Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 27, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
225101 4.3 警告 シスコシステムズ - Cisco コンテンツ セキュリティ管理アプライアンスデバイス上で稼働する Cisco Content Security Management におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2013-3396 2013-06-28 11:54 2013-06-26 Show GitHub Exploit DB Packet Storm
225102 5 警告 シスコシステムズ - Cisco Jabber for Windows および Cisco Virtualization Experience Media Engine におけるサービス運用妨害 (DoS) の脆弱性 CWE-20
不適切な入力確認 		CVE-2013-3393 2013-06-28 11:53 2013-06-25 Show GitHub Exploit DB Packet Storm
225103 7.8 危険 シスコシステムズ - Cisco Adaptive Security Appliances デバイス用 Next-Generation Firewall モジュールにおけるサービス運用妨害 (DoS) の脆弱性 CWE-20
不適切な入力確認 		CVE-2013-3382 2013-06-28 11:53 2013-06-26 Show GitHub Exploit DB Packet Storm
225104 4.3 警告 Mozilla Foundation - 複数の Mozilla 製品におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2013-0793 2013-06-27 17:21 2013-04-2 Show GitHub Exploit DB Packet Storm
225105 9.3 危険 cairographics.org
Mozilla Foundation
Pixman		 - 複数の Mozilla 製品などで使用される Pixman における整数符号エラーの脆弱性 CWE-189
数値処理の問題 		CVE-2013-0800 2013-06-27 17:18 2013-04-2 Show GitHub Exploit DB Packet Storm
225106 10 危険 Mozilla Foundation - Linux 上で稼働する複数の Mozilla 製品における任意のコードを実行される脆弱性 CWE-noinfo
情報不足 		CVE-2013-0796 2013-06-27 17:15 2013-04-2 Show GitHub Exploit DB Packet Storm
225107 10 危険 Mozilla Foundation - 複数の Mozilla 製品の SOW の実装における同一生成元ポリシーを回避される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2013-0795 2013-06-27 17:11 2013-04-2 Show GitHub Exploit DB Packet Storm
225108 5.8 警告 Mozilla Foundation - Mozilla Firefox および SeaMonkey におけるフィッシング攻撃を実行される脆弱性 CWE-Other
その他 		CVE-2013-0794 2013-06-27 17:08 2013-04-2 Show GitHub Exploit DB Packet Storm
225109 4.3 警告 Mozilla Foundation - Mozilla Firefox および SeaMonkey における重要な情報を取得される脆弱性 CWE-200
情報漏えい 		CVE-2013-0792 2013-06-27 17:02 2013-04-2 Show GitHub Exploit DB Packet Storm
225110 10 危険 Mozilla Foundation - Mozilla Firefox および SeaMonkey におけるサービス運用妨害 (DoS) の脆弱性 CWE-noinfo
情報不足 		CVE-2013-0789 2013-06-27 17:00 2013-04-2 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 28, 2026, 4:16 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
200041 6.5 MEDIUM
Network 		arox school_management_software_php\/mysql School Management Software PHP/mySQL through 2019-03-14 allows office_admin/?action=addadmin CSRF to add an administrative user. CWE-352
 Origin Validation Error 		CVE-2020-8504 2024-11-21 14:38 2020-02-1 Show GitHub Exploit DB Packet Storm
200042 6.5 MEDIUM
Network 		biscom secure_file_transfer Biscom Secure File Transfer (SFT) 5.0.1050 through 5.1.1067 and 6.0.1000 through 6.0.1003 allows Insecure Direct Object Reference (IDOR) by an authenticated sender because of an error in a file-uploa… CWE-639
 Authorization Bypass Through User-Controlled Key 		CVE-2020-8503 2024-11-21 14:38 2020-02-1 Show GitHub Exploit DB Packet Storm
200043 4.3 MEDIUM
Network 		zohocorp manageengine_remote_access_plus An authorization issue was discovered in the Credential Manager feature in Zoho ManageEngine Remote Access Plus before 10.0.450. A user with the Guest role can extract the collection of all defined c… NVD-CWE-noinfo
CVE-2020-8422 2024-11-21 14:38 2020-02-1 Show GitHub Exploit DB Packet Storm
200044 9.8 CRITICAL
Network 		simplejobscript simplejobscript controllers/page_apply.php in Simplejobscript.com SJS through 1.66 is prone to unauthenticated Remote Code Execution by uploading a PHP script as a resume. CWE-434
 Unrestricted Upload of File with Dangerous Type  		CVE-2020-8440 2024-11-21 14:38 2020-01-31 Show GitHub Exploit DB Packet Storm
200045 9.8 CRITICAL
Network 		hashicorp nomad HashiCorp Nomad and Nomad Enterprise up to 0.10.2 incorrectly validated role/region associated with TLS certificates used for mTLS RPC, and were susceptible to privilege escalation. Fixed in 0.10.3. CWE-295
Improper Certificate Validation  		CVE-2020-7956 2024-11-21 14:38 2020-01-31 Show GitHub Exploit DB Packet Storm
200046 5.3 MEDIUM
Network 		hashicorp consul HashiCorp Consul and Consul Enterprise 1.4.1 through 1.6.2 did not uniformly enforce ACLs across all API endpoints, resulting in potential unintended information disclosure. Fixed in 1.6.3. CWE-863
 Incorrect Authorization 		CVE-2020-7955 2024-11-21 14:38 2020-01-31 Show GitHub Exploit DB Packet Storm
200047 7.5 HIGH
Network 		jetbrains intellij_idea In JetBrains IntelliJ IDEA 2019.2, an XSLT debugger plugin misconfiguration allows arbitrary file read operations over the network. This issue was fixed in 2019.3. NVD-CWE-noinfo
CVE-2020-7914 2024-11-21 14:38 2020-01-31 Show GitHub Exploit DB Packet Storm
200048 5.4 MEDIUM
Network 		gistpress_project gistpress XSS exists in the shortcode functionality of the GistPress plugin before 3.0.2 for WordPress via the includes/class-gistpress.php id parameter. This allows an attacker with the WordPress Contributor … CWE-79
Cross-site Scripting 		CVE-2020-8498 2024-11-21 14:38 2020-01-31 Show GitHub Exploit DB Packet Storm
200049 4.8 MEDIUM
Network 		kronos web_time_and_attendance In Kronos Web Time and Attendance (webTA) 4.1.x and later 4.x versions before 5.0, there is a Stored XSS vulnerability by setting the Application Banner input field of the /ApplicationBanner page as … CWE-79
Cross-site Scripting 		CVE-2020-8496 2024-11-21 14:38 2020-01-31 Show GitHub Exploit DB Packet Storm
200050 7.5 HIGH
Network 		kronos web_time_and_attendance In Kronos Web Time and Attendance (webTA) 3.8.x and later 3.x versions before 4.0, the com.threeis.webta.H491delegate servlet allows an attacker with Timekeeper or Supervisor privileges to gain unaut… CWE-862
 Missing Authorization 		CVE-2020-8495 2024-11-21 14:38 2020-01-31 Show GitHub Exploit DB Packet Storm