Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 28, 2026, 6 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
224021 7.9 危険 BlackBerry - BlackBerry Enterprise Service における任意のパッケージをアップロードされる脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2013-3693 2013-10-16 16:00 2013-10-8 Show GitHub Exploit DB Packet Storm
224022 4 警告 Condor Project
レッドハット
- Condor のポリシー定義エバリュエータにおける SQL インジェクションの脆弱性 CWE-20
不適切な入力確認
CVE-2009-5136 2013-10-16 15:32 2009-11-25 Show GitHub Exploit DB Packet Storm
224023 6.8 警告 MediaWiki - MediaWiki 用 CheckUser 拡張機能の api/ApiQueryCheckUser.php におけるクロスサイトリクエストフォージェリの脆弱性 CWE-352
同一生成元ポリシー違反
CVE-2013-4306 2013-10-16 15:17 2013-09-3 Show GitHub Exploit DB Packet Storm
224024 4.3 警告 MediaWiki - MediaWiki 用 SyntaxHighlight GeSHi 拡張機能の contrib/example.php におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2013-4305 2013-10-16 15:16 2013-09-3 Show GitHub Exploit DB Packet Storm
224025 6.5 警告 Kwoksys - Kwoksys Kwok Information Server の IT/hardware-list.dll における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2013-5028 2013-10-16 14:58 2013-08-7 Show GitHub Exploit DB Packet Storm
224026 9 危険 Adaptive Computing - Terascale Open-Source Resource and Queue Manager の pbs_mom における任意のジョブを実行される脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2013-4319 2013-10-16 14:42 2013-09-6 Show GitHub Exploit DB Packet Storm
224027 3.5 注意 Condor Project
レッドハット
- Condor のポリシー定義エバリュエータにおけるサービス運用妨害 (DoS) の脆弱性 CWE-20
不適切な入力確認
CVE-2013-4255 2013-10-16 14:41 2013-08-21 Show GitHub Exploit DB Packet Storm
224028 7.5 危険 Richard Cook - Ruby 用 rgpg gem の lib/rgpg/gpg_helper.rb における任意のコマンドを実行される脆弱性 CWE-94
コード・インジェクション
CVE-2013-4203 2013-10-16 14:40 2013-08-1 Show GitHub Exploit DB Packet Storm
224029 5 警告 Xymon - Xymon の trend-data デーモンにおけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル
CVE-2013-4173 2013-10-16 14:40 2013-07-24 Show GitHub Exploit DB Packet Storm
224030 7.8 危険 OvisLink - 複数の AirLive 製品における重要な情報を取得される脆弱性 CWE-310
暗号の問題
CVE-2013-3687 2013-10-16 14:23 2013-06-12 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 28, 2026, 4:16 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
201 4.9 MEDIUM
Network
- - Cleartext transmission of sensitive information vulnerability in Export Key functionality in Synology Surveillance Station before 9.2.2-11575 and 9.2.2-9575 allows remote authenticated users with adm… New CWE-319
Cleartext Transmission of Sensitive Information
CVE-2024-47269 2026-05-27 23:54 2026-05-27 Show GitHub Exploit DB Packet Storm
202 2.7 LOW
Network
- - Improper preservation of permissions vulnerability in Archiving Push functionality in Synology Surveillance Station before 9.2.2-11575 and 9.2.2-9575 allows remote authenticated users with administra… New CWE-281
 Improper Preservation of Permissions
CVE-2024-47270 2026-05-27 23:54 2026-05-27 Show GitHub Exploit DB Packet Storm
203 4.9 MEDIUM
Network
- - Insufficiently protected credentials vulnerability in IPSpeaker component in Synology Surveillance Station before 9.2.2-11575 and 9.2.2-9575 allows remote authenticated users with administrator privi… New CWE-522
 Insufficiently Protected Credentials
CVE-2024-47271 2026-05-27 23:54 2026-05-27 Show GitHub Exploit DB Packet Storm
204 2.7 LOW
Network
- - Incorrect authorization vulnerability in IO Module functionality in Synology Surveillance Station before 9.2.2-11575 and 9.2.2-9575 allows remote authenticated users with administrator privileges to … New CWE-863
 Incorrect Authorization
CVE-2024-47272 2026-05-27 23:54 2026-05-27 Show GitHub Exploit DB Packet Storm
205 5.9 MEDIUM
Network
- - Improper neutralization of input during web page generation ('Cross-site Scripting') vulnerability in Safe Access in Synology Safe Access before 1.3.1-0329 allows remote authenticated users with admi… New CWE-79
Cross-site Scripting
CVE-2025-10466 2026-05-27 23:54 2026-05-27 Show GitHub Exploit DB Packet Storm
206 5.4 MEDIUM
Network
- - Improper neutralization of input during web page generation ('Cross-site Scripting') vulnerability in contact functionality in Synology Contacts before 1.0.10-20659 allows remote authenticated users … New CWE-79
Cross-site Scripting
CVE-2025-13167 2026-05-27 23:54 2026-05-27 Show GitHub Exploit DB Packet Storm
207 8.1 HIGH
Network
- - Improper check for unusual or exceptional conditions vulnerability in SSO in Synology DiskStation Manager (DSM) before 7.2.2-72806-5 and 7.3.1-86003-1 (7.2.1-69057 is not affected) allows remote atta… New CWE-754
 Improper Check for Unusual or Exceptional Conditions
CVE-2025-13392 2026-05-27 23:54 2026-05-27 Show GitHub Exploit DB Packet Storm
208 6.1 MEDIUM
Local
- - Origin validation error vulnerability in Synology ActiveProtect Agent before 1.1.0-0439 allows local users to write arbitrary files with restricted content when installing. New CWE-346
 Origin Validation Error
CVE-2025-13593 2026-05-27 23:54 2026-05-27 Show GitHub Exploit DB Packet Storm
209 7.5 HIGH
Network
- - An Exposed Dangerous Method or Function vulnerability in Synology C2 Identity Edge Server package in DSM before 1.76.0-0307 allows remote attackers to obtain user credentials from the edge server. New CWE-749
 Exposed Dangerous Method or Function
CVE-2025-14713 2026-05-27 23:54 2026-05-27 Show GitHub Exploit DB Packet Storm
210 8.6 HIGH
Network
- - A vulnerability in Active Backup for Business allows unauthorized remote attackers to read arbitrary files. New CWE-89
SQL Injection
CVE-2025-30028 2026-05-27 23:54 2026-05-27 Show GitHub Exploit DB Packet Storm