Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 26, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
225621	4.3	警告	georgemathewk	-	WordPress 用 Traffic Analyzer プラグインの js/ta_loaded.js.php におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2013-3526	2013-05-14 15:37	2013-05-10	Show	GitHub Exploit DB Packet Storm

225622	7.5	危険	David Clark	-	phpVMS 用 Pop Up News モジュールにおける SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2013-3524	2013-05-14 15:36	2013-05-10	Show	GitHub Exploit DB Packet Storm

225623	7.5	危険	greg jennings	-	This HTML Is Simple における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2013-3523	2013-05-14 15:35	2013-04-1	Show	GitHub Exploit DB Packet Storm

225624	6.5	警告	vBulletin Solutions, Inc.	-	vBulletin の index.php/ajax/api/reputation/vote における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2013-3522	2013-05-14 15:34	2013-05-10	Show	GitHub Exploit DB Packet Storm

225625	4.6	警告	シスコシステムズ	-	Cisco Aggregation Services Router Route Processor 上で稼働する Cisco IOS におけるサービス運用妨害 (DoS) 状態にされる脆弱性	CWE-399 リソース管理の問題	CVE-2013-1136	2013-05-14 14:52	2013-05-13	Show	GitHub Exploit DB Packet Storm

225626	10	危険	phpvms.net	-	phpVMS の admin/action.php における脆弱性	CWE-noinfo 情報不足	CVE-2012-6552	2013-05-14 12:00	2012-08-24	Show	GitHub Exploit DB Packet Storm

225627	9.3	危険	サムスン	-	MarkAny ContentSAFER MASetupCaller の ActiveX コントロールに脆弱性	CWE-94 コード・インジェクション	CVE-2012-2990	2013-05-13 17:59	2012-08-24	Show	GitHub Exploit DB Packet Storm

225628	4.3	警告	WPPA Opa Jaap	-	WordPress 用 WP Photo Album Plus プラグインの wp-admin/admin.php におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2013-3254	2013-05-13 17:32	2013-05-6	Show	GitHub Exploit DB Packet Storm

225629	6.8	警告	NetWebLogic	-	WordPress 用 Login With Ajax プラグインにおけるクロスサイトリクエストフォージェリの脆弱性	CWE-352 同一生成元ポリシー違反	CVE-2013-2707	2013-05-13 17:31	2013-05-6	Show	GitHub Exploit DB Packet Storm

225630	5	警告	シスコシステムズ	-	Cisco Unified Presence のサーバにおけるサービス運用妨害 (DoS) の脆弱性	CWE-399 リソース管理の問題	CVE-2013-1242	2013-05-13 17:30	2013-05-7	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 26, 2026, 4:05 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
210971	5.4	MEDIUM Network	jh_captcha_project	jh_captcha	The jh_captcha extension through 2.1.3, and 3.x through 3.0.2, for TYPO3 allows XSS.	CWE-79 Cross-site Scripting	CVE-2020-15514	2024-11-21 14:05	2020-07-7	Show	GitHub Exploit DB Packet Storm

210972	5.3	MEDIUM Network	mittwald	typo3_forum	The typo3_forum extension before 1.2.1 for TYPO3 has Incorrect Access Control.	CWE-863 Incorrect Authorization	CVE-2020-15513	2024-11-21 14:05	2020-07-7	Show	GitHub Exploit DB Packet Storm

210973	6.5	MEDIUM Adjacent	nordicsemi	dfu_library android_ble_library	Nordic Semiconductor Android BLE Library through 2.2.1 and DFU Library through 1.10.4 for Android (as used by nRF Connect and other applications) can engage in unencrypted communication while showing…	CWE-319 Cleartext Transmission of Sensitive Information	CVE-2020-15509	2024-11-21 14:05	2020-07-7	Show	GitHub Exploit DB Packet Storm

210974	5.3	MEDIUM Network	venki	supravizio_bpm	A user enumeration vulnerability flaw was found in Venki Supravizio BPM 10.1.2. This issue occurs during password recovery, where a difference in error messages could allow an attacker to determine i…	CWE-203 Information Exposure Through Discrepancy	CVE-2020-15392	2024-11-21 14:05	2020-07-7	Show	GitHub Exploit DB Packet Storm

210975	9.8	CRITICAL Network	venki	supravizio_bpm	Venki Supravizio BPM 10.1.2 does not limit the number of authentication attempts. An unauthenticated user may exploit this vulnerability to launch a brute-force authentication attack against the Logi…	CWE-307 mproper Restriction of Excessive Authentication Attempts	CVE-2020-15367	2024-11-21 14:05	2020-07-7	Show	GitHub Exploit DB Packet Storm

210976	7.8	HIGH Local	xen debian opensuse fedoraproject	xen debian_linux leap fedora	An issue was discovered in Xen through 4.13.x, allowing Intel guest OS users to gain privileges or cause a denial of service because of non-atomic modification of a live EPT PTE. When mapping guest E…	CWE-362 Race Condition	CVE-2020-15567	2024-11-21 14:05	2020-07-7	Show	GitHub Exploit DB Packet Storm

210977	6.5	MEDIUM Local	xen debian	xen debian_linux	An issue was discovered in Xen through 4.13.x, allowing guest OS users to cause a host OS crash because of incorrect error handling in event-channel port allocation. The allocation of an event-channe…	CWE-754 Improper Check for Unusual or Exceptional Conditions	CVE-2020-15566	2024-11-21 14:05	2020-07-7	Show	GitHub Exploit DB Packet Storm

210978	8.8	HIGH Local	xen debian fedoraproject opensuse	xen debian_linux fedora leap	An issue was discovered in Xen through 4.13.x, allowing x86 Intel HVM guest OS users to cause a host OS denial of service or possibly gain privileges because of insufficient cache write-back under VT…	CWE-400 Uncontrolled Resource Consumption	CVE-2020-15565	2024-11-21 14:05	2020-07-7	Show	GitHub Exploit DB Packet Storm

210979	7.5	HIGH Network	mobileiron	reporting_database enterprise_connector cloud sentry core	An arbitrary file reading vulnerability in MobileIron Core versions 10.3.0.3 and earlier, 10.4.0.0, 10.4.0.1, 10.4.0.2, 10.4.0.3, 10.5.1.0, 10.5.2.0 and 10.6.0.0 that allows remote attackers to read …	NVD-CWE-noinfo	CVE-2020-15507	2024-11-21 14:05	2020-07-7	Show	GitHub Exploit DB Packet Storm

210980	6.5	MEDIUM Local	xen debian fedoraproject	xen debian_linux fedora	An issue was discovered in Xen through 4.13.x, allowing Arm guest OS users to cause a hypervisor crash because of a missing alignment check in VCPUOP_register_vcpu_info. The hypercall VCPUOP_register…	CWE-119 Incorrect Access of Indexable Resource ('Range Error')	CVE-2020-15564	2024-11-21 14:05	2020-07-7	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed