Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 18, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
227921 7.5 危険 rd-media - Joomla! 用の RD-Autos コンポーネントにおける SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2009-0420 2012-12-20 19:10 2009-02-4 Show GitHub Exploit DB Packet Storm
227922 6.9 警告 Standards Based Linux Instrumentation (SBLIM) - SBLIM sblim-sfcb の SSL certificate setup program における任意のファイルを上書きされる脆弱性 CWE-59
リンク解釈の問題 		CVE-2009-0416 2012-12-20 19:10 2009-02-3 Show GitHub Exploit DB Packet Storm
227923 10 危険 The Tor Project - Tor における脆弱性 CWE-399
リソース管理の問題 		CVE-2009-0414 2012-12-20 19:10 2009-02-3 Show GitHub Exploit DB Packet Storm
227924 4.3 警告 Roundcube.net - roundcubemail におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2009-0413 2012-12-20 19:10 2009-01-20 Show GitHub Exploit DB Packet Storm
227925 7.5 危険 smartsitecms - smartSite CMS の articles.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2009-0405 2012-12-20 19:10 2009-02-3 Show GitHub Exploit DB Packet Storm
227926 6.8 警告 socialengine - SocialEngine の blog.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2009-0400 2012-12-20 19:10 2009-02-3 Show GitHub Exploit DB Packet Storm
227927 7.8 危険 sony ericsson - Sony Ericsson W910i などの電話機におけるサービス運用妨害 (DoS) の脆弱性 CWE-20
不適切な入力確認 		CVE-2009-0396 2012-12-20 19:10 2009-02-2 Show GitHub Exploit DB Packet Storm
227928 7.5 危険 ple cms - PLEs CMS の login.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2009-0394 2012-12-20 19:10 2009-02-2 Show GitHub Exploit DB Packet Storm
227929 6.8 警告 sitexs cms - SiteXS CMS の post.php におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2009-0371 2012-12-20 19:10 2009-01-30 Show GitHub Exploit DB Packet Storm
227930 9.3 危険 wesnoth - Wesnoth の Python AI モジュールにおけるサンドボックスをエスケープされる脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2009-0367 2012-12-20 19:10 2009-03-2 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 18, 2026, 4:12 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
311551 7.5 HIGH
Network 		cisco meraki_z4c_firmware
meraki_z4_firmware
meraki_z3c_firmware
meraki_z3_firmware
meraki_vmx_firmware
meraki_mx600_firmware
meraki_mx450_firmware
meraki_mx400_firmware
meraki_mx25… 		Multiple vulnerabilities in the Cisco AnyConnect VPN server of Cisco Meraki MX and Cisco Meraki Z Series Teleworker Gateway devices could allow an unauthenticated, remote attacker to cause a DoS cond… CWE-787
 Out-of-bounds Write 		CVE-2024-20499 2024-10-9 02:45 2024-10-3 Show GitHub Exploit DB Packet Storm
311552 7.5 HIGH
Network 		cisco meraki_z4c_firmware
meraki_z4_firmware
meraki_z3c_firmware
meraki_z3_firmware
meraki_vmx_firmware
meraki_mx600_firmware
meraki_mx450_firmware
meraki_mx400_firmware
meraki_mx25… 		A vulnerability in the Cisco AnyConnect VPN server of Cisco Meraki MX and Cisco Meraki Z Series Teleworker Gateway devices could allow an unauthenticated, remote attacker to cause a DoS condition in … CWE-400
 Uncontrolled Resource Consumption 		CVE-2024-20500 2024-10-9 02:37 2024-10-3 Show GitHub Exploit DB Packet Storm
311553 - - - An issue in Shanghai Zhouma Network Technology CO., Ltd IMS Intelligent Manufacturing Collaborative Internet of Things System v.1.9.1 allows a remote attacker to escalate privileges via the open port. - CVE-2024-44439 2024-10-9 01:35 2024-10-5 Show GitHub Exploit DB Packet Storm
311554 5.4 MEDIUM
Network 		memberful memberful The Memberful – Membership Plugin plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'memberful_buy_subscription_link' and 'memberful_podcasts_link' shortcodes in all … CWE-79
Cross-site Scripting 		CVE-2024-9242 2024-10-9 01:26 2024-10-4 Show GitHub Exploit DB Packet Storm
311555 4.8 MEDIUM
Network 		wpbookingcalendar wp_booking_calendar The WP Booking Calendar plugin for WordPress is vulnerable to Stored Cross-Site Scripting via admin settings in all versions up to, and including, 10.6 due to insufficient input sanitization and outp… CWE-79
Cross-site Scripting 		CVE-2024-9306 2024-10-9 01:25 2024-10-4 Show GitHub Exploit DB Packet Storm
311556 6.1 MEDIUM
Network 		plainware shiftcontroller The ShiftController Employee Shift Scheduling plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via URL keys in all versions up to, and including, 4.9.66 due to insufficient input … CWE-79
Cross-site Scripting 		CVE-2024-9435 2024-10-9 01:22 2024-10-4 Show GitHub Exploit DB Packet Storm
311557 5.4 MEDIUM
Network 		sigmadevs easy_demo_importer The Easy Demo Importer – A Modern One-Click Demo Import Solution plugin for WordPress is vulnerable to Stored Cross-Site Scripting via SVG File uploads in all versions up to, and including, 1.1.2 due… CWE-79
Cross-site Scripting 		CVE-2024-9071 2024-10-9 01:21 2024-10-4 Show GitHub Exploit DB Packet Storm
311558 4.3 MEDIUM
Adjacent 		cisco ios_xe A vulnerability in Cisco IOS XE Software could allow an unauthenticated, adjacent attacker to cause a denial of service (DoS) condition on the control plane of an affected device. This vulnerabili… CWE-190
 Integer Overflow or Wraparound 		CVE-2024-20434 2024-10-9 01:20 2024-09-26 Show GitHub Exploit DB Packet Storm
311559 5.4 MEDIUM
Network 		remilia re\ The Re:WP plugin for WordPress is vulnerable to Stored Cross-Site Scripting via SVG File uploads in all versions up to, and including, 1.0.1 due to insufficient input sanitization and output escaping… CWE-79
Cross-site Scripting 		CVE-2024-9271 2024-10-9 01:17 2024-10-4 Show GitHub Exploit DB Packet Storm
311560 6.5 MEDIUM
Network 		cisco identity_services_engine A vulnerability in the web-based management interface of Cisco Identity Services Engine (ISE) could allow an authenticated, remote attacker to obtain sensitive information from an affected device. … CWE-311
Missing Encryption of Sensitive Data 		CVE-2024-20515 2024-10-9 01:11 2024-10-3 Show GitHub Exploit DB Packet Storm