Vulnerability Search Top

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

Vulnerability Information Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":June 9, 2026, 10 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
225381	4.3	警告	IBM	-	IBM SPSS Analytical Decision Management におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2013-4047	2013-09-17 22:16	2013-09-12	Show	GitHub Exploit DB Packet Storm

225382	6.3	警告	シスコシステムズ	-	Cisco NX-OS の Open Network Environment Platform におけるサービス運用妨害 (DoS) の脆弱性	CWE-20 不適切な入力確認	CVE-2013-5496	2013-09-17 21:43	2013-09-13	Show	GitHub Exploit DB Packet Storm

225383	4.3	警告	シスコシステムズ	-	Cisco Unified MeetingPlace の Application Server の Web フレームワークにおけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2013-5495	2013-09-17 21:41	2013-09-13	Show	GitHub Exploit DB Packet Storm

225384	6.8	警告	シスコシステムズ	-	Cisco Unified MeetingPlace Solution の Web フレームワークにおけるクロスサイトリクエストフォージェリの脆弱性	CWE-352 同一生成元ポリシー違反	CVE-2013-5494	2013-09-17 21:40	2013-09-13	Show	GitHub Exploit DB Packet Storm

225385	6.8	警告	シスコシステムズ	-	Cisco Virtualization Experience Client のファームウェアにおけるアクセス制限を回避される脆弱性	CWE-20 不適切な入力確認	CVE-2013-5493	2013-09-17 21:39	2013-09-12	Show	GitHub Exploit DB Packet Storm

225386	5	警告	シスコシステムズ	-	Cisco SocialMiner の administration.jsp における重要な情報を取得される脆弱性	CWE-310 暗号の問題	CVE-2013-5492	2013-09-17 21:38	2013-09-13	Show	GitHub Exploit DB Packet Storm

225387	5	警告	シスコシステムズ	-	Cisco SocialMiner のガジェットの実装における重要な情報を取得される脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2013-5489	2013-09-17 21:37	2013-09-10	Show	GitHub Exploit DB Packet Storm

225388	4.3	警告	シスコシステムズ	-	Cisco Prime LAN Management Solution におけるクリックジャッキングを実行される脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2013-5482	2013-09-17 21:37	2013-09-12	Show	GitHub Exploit DB Packet Storm

225389	5.5	警告	アップル	-	Apple Mac OS X の画面ロックにおけるロックを回避される脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2013-1033	2013-09-17 20:18	2013-09-12	Show	GitHub Exploit DB Packet Storm

225390	6.9	警告	アップル	-	Apple Mac OS X の Power Management におけるアクセス制限を回避される脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2013-1031	2013-09-17 20:17	2013-09-12	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:June 9, 2026, 4:16 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
210531	8.8	HIGH Network	cmsuno_project	cmsuno	In CMSuno 1.6.2, an attacker can inject malicious PHP code as a "username" while changing his/her username & password. After that, when attacker logs in to the application, attacker's code will be ru…	CWE-94 Code Injection	CVE-2020-25557	2024-11-21 14:18	2020-11-14	Show	GitHub Exploit DB Packet Storm

210532	8.8	HIGH Network	cmsuno_project	cmsuno	An authenticated attacker can inject malicious code into "lang" parameter in /uno/central.php file in CMSuno 1.6.2 and run this PHP code in the web page. In this way, attacker can takeover the contro…	CWE-94 Code Injection	CVE-2020-25538	2024-11-21 14:18	2020-11-14	Show	GitHub Exploit DB Packet Storm

210533	6.1	MEDIUM Network	cacti debian	cacti debian_linux	A cross-site scripting (XSS) vulnerability exists in templates_import.php (Cacti 1.2.13) due to Improper escaping of error message during template import preview in the xml_path field	-	CVE-2020-25706	2024-11-21 14:18	2020-11-12	Show	GitHub Exploit DB Packet Storm

210534	5.9	MEDIUM Network	python-rsa_project redhat fedoraproject	python-rsa openstack_platform fedora	It was found that python-rsa is vulnerable to Bleichenbacher timing attacks. An attacker can use this flaw via the RSA decryption API to decrypt parts of the cipher text encrypted with RSA.	-	CVE-2020-25658	2024-11-21 14:18	2020-11-12	Show	GitHub Exploit DB Packet Storm

210535	6.5	MEDIUM Network	redhat	advanced_cluster_management_for_kubernetes	An issue was discovered in ManagedClusterView API, that could allow secrets to be disclosed to users without the correct permissions. Views created for an admin user would be made available for a sho…	CWE-863 Incorrect Authorization	CVE-2020-25655	2024-11-21 14:18	2020-11-10	Show	GitHub Exploit DB Packet Storm

210536	9.8	CRITICAL Network	saltstack debian	salt debian_linux	In SaltStack Salt through 3002, salt-netapi improperly validates eauth credentials and tokens. A user can bypass authentication and invoke Salt SSH.	CWE-287 Improper Authentication	CVE-2020-25592	2024-11-21 14:18	2020-11-6	Show	GitHub Exploit DB Packet Storm

210537	7.5	HIGH Network	microfocus	self_service_password_reset	Sensitive information disclosure vulnerability in Micro Focus Self Service Password Reset (SSPR) product. The vulnerability affects versions 4.4.0.0 to 4.4.0.6 and 4.5.0.1 and 4.5.0.2. In certain con…	NVD-CWE-noinfo	CVE-2020-25837	2024-11-21 14:18	2020-11-6	Show	GitHub Exploit DB Packet Storm

210538	6.5	MEDIUM Adjacent	redhat	enterprise_linux	A Red Hat only CVE-2020-12352 regression issue was found in the way the Linux kernel's Bluetooth stack implementation handled the initialization of stack memory when handling certain AMP packets. Thi…	-	CVE-2020-25662	2024-11-21 14:18	2020-11-6	Show	GitHub Exploit DB Packet Storm

210539	8.8	HIGH Adjacent	redhat	enterprise_linux	A Red Hat only CVE-2020-12351 regression issue was found in the way the Linux kernel's Bluetooth implementation handled L2CAP packets with A2MP CID. This flaw allows a remote attacker in an adjacent …	-	CVE-2020-25661	2024-11-21 14:18	2020-11-6	Show	GitHub Exploit DB Packet Storm

210540	6.5	MEDIUM Network	redhat netapp	wildfly jboss_enterprise_application_platform single_sign-on jboss_fuse jboss_data_grid openshift_application_runtimes fuse oncommand_insight service_level_manager active_i…	A memory leak flaw was found in WildFly in all versions up to 21.0.0.Final, where host-controller tries to reconnect in a loop, generating new connections which are not properly closed while not able…	-	CVE-2020-25689	2024-11-21 14:18	2020-11-3	Show	GitHub Exploit DB Packet Storm