Packet Storm
203085 8.8 HIGH
Network
dlink dir-615jx10_firmware fmwlan.c on D-Link DIR-615Jx10 devices has a stack-based buffer overflow via the formWlanSetup webpage parameter when f_radius_ip1 is malformed. CWE-787
 Out-of-bounds Write
CVE-2020-9534 2024-11-21 14:40 2020-03-2 Show GitHub Exploit DB Packet Storm
203086 5.4 MEDIUM
Network
webnus modern_events_calendar_lite Multiple Stored Cross-site scripting (XSS) vulnerabilities in the Webnus Modern Events Calendar Lite plugin through 5.1.6 for WordPress allows remote authenticated users (with minimal permissions) to… CWE-79
Cross-site Scripting
CVE-2020-9459 2024-11-21 14:40 2020-02-29 Show GitHub Exploit DB Packet Storm
203087 8.8 HIGH
Network
justblab blab\!_ws_pro
blab\!_ax_pro
blab\!_ax
blab\!_ws
An insecure random number generation vulnerability in BlaB! AX, BlaB! AX Pro, BlaB! WS (client), and BlaB! WS Pro (client) version 19.11 allows an attacker (with a guest or user session cookie) to es… CWE-330
 Use of Insufficiently Random Values
CVE-2020-9449 2024-11-21 14:40 2020-02-29 Show GitHub Exploit DB Packet Storm
203088 6.1 MEDIUM
Network
export_users_to_csv_project export_users_to_csv The Export Users to CSV plugin through 1.4.2 for WordPress allows CSV Injection. CWE-1236
 Improper Neutralization of Formula Elements in a CSV File
CVE-2020-9466 2024-11-21 14:40 2020-02-29 Show GitHub Exploit DB Packet Storm
203089 9.8 CRITICAL
Network
eyesofnetwork eyesofnetwork An issue was discovered in EyesOfNetwork eonweb 5.1 through 5.3 before 5.3-3. The eonweb web interface is prone to a SQL injection, allowing an unauthenticated attacker to perform various tasks such … CWE-89
SQL Injection
CVE-2020-9465 2024-11-21 14:40 2020-02-29 Show GitHub Exploit DB Packet Storm
203090 8.8 HIGH
Network
centreon centreon Centreon 19.10 allows remote authenticated users to execute arbitrary OS commands via shell metacharacters in the server_ip field in JSON data in an api/internal.php?object=centreon_configuration_rem… CWE-78
OS Command 
CVE-2020-9463 2024-11-21 14:40 2020-02-29 Show GitHub Exploit DB Packet Storm