Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":June 10, 2026, 2 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
224551	7.6	危険	D-Link Systems, Inc.	-	D-Link DSL-2740B ゲートウェイのファームウェアにおける認証を回避される脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2013-2271	2013-11-20 15:18	2013-11-14	Show	GitHub Exploit DB Packet Storm

224552	6.8	警告	Sunil Nanda	-	WordPress 用 Blue Wrench Video Widget プラグインにおけるクロスサイトリクエストフォージェリの脆弱性	CWE-352 同一生成元ポリシー違反	CVE-2013-6797	2013-11-20 15:01	2013-10-23	Show	GitHub Exploit DB Packet Storm

224553	4.3	警告	Softaculous	-	Softaculous Webuzo の File Manager モジュールの filemanager/login.php におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2013-6042	2013-11-20 14:34	2013-10-3	Show	GitHub Exploit DB Packet Storm

224554	4.3	警告	Beanbag	-	Review Board におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2013-4519	2013-11-20 14:21	2013-11-5	Show	GitHub Exploit DB Packet Storm

224555	5.7	警告	Xen プロジェクト	-	Xen におけるサービス運用妨害 (DoS) の脆弱性	CWE-20 不適切な入力確認	CVE-2013-4551	2013-11-20 14:09	2013-11-8	Show	GitHub Exploit DB Packet Storm

224556	6.8	警告	BlackBerry	-	Windows または Mac OS X 上で稼働する BlackBerry Link における任意のファイルを読まれる脆弱性	CWE-352 同一生成元ポリシー違反	CVE-2013-3694	2013-11-20 13:39	2013-11-12	Show	GitHub Exploit DB Packet Storm

224557	5.8	警告	BlackBerry	-	Windows または Mac OS X 上で稼働する BlackBerry Link におけるリモートファイルアクセスフォルダの制限を回避される脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2013-6798	2013-11-20 13:39	2013-11-12	Show	GitHub Exploit DB Packet Storm

224558	7.1	危険	マイクロソフト	-	Windows XP 上で稼働する Microsoft Word 2003 におけるサービス運用妨害 (DoS) の脆弱性	CWE-399 リソース管理の問題	CVE-2013-6801	2013-11-20 11:47	2013-11-7	Show	GitHub Exploit DB Packet Storm

224559	7.5	危険	SPIP	-	SPIP で使用される Security Screen における任意の PHP を実行される脆弱性	CWE-94 コード・インジェクション	CVE-2013-4557	2013-11-20 11:21	2013-08-29	Show	GitHub Exploit DB Packet Storm

224560	4.3	警告	SPIP	-	SPIP の著者ページにおけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2013-4556	2013-11-20 11:07	2013-10-14	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:June 10, 2026, 5 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
211761	6.1	MEDIUM Network	igniterealtime	openfire	In Ignite Realtime Openfire 4.5.1 a Stored Cross-site Vulnerability allows an attacker to execute an arbitrary malicious URL via the vulnerable POST parameter searchName", "alias" in the import certi…	CWE-79 Cross-site Scripting	CVE-2020-24601	2024-11-21 14:15	2020-09-3	Show	GitHub Exploit DB Packet Storm

211762	7.5	HIGH Network	djangoproject canonical fedoraproject oracle	django ubuntu_linux fedora zfs_storage_appliance_kit	An issue was discovered in Django 2.2 before 2.2.16, 3.0 before 3.0.10, and 3.1 before 3.1.1 (when Python 3.7+ is used). The intermediate-level directories of the filesystem cache had the system's st…	CWE-276 Incorrect Default Permissions	CVE-2020-24584	2024-11-21 14:15	2020-09-1	Show	GitHub Exploit DB Packet Storm

211763	7.5	HIGH Network	djangoproject canonical fedoraproject oracle	django ubuntu_linux fedora zfs_storage_appliance_kit	An issue was discovered in Django 2.2 before 2.2.16, 3.0 before 3.0.10, and 3.1 before 3.1.1 (when Python 3.7+ is used). FILE_UPLOAD_DIRECTORY_PERMISSIONS mode was not applied to intermediate-level d…	CWE-276 Incorrect Default Permissions	CVE-2020-24583	2024-11-21 14:15	2020-09-1	Show	GitHub Exploit DB Packet Storm

211764	6.1	MEDIUM Network	chamber_dashboard_business_directory_project	chamber_dashboard_business_directory	The Chamber Dashboard Business Directory plugin 3.2.8 for WordPress allows XSS.	CWE-79 Cross-site Scripting	CVE-2020-24699	2024-11-21 14:15	2020-09-1	Show	GitHub Exploit DB Packet Storm

211765	9.8	CRITICAL Network	scalyr	scalyr_agent	The Scalyr Agent before 2.1.10 has Missing SSL Certificate Validation because, in some circumstances, native Python code is used that lacks a comparison of the hostname to commonName and subjectAltNa…	CWE-295 Improper Certificate Validation	CVE-2020-24715	2024-11-21 14:15	2020-08-28	Show	GitHub Exploit DB Packet Storm

211766	9.8	CRITICAL Network	scalyr	scalyr_agent	The Scalyr Agent before 2.1.10 has Missing SSL Certificate Validation because, in some circumstances, the openssl binary is called without the -verify_hostname option.	CWE-295 Improper Certificate Validation	CVE-2020-24714	2024-11-21 14:15	2020-08-28	Show	GitHub Exploit DB Packet Storm

211767	6.5	MEDIUM Network	jetbrains	youtrack	In JetBrains YouTrack versions before 2020.3.4313, 2020.2.11008, 2020.1.11011, 2019.1.65514, 2019.2.65515, and 2019.3.65516, an attacker can retrieve an issue description without appropriate access.	NVD-CWE-noinfo	CVE-2020-24618	2024-11-21 14:15	2020-08-28	Show	GitHub Exploit DB Packet Storm

211768	7.8	HIGH Local	openzfs	openzfs	OpenZFS before 2.0.0-rc1, when used on FreeBSD, misinterprets group permissions as user permissions, as demonstrated by mode 0770 being equivalent to mode 0777.	CWE-276 Incorrect Default Permissions	CVE-2020-24717	2024-11-21 14:15	2020-08-28	Show	GitHub Exploit DB Packet Storm

211769	7.8	HIGH Local	openzfs	openzfs	OpenZFS before 2.0.0-rc1, when used on FreeBSD, allows execute permissions for all directories.	CWE-863 Incorrect Authorization	CVE-2020-24716	2024-11-21 14:15	2020-08-28	Show	GitHub Exploit DB Packet Storm

211770	6.1	MEDIUM Network	wso2	identity_server_analytics identity_server_as_key_manager identity_server api_manager api_manager_analytics iot_server	An issue was discovered in certain WSO2 products. The Try It tool allows Reflected XSS. This affects API Manager through 3.1.0, API Manager Analytics 2.5.0, IS as Key Manager through 5.10.0, Identity…	CWE-79 Cross-site Scripting	CVE-2020-24706	2024-11-21 14:15	2020-08-28	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed