Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":June 16, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
224781	5	警告	IBM	-	IBM SPSS Collaboration and Deployment Services のポータルアプリケーションにおける内部パスワードを取得される脆弱性	CWE-200 情報漏えい	CVE-2013-4070	2013-12-24 21:10	2013-12-16	Show	GitHub Exploit DB Packet Storm

224782	5	警告	IBM	-	IBM SPSS Collaboration and Deployment Services のポータルアプリケーションにおける任意のファイルを読まれる脆弱性	CWE-200 情報漏えい	CVE-2013-4069	2013-12-24 21:03	2013-12-16	Show	GitHub Exploit DB Packet Storm

224783	5.8	警告	IBM	-	IBM SPSS Collaboration and Deployment Services におけるオープンリダイレクトの脆弱性	CWE-20 不適切な入力確認	CVE-2013-4046	2013-12-24 20:50	2013-12-16	Show	GitHub Exploit DB Packet Storm

224784	4.3	警告	IBM	-	IBM SPSS Collaboration and Deployment Services のポータルアプリケーションにおけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2013-4045	2013-12-24 20:50	2013-12-16	Show	GitHub Exploit DB Packet Storm

224785	4	警告	IBM	-	IBM SPSS Collaboration and Deployment Services におけるアプリケーションログファイルを読まれる脆弱性	CWE-200 情報漏えい	CVE-2013-4044	2013-12-24 20:49	2013-12-16	Show	GitHub Exploit DB Packet Storm

224786	3.5	注意	eFront Learning	-	eFront の www/administrator.php におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2013-7194	2013-12-24 19:36	2013-12-12	Show	GitHub Exploit DB Packet Storm

224787	9.3	危険	UPC	-	UPC Ireland Cisco EPC 2425 ルータにおけるアクセス権を取得される脆弱性	CWE-310 暗号の問題	CVE-2013-7136	2013-12-24 19:15	2013-12-11	Show	GitHub Exploit DB Packet Storm

224788	7.5	危険	nCrafts	-	WordPress 用 FormCraft プラグインの form.php における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2013-7187	2013-12-24 19:15	2013-12-8	Show	GitHub Exploit DB Packet Storm

224789	6.8	警告	シスコシステムズ	-	Cisco EPC3925 デバイスの goform/Quick_setup におけるクロスサイトリクエストフォージェリの脆弱性	CWE-352 同一生成元ポリシー違反	CVE-2013-6976	2013-12-24 19:14	2013-12-23	Show	GitHub Exploit DB Packet Storm

224790	4.6	警告	シスコシステムズ	-	Cisco NX-OS の filesys におけるディレクトリトラバーサルの脆弱性	CWE-22 パス・トラバーサル	CVE-2012-4135	2013-12-24 19:07	2013-12-19	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:June 16, 2026, 4:13 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
210741	8.6	HIGH Network	decal_project	decal	This affects all versions of package decal. The vulnerability is in the extend function.	NVD-CWE-Other	CVE-2020-28450	2024-11-21 14:22	2021-02-5	Show	GitHub Exploit DB Packet Storm

210742	8.6	HIGH Network	decal_project	decal	This affects all versions of package decal. The vulnerability is in the set function.	NVD-CWE-Other	CVE-2020-28449	2024-11-21 14:22	2021-02-5	Show	GitHub Exploit DB Packet Storm

210743	5.4	MEDIUM Network	solarwinds	serv-u	SolarWinds Serv-U before 15.2.2 allows Authenticated Stored XSS.	CWE-79 Cross-site Scripting	CVE-2020-28001	2024-11-21 14:22	2021-02-4	Show	GitHub Exploit DB Packet Storm

210744	6.5	MEDIUM Network	solarwinds	serv-u	SolarWinds Serv-U before 15.2.2 allows Authenticated Directory Traversal.	CWE-22 Path Traversal	CVE-2020-27994	2024-11-21 14:22	2021-02-4	Show	GitHub Exploit DB Packet Storm

210745	9.8	CRITICAL Network	moxa	edr-g903_firmware edr-g903-t_firmware edr-g902_firmware edr-g902-t_firmware edr-810-2gsfp_firmware edr-810-2gsfp-t_firmware edr-810-vpn-2gsfp_firmware edr-810-vpn-2gsfp-t_firmware	Certain Moxa Inc products are affected by an improper restriction of operations in EDR-G903 Series Firmware Version 5.5 or lower, EDR-G902 Series Firmware Version 5.5 or lower, and EDR-810 Series Fir…	CWE-119 Incorrect Access of Indexable Resource ('Range Error')	CVE-2020-28144	2024-11-21 14:22	2021-02-3	Show	GitHub Exploit DB Packet Storm

210746	6.8	MEDIUM Network	indutny	elliptic	The package elliptic before 6.5.4 are vulnerable to Cryptographic Issues via the secp256k1 implementation in elliptic/ec/key.js. There is no check to confirm that the public key point passed into the…	CWE-327 Use of a Broken or Risky Cryptographic Algorithm	CVE-2020-28498	2024-11-21 14:22	2021-02-3	Show	GitHub Exploit DB Packet Storm

210747	7.3	HIGH Network	totaljs	total.js	This affects the package total.js before 3.4.7. The set function can be used to set a value into the object according to the path. However the keys of the path being set are not properly sanitized, l…	NVD-CWE-Other	CVE-2020-28495	2024-11-21 14:22	2021-02-2	Show	GitHub Exploit DB Packet Storm

210748	8.6	HIGH Network	totaljs	total.js	This affects the package total.js before 3.4.7. The issue occurs in the image.pipe and image.stream functions. The type parameter is used to build the command that is then executed using child_proces…	CWE-78 OS Command	CVE-2020-28494	2024-11-21 14:22	2021-02-2	Show	GitHub Exploit DB Packet Storm

210749	5.3	MEDIUM Network	palletsprojects fedoraproject	jinja fedora	This affects the package jinja2 from 0.0.0 and before 2.11.3. The ReDoS vulnerability is mainly due to the `_punctuation_re regex` operator and its use of multiple wildcards. The last wildcard is the…	CWE-400 Uncontrolled Resource Consumption	CVE-2020-28493	2024-11-21 14:22	2021-02-2	Show	GitHub Exploit DB Packet Storm

210750	7.3	HIGH Network	kill-process-on-port_project	kill-process-on-port	All versions of package kill-process-on-port are vulnerable to Command Injection via a.getProcessPortId.	CWE-78 OS Command	CVE-2020-28426	2024-11-21 14:22	2021-02-2	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed