Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":June 6, 2026, noon

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
224941	10	危険	ヒューレット・パッカード	-	複数の HP 製品の Agent サーブレットにおける任意のコマンドを実行される脆弱性	CWE-noinfo 情報不足	CVE-2013-4813	2013-09-18 14:30	2013-09-9	Show	GitHub Exploit DB Packet Storm

224942	10	危険	ヒューレット・パッカード	-	複数の HP 製品の SNAC registration server におけるファイルをアップロードされる脆弱性	CWE-20 不適切な入力確認	CVE-2013-4812	2013-09-18 14:28	2013-09-9	Show	GitHub Exploit DB Packet Storm

224943	10	危険	ヒューレット・パッカード	-	複数の HP 製品の SNAC registration server におけるファイルをアップロードされる脆弱性	CWE-20 不適切な入力確認	CVE-2013-4811	2013-09-18 14:24	2013-09-9	Show	GitHub Exploit DB Packet Storm

224944	10	危険	ヒューレット・パッカード	-	複数の HP 製品における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2013-4809	2013-09-18 14:18	2013-09-9	Show	GitHub Exploit DB Packet Storm

224945	10	危険	シトリックス・システムズ	-	Citrix CloudPortal Services Manager における脆弱性	CWE-noinfo 情報不足	CVE-2013-2940	2013-09-18 11:55	2013-09-3	Show	GitHub Exploit DB Packet Storm

224946	10	危険	シトリックス・システムズ	-	Citrix CloudPortal Services Manager における脆弱性	CWE-noinfo 情報不足	CVE-2013-2939	2013-09-18 11:55	2013-09-3	Show	GitHub Exploit DB Packet Storm

224947	10	危険	シトリックス・システムズ	-	Citrix CloudPortal Services Manager における脆弱性	CWE-noinfo 情報不足	CVE-2013-2938	2013-09-18 11:54	2013-09-3	Show	GitHub Exploit DB Packet Storm

224948	10	危険	シトリックス・システムズ	-	Citrix CloudPortal Services Manager における脆弱性	CWE-noinfo 情報不足	CVE-2013-2937	2013-09-18 11:54	2013-09-3	Show	GitHub Exploit DB Packet Storm

224949	10	危険	シトリックス・システムズ	-	Citrix CloudPortal Services Manager における脆弱性	CWE-noinfo 情報不足	CVE-2013-2936	2013-09-18 11:53	2013-09-3	Show	GitHub Exploit DB Packet Storm

224950	10	危険	シトリックス・システムズ	-	Citrix CloudPortal Services Manager における脆弱性	CWE-noinfo 情報不足	CVE-2013-2935	2013-09-18 11:52	2013-09-3	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:June 6, 2026, 4:18 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
211381	6.1	MEDIUM Network	seeddms	seeddms	SeedDMS Content Management System v6.0.7 contains a persistent cross-site scripting (XSS) vulnerability in the component AddEvent.php via the name and comment parameters.	CWE-79 Cross-site Scripting	CVE-2020-23048	2024-11-21 14:13	2021-10-23	Show	GitHub Exploit DB Packet Storm

211382	6.1	MEDIUM Network	macs_cms_project	macs_cms	Macrob7 Macs Framework Content Management System - 1.14f was discovered to contain a cross-site scripting (XSS) vulnerability in the search input field of the search module.	CWE-79 Cross-site Scripting	CVE-2020-23047	2024-11-21 14:13	2021-10-23	Show	GitHub Exploit DB Packet Storm

211383	6.1	MEDIUM Network	dedecms	dedecms	DedeCMS v7.5 SP2 was discovered to contain multiple cross-site scripting (XSS) vulnerabilities in the component tpl.php via the `filename`, `mid`, `userid`, and `templet' parameters.	CWE-79 Cross-site Scripting	CVE-2020-23046	2024-11-21 14:13	2021-10-23	Show	GitHub Exploit DB Packet Storm

211384	7.2	HIGH Network	macs_cms_project	macs_cms	Macrob7 Macs Framework Content Management System - 1.14f was discovered to contain a SQL injection vulnerability via the 'roleId' parameter of the `editRole` and `deletUser` modules.	CWE-89 SQL Injection	CVE-2020-23045	2024-11-21 14:13	2021-10-23	Show	GitHub Exploit DB Packet Storm

211385	5.4	MEDIUM Network	dedecms	dedecms	DedeCMS v7.5 SP2 was discovered to contain multiple cross-site scripting (XSS) vulnerabilities in the component file_pic_view.php via the `activepath`, `keyword`, `tag`, `fmdo=x&filename`, `CKEditor`…	CWE-79 Cross-site Scripting	CVE-2020-23044	2024-11-21 14:13	2021-10-23	Show	GitHub Exploit DB Packet Storm

211386	8.8	HIGH Network	air_sender_project	air_sender	Tran Tu Air Sender v1.0.2 was discovered to contain an arbitrary file upload vulnerability in the upload module. This vulnerability allows attackers to execute arbitrary code via a crafted file.	CWE-434 Unrestricted Upload of File with Dangerous Type	CVE-2020-23043	2024-11-21 14:13	2021-10-23	Show	GitHub Exploit DB Packet Storm

211387	6.1	MEDIUM Network	dropouts	super_backup	Dropouts Technologies LLP Super Backup v2.0.5 was discovered to contain a cross-site scripting (XSS) vulnerability in the path parameter of the `list` and `download` module. This vulnerability allows…	CWE-79 Cross-site Scripting	CVE-2020-23042	2024-11-21 14:13	2021-10-23	Show	GitHub Exploit DB Packet Storm

211388	6.1	MEDIUM Network	dropouts	air_share	Dropouts Technologies LLP Air Share v1.2 was discovered to contain a cross-site scripting (XSS) vulnerability in the path parameter of the `list` and `download` exception-handling. This vulnerability…	CWE-79 Cross-site Scripting	CVE-2020-23041	2024-11-21 14:13	2021-10-23	Show	GitHub Exploit DB Packet Storm

211389	7.5	HIGH Network	sky_file_project	sky_file	Sky File v2.1.0 contains a directory traversal vulnerability in the FTP server which allows attackers to access sensitive data and files via 'null' path commands.	CWE-22 Path Traversal	CVE-2020-23040	2024-11-21 14:13	2021-10-23	Show	GitHub Exploit DB Packet Storm

211390	5.4	MEDIUM Network	newsoftwares	folder_lock	Folder Lock v3.4.5 was discovered to contain a stored cross-site scripting (XSS) vulnerability in the Create Folder function under the 'create' module. This vulnerability allows attackers to execute …	CWE-79 Cross-site Scripting	CVE-2020-23039	2024-11-21 14:13	2021-10-23	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed