Vulnerability Search Top

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

Vulnerability Information Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":June 1, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
225051	7.5	危険	Appnitro Software	-	Machform の view.php における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2013-4948	2013-07-31 15:27	2013-07-2	Show	GitHub Exploit DB Packet Storm

225052	7.5	危険	Sawmill	-	Sawmill のデータベースのページの更新および作成における脆弱性	CWE-noinfo 情報不足	CVE-2013-4947	2013-07-31 15:18	2013-07-9	Show	GitHub Exploit DB Packet Storm

225053	4.3	警告	BMC Software	-	BMC Service Desk Express におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2013-4946	2013-07-31 15:11	2013-06-12	Show	GitHub Exploit DB Packet Storm

225054	7.5	危険	BMC Software	-	BMC Service Desk Express における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2013-4945	2013-07-31 15:08	2013-06-12	Show	GitHub Exploit DB Packet Storm

225055	2.1	注意	Drupal Indonesia	-	Drupal 用 TinyBox モジュールにおけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2013-4140	2013-07-31 14:44	2013-07-10	Show	GitHub Exploit DB Packet Storm

225056	2.6	注意	BuddyDev.com	-	WordPress 用 BuddyPress Extended Friendship Request プラグインにおけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2013-4944	2013-07-31 14:36	2013-07-2	Show	GitHub Exploit DB Packet Storm

225057	4.3	警告	OpenX	-	OpenX Source におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2013-3515	2013-07-31 14:08	2013-05-8	Show	GitHub Exploit DB Packet Storm

225058	4.3	警告	Monkey Project	-	Monkey HTTP Daemon の Directory Listing プラグインにおけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2013-2181	2013-07-31 13:55	2013-06-14	Show	GitHub Exploit DB Packet Storm

225059	9.3	危険	キングソフト株式会社	-	Kingsoft Spreadsheets 2012 におけるヒープベースのバッファオーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2013-0723	2013-07-31 13:47	2013-07-29	Show	GitHub Exploit DB Packet Storm

225060	5	警告	ヒューレット・パッカードレッドハット	-	複数の Red Hat JBoss 製品の JBossWS Native におけるサービス運用妨害 (DoS) の脆弱性	CWE-noinfo 情報不足	CVE-2011-1483	2013-07-30 17:40	2011-04-4	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:June 2, 2026, 4:18 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
200261	5.3	MEDIUM Network	microfocus	service_manager	HTTP methods reveled in Web services vulnerability in Micro Focus Service manager (server), affecting versions 9.40, 9.41, 9.50, 9.51, 9.52, 9.60, 9.61, 9.62, 9.63. The vulnerability could be exploit…	NVD-CWE-noinfo	CVE-2020-9519	2024-11-21 14:40	2020-03-16	Show	GitHub Exploit DB Packet Storm

200262	7.8	HIGH Local	fortinet	forticlient forticlient_virtual_private_network	An Unsafe Search Path vulnerability in FortiClient for Windows online installer 6.2.3 and below may allow a local attacker with control over the directory in which FortiClientOnlineInstaller.exe and …	CWE-427 Uncontrolled Search Path Element	CVE-2020-9290	2024-11-21 14:40	2020-03-16	Show	GitHub Exploit DB Packet Storm

200263	7.8	HIGH Local	fortinet	forticlient_emergency_management_server	An Unsafe Search Path vulnerability in FortiClient EMS online installer 6.2.1 and below may allow a local attacker with control over the directory in which FortiClientEMSOnlineInstaller.exe resides t…	CWE-427 Uncontrolled Search Path Element	CVE-2020-9287	2024-11-21 14:40	2020-03-16	Show	GitHub Exploit DB Packet Storm

200264	8.3	HIGH Network	openstack	manila	OpenStack Manila <7.4.1, >=8.0.0 <8.1.1, and >=9.0.0 <9.1.1 allows attackers to view, update, delete, or share resources that do not belong to them, because of a context-free lookup of a UUID. Attack…	CWE-276 Incorrect Default Permissions	CVE-2020-9543	2024-11-21 14:40	2020-03-13	Show	GitHub Exploit DB Packet Storm

200265	7.5	HIGH Network	beckhoff	bk9000_firmware	A Denial-of-Service vulnerability exists in BECKHOFF Ethernet TCP/IP Bus Coupler BK9000. After an attack has occurred, the device's functionality can be restored by rebooting.	CWE-400 Uncontrolled Resource Consumption	CVE-2020-9464	2024-11-21 14:40	2020-03-12	Show	GitHub Exploit DB Packet Storm

200266	8.8	HIGH Network	phoenixcontact	tc_router_3002t-4g_firmware tc_router_2002t-3g_firmware tc_router_3002t-4g_vzw_firmware tc_router_3002t-4g_att_firmware tc_cloud_client_1002-4g_firmware tc_cloud_client_1002-txtx_firmw…	PHOENIX CONTACT TC ROUTER 3002T-4G through 2.05.3, TC ROUTER 2002T-3G through 2.05.3, TC ROUTER 3002T-4G VZW through 2.05.3, TC ROUTER 3002T-4G ATT through 2.05.3, TC CLOUD CLIENT 1002-4G through 2.0…	CWE-78 OS Command	CVE-2020-9436	2024-11-21 14:40	2020-03-12	Show	GitHub Exploit DB Packet Storm

200267	7.5	HIGH Network	phoenixcontact	tc_router_3002t-4g_firmware tc_router_2002t-3g_firmware tc_router_3002t-4g_vzw_firmware tc_router_3002t-4g_att_firmware tc_cloud_client_1002-4g_firmware tc_cloud_client_1002-txtx_firmw…	PHOENIX CONTACT TC ROUTER 3002T-4G through 2.05.3, TC ROUTER 2002T-3G through 2.05.3, TC ROUTER 3002T-4G VZW through 2.05.3, TC ROUTER 3002T-4G ATT through 2.05.3, TC CLOUD CLIENT 1002-4G through 2.0…	CWE-798 Use of Hard-coded Credentials	CVE-2020-9435	2024-11-21 14:40	2020-03-12	Show	GitHub Exploit DB Packet Storm

200268	8.8	HIGH Network	tibco	spotfire_server spotfire_analytics_platform_for_aws	The Spotfire library component of TIBCO Software Inc.'s TIBCO Spotfire Analytics Platform for AWS Marketplace and TIBCO Spotfire Server contains a vulnerability that theoretically allows an attacker …	CWE-276 Incorrect Default Permissions	CVE-2020-9408	2024-11-21 14:40	2020-03-12	Show	GitHub Exploit DB Packet Storm

200269	6.1	MEDIUM Network	ckeditor webspellchecker fedoraproject	ckeditor webspellchecker fedora	A cross-site scripting (XSS) vulnerability in the WSC plugin through 5.5.7.5 for CKEditor 4 allows remote attackers to run arbitrary web script inside an IFRAME element by injecting a crafted HTML el…	CWE-79 Cross-site Scripting	CVE-2020-9440	2024-11-21 14:40	2020-03-11	Show	GitHub Exploit DB Packet Storm

200270	5.4	MEDIUM Network	microfocus	service_manager	There is an improper restriction of rendered UI layers or frames vulnerability in Micro Focus Service Manager Release Control versions 9.50 and 9.60. The vulnerability may result in the ability of ma…	CWE-1021 Improper Restriction of Rendered UI Layers or Frames	CVE-2020-9517	2024-11-21 14:40	2020-03-10	Show	GitHub Exploit DB Packet Storm