Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 23, 2026, 6 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
224571 6.8 警告 FFmpeg - FFmpeg の libavcodec/takdec.c の tak_decode_frame 関数におけるサービス運用妨害 (DoS) の脆弱性 CWE-20
不適切な入力確認
CVE-2014-2097 2014-03-4 15:54 2014-02-1 Show GitHub Exploit DB Packet Storm
224572 4.3 警告 MODX - MODX Revolution の manager/templates/default/header.tpl におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2014-2080 2014-03-4 15:45 2014-01-21 Show GitHub Exploit DB Packet Storm
224573 3.5 注意 CloudBees - CloudBees Jenkins の java/hudson/model/Cause.java におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2014-2067 2014-03-4 15:37 2014-02-14 Show GitHub Exploit DB Packet Storm
224574 4 警告 CloudBees - CloudBees Jenkins の CLI ジョブ作成におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル
CVE-2014-2059 2014-03-4 15:37 2014-02-14 Show GitHub Exploit DB Packet Storm
224575 4.3 警告 BuddyPress.org - WordPress 用 BuddyPress プラグインにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2014-1888 2014-03-4 15:13 2014-02-5 Show GitHub Exploit DB Packet Storm
224576 4.3 警告 OTRS プロジェクト - Open Ticket Request System におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2014-1695 2014-03-4 15:08 2014-02-25 Show GitHub Exploit DB Packet Storm
224577 4.3 警告 Open Web Analytics - Open Web Analytics のログインページにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2014-1456 2014-03-4 15:04 2014-02-1 Show GitHub Exploit DB Packet Storm
224578 7.5 危険 SimpleHRM - SimpleHRM の flexycms/modules/user/user_manager.php のログインページにおける SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2013-2498 2014-03-4 14:58 2013-04-12 Show GitHub Exploit DB Packet Storm
224579 4.3 警告 CMS Made Simple - CMS Made Simple の lib/filemanager/ImageManager/editorFrame.php におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2014-2092 2014-03-4 14:46 2014-02-20 Show GitHub Exploit DB Packet Storm
224580 3.5 注意 CMS Made Simple - CMS Made Simple にクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2014-0334 2014-03-4 14:43 2014-02-28 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 23, 2026, 4 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
200741 4.3 MEDIUM
Network
cybozu garoon Viewing restrictions bypass vulnerability in Portal of Cybozu Garoon 4.0.0 to 5.0.2 allows a remote authenticated attacker to obtain the data of Portal without the viewing privilege. NVD-CWE-Other
CVE-2021-20755 2024-11-21 14:47 2021-08-18 Show GitHub Exploit DB Packet Storm
200742 4.3 MEDIUM
Network
cybozu garoon Improper input validation vulnerability in Workflow of Cybozu Garoon 4.0.0 to 5.0.2 allows a remote authenticated attacker to alter the data of Workflow without the appropriate privilege. CWE-20
 Improper Input Validation 
CVE-2021-20754 2024-11-21 14:47 2021-08-18 Show GitHub Exploit DB Packet Storm
200743 5.4 MEDIUM
Network
cybozu garoon Cross-site scripting vulnerability in Scheduler of Cybozu Garoon 4.0.0 to 5.0.2 allows a remote authenticated attacker to inject an arbitrary script via unspecified vectors. CWE-79
Cross-site Scripting
CVE-2021-20753 2024-11-21 14:47 2021-08-18 Show GitHub Exploit DB Packet Storm
200744 6.1 MEDIUM
Network
groupsession groupsession_zion
groupsession_bycloud
groupsession
Open redirect vulnerability in GroupSession (GroupSession Free edition from ver2.2.0 to the version prior to ver5.1.0, GroupSession byCloud from ver3.0.3 to the version prior to ver5.1.0, and GroupSe… CWE-601
Open Redirect
CVE-2021-20789 2024-11-21 14:47 2021-07-30 Show GitHub Exploit DB Packet Storm
200745 4.3 MEDIUM
Network
groupsession groupsession_zion
groupsession_bycloud
groupsession
Server-side request forgery (SSRF) vulnerability in GroupSession (GroupSession Free edition from ver2.2.0 to the version prior to ver5.1.0, GroupSession byCloud from ver3.0.3 to the version prior to … CWE-918
Server-Side Request Forgery (SSRF) 
CVE-2021-20788 2024-11-21 14:47 2021-07-30 Show GitHub Exploit DB Packet Storm
200746 4.8 MEDIUM
Network
groupsession groupsession_zion
groupsession_bycloud
groupsession
Cross-site scripting vulnerability in GroupSession (GroupSession Free edition from ver2.2.0 to the version prior to ver5.1.0, GroupSession byCloud from ver3.0.3 to the version prior to ver5.1.0, and … CWE-79
Cross-site Scripting
CVE-2021-20787 2024-11-21 14:47 2021-07-30 Show GitHub Exploit DB Packet Storm
200747 4.3 MEDIUM
Network
groupsession groupsession_zion
groupsession_bycloud
groupsession
Cross-site request forgery (CSRF) vulnerability in GroupSession (GroupSession Free edition from ver2.2.0 to the version prior to ver5.1.0, GroupSession byCloud from ver3.0.3 to the version prior to v… CWE-352
 Origin Validation Error
CVE-2021-20786 2024-11-21 14:47 2021-07-30 Show GitHub Exploit DB Packet Storm
200748 4.8 MEDIUM
Network
groupsession groupsession_zion
groupsession_bycloud
groupsession
Cross-site scripting vulnerability in GroupSession (GroupSession Free edition from ver2.2.0 to the version prior to ver5.1.0, GroupSession byCloud from ver3.0.3 to the version prior to ver5.1.0, and … CWE-79
Cross-site Scripting
CVE-2021-20785 2024-11-21 14:47 2021-07-30 Show GitHub Exploit DB Packet Storm
200749 8.8 HIGH
Network
softbank optical_bb_unit_e-wmta_firmware Cross-site request forgery (CSRF) vulnerability in Optical BB unit E-WMTA2.3 allows a remote attacker to hijack the authentication of administrators via a specially crafted page. CWE-352
 Origin Validation Error
CVE-2021-20783 2024-11-21 14:47 2021-07-30 Show GitHub Exploit DB Packet Storm
200750 6.1 MEDIUM
Network
voidtools everything HTTP header injection vulnerability in Everything all versions except the Lite version may allow a remote attacker to inject an arbitrary script or alter the website that uses the product via unspeci… NVD-CWE-Other
CVE-2021-20784 2024-11-21 14:47 2021-07-14 Show GitHub Exploit DB Packet Storm