Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 28, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
224761	10	危険	Apache Software Foundation	-	Apache Open For Business Project における任意の Unified Expression Language 機能を実行される脆弱性	CWE-20 不適切な入力確認	CVE-2013-2250	2013-08-16 11:45	2013-07-20	Show	GitHub Exploit DB Packet Storm

224762	4.3	警告	Apache Software Foundation	-	Apache Open For Business Project の Webtools アプリケーションにおけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2013-2137	2013-08-16 11:37	2013-07-20	Show	GitHub Exploit DB Packet Storm

224763	7.5	危険	BigTree CMS	-	BigTree CMS の core/inc/bigtree/cms.php における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2013-4879	2013-08-15 19:02	2013-07-3	Show	GitHub Exploit DB Packet Storm

224764	4.3	警告	BigTree CMS	-	BigTree CMS の core/admin/modules/developer/modules/views/add.php におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2013-4880	2013-08-15 19:00	2013-07-17	Show	GitHub Exploit DB Packet Storm

224765	7.5	危険	Moxi9	-	PHPFox における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2013-5121	2013-08-15 18:39	2013-08-7	Show	GitHub Exploit DB Packet Storm

224766	7.5	危険	Moxi9	-	PHPFox における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2013-5120	2013-08-15 18:33	2013-07-30	Show	GitHub Exploit DB Packet Storm

224767	7.5	危険	LibRaw	-	LibRaw の exposure correction コードにおけるバッファオーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2013-2127	2013-08-15 18:04	2013-05-24	Show	GitHub Exploit DB Packet Storm

224768	7.5	危険	Novell Canonical LibRaw	-	LibRaw の libraw_cxx.cpp 内の LibRaw::unpack 関数におけるメモリ二重解放の脆弱性	CWE-399 リソース管理の問題	CVE-2013-2126	2013-08-15 18:01	2013-05-26	Show	GitHub Exploit DB Packet Storm

224769	9.3	危険	マイクロソフト	-	Microsoft Internet Explorer 6 から 10 における任意のコードを実行される脆弱性	CWE-119 バッファエラー	CVE-2013-3199	2013-08-15 15:54	2013-08-13	Show	GitHub Exploit DB Packet Storm

224770	9.3	危険	マイクロソフト	-	Microsoft Internet Explorer 9 における任意のコードを実行される脆弱性	CWE-119 バッファエラー	CVE-2013-3194	2013-08-15 15:51	2013-08-13	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 28, 2026, 4:16 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
199631	7.3	HIGH Network	istio redhat	istio openshift_service_mesh	Istio versions 1.2.10 (End of Life) and prior, 1.3 through 1.3.7, and 1.4 through 1.4.3 allows authentication bypass. The Authentication Policy exact-path matching logic can allow unauthorized access…	CWE-287 Improper Authentication	CVE-2020-8595	2024-11-21 14:39	2020-02-13	Show	GitHub Exploit DB Packet Storm

199632	6.5	MEDIUM Network	misp	misp	An issue was discovered in MISP before 2.4.121. ACLs for discussion threads were mishandled in app/Controller/ThreadsController.php and app/Model/Thread.php.	NVD-CWE-noinfo	CVE-2020-8894	2024-11-21 14:39	2020-02-12	Show	GitHub Exploit DB Packet Storm

199633	7.5	HIGH Network	misp	misp	An issue was discovered in MISP before 2.4.121. The Galaxy view contained an incorrectly sanitized search string in app/View/Galaxies/view.ctp.	NVD-CWE-noinfo	CVE-2020-8893	2024-11-21 14:39	2020-02-12	Show	GitHub Exploit DB Packet Storm

199634	8.1	HIGH Network	misp	misp	An issue was discovered in MISP before 2.4.121. It did not consider the HTTP PUT method when trying to block a brute-force series of invalid requests.	NVD-CWE-noinfo	CVE-2020-8892	2024-11-21 14:39	2020-02-12	Show	GitHub Exploit DB Packet Storm

199635	5.9	MEDIUM Network	misp	misp	An issue was discovered in MISP before 2.4.121. It did not canonicalize usernames when trying to block a brute-force series of invalid requests.	NVD-CWE-noinfo	CVE-2020-8891	2024-11-21 14:39	2020-02-12	Show	GitHub Exploit DB Packet Storm

199636	5.9	MEDIUM Network	misp	misp	An issue was discovered in MISP before 2.4.121. It mishandled time skew (between the machine hosting the web server and the machine hosting the database) when trying to block a brute-force series of …	CWE-367 Time-of-check Time-of-use (TOCTOU) Race Condition	CVE-2020-8890	2024-11-21 14:39	2020-02-12	Show	GitHub Exploit DB Packet Storm

199637	7.5	HIGH Network	xnau	participants_database	participants-database.php in the Participants Database plugin 1.9.5.5 and previous versions for WordPress has a time-based SQL injection vulnerability via the ascdesc, list_filter_count, or sortBy pa…	CWE-89 SQL Injection	CVE-2020-8596	2024-11-21 14:39	2020-02-11	Show	GitHub Exploit DB Packet Storm

199638	8.8	HIGH Network	testlink	testlink	An issue was discovered in TestLink 1.9.19. The relation_type parameter of the lib/requirements/reqSearch.php endpoint is vulnerable to authenticated SQL Injection.	CWE-89 SQL Injection	CVE-2020-8841	2024-11-21 14:39	2020-02-11	Show	GitHub Exploit DB Packet Storm

199639	9.8	CRITICAL Network	fasterxml debian netapp huawei oracle	jackson-databind debian_linux steelstore_cloud_integrated_storage oncommand_workflow_automation service_level_manager oncommand_api_services oceanstor_9000_firmware global_lifecy…	FasterXML jackson-databind 2.0.0 through 2.9.10.2 lacks certain xbean-reflect/JNDI blocking, as demonstrated by org.apache.xbean.propertyeditor.JndiConverter.	CWE-502 Deserialization of Untrusted Data	CVE-2020-8840	2024-11-21 14:39	2020-02-11	Show	GitHub Exploit DB Packet Storm

199640	5.4	MEDIUM Network	vanillaforums	vanilla	index.php?p=/dashboard/settings/branding in Vanilla 2.6.3 allows stored XSS.	CWE-79 Cross-site Scripting	CVE-2020-8825	2024-11-21 14:39	2020-02-10	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed