Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 1, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
225391 10 危険 Digital Alert Systems
Monroe Electronics		 - Digital Alert Systems DASDEC EAS および Monroe Electronics R189 One-Net EAS におけるアクセス権を取得される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2013-4735 2013-07-2 16:52 2013-04-24 Show GitHub Exploit DB Packet Storm
225392 7.5 危険 Digital Alert Systems
Monroe Electronics		 - Digital Alert Systems DASDEC EAS および Monroe Electronics R189 One-Net EAS における非管理者アクセス権を取得される脆弱性 CWE-noinfo
情報不足 		CVE-2013-4734 2013-07-2 16:50 2013-04-24 Show GitHub Exploit DB Packet Storm
225393 7.8 危険 Digital Alert Systems
Monroe Electronics		 - Digital Alert Systems DASDEC EAS および Monroe Electronics R189 One-Net EAS における重要な情報を取得される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2013-4733 2013-07-2 16:49 2013-04-24 Show GitHub Exploit DB Packet Storm
225394 10 危険 Digital Alert Systems
Monroe Electronics		 - Digital Alert Systems DASDEC EAS および Monroe Electronics R189 One-Net EAS における root アクセス権を取得される脆弱性 CWE-310
暗号の問題 		CVE-2013-0137 2013-07-2 16:48 2013-04-24 Show GitHub Exploit DB Packet Storm
225395 9.3 危険 Choice Wireless - Choice Wireless Green Packet 4G WiMax modem WIXFMR-111 における任意のコマンドを実行される脆弱性 CWE-287
不適切な認証 		CVE-2013-4731 2013-07-2 16:47 2013-06-28 Show GitHub Exploit DB Packet Storm
225396 7.7 危険 ヒューレット・パッカード - HP StoreOnce D2D Backup System のソフトウェアにおける管理アクセス権を取得される脆弱性 CWE-255
証明書・パスワード管理 		CVE-2013-2342 2013-07-2 16:37 2013-06-26 Show GitHub Exploit DB Packet Storm
225397 4.6 警告 ヒューレット・パッカード - 複数の HP Client 製品上で稼働する HP Smart Zero Core における重要な情報を取得される脆弱性 CWE-noinfo
情報不足 		CVE-2013-2339 2013-07-2 16:36 2013-06-24 Show GitHub Exploit DB Packet Storm
225398 5 警告 Data Security Systems Solutions Pte - DS3 Authentication Server における任意のエラーページテキストを挿入される脆弱性 CWE-20
不適切な入力確認 		CVE-2013-4098 2013-07-2 16:35 2013-06-2 Show GitHub Exploit DB Packet Storm
225399 5 警告 Data Security Systems Solutions Pte - DS3 Authentication Server における重要な情報を取得される脆弱性 CWE-22
パス・トラバーサル 		CVE-2013-4097 2013-07-2 16:33 2013-06-2 Show GitHub Exploit DB Packet Storm
225400 9 危険 Data Security Systems Solutions Pte - DS3 Authentication Server における任意のコマンドを実行される脆弱性 CWE-20
不適切な入力確認 		CVE-2013-4096 2013-07-2 16:31 2013-06-2 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 2, 2026, 4:18 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
210691 7.5 HIGH
Network 		ave dominaplus
53ab-wbs_firmware
ts01_firmware
ts03x-v_firmware
ts04x-v_firmware
ts05_firmware
ts05n-v_firmware 		AVE DOMINAplus <=1.10.x suffers from an unauthenticated reboot command execution. Attackers can exploit this issue to cause a denial of service scenario. CWE-306
Missing Authentication for Critical Function 		CVE-2020-21996 2024-11-21 14:12 2021-04-29 Show GitHub Exploit DB Packet Storm
210692 9.8 CRITICAL
Network 		ave dominaplus
53ab-wbs_firmware
ts01_firmware
ts03x-v_firmware
ts04x-v_firmware
ts05_firmware
ts05n-v_firmware 		AVE DOMINAplus <=1.10.x suffers from clear-text credentials disclosure vulnerability that allows an unauthenticated attacker to issue a request to an unprotected directory that hosts an XML file '/xm… CWE-522
 Insufficiently Protected Credentials 		CVE-2020-21994 2024-11-21 14:12 2021-04-29 Show GitHub Exploit DB Packet Storm
210693 6.1 MEDIUM
Network 		wems enterprise_manager In WEMS Limited Enterprise Manager 2.58, input passed to the GET parameter 'email' is not properly sanitized before being returned to the user. This can be exploited to execute arbitrary HTML code in… CWE-79
Cross-site Scripting 		CVE-2020-21993 2024-11-21 14:12 2021-04-29 Show GitHub Exploit DB Packet Storm
210694 9.8 CRITICAL
Network 		ave dominaplus
53ab-wbs_firmware
ts01_firmware
ts03x-v_firmware
ts04x-v_firmware
ts05_firmware
ts05n-v_firmware 		AVE DOMINAplus <=1.10.x suffers from an authentication bypass vulnerability due to missing control check when directly calling the autologin GET parameter in changeparams.php script. Setting the auto… CWE-287
Improper Authentication 		CVE-2020-21991 2024-11-21 14:12 2021-04-28 Show GitHub Exploit DB Packet Storm
210695 6.1 MEDIUM
Network 		homeautomation_project homeautomation In HomeAutomation 3.3.2 input passed via the 'redirect' GET parameter in 'api.php' script is not properly verified before being used to redirect users. This can be exploited to redirect a user to an … CWE-601
Open Redirect 		CVE-2020-21998 2024-11-21 14:12 2021-04-28 Show GitHub Exploit DB Packet Storm
210696 8.8 HIGH
Network 		homeautomation_project homeautomation HomeAutomation 3.3.2 is affected by Cross Site Request Forgery (CSRF). The application interface allows users to perform certain actions via HTTP requests without performing any validity checks to ve… CWE-352
 Origin Validation Error 		CVE-2020-21989 2024-11-21 14:12 2021-04-28 Show GitHub Exploit DB Packet Storm
210697 6.1 MEDIUM
Network 		homeautomation_project homeautomation HomeAutomation 3.3.2 is affected by persistent Cross Site Scripting (XSS). XSS vulnerabilities occur when input passed via several parameters to several scripts is not properly sanitized before being… CWE-79
Cross-site Scripting 		CVE-2020-21987 2024-11-21 14:12 2021-04-28 Show GitHub Exploit DB Packet Storm
210698 4.8 MEDIUM
Network 		x2engine x2crm Cross Site Scripting (XSS) in X2engine X2CRM v7.1 and older allows remote attackers to obtain sensitive information by injecting arbitrary web script or HTML via the "First Name" and "Last Name" fiel… CWE-79
Cross-site Scripting 		CVE-2020-21088 2024-11-21 14:12 2021-04-14 Show GitHub Exploit DB Packet Storm
210699 6.1 MEDIUM
Network 		x2engine x2crm Cross Site Scripting (XSS) in X2Engine X2CRM v6.9 and older allows remote attackers to execute arbitrary code by injecting arbitrary web script or HTML via the "New Name" field of the "Rename a Modul… CWE-79
Cross-site Scripting 		CVE-2020-21087 2024-11-21 14:12 2021-04-14 Show GitHub Exploit DB Packet Storm
210700 8.8 HIGH
Network 		indionetworks unibox_u50_firmware
unibox_u500_firmware
unibox_u1000_firmware
unibox_u2500_firmware
unibox_u5000_firmware 		Unibox SMB 2.4 and UniBox Enterprise Series 2.4 and UniBox Campus Series 2.4 contain a cross-site request forgery (CSRF) vulnerability in /tools/network-trace, /list_users, /list_byod?usertype=raduse… CWE-352
 Origin Validation Error 		CVE-2020-21884 2024-11-21 14:12 2021-04-9 Show GitHub Exploit DB Packet Storm