Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 4, 2026, 10 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
225271 4 警告 Novell
Apache Software Foundation		 - Subversion の mod_dav_svn Apache HTTPD サーバモジュールにおけるサービス運用妨害 (DoS) の脆弱性 CWE-119
バッファエラー 		CVE-2013-1846 2013-08-6 11:36 2013-03-29 Show GitHub Exploit DB Packet Storm
225272 2.1 注意 Novell
Apache Software Foundation		 - Subversion の mod_dav_svn Apache HTTPD サーバモジュールにおけるサービス運用妨害 (DoS) の脆弱性 CWE-119
バッファエラー 		CVE-2013-1845 2013-08-6 11:35 2013-03-29 Show GitHub Exploit DB Packet Storm
225273 4.3 警告 シスコシステムズ - Cisco Adaptive Security Appliances の WebVPN ポータルのログインページにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2013-3414 2013-08-6 11:17 2013-07-25 Show GitHub Exploit DB Packet Storm
225274 5 警告 ヒューレット・パッカード - HP System Management Homepage におけるアクセス制限を回避される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2013-2355 2013-08-5 17:08 2013-07-18 Show GitHub Exploit DB Packet Storm
225275 5 警告 Wireshark - Wireshark の DTLS 解析機能におけるサービス運用妨害 (DoS) の脆弱性 CWE-20
不適切な入力確認 		CVE-2013-2488 2013-08-5 17:02 2013-03-6 Show GitHub Exploit DB Packet Storm
225276 4.3 警告 ジュニパーネットワークス - Juniper Secure Access の IVE OS のヘルプページにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2012-5460 2013-08-5 17:02 2013-07-22 Show GitHub Exploit DB Packet Storm
225277 5 警告 Bitcoin Project - bitcoind および Bitcoin-Qt におけるサービス運用妨害 (DoS) の脆弱性 CWE-noinfo
情報不足 		CVE-2013-4627 2013-08-5 14:58 2013-06-25 Show GitHub Exploit DB Packet Storm
225278 7.5 危険 シスコシステムズ - Cisco Unified Communications Manager における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2013-3404 2013-08-5 14:46 2013-07-17 Show GitHub Exploit DB Packet Storm
225279 6.4 警告 Bitcoin Project - 複数の Bitcoin 製品におけるサービス運用妨害 (DoS) の脆弱性 CWE-399
リソース管理の問題 		CVE-2013-3220 2013-08-5 14:46 2013-03-11 Show GitHub Exploit DB Packet Storm
225280 5 警告 Bitcoin Project - bitcoind および Bitcoin-Qt におけるアクセス制限を回避される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2013-3219 2013-08-5 14:43 2013-03-11 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 4, 2026, 4:17 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
210831 9.8 CRITICAL
Network 		webidsupport webid WeBid 1.2.2 admin/newuser.php has an issue with password rechecking during registration because it uses a loose comparison to check the identicalness of two passwords. Two non-identical passwords can… CWE-697
 Incorrect Comparison 		CVE-2020-23359 2024-11-21 14:13 2021-01-28 Show GitHub Exploit DB Packet Storm
210832 7.5 HIGH
Network 		nibbleblog nibbleblog dmin/kernel/api/login.class.phpin in nibbleblog v3.7.1c allows type juggling for login bypass because == is used instead of === for password hashes, which mishandles hashes that begin with 0e followe… NVD-CWE-noinfo
CVE-2020-23356 2024-11-21 14:13 2021-01-28 Show GitHub Exploit DB Packet Storm
210833 7.5 HIGH
Network 		codiad codiad ** PRODUCT NOT SUPPORTED WHEN ASSIGNED ** Codiad 2.8.4 /componetns/user/class.user.php:Authenticate() is vulnerable in magic hash authentication bypass. If encrypted or hash value for the passwords f… NVD-CWE-noinfo
CVE-2020-23355 2024-11-21 14:13 2021-01-28 Show GitHub Exploit DB Packet Storm
210834 7.5 HIGH
Network 		zblogcn z-blogphp Z-BlogPHP 1.6.0 Valyria is affected by incorrect access control. PHP loose comparison and a magic hash can be used to bypass authentication. zb_user/plugin/passwordvisit/include.php:passwordvisit_inp… NVD-CWE-Other
CVE-2020-23352 2024-11-21 14:13 2021-01-28 Show GitHub Exploit DB Packet Storm
210835 7.5 HIGH
Network 		newbee-mall_project newbee-mall newbee-mall all versions are affected by incorrect access control to remotely gain privileges through NewBeeMallIndexConfigServiceImpl.java. Unauthorized changes can be made to any user information t… CWE-639
 Authorization Bypass Through User-Controlled Key 		CVE-2020-23449 2024-11-21 14:13 2021-01-27 Show GitHub Exploit DB Packet Storm
210836 9.8 CRITICAL
Network 		newbee-mall_project newbee-mall newbee-mall all versions are affected by incorrect access control to remotely gain privileges through AdminLoginInterceptor.java. The authentication logic of the system's background /admin is in code… CWE-306
CWE-706
Missing Authentication for Critical Function
 Use of Incorrectly-Resolved Name or Reference 		CVE-2020-23448 2024-11-21 14:13 2021-01-27 Show GitHub Exploit DB Packet Storm
210837 6.1 MEDIUM
Network 		newbee-mall_project newbee-mall newbee-mall 1.0 is affected by cross-site scripting in shop-cart/settle. Users only need to write xss payload in their address information when buying goods, which is triggered when viewing the "View… CWE-79
Cross-site Scripting 		CVE-2020-23447 2024-11-21 14:13 2021-01-27 Show GitHub Exploit DB Packet Storm
210838 9.8 CRITICAL
Network 		mingsoft mcms An issue was discovered in ming-soft MCMS v5.0, where a malicious user can exploit SQL injection without logging in through /mcms/view.do. CWE-89
SQL Injection 		CVE-2020-23262 2024-11-21 14:13 2021-01-27 Show GitHub Exploit DB Packet Storm
210839 7.5 HIGH
Network 		pyres termod4_firmware Sensitive information disclosure and weak encryption in Pyrescom Termod4 time management devices before 10.04k allows remote attackers to read a session-file and obtain plain-text user credentials. CWE-327
 Use of a Broken or Risky Cryptographic Algorithm 		CVE-2020-23162 2024-11-21 14:13 2021-01-27 Show GitHub Exploit DB Packet Storm
210840 6.5 MEDIUM
Network 		pyres termod4_firmware Local file inclusion in Pyrescom Termod4 time management devices before 10.04k allows authenticated remote attackers to traverse directories and read sensitive files via the Maintenance > Logs menu a… CWE-22
Path Traversal 		CVE-2020-23161 2024-11-21 14:13 2021-01-27 Show GitHub Exploit DB Packet Storm