Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 28, 2026, 4:09 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
224811 4 警告 IBM - 複数の IBM サーバ製品上で稼働する Integrated Management Module における重要な情報を取得される脆弱性 CWE-310
暗号の問題
CVE-2013-4038 2013-08-13 15:25 2013-08-1 Show GitHub Exploit DB Packet Storm
224812 4.3 警告 IBM - 複数の IBM サーバ製品上で稼働する Integrated Management Module におけるアクセス権を取得される脆弱性 CWE-noinfo
情報不足
CVE-2013-4037 2013-08-13 15:24 2013-08-1 Show GitHub Exploit DB Packet Storm
224813 10 危険 IBM - 複数の IBM サーバ製品上で稼働する Integrated Management Module における電源アクションを実行される脆弱性 CWE-255
証明書・パスワード管理
CVE-2013-4031 2013-08-13 15:23 2013-08-1 Show GitHub Exploit DB Packet Storm
224814 4.3 警告 Mike Jolley - WordPress 用 Download Monitor プラグインにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2013-5098 2013-08-13 14:04 2013-06-5 Show GitHub Exploit DB Packet Storm
224815 4.3 警告 Mike Jolley - WordPress 用 Download Monitor プラグインにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2013-3262 2013-08-13 14:04 2013-06-5 Show GitHub Exploit DB Packet Storm
224816 4.3 警告 Life in the Grid - WordPress 用 Duplicator プラグインにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2013-4625 2013-08-13 13:43 2013-07-21 Show GitHub Exploit DB Packet Storm
224817 6.8 警告 Xhanch Studio - WordPress 用 Xhanch - My Twitter プラグインにおけるクロスサイトリクエストフォージェリの脆弱性 CWE-352
同一生成元ポリシー違反
CVE-2013-3253 2013-08-13 13:35 2013-08-2 Show GitHub Exploit DB Packet Storm
224818 5 警告 Jason A. Donenfeld
Lars Hjemli
- cgit の ui-summary.c の cgit_parse_readme 関数におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル
CVE-2013-2117 2013-08-13 12:29 2013-05-27 Show GitHub Exploit DB Packet Storm
224819 5 警告 シスコシステムズ - Cisco Finesse の Web インタフェースにおける絶対パストラバーサルの脆弱性 CWE-22
パス・トラバーサル
CVE-2013-3457 2013-08-13 11:08 2013-08-12 Show GitHub Exploit DB Packet Storm
224820 4.3 警告 OpenEMR - OpenEMR の interface/main/onotes/office_comments_full.php におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2013-4620 2013-08-13 10:46 2013-06-10 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 28, 2026, 4:16 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
199651 9.8 CRITICAL
Network
revmakx infinitewp_client The InfiniteWP Client plugin before 1.9.4.5 for WordPress has a missing authorization check in iwp_mmb_set_request in init.php. Any attacker who knows the username of an administrator can log in. CWE-862
 Missing Authorization
CVE-2020-8772 2024-11-21 14:39 2020-02-7 Show GitHub Exploit DB Packet Storm
199652 9.8 CRITICAL
Network
wptimecapsule wp_time_capsule The Time Capsule plugin before 1.21.16 for WordPress has an authentication bypass. Any request containing IWP_JSON_PREFIX causes the client to be logged in as the first account on the list of adminis… CWE-287
Improper Authentication
CVE-2020-8771 2024-11-21 14:39 2020-02-7 Show GitHub Exploit DB Packet Storm
199653 9.8 CRITICAL
Network
opservices opmon An issue was discovered in OpServices OpMon 9.3.2 that allows Remote Code Execution . CWE-306
Missing Authentication for Critical Function
CVE-2020-8636 2024-11-21 14:39 2020-02-7 Show GitHub Exploit DB Packet Storm
199654 5.6 MEDIUM
Network
libslirp_project
debian
opensuse
libslirp
debian_linux
leap
In libslirp 4.1.0, as used in QEMU 4.2.0, tcp_subr.c misuses snprintf return values, leading to a buffer overflow in later code. CWE-120
Classic Buffer Overflow
CVE-2020-8608 2024-11-21 14:39 2020-02-7 Show GitHub Exploit DB Packet Storm
199655 8.8 HIGH
Network
bestwebsoft htaccess The BestWebSoft Htaccess plugin through 1.8.1 for WordPress allows wp-admin/admin.php?page=htaccess.php&action=htaccess_editor CSRF. The flag htccss_nonce_name passes the nonce to WordPress but the p… CWE-352
 Origin Validation Error
CVE-2020-8658 2024-11-21 14:39 2020-02-6 Show GitHub Exploit DB Packet Storm
199656 5.9 MEDIUM
Physics
linux
opensuse
debian
linux_kernel
leap
debian_linux
There is a use-after-free vulnerability in the Linux kernel through 5.5.2 in the vgacon_invert_region function in drivers/video/console/vgacon.c. CWE-416
 Use After Free
CVE-2020-8649 2024-11-21 14:39 2020-02-6 Show GitHub Exploit DB Packet Storm
199657 7.1 HIGH
Local
linux
debian
opensuse
netapp
broadcom
canonical
linux_kernel
debian_linux
leap
cloud_backup
active_iq_unified_manager
solidfire_baseboard_management_controller
brocade_fabric_operating_system_firmware
hci_baseboard_management_…
There is a use-after-free vulnerability in the Linux kernel through 5.5.2 in the n_tty_receive_buf_common function in drivers/tty/n_tty.c. CWE-416
 Use After Free
CVE-2020-8648 2024-11-21 14:39 2020-02-6 Show GitHub Exploit DB Packet Storm
199658 6.1 MEDIUM
Local
linux
debian
opensuse
linux_kernel
debian_linux
leap
There is a use-after-free vulnerability in the Linux kernel through 5.5.2 in the vc_do_resize function in drivers/tty/vt/vt.c. CWE-416
 Use After Free
CVE-2020-8647 2024-11-21 14:39 2020-02-6 Show GitHub Exploit DB Packet Storm
199659 8.8 HIGH
Network
lotus_core_cms_project lotus_core_cms Lotus Core CMS 1.0.1 allows authenticated Local File Inclusion of .php files via directory traversal in the index.php page_slug parameter. CWE-22
Path Traversal
CVE-2020-8641 2024-11-21 14:39 2020-02-6 Show GitHub Exploit DB Packet Storm
199660 5.5 MEDIUM
Local
canonical
opensuse
debian
cloud-init
leap
debian_linux
In cloud-init through 19.4, rand_user_password in cloudinit/config/cc_set_passwords.py has a small default pwlen value, which makes it easier for attackers to guess passwords. CWE-521
Weak Password Requirements 
CVE-2020-8632 2024-11-21 14:39 2020-02-5 Show GitHub Exploit DB Packet Storm