Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 2, 2026, 6 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
225401 6.5 警告 Imperva Inc. - Imperva SecureSphere の SecureSphere Operations Manager Management Server における任意のコマンドを実行される脆弱性 CWE-20
不適切な入力確認
CVE-2013-4095 2013-07-2 16:31 2013-06-2 Show GitHub Exploit DB Packet Storm
225402 6.5 警告 Imperva Inc. - Imperva SecureSphere の SecureSphere Operations Manager Management Server における実行可能なファイルをアップロードされる脆弱性 CWE-20
不適切な入力確認
CVE-2013-4094 2013-07-2 16:30 2013-06-2 Show GitHub Exploit DB Packet Storm
225403 5 警告 Imperva Inc. - Imperva SecureSphere の SecureSphere Operations Manager Management Server における重要な情報を取得される脆弱性 CWE-22
パス・トラバーサル
CVE-2013-4093 2013-07-2 16:28 2013-06-2 Show GitHub Exploit DB Packet Storm
225404 5 警告 Imperva Inc. - Imperva SecureSphere の SecureSphere Operations Manager Management Server における重要な情報を取得される脆弱性 CWE-255
証明書・パスワード管理
CVE-2013-4092 2013-07-2 16:26 2013-06-2 Show GitHub Exploit DB Packet Storm
225405 7.5 危険 Imperva Inc. - Imperva SecureSphere の SecureSphere Operations Manager Management Server におけるアクセス権を取得される脆弱性 CWE-255
証明書・パスワード管理
CVE-2013-4091 2013-07-2 16:15 2013-06-2 Show GitHub Exploit DB Packet Storm
225406 7.5 危険 Indra - EDItran Communications Platform の editcp におけるバッファオーバーフローの脆弱性 CWE-119
バッファエラー
CVE-2010-5288 2013-07-2 16:08 2010-06-25 Show GitHub Exploit DB Packet Storm
225407 6.8 警告 JS-YAML Project - Node.js 用 JS-YAML モジュールにおける任意のコードを実行される脆弱性 CWE-20
不適切な入力確認
CVE-2013-4660 2013-07-2 16:07 2013-06-23 Show GitHub Exploit DB Packet Storm
225408 2.1 注意 X.Org Foundation
Canonical
- X.Org X Server における重要な情報を取得される脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2013-1940 2013-07-2 16:01 2013-04-10 Show GitHub Exploit DB Packet Storm
225409 6.8 警告 Novell
Canonical
レッドハット
- IcedTea-Web プラグインにおける任意のコードを実行される脆弱性 CWE-noinfo
情報不足
CVE-2013-1927 2013-07-2 15:58 2013-04-17 Show GitHub Exploit DB Packet Storm
225410 5.8 警告 Novell
Canonical
レッドハット
- IcedTea-Web プラグインにおける重要な情報を取得される脆弱性 CWE-noinfo
情報不足
CVE-2013-1926 2013-07-2 15:56 2013-04-17 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 2, 2026, 4:18 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
210621 6.1 MEDIUM
Network
shopex ecshop Cross Site Scripting (XSS) vulnerability in ECShop 4.0 due to security filtering issues, in the user.php file, we can use the html entity encoding to bypass the security policy of the safety.php file… CWE-79
Cross-site Scripting
CVE-2020-20640 2024-11-21 14:12 2021-06-29 Show GitHub Exploit DB Packet Storm
210622 9.8 CRITICAL
Network
ibos ibos In IBOS 4.5.4 Open, Arbitrary File Inclusion causes getshell via /system/modules/dashboard/controllers/CronController.php. CWE-434
 Unrestricted Upload of File with Dangerous Type 
CVE-2020-21786 2024-11-21 14:12 2021-06-25 Show GitHub Exploit DB Packet Storm
210623 8.8 HIGH
Network
ibos ibos In IBOS 4.5.4 Open, the database backup has Command Injection Vulnerability. CWE-77
Command Injection
CVE-2020-21785 2024-11-21 14:12 2021-06-25 Show GitHub Exploit DB Packet Storm
210624 9.8 CRITICAL
Network
phpwcms phpwcms phpwcms 1.9.13 is vulnerable to Code Injection via /phpwcms/setup/setup.php. CWE-94
Code Injection
CVE-2020-21784 2024-11-21 14:12 2021-06-25 Show GitHub Exploit DB Packet Storm
210625 6.1 MEDIUM
Network
ibos ibos In IBOS 4.5.4 the email function has a cross site scripting (XSS) vulnerability in emailbody[content] parameter. CWE-79
Cross-site Scripting
CVE-2020-21783 2024-11-21 14:12 2021-06-25 Show GitHub Exploit DB Packet Storm
210626 4.3 MEDIUM
Network
crmeb crmeb In CRMEB 3.1.0+ strict domain name filtering leads to SSRF(Server-Side Request Forgery). The vulnerable code is in file /crmeb/app/admin/controller/store/CopyTaobao.php. CWE-918
Server-Side Request Forgery (SSRF) 
CVE-2020-21788 2024-11-21 14:12 2021-06-25 Show GitHub Exploit DB Packet Storm
210627 9.8 CRITICAL
Network
crmeb crmeb CRMEB 3.1.0+ is vulnerable to File Upload Getshell via /crmeb/crmeb/services/UploadService.php. CWE-434
 Unrestricted Upload of File with Dangerous Type 
CVE-2020-21787 2024-11-21 14:12 2021-06-25 Show GitHub Exploit DB Packet Storm
210628 9.8 CRITICAL
Network
txjia imcat SQL Injection vulnerability in imcat v5.2 via the fm[auser] parameters in coms/add_coms.php. CWE-89
SQL Injection
CVE-2020-20392 2024-11-21 14:12 2021-06-24 Show GitHub Exploit DB Packet Storm
210629 5.4 MEDIUM
Network
get-simple getsimplecms Cross Site Scripting vulnerability in GetSimpleCMS 3.4.0a in admin/snippets.php via (1) Add Snippet and (2) Save snippets. CWE-79
Cross-site Scripting
CVE-2020-20391 2024-11-21 14:12 2021-06-24 Show GitHub Exploit DB Packet Storm
210630 4.8 MEDIUM
Network
get-simple getsimplecms Cross Site Scripting (XSS) vulnerability in GetSimpleCMS 3.4.0a in admin/edit.php. CWE-79
Cross-site Scripting
CVE-2020-20389 2024-11-21 14:12 2021-06-24 Show GitHub Exploit DB Packet Storm