Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 6, 2026, 2 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
224831 4.3 警告 Graphite Project - Graphite におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2013-5943 2013-09-30 14:58 2013-08-20 Show GitHub Exploit DB Packet Storm
224832 5 警告 Bitcoin Project - bitcoind および Bitcoin-Qt の Bloom Filter の実装におけるサービス運用妨害 (DoS) の脆弱性 CWE-189
数値処理の問題
CVE-2013-5700 2013-09-30 14:54 2013-09-4 Show GitHub Exploit DB Packet Storm
224833 6.8 警告 Graphite Project - Graphite における任意のコードを実行される脆弱性 CWE-94
コード・インジェクション
CVE-2013-5942 2013-09-30 14:51 2013-08-20 Show GitHub Exploit DB Packet Storm
224834 6.8 警告 Graphite Project - Graphite の graphite-web の render/views.py における任意のコードを実行される脆弱性 CWE-94
コード・インジェクション
CVE-2013-5093 2013-09-30 14:49 2013-08-20 Show GitHub Exploit DB Packet Storm
224835 4.3 警告 アップル - Apple Mac OS X Server の Wiki サーバにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2013-1034 2013-09-27 18:10 2013-09-17 Show GitHub Exploit DB Packet Storm
224836 4.3 警告 Inpsyde - WordPress 用 BackWPup プラグインにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2013-4626 2013-09-27 14:31 2013-08-12 Show GitHub Exploit DB Packet Storm
224837 5.8 警告 シスコシステムズ - Cisco Unified Computing System の Central Software コンポーネントにおけるデバイス間のデータストリームを読まれる脆弱性 CWE-20
不適切な入力確認
CVE-2012-4092 2013-09-27 14:30 2013-09-27 Show GitHub Exploit DB Packet Storm
224838 4.3 警告 シスコシステムズ - Cisco Unified Computing System の FTP サーバにおけるファイルを読まれる脆弱性 CWE-255
証明書・パスワード管理
CVE-2012-4088 2013-09-27 14:24 2013-09-26 Show GitHub Exploit DB Packet Storm
224839 5 警告 シスコシステムズ - Cisco Unified Computing System のファブリックインターコネクトコンポーネントの XML API サービスにおけるサービス運用妨害 (DoS) の脆弱性 CWE-20
不適切な入力確認
CVE-2012-4079 2013-09-27 14:23 2013-09-27 Show GitHub Exploit DB Packet Storm
224840 4.3 警告 Click2Sell - Drupal 用 Click2Sell Suite モジュールにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2013-5938 2013-09-27 11:50 2013-09-11 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 6, 2026, 4:18 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
211561 8.8 HIGH
Network
ffmpeg
debian
ffmpeg
debian_linux
Buffer Overflow vulnerability in FFmpeg 4.2 in mov_write_video_tag due to the out of bounds in libavformat/movenc.c, which could let a remote malicious user obtain sensitive information, cause a Deni… CWE-120
Classic Buffer Overflow
CVE-2020-22015 2024-11-21 14:13 2021-05-27 Show GitHub Exploit DB Packet Storm
211562 7.5 HIGH
Network
kyocera d-copia253mf_plus_firmware A directory traversal vulnerability exists in Kyocera Printer d-COPIA253MF plus. Successful exploitation of this vulnerability could allow an attacker to retrieve or view arbitrary files from the aff… CWE-22
Path Traversal
CVE-2020-23575 2024-11-21 14:13 2021-05-11 Show GitHub Exploit DB Packet Storm
211563 6.1 MEDIUM
Network
5none nonecms NoneCMS v1.3 has a CSRF vulnerability in public/index.php/admin/nav/add.html, as demonstrated by adding a navigation column which can be injected with arbitrary web script or HTML via the name parame… CWE-352
 Origin Validation Error
CVE-2020-23376 2024-11-21 14:13 2021-05-11 Show GitHub Exploit DB Packet Storm
211564 5.4 MEDIUM
Network
5none nonecms Cross-site scripting (XSS) vulnerability in admin/article/add.html in noneCMS v1.3.0 allows remote authenticated attackers to inject arbitrary web script or HTML via the name parameter. CWE-79
Cross-site Scripting
CVE-2020-23374 2024-11-21 14:13 2021-05-11 Show GitHub Exploit DB Packet Storm
211565 5.4 MEDIUM
Network
5none nonecms Cross-site scripting (XSS) vulnerability in admin/nav/add.html in noneCMS v1.3.0 allows remote authenticated attackers to inject arbitrary web script or HTML via the name parameter. CWE-79
Cross-site Scripting
CVE-2020-23373 2024-11-21 14:13 2021-05-11 Show GitHub Exploit DB Packet Storm
211566 6.1 MEDIUM
Network
5none nonecms Cross-site scripting (XSS) vulnerability in static/admin/js/kindeditor/plugins/multiimage/images/swfupload.swf in noneCms v1.3.0 allows remote attackers to inject arbitrary web script or HTML via the… CWE-79
Cross-site Scripting
CVE-2020-23371 2024-11-21 14:13 2021-05-11 Show GitHub Exploit DB Packet Storm
211567 5.4 MEDIUM
Network
yzmcms yzmcms In YzmCMS 5.6, stored XSS exists via the common/static/plugin/ueditor/1.4.3.3/php/controller.php action parameter, which allows remote attackers to upload a swf file. The swf file can be injected wit… CWE-79
Cross-site Scripting
CVE-2020-23370 2024-11-21 14:13 2021-05-11 Show GitHub Exploit DB Packet Storm
211568 6.1 MEDIUM
Network
yzmcms yzmcms In YzmCMS 5.6, XSS was discovered in member/member_content/init.html via the SRC attribute of an IFRAME element because of using UEditor 1.4.3.3. CWE-79
Cross-site Scripting
CVE-2020-23369 2024-11-21 14:13 2021-05-11 Show GitHub Exploit DB Packet Storm
211569 7.8 HIGH
Local
windscribe windscribe In Windscribe v1.83 Build 20, 'WindscribeService' has an Unquoted Service Path that facilitates privilege escalation. CWE-428
 Unquoted Search Path or Element
CVE-2020-22809 2024-11-21 14:13 2021-05-10 Show GitHub Exploit DB Packet Storm
211570 8.8 HIGH
Network
fork-cms fork_cms Cross-site request forgery (CSRF) in Fork-CMS before 5.8.2 allow remote attackers to hijack the authentication of logged administrators. CWE-352
 Origin Validation Error
CVE-2020-23264 2024-11-21 14:13 2021-05-7 Show GitHub Exploit DB Packet Storm