Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 1, 2026, noon

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
225471 6.9 警告 シーメンス - Siemens Simatic WinCC および Simatic PCS 7 の SCADA システムにおける権限を取得される脆弱性 CWE-255
証明書・パスワード管理
CVE-2010-2772 2013-06-26 14:21 2010-07-22 Show GitHub Exploit DB Packet Storm
225472 6.8 警告 日立 - 日立の Windows 版 COBOL GUIオプションの開発環境における任意のコードを実行される脆弱性 CWE-noinfo
情報不足
CVE-2012-4274 2013-06-26 14:16 2012-04-27 Show GitHub Exploit DB Packet Storm
225473 4.3 警告 Nathan Haug - Drupal 用 Webform モジュールにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2013-2129 2013-06-26 14:03 2013-05-29 Show GitHub Exploit DB Packet Storm
225474 4.3 警告 Yoran Brault - Drupal 用 Filebrowser モジュールにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2013-2036 2013-06-26 14:00 2013-04-30 Show GitHub Exploit DB Packet Storm
225475 4.3 警告 Alexey Sukhotin - Drupal 用 elFinder file manager モジュールにおけるクロスサイトリクエストフォージェリの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2013-1972 2013-06-26 14:00 2013-04-16 Show GitHub Exploit DB Packet Storm
225476 4.3 警告 drunomics - Drupal 用 Rules モジュールにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2013-1906 2013-06-26 13:57 2013-03-27 Show GitHub Exploit DB Packet Storm
225477 4.3 警告 Opera Software ASA - Opera におけるアドレスバー詐称の脆弱性 CWE-Other
その他
CVE-2012-4010 2013-06-26 13:47 2012-08-30 Show GitHub Exploit DB Packet Storm
225478 7.5 危険 D-Link Systems, Inc. - D-Link DIR-685 Xtreme N Storage Router の暗号化通信に脆弱性 CWE-310
暗号の問題
CVE-2011-4507 2013-06-26 13:44 2011-10-11 Show GitHub Exploit DB Packet Storm
225479 2.6 注意 サイボウズ - サイボウズLive for Android における WebView クラスに関する脆弱性 CWE-Other
その他
CVE-2013-3647 2013-06-26 13:41 2013-06-18 Show GitHub Exploit DB Packet Storm
225480 3.3 注意 ASUSTeK Computer Inc. - RT-N56U における管理パスワード漏えいの脆弱性 CWE-200
情報漏えい
CVE-2011-4497 2013-06-26 13:41 2011-08-26 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 1, 2026, 4:12 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
196811 6.1 MEDIUM
Network
voidtools everything HTTP header injection vulnerability in Everything all versions except the Lite version may allow a remote attacker to inject an arbitrary script or alter the website that uses the product via unspeci… NVD-CWE-Other
CVE-2021-20784 2024-11-21 14:47 2021-07-14 Show GitHub Exploit DB Packet Storm
196812 8.8 HIGH
Network
tipsandtricks-hq software_license_manager Cross-site request forgery (CSRF) vulnerability in Software License Manager versions prior to 4.4.6 allows remote attackers to hijack the authentication of administrators via unspecified vectors. CWE-352
 Origin Validation Error
CVE-2021-20782 2024-11-21 14:47 2021-07-14 Show GitHub Exploit DB Packet Storm
196813 8.8 HIGH
Network
pluginus wordpress_meta_data_and_taxonomies_filter Cross-site request forgery (CSRF) vulnerability in WordPress Meta Data Filter & Taxonomies Filter versions prior to v.1.2.8 and versions prior to v.2.2.8 allows remote attackers to hijack the authent… CWE-352
 Origin Validation Error
CVE-2021-20781 2024-11-21 14:47 2021-07-14 Show GitHub Exploit DB Packet Storm
196814 7.5 HIGH
Network
retty retty Retty App for Android versions prior to 4.8.13 and Retty App for iOS versions prior to 4.11.14 uses a hard-coded API key for an external service. By exploiting this vulnerability, API key for an exte… CWE-798
 Use of Hard-coded Credentials
CVE-2021-20748 2024-11-21 14:47 2021-07-14 Show GitHub Exploit DB Packet Storm
196815 4.3 MEDIUM
Network
retty retty Improper authorization in handler for custom URL scheme vulnerability in Retty App for Android versions prior to 4.8.13 and Retty App for iOS versions prior to 4.11.14 allows a remote attacker to lea… CWE-862
 Missing Authorization
CVE-2021-20747 2024-11-21 14:47 2021-07-14 Show GitHub Exploit DB Packet Storm
196816 8.8 HIGH
Network
wp-currency wordpress_currency_switcher Cross-site request forgery (CSRF) vulnerability in WPCS - WordPress Currency Switcher 1.1.6 and earlier allows remote attackers to hijack the authentication of administrators via unspecified vectors. CWE-352
 Origin Validation Error
CVE-2021-20780 2024-11-21 14:47 2021-07-7 Show GitHub Exploit DB Packet Storm
196817 8.8 HIGH
Network
codemiq wordpress_email_template_designer Cross-site request forgery (CSRF) vulnerability in WordPress Email Template Designer - WP HTML Mail versions prior to 3.0.8 allows remote attackers to hijack the authentication of administrators via … CWE-352
 Origin Validation Error
CVE-2021-20779 2024-11-21 14:47 2021-07-7 Show GitHub Exploit DB Packet Storm
196818 4.3 MEDIUM
Network
gu-global gu Improper authorization in handler for custom URL scheme vulnerability in GU App for Android versions from 4.8.0 to 5.0.2 allows a remote attacker to lead a user to access an arbitrary website via the… CWE-862
 Missing Authorization
CVE-2021-20777 2024-11-21 14:47 2021-07-7 Show GitHub Exploit DB Packet Storm
196819 9.8 CRITICAL
Network
a-stage-inc at-40cm01sr_firmware
sct-40cm01sr_firmware
Improper authentication vulnerability in SCT-40CM01SR and AT-40CM01SR allows an attacker to bypass access restriction and execute an arbitrary command via telnet. CWE-287
Improper Authentication
CVE-2021-20776 2024-11-21 14:47 2021-07-7 Show GitHub Exploit DB Packet Storm
196820 6.5 MEDIUM
Adjacent
elecom wrc-1167fs-w_firmware
wrc-1167fs-b_firmware
wrc-1167fsa_firmware
WRC-1167FS-W, WRC-1167FS-B, and WRC-1167FSA all versions allow an unauthenticated network-adjacent attacker to obtain sensitive information via unspecified vectors. NVD-CWE-noinfo
CVE-2021-20738 2024-11-21 14:47 2021-07-7 Show GitHub Exploit DB Packet Storm