Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 15, 2026, 2 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
246051 4.3 警告 glFusion - glFusion におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2009-1281 2012-06-26 16:10 2009-04-9 Show GitHub Exploit DB Packet Storm
246052 7.5 危険 gravityboardx - GBX の forms/ajax/configure.php における任意の PHP コードを挿入される脆弱性 CWE-94
コード・インジェクション 		CVE-2009-1278 2012-06-26 16:10 2009-04-9 Show GitHub Exploit DB Packet Storm
246053 7.5 危険 gravityboardx - GBX の index.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2009-1277 2012-06-26 16:10 2009-04-9 Show GitHub Exploit DB Packet Storm
246054 6.8 警告 Apache Software Foundation - Apache Struts などで使用される Apache Tiles における重要情報を取得される脆弱性 CWE-Other
その他 		CVE-2009-1275 2012-06-26 16:10 2009-04-9 Show GitHub Exploit DB Packet Storm
246055 5 警告 andrew j.korty - USE=ssh でコンパイルされた PAM で使用される pam_ssh におけるユーザ名が列挙される脆弱性 CWE-255
証明書・パスワード管理 		CVE-2009-1273 2012-06-26 16:10 2009-04-8 Show GitHub Exploit DB Packet Storm
246056 7.5 危険 alikonweb
Joomla!		 - Joomla! の bookjoomlas コンポーネントの sub_commententry.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2009-1263 2012-06-26 16:10 2009-04-7 Show GitHub Exploit DB Packet Storm
246057 7.2 危険 フォーティネット - Fortinet FortiClient におけるフォーマットストリングの脆弱性 CWE-134
書式文字列の問題 		CVE-2009-1262 2012-06-26 16:10 2009-04-7 Show GitHub Exploit DB Packet Storm
246058 9.3 危険 EZB Systems - UltraISO におけるスタックベースのバッファーオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2009-1260 2012-06-26 16:10 2009-04-7 Show GitHub Exploit DB Packet Storm
246059 7.5 危険 FlexCMS - FlexCMS における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2009-1256 2012-06-26 16:10 2009-04-7 Show GitHub Exploit DB Packet Storm
246060 4.3 警告 Drupal - Drupal 用の Feed 要素マッパーモジュールにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2009-1249 2012-06-26 16:10 2009-03-26 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 15, 2026, 4:10 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
218071 6.1 MEDIUM
Network 		o-dyn collabtive An issue was discovered in Collabtive 3.0 and later. managefile.php is vulnerable to XSS: when the action parameter is set to movefile and the id parameter corresponds to a project the current user h… CWE-79
Cross-site Scripting 		CVE-2020-13655 2024-11-21 14:01 2020-09-1 Show GitHub Exploit DB Packet Storm
218072 6.5 MEDIUM
Adjacent 		espressif esp-idf The Bluetooth Low Energy (BLE) controller implementation in Espressif ESP-IDF 4.0 through 4.2 (for ESP32 devices) returns the wrong number of completed BLE packets and triggers a reachable assertion … CWE-617
 Reachable Assertion 		CVE-2020-13595 2024-11-21 14:01 2020-09-1 Show GitHub Exploit DB Packet Storm
218073 6.5 MEDIUM
Adjacent 		espressif esp-idf The Bluetooth Low Energy (BLE) controller implementation in Espressif ESP-IDF 4.2 and earlier (for ESP32 devices) does not properly restrict the channel map field of the connection request packet on … CWE-20
 Improper Input Validation  		CVE-2020-13594 2024-11-21 14:01 2020-09-1 Show GitHub Exploit DB Packet Storm
218074 8.8 HIGH
Adjacent 		ti simplelink-cc2640r2_software_development_kit The Bluetooth Low Energy Secure Manager Protocol (SMP) implementation in Texas Instruments SimpleLink SIMPLELINK-CC2640R2-SDK through 2.2.3 allows the Diffie-Hellman check during the Secure Connectio… CWE-347
 Improper Verification of Cryptographic Signature 		CVE-2020-13593 2024-11-21 14:01 2020-09-1 Show GitHub Exploit DB Packet Storm
218075 5.9 MEDIUM
Network 		mitel micollab The Mitel MiCollab application before 9.1.332 for iOS could allow an unauthorized user to access restricted files and folders due to insufficient access control. An exploit requires a rooted iOS devi… NVD-CWE-noinfo
CVE-2020-13767 2024-11-21 14:01 2020-08-27 Show GitHub Exploit DB Packet Storm
218076 7.5 HIGH
Network 		mitel 6863_firmware
6865_firmware
6867_firmware
6869_firmware
6873_firmware
6940_firmware
6970_firmware
6930_firmware
6920_firmware
6905_firmware
6910_firmware 		The Web UI component of Mitel MiVoice 6800 and 6900 series SIP Phones with firmware before 5.1.0.SP5 could allow an unauthenticated attacker to expose sensitive information due to improper memory han… CWE-307
mproper Restriction of Excessive Authentication Attempts 		CVE-2020-13617 2024-11-21 14:01 2020-08-27 Show GitHub Exploit DB Packet Storm
218077 5.4 MEDIUM
Network 		hivemq broker_control_center An issue was discovered in HiveMQ Broker Control Center 4.3.2. A crafted clientid parameter in an MQTT packet (sent to the Broker) is reflected in the client section of the management console. The at… CWE-79
Cross-site Scripting 		CVE-2020-13821 2024-11-21 14:01 2020-08-27 Show GitHub Exploit DB Packet Storm
218078 7.5 HIGH
Network 		aedes_project aedes An issue was discovered in MoscaJS Aedes 0.42.0. lib/write.js does not properly consider exceptions during the writing of an invalid packet to a stream. CWE-755
 Improper Handling of Exceptional Conditions 		CVE-2020-13410 2024-11-21 14:01 2020-08-27 Show GitHub Exploit DB Packet Storm
218079 8.8 HIGH
Network 		i-doit i-doit A CSV injection (aka Excel Macro Injection or Formula Injection) issue in i-doit 1.14.2 allows an attacker to execute arbitrary commands via a Title parameter that is mishandled in a CSV export. CWE-1236
 Improper Neutralization of Formula Elements in a CSV File 		CVE-2020-13826 2024-11-21 14:01 2020-08-20 Show GitHub Exploit DB Packet Storm
218080 6.1 MEDIUM
Network 		i-doit i-doit A cross-site scripting (XSS) vulnerability in i-doit 1.14.2 allows remote attackers to inject arbitrary web script or HTML via the viewMode, tvMode, tvType, objID, catgID, objTypeID, or editMode para… CWE-79
Cross-site Scripting 		CVE-2020-13825 2024-11-21 14:01 2020-08-20 Show GitHub Exploit DB Packet Storm