Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 27, 2026, 6 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
225031 4.3 警告 Messaging - TYPO3 用 UserTask Center、Messaging エクステンションにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2013-4749 2013-07-3 17:55 2013-01-28 Show GitHub Exploit DB Packet Storm
225032 7.5 危険 Georg Ringer - TYPO3 用 News system エクステンションにおける SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2013-4748 2013-07-3 17:55 2013-01-11 Show GitHub Exploit DB Packet Storm
225033 4.3 警告 Kasper Skarhoj - TYPO3 用 Accessible browse results for indexed search エクステンションにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2013-4747 2013-07-3 17:54 2013-06-3 Show GitHub Exploit DB Packet Storm
225034 4.3 警告 Kurt Gusbeth - TYPO3 用 My quiz and poll エクステンションにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2013-4746 2013-07-3 17:53 2013-02-19 Show GitHub Exploit DB Packet Storm
225035 4.3 警告 Kurt Gusbeth - TYPO3 用 myquizpoll エクステンションにおける SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2013-4745 2013-07-3 17:52 2008-06-7 Show GitHub Exploit DB Packet Storm
225036 4.3 警告 Sebastian Bergmann - TYPO3 用 PHPUnit エクステンションにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2013-4744 2013-07-3 17:52 2013-01-11 Show GitHub Exploit DB Packet Storm
225037 6.8 警告 X.Org Foundation
Openchrome
- Openchrome の X.org libchromeXvMC および libchromeXvMCPro における整数オーバーフローの脆弱性 CWE-189
数値処理の問題
CVE-2013-1994 2013-07-3 16:38 2013-05-23 Show GitHub Exploit DB Packet Storm
225038 3.5 注意 TYPO3 Association - TYPO3 の function menu API におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2012-6148 2013-07-3 16:05 2012-11-8 Show GitHub Exploit DB Packet Storm
225039 3.5 注意 TYPO3 Association - TYPO3 の Backend API の tree render API におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2012-6147 2013-07-3 16:05 2012-11-8 Show GitHub Exploit DB Packet Storm
225040 3.5 注意 TYPO3 Association - TYPO3 の Backend History モジュールにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2012-6145 2013-07-3 16:04 2012-11-8 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 27, 2026, 4:52 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
211961 6.5 MEDIUM
Network
iball wrb303n_firmware iBall WRB303N devices allow CSRF attacks, as demonstrated by enabling remote management, enabling DHCP, or modifying the subnet range for IP addresses. CWE-352
 Origin Validation Error
CVE-2020-15043 2024-11-21 14:04 2020-06-30 Show GitHub Exploit DB Packet Storm
211962 5.5 MEDIUM
Local
jiangmin jiangmin_antivirus In Jiangmin Antivirus 16.0.13.129, the driver file (KVFG.sys) allows local users to cause a denial of service (BSOD) or possibly have unspecified other impact because of not validating input values f… CWE-20
 Improper Input Validation 
CVE-2020-14955 2024-11-21 14:04 2020-06-27 Show GitHub Exploit DB Packet Storm
211963 6.1 MEDIUM
Network
nedi nedi NeDi 1.9C is vulnerable to reflected cross-site scripting. The Devices-Config.php file improperly validates user input. An attacker can exploit this vulnerability by crafting arbitrary JavaScript in … CWE-79
Cross-site Scripting
CVE-2020-15017 2024-11-21 14:04 2020-06-26 Show GitHub Exploit DB Packet Storm
211964 6.1 MEDIUM
Network
nedi nedi NeDi 1.9C is vulnerable to reflected cross-site scripting. The Other-Converter.php file improperly validates user input. An attacker can exploit this vulnerability by crafting arbitrary JavaScript in… CWE-79
Cross-site Scripting
CVE-2020-15016 2024-11-21 14:04 2020-06-26 Show GitHub Exploit DB Packet Storm
211965 5.9 MEDIUM
Network
trojita_project trojita MSA/SMTP.cpp in Trojita before 0.8 ignores certificate-verification errors, which allows man-in-the-middle attackers to spoof SMTP servers. CWE-295
Improper Certificate Validation 
CVE-2020-15047 2024-11-21 14:04 2020-06-25 Show GitHub Exploit DB Packet Storm
211966 8.8 HIGH
Network
supermicro x10drh-it_bios
x10drh-it_firmware
The web interface on Supermicro X10DRH-iT motherboards with BIOS 2.0a and IPMI firmware 03.40 allows remote attackers to exploit a cgi/config_user.cgi CSRF issue to add new admin users. The fixed ver… CWE-352
 Origin Validation Error
CVE-2020-15046 2024-11-21 14:04 2020-06-25 Show GitHub Exploit DB Packet Storm
211967 3.1 LOW
Network
mediawiki
fedoraproject
debian
mediawiki
fedora
debian_linux
In MediaWiki before 1.31.8, 1.32.x and 1.33.x before 1.33.4, and 1.34.x before 1.34.2, private wikis behind a caching server using the img_auth.php image authorization security feature may have had t… NVD-CWE-noinfo
CVE-2020-15005 2024-11-21 14:04 2020-06-25 Show GitHub Exploit DB Packet Storm
211968 4.8 MEDIUM
Network
php-fusion php-fusion PHP-Fusion 9.03.60 allows XSS via the administration/site_links.php Add Site Link field. CWE-79
Cross-site Scripting
CVE-2020-15041 2024-11-21 14:04 2020-06-25 Show GitHub Exploit DB Packet Storm
211969 5.4 MEDIUM
Network
seedprod coming_soon_page\
_under_construction_\&_maintenance_mode
The SeedProd coming-soon plugin before 5.1.1 for WordPress allows XSS. CWE-79
Cross-site Scripting
CVE-2020-15038 2024-11-21 14:04 2020-06-25 Show GitHub Exploit DB Packet Storm
211970 4.9 MEDIUM
Network
bludit bludit Bludit 3.12.0 allows admins to use a /plugin-backup-download?file=../ directory traversal approach for arbitrary file download via backup/plugin.php. CWE-22
Path Traversal
CVE-2020-15026 2024-11-21 14:04 2020-06-25 Show GitHub Exploit DB Packet Storm