Vulnerability Search Top
Show Search Menu
|
You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database). |
JVN Vulnerability Information
Update Date":May 30, 2026, 6 p.m.
| No | CVSS | Level Attach Vector |
Vendor Name | Project Name | Title | CWE | CVE | Update Date | Publication Date | Impact Show |
Exploit PoC Search |
|---|---|---|---|---|---|---|---|---|---|---|---|
| 224921 | 4 | 警告 | IBM | - | 複数の IBM サーバ製品上で稼働する Integrated Management Module における重要な情報を取得される脆弱性 |
CWE-310
暗号の問題 |
CVE-2013-4038 | 2013-08-13 15:25 | 2013-08-1 | Show | GitHub Exploit DB Packet Storm |
| 224922 | 4.3 | 警告 | IBM | - | 複数の IBM サーバ製品上で稼働する Integrated Management Module におけるアクセス権を取得される脆弱性 |
CWE-noinfo
情報不足 |
CVE-2013-4037 | 2013-08-13 15:24 | 2013-08-1 | Show | GitHub Exploit DB Packet Storm |
| 224923 | 10 | 危険 | IBM | - | 複数の IBM サーバ製品上で稼働する Integrated Management Module における電源アクションを実行される脆弱性 |
CWE-255
証明書・パスワード管理 |
CVE-2013-4031 | 2013-08-13 15:23 | 2013-08-1 | Show | GitHub Exploit DB Packet Storm |
| 224924 | 4.3 | 警告 | Mike Jolley | - | WordPress 用 Download Monitor プラグインにおけるクロスサイトスクリプティングの脆弱性 |
CWE-79
クロスサイト・スクリプティング（XSS） |
CVE-2013-5098 | 2013-08-13 14:04 | 2013-06-5 | Show | GitHub Exploit DB Packet Storm |
| 224925 | 4.3 | 警告 | Mike Jolley | - | WordPress 用 Download Monitor プラグインにおけるクロスサイトスクリプティングの脆弱性 |
CWE-79
クロスサイト・スクリプティング（XSS） |
CVE-2013-3262 | 2013-08-13 14:04 | 2013-06-5 | Show | GitHub Exploit DB Packet Storm |
| 224926 | 4.3 | 警告 | Life in the Grid | - | WordPress 用 Duplicator プラグインにおけるクロスサイトスクリプティングの脆弱性 |
CWE-79
クロスサイト・スクリプティング（XSS） |
CVE-2013-4625 | 2013-08-13 13:43 | 2013-07-21 | Show | GitHub Exploit DB Packet Storm |
| 224927 | 6.8 | 警告 | Xhanch Studio | - | WordPress 用 Xhanch - My Twitter プラグインにおけるクロスサイトリクエストフォージェリの脆弱性 |
CWE-352
同一生成元ポリシー違反 |
CVE-2013-3253 | 2013-08-13 13:35 | 2013-08-2 | Show | GitHub Exploit DB Packet Storm |
| 224928 | 5 | 警告 | Jason A. Donenfeld Lars Hjemli |
- | cgit の ui-summary.c の cgit_parse_readme 関数におけるディレクトリトラバーサルの脆弱性 |
CWE-22
パス・トラバーサル |
CVE-2013-2117 | 2013-08-13 12:29 | 2013-05-27 | Show | GitHub Exploit DB Packet Storm |
| 224929 | 5 | 警告 | シスコシステムズ | - | Cisco Finesse の Web インタフェースにおける絶対パストラバーサルの脆弱性 |
CWE-22
パス・トラバーサル |
CVE-2013-3457 | 2013-08-13 11:08 | 2013-08-12 | Show | GitHub Exploit DB Packet Storm |
| 224930 | 4.3 | 警告 | OpenEMR | - | OpenEMR の interface/main/onotes/office_comments_full.php におけるクロスサイトスクリプティングの脆弱性 |
CWE-79
クロスサイト・スクリプティング（XSS） |
CVE-2013-4620 | 2013-08-13 10:46 | 2013-06-10 | Show | GitHub Exploit DB Packet Storm |
NVD Vulnerability Information
Update Date:May 31, 2026, 4:16 a.m.
| No | CVSS | Level Attach Vector |
Vendor Name | Project Name | Title | CWE | CVE | Update Date | Publication Date | Show Affected | Exploit PoC Search |
|---|---|---|---|---|---|---|---|---|---|---|---|
| 212021 | 5.5 |
MEDIUM
Local |
apache netapp oracle |
groovy snapcenter primavera_unifier ilearning business_process_management_suite agile_plm retail_bulk_data_integration communications_services_gatekeeper retail_merchandising_… |
Apache Groovy provides extension methods to aid with creating temporary directories. Prior to this fix, Groovy's implementation of those extension methods was using a now superseded Java JDK method c… |
NVD-CWE-Other
|
CVE-2020-17521 | 2024-11-21 14:08 | 2020-12-8 | Show | GitHub Exploit DB Packet Storm |
| 212022 | 7.5 |
HIGH
Network |
apache netapp debian oracle |
tomcat oncommand_system_manager element_plug-in debian_linux instantis_enterprisetrack sd-wan_edge workload_manager mysql_enterprise_monitor communications_cloud_native_core_b… |
While investigating bug 64830 it was discovered that Apache Tomcat 10.0.0-M1 to 10.0.0-M9, 9.0.0-M1 to 9.0.39 and 8.5.0 to 8.5.59 could re-use an HTTP request header value from the previous stream re… |
CWE-200
Information Exposure |
CVE-2020-17527 | 2024-11-21 14:08 | 2020-12-4 | Show | GitHub Exploit DB Packet Storm |
| 212023 | 6.5 |
MEDIUM
Network |
pbootcms | pbootcms | Cross-site request forgery (CSRF) in PbootCMS 1.3.2 allows attackers to change the password of a user. |
CWE-352
Origin Validation Error |
CVE-2020-17901 | 2024-11-21 14:08 | 2020-12-1 | Show | GitHub Exploit DB Packet Storm |
| 212024 | 5.3 |
MEDIUM
Network |
untangle | untangle_firewall_ng | Untangle Firewall NG before 16.0 uses MD5 for passwords. |
CWE-326
Inadequate Encryption Strength |
CVE-2020-17494 | 2024-11-21 14:08 | 2020-11-13 | Show | GitHub Exploit DB Packet Storm |
| 212025 | 5.5 |
MEDIUM
Local |
saltstack debian |
salt debian_linux |
The TLS module within SaltStack Salt through 3002 creates certificates with weak file permissions. |
CWE-732
Incorrect Permission Assignment for Critical Resource |
CVE-2020-17490 | 2024-11-21 14:08 | 2020-11-6 | Show | GitHub Exploit DB Packet Storm |
| 212026 | 9.8 |
CRITICAL
Network |
apache debian |
shiro debian_linux |
Apache Shiro before 1.7.0, when using Apache Shiro with Spring, a specially crafted HTTP request may cause an authentication bypass. |
CWE-287
Improper Authentication |
CVE-2020-17510 | 2024-11-21 14:08 | 2020-11-6 | Show | GitHub Exploit DB Packet Storm |
| 212027 | 9.6 |
CRITICAL
Network |
antsword_project | antsword | A cross-site scripting (XSS) vulnerability AntSword v2.0.7 can remotely execute system commands. |
CWE-79
Cross-site Scripting |
CVE-2020-18766 | 2024-11-21 14:08 | 2020-10-27 | Show | GitHub Exploit DB Packet Storm |
| 212028 | 8.8 |
HIGH
Network |
eyoucms | eyoucms | A CSRF vulnerability in Eyoucms v1.2.7 allows an attacker to add an admin account via login.php. |
CWE-352
Origin Validation Error |
CVE-2020-18129 | 2024-11-21 14:08 | 2020-10-23 | Show | GitHub Exploit DB Packet Storm |
| 212029 | 6.1 |
MEDIUM
Network |
wso2 | api_manager | WSO2 API Manager 3.1.0 and earlier has reflected XSS on the "publisher" component's admin interface. More precisely, it is possible to inject an XSS payload into the owner POST parameter, which does … |
CWE-79
Cross-site Scripting |
CVE-2020-17454 | 2024-11-21 14:08 | 2020-10-22 | Show | GitHub Exploit DB Packet Storm |
| 212030 | 7.8 |
HIGH
Local |
foxitsoftware |
foxit_reader phantompdf |
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit Reader 10.0.1.35811. User interaction is required to exploit this vulnerability in that the tar… | - | CVE-2020-17417 | 2024-11-21 14:08 | 2020-10-14 | Show | GitHub Exploit DB Packet Storm |