Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 20, 2026, 6 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
225081 7.5 危険 Web-Dorado - Drupal 用 Web Dorado Spider Video Player プラグインの settings.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2013-3532 2013-05-14 15:49 2013-05-10 Show GitHub Exploit DB Packet Storm
225082 7.5 危険 RadioCMS - RadioCMS の meneger.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2013-3531 2013-05-14 15:48 2013-05-10 Show GitHub Exploit DB Packet Storm
225083 7.5 危険 Fabricio Zuardi - WordPress 用 Spiffy XSPF Player プラグインの playlist.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2013-3530 2013-05-14 15:47 2013-05-10 Show GitHub Exploit DB Packet Storm
225084 4.3 警告 Smarty Pants Plugins - WordPress 用 WP FuneralPress プラグインの user/obits.php におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2013-3529 2013-05-14 15:46 2013-05-10 Show GitHub Exploit DB Packet Storm
225085 7.5 危険 Vanilla Forums - Vanilla Forums の更新チェックにおける脆弱性 CWE-noinfo
情報不足
CVE-2013-3528 2013-05-14 15:44 2013-04-5 Show GitHub Exploit DB Packet Storm
225086 7.5 危険 Vanilla Forums - Vanilla Forums における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2013-3527 2013-05-14 15:37 2013-04-5 Show GitHub Exploit DB Packet Storm
225087 4.3 警告 georgemathewk - WordPress 用 Traffic Analyzer プラグインの js/ta_loaded.js.php におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2013-3526 2013-05-14 15:37 2013-05-10 Show GitHub Exploit DB Packet Storm
225088 7.5 危険 David Clark - phpVMS 用 Pop Up News モジュールにおける SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2013-3524 2013-05-14 15:36 2013-05-10 Show GitHub Exploit DB Packet Storm
225089 7.5 危険 greg jennings - This HTML Is Simple における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2013-3523 2013-05-14 15:35 2013-04-1 Show GitHub Exploit DB Packet Storm
225090 6.5 警告 vBulletin Solutions, Inc. - vBulletin の index.php/ajax/api/reputation/vote における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2013-3522 2013-05-14 15:34 2013-05-10 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 20, 2026, 4:14 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
315401 - - - Mattermost Plugin Channel Export versions <=1.0.0 fail to restrict concurrent runs of the /export command which allows a user to consume excessive resource by running the /export command multiple tim… - CVE-2024-43105 2024-08-24 01:18 2024-08-23 Show GitHub Exploit DB Packet Storm
315402 - - - The WP Table Builder WordPress plugin through 1.5.0 does not sanitise and escape some of its Table data, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting a… - CVE-2024-3282 2024-08-24 01:18 2024-08-23 Show GitHub Exploit DB Packet Storm
315403 - - - A Stored Cross Site Scripting (XSS) vulnerability was found in "/history.php" in Kashipara Bus Ticket Reservation System v1.0, which allows remote attackers to execute arbitrary code via the Name, Ph… - CVE-2024-42762 2024-08-24 01:18 2024-08-23 Show GitHub Exploit DB Packet Storm
315404 - - - A Stored Cross Site Scripting (XSS) vulnerability was found in "/admin_schedule.php" in Kashipara Bus Ticket Reservation System v1.0, which allows remote attackers to execute arbitrary code via sched… - CVE-2024-42761 2024-08-24 01:18 2024-08-23 Show GitHub Exploit DB Packet Storm
315405 - - - An issue was discovered in llama_index before 0.10.38. download/integration.py includes an exec call for import {cls_name}. - CVE-2024-45201 2024-08-24 01:18 2024-08-23 Show GitHub Exploit DB Packet Storm
315406 - - - NGINX Agent's "config_dirs" restriction feature allows a highly privileged attacker to gain the ability to write/overwrite files outside of the designated secure directory. - CVE-2024-7634 2024-08-24 01:18 2024-08-23 Show GitHub Exploit DB Packet Storm
315407 - - - Kashipara Hotel Management System v1.0 is vulnerable to Unrestricted File Upload RCE via /admin/add_room_controller.php. - CVE-2024-42767 2024-08-24 01:18 2024-08-23 Show GitHub Exploit DB Packet Storm
315408 - - - Kashipara Hotel Management System v1.0 is vulnerable to Incorrect Access Control via /admin/users.php. - CVE-2024-42776 2024-08-24 01:18 2024-08-23 Show GitHub Exploit DB Packet Storm
315409 - - - An Incorrect Access Control vulnerability was found in /admin/add_room_controller.php in Kashipara Hotel Management System v1.0, which allows an unauthenticated attacker to add the valid hotel room e… - CVE-2024-42775 2024-08-24 01:18 2024-08-23 Show GitHub Exploit DB Packet Storm
315410 - - - An Incorrect Access Control vulnerability was found in /admin/delete_room.php in Kashipara Hotel Management System v1.0, which allows an unauthenticated attacker to delete valid hotel room entries in… - CVE-2024-42774 2024-08-24 01:18 2024-08-23 Show GitHub Exploit DB Packet Storm