Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 26, 2026, 10 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
225631 5.8 警告 DELL EMC (旧 EMC Corporation) - 複数の EMC Documentum 製品における重要な情報を取得される脆弱性 CWE-20
不適切な入力確認
CVE-2013-0939 2013-05-13 16:12 2013-05-9 Show GitHub Exploit DB Packet Storm
225632 4.3 警告 DELL EMC (旧 EMC Corporation) - 複数の EMC Documentum 製品におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2013-0938 2013-05-13 15:54 2013-05-9 Show GitHub Exploit DB Packet Storm
225633 5.8 警告 DELL EMC (旧 EMC Corporation) - 複数の EMC Documentum 製品における Web セッションをハイジャックされる脆弱性 CWE-287
不適切な認証
CVE-2013-0937 2013-05-13 15:53 2013-05-9 Show GitHub Exploit DB Packet Storm
225634 6.8 警告 IBM - Windows および Linux 上で稼働する IBM Notes における整数オーバーフローの脆弱性 CWE-189
数値処理の問題
CVE-2013-2977 2013-05-13 15:50 2013-05-6 Show GitHub Exploit DB Packet Storm
225635 3.5 注意 IBM - IBM Sterling Multi-Channel Fulfillment Solution および Sterling Selling and Fulfillment Foundation における重要なデータベース情報を取得される脆弱性 CWE-287
不適切な認証
CVE-2013-0578 2013-05-13 15:49 2013-05-2 Show GitHub Exploit DB Packet Storm
225636 4 警告 IBM - IBM Sterling Secure Proxy における重要な Java スタックトレース情報を取得される脆弱性 CWE-20
不適切な入力確認
CVE-2013-0520 2013-05-13 15:46 2013-05-3 Show GitHub Exploit DB Packet Storm
225637 5 警告 IBM - IBM Sterling Secure Proxy における重要な情報を取得される脆弱性 CWE-200
情報漏えい
CVE-2013-0519 2013-05-13 15:43 2013-05-3 Show GitHub Exploit DB Packet Storm
225638 4.3 警告 IBM - IBM Sterling Secure Proxy におけるクリックジャッキング攻撃を実行される脆弱性 CWE-20
不適切な入力確認
CVE-2013-0518 2013-05-13 15:40 2013-05-3 Show GitHub Exploit DB Packet Storm
225639 4 警告 シスコシステムズ - Cisco IOS XR の SNMP モジュールにおけるサービス運用妨害 (DoS) の脆弱性 CWE-200
情報漏えい
CVE-2013-1216 2013-05-10 18:48 2013-04-26 Show GitHub Exploit DB Packet Storm
225640 9.3 危険 シスコシステムズ - Cisco UCS の Manager コンポーネントの Web コンソールにおける LDAP 認証を回避される脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2013-1182 2013-05-10 18:47 2013-04-24 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 26, 2026, 4:05 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
212411 9.8 CRITICAL
Network
os4ed opensis openSIS before 7.4 allows SQL Injection. CWE-89
SQL Injection
CVE-2020-13380 2024-11-21 14:01 2020-07-2 Show GitHub Exploit DB Packet Storm
212412 5.5 MEDIUM
Local
avast avg_antivirus
free_antivirus
An elevation of privilege vulnerability exists in Avast Free Antivirus and AVG AntiVirus Free before 20.4 due to improperly handling hard links. The vulnerability allows local users to take control o… NVD-CWE-noinfo
CVE-2020-13657 2024-11-21 14:01 2020-06-30 Show GitHub Exploit DB Packet Storm
212413 4.8 MEDIUM
Network
form_builder_for_magento_2_project form_builder_for_magento_2 Form Builder 2.1.0 for Magento has multiple XSS issues that can be exploited against Magento 2 admin accounts via the Current_url or email field, or the User-Agent HTTP header. CWE-79
Cross-site Scripting
CVE-2020-13423 2024-11-21 14:01 2020-06-29 Show GitHub Exploit DB Packet Storm
212414 7.5 HIGH
Network
acf_to_rest_api_project acf_to_rest_api An issue was discovered in the acf-to-rest-api plugin through 3.1.0 for WordPress. It allows an insecure direct object reference via permalinks manipulation, as demonstrated by a wp-json/acf/v3/optio… CWE-639
 Authorization Bypass Through User-Controlled Key
CVE-2020-13700 2024-11-21 14:01 2020-06-25 Show GitHub Exploit DB Packet Storm
212415 9.8 CRITICAL
Network
bitrix24 bitrix24 Bitrix24 through 20.0.975 allows SSRF via an intranet IP address in the services/main/ajax.php?action=attachUrlPreview url parameter, if the destination URL hosts an HTML document containing '<meta n… CWE-918
Server-Side Request Forgery (SSRF) 
CVE-2020-13484 2024-11-21 14:01 2020-06-25 Show GitHub Exploit DB Packet Storm
212416 6.1 MEDIUM
Network
bitrix24 bitrix24 The Web Application Firewall in Bitrix24 through 20.0.0 allows XSS via the items[ITEMS][ID] parameter to the components/bitrix/mobileapp.list/ajax.php/ URI. CWE-79
Cross-site Scripting
CVE-2020-13483 2024-11-21 14:01 2020-06-25 Show GitHub Exploit DB Packet Storm
212417 8.8 HIGH
Network
expressionengine expressionengine ExpressionEngine before 5.3.2 allows remote attackers to upload and execute arbitrary code in a .php%20 file via Compose Msg, Add attachment, and Save As Draft actions. A user with low privileges (me… CWE-434
 Unrestricted Upload of File with Dangerous Type 
CVE-2020-13443 2024-11-21 14:01 2020-06-25 Show GitHub Exploit DB Packet Storm
212418 5.4 MEDIUM
Network
verint workforce_optimization Verint Workforce Optimization (WFO) 15.2 allows HTML injection via the "send email" feature. CWE-79
Cross-site Scripting
CVE-2020-13480 2024-11-21 14:01 2020-06-23 Show GitHub Exploit DB Packet Storm
212419 6.1 MEDIUM
Network
victorcms_project victorcms Victor CMS 1.0 has Persistent XSS in admin/users.php?source=add_user via the user_name, user_firstname, or user_lastname parameter. CWE-79
Cross-site Scripting
CVE-2020-13427 2024-11-21 14:01 2020-06-23 Show GitHub Exploit DB Packet Storm
212420 6.5 MEDIUM
Network
bdtask multi-scheduler The Multi-Scheduler plugin 1.0.0 for WordPress has a Cross-Site Request Forgery (CSRF) vulnerability in the forms it presents, allowing the possibility of deleting records (users) when an ID is known. CWE-352
 Origin Validation Error
CVE-2020-13426 2024-11-21 14:01 2020-06-23 Show GitHub Exploit DB Packet Storm