Vulnerability Search Top

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

Vulnerability Information Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":June 14, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
224831	5.8	警告	DELL EMC (旧 EMC Corporation)	-	EMC Document Sciences xPression の複数の Edition の xAdmin におけるオープンリダイレクトの脆弱性	CWE-20 CWE-Other	CVE-2013-6174	2013-12-4 12:21	2013-11-19	Show	GitHub Exploit DB Packet Storm

224832	6.8	警告	DELL EMC (旧 EMC Corporation)	-	EMC Document Sciences xPression の複数の Edition におけるクロスサイトリクエストフォージェリの脆弱性	CWE-352 同一生成元ポリシー違反	CVE-2013-6173	2013-12-4 12:21	2013-11-19	Show	GitHub Exploit DB Packet Storm

224833	4.7	警告	Alstom	-	Alstom e-terracontrol の DNP Master Driver におけるサービス運用妨害 (DoS) の脆弱性	CWE-20 不適切な入力確認	CVE-2013-2818	2013-12-3 18:15	2013-10-21	Show	GitHub Exploit DB Packet Storm

224834	3.3	注意	チェック・ポイント・ソフトウェア・テクノロジーズ	-	Check Point Endpoint Security の Media Encryption EPM Explorer の Unlock.exe におけるデバイスロッキング保護メカニズムを回避される脆弱性	CWE-255 証明書・パスワード管理	CVE-2013-5636	2013-12-3 18:05	2013-11-14	Show	GitHub Exploit DB Packet Storm

224835	3.3	注意	チェック・ポイント・ソフトウェア・テクノロジーズ	-	Check Point Endpoint Security の Media Encryption EPM Explorer におけるデバイスロッキング保護メカニズムを回避される脆弱性	CWE-255 証明書・パスワード管理	CVE-2013-5635	2013-12-3 18:03	2013-11-14	Show	GitHub Exploit DB Packet Storm

224836	4.9	警告	Linux	-	MSM デバイス用 Qualcomm Innovation Center Android コントリビューションなどで使用される Linux Kernel 用 Genlock ドライバにおける重要な情報を取得される脆弱性	CWE-200 情報漏えい	CVE-2013-6392	2013-12-3 18:02	2013-10-25	Show	GitHub Exploit DB Packet Storm

224837	4.3	警告	マイクロソフト	-	Microsoft Enhanced Mitigation Experience Toolkit における ASLR 保護メカニズムを破られる脆弱性	CWE-200 情報漏えい	CVE-2013-6791	2013-12-3 18:02	2013-06-17	Show	GitHub Exploit DB Packet Storm

224838	4.3	警告	Novell	-	Novell Open Enterprise Server の novell-nrm パッケージにおけるサービス運用妨害 (DoS) の脆弱性	CWE-20 不適切な入力確認	CVE-2013-3707	2013-12-3 17:59	2013-11-7	Show	GitHub Exploit DB Packet Storm

224839	9	危険	SAP	-	SAP Sybase Adaptive Server Enterprise における任意のコードを実行される脆弱性	CWE-94 コード・インジェクション	CVE-2013-6866	2013-12-3 17:56	2013-11-4	Show	GitHub Exploit DB Packet Storm

224840	9	危険	SAP	-	SAP Sybase Adaptive Server Enterprise における権限を取得される脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2013-6863	2013-12-3 17:53	2013-11-4	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:June 14, 2026, 4:12 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
210781	6.1	MEDIUM Network	adrianmercurio	gym_management_system	Stored Cross-site scripting (XSS) vulnerability in SourceCodester Gym Management System 1.0 allows users to inject and store arbitrary JavaScript code in index.php?page=packages via vulnerable fields…	CWE-79 Cross-site Scripting	CVE-2020-28129	2024-11-21 14:22	2020-11-18	Show	GitHub Exploit DB Packet Storm

210782	8.8	HIGH Network	phpgurukul	tourism_management_system	An Arbitrary File Upload is discovered in SourceCodester Tourism Management System 1.0 allows the user to conduct remote code execution via admin/create-package.php vulnerable page.	CWE-434 Unrestricted Upload of File with Dangerous Type	CVE-2020-28136	2024-11-21 14:22	2020-11-18	Show	GitHub Exploit DB Packet Storm

210783	9.8	CRITICAL Network	simple_grocery_store_sales_and_inventory_sales_project	simple_grocery_store_sales_and_inventory_system	An issue was discovered in SourceCodester Simple Grocery Store Sales And Inventory System 1.0. There was authentication bypass in web login functionality allows an attacker to gain client privileges …	CWE-89 SQL Injection	CVE-2020-28133	2024-11-21 14:22	2020-11-18	Show	GitHub Exploit DB Packet Storm

210784	9.8	CRITICAL Network	online_clothing_store_project	online_clothing_store	SourceCodester Online Clothing Store 1.0 is affected by an arbitrary file upload via the image upload feature of Products.php.	CWE-434 Unrestricted Upload of File with Dangerous Type	CVE-2020-28140	2024-11-21 14:22	2020-11-18	Show	GitHub Exploit DB Packet Storm

210785	6.1	MEDIUM Network	online_clothing_store_project	online_clothing_store	SourceCodester Online Clothing Store 1.0 is affected by a cross-site scripting (XSS) vulnerability via a Offer Detail field in offer.php.	CWE-79 Cross-site Scripting	CVE-2020-28139	2024-11-21 14:22	2020-11-18	Show	GitHub Exploit DB Packet Storm

210786	9.8	CRITICAL Network	online_clothing_store_project	online_clothing_store	SourceCodester Online Clothing Store 1.0 is affected by a SQL Injection via the txtUserName parameter to login.php.	CWE-89 SQL Injection	CVE-2020-28138	2024-11-21 14:22	2020-11-18	Show	GitHub Exploit DB Packet Storm

210787	5.4	MEDIUM Network	nagios	nagios_xi	Nagios XI before 5.7.5 is vulnerable to XSS in Account Information (Email field).	CWE-79 Cross-site Scripting	CVE-2020-27991	2024-11-21 14:22	2020-11-17	Show	GitHub Exploit DB Packet Storm

210788	5.4	MEDIUM Network	nagios	nagios_xi	Nagios XI before 5.7.5 is vulnerable to XSS in the Deployment tool (add agent).	CWE-79 Cross-site Scripting	CVE-2020-27990	2024-11-21 14:22	2020-11-17	Show	GitHub Exploit DB Packet Storm

210789	5.4	MEDIUM Network	nagios	nagios_xi	Nagios XI before 5.7.5 is vulnerable to XSS in Dashboard Tools (Edit Dashboard).	CWE-79 Cross-site Scripting	CVE-2020-27989	2024-11-21 14:22	2020-11-17	Show	GitHub Exploit DB Packet Storm

210790	5.4	MEDIUM Network	nagios	nagios_xi	Nagios XI before 5.7.5 is vulnerable to XSS in Manage Users (Username field).	CWE-79 Cross-site Scripting	CVE-2020-27988	2024-11-21 14:22	2020-11-17	Show	GitHub Exploit DB Packet Storm