Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 21, 2026, 6:01 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
225721	4.3	警告	DELL EMC (旧 EMC Corporation)	-	複数の EMC 製品におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2013-0936	2013-04-1 15:36	2013-03-28	Show	GitHub Exploit DB Packet Storm

225722	2.1	注意	Views Project	-	Drupal 用 Views モジュールにおけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2013-1878	2013-04-1 15:00	2013-03-20	Show	GitHub Exploit DB Packet Storm

225723	2.1	注意	Thomas Seidl	-	Drupal 用 Search API モジュールにおけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2013-2715	2013-04-1 14:58	2013-01-9	Show	GitHub Exploit DB Packet Storm

225724	6.4	警告	Chris Desautels	-	Drupal 用 Node Parameter Control モジュールにおける設定オプションを編集される脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2013-1859	2013-04-1 14:57	2013-03-13	Show	GitHub Exploit DB Packet Storm

225725	2.1	注意	Devsaran	-	Drupal 用 Simple Corporate テーマにおけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2013-1787	2013-04-1 14:56	2013-02-27	Show	GitHub Exploit DB Packet Storm

225726	2.1	注意	Devsaran	-	Drupal 用 Company Theme におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2013-1786	2013-04-1 14:56	2013-02-27	Show	GitHub Exploit DB Packet Storm

225727	2.1	注意	Devsaran	-	Drupal 用 Premium Responsive テーマにおけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2013-1785	2013-04-1 14:56	2013-02-27	Show	GitHub Exploit DB Packet Storm

225728	2.1	注意	Devsaran	-	Drupal 用 Clean Theme におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2013-1784	2013-04-1 14:55	2013-02-27	Show	GitHub Exploit DB Packet Storm

225729	2.1	注意	Devsaran	-	Drupal 用 Business Theme におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2013-1783	2013-04-1 14:54	2013-02-27	Show	GitHub Exploit DB Packet Storm

225730	2.1	注意	Devsaran	-	Drupal 用 Responsive Blog Theme におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2013-1782	2013-04-1 14:53	2013-02-27	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 21, 2026, 4:10 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
200281	5.4	MEDIUM Network	tecnick	tcexam	Insufficient output sanitization in TCExam 14.2.2 allows a remote, authenticated attacker to conduct persistent cross-site scripting (XSS) attacks by creating a crafted operator.	CWE-79 Cross-site Scripting	CVE-2020-5751	2024-11-21 14:34	2020-05-8	Show	GitHub Exploit DB Packet Storm

200282	6.1	MEDIUM Network	tecnick	tcexam	Insufficient output sanitization in TCExam 14.2.2 allows a remote, unauthenticated attacker to conduct persistent cross-site scripting (XSS) attacks via the self-registration feature.	CWE-79 Cross-site Scripting	CVE-2020-5750	2024-11-21 14:34	2020-05-8	Show	GitHub Exploit DB Packet Storm

200283	5.4	MEDIUM Network	tecnick	tcexam	Insufficient output sanitization in TCExam 14.2.2 allows a remote, authenticated attacker to conduct persistent cross-site scripting (XSS) attacks by creating a crafted group.	CWE-79 Cross-site Scripting	CVE-2020-5749	2024-11-21 14:34	2020-05-8	Show	GitHub Exploit DB Packet Storm

200284	6.1	MEDIUM Network	tecnick	tcexam	Insufficient output sanitization in TCExam 14.2.2 allows a remote, unauthenticated attacker to conduct persistent cross-site scripting (XSS) attacks via the self-registration feature.	CWE-79 Cross-site Scripting	CVE-2020-5748	2024-11-21 14:34	2020-05-8	Show	GitHub Exploit DB Packet Storm

200285	5.4	MEDIUM Network	tecnick	tcexam	Insufficient output sanitization in TCExam 14.2.2 allows a remote, authenticated attacker to conduct persistent cross-site scripting (XSS) attacks by creating a crafted test.	CWE-79 Cross-site Scripting	CVE-2020-5747	2024-11-21 14:34	2020-05-8	Show	GitHub Exploit DB Packet Storm

200286	5.4	MEDIUM Network	tecnick	tcexam	Insufficient output sanitization in TCExam 14.2.2 allows a remote, authenticated attacker to conduct persistent cross-site scripting (XSS) attacks by creating a crafted test.	CWE-79 Cross-site Scripting	CVE-2020-5746	2024-11-21 14:34	2020-05-8	Show	GitHub Exploit DB Packet Storm

200287	7.4	HIGH Network	tecnick	tcexam	Cross-site request forgery in TCExam 14.2.2 allows a remote attacker to perform sensitive application actions by tricking legitimate users into clicking a crafted link.	CWE-352 Origin Validation Error	CVE-2020-5745	2024-11-21 14:34	2020-05-8	Show	GitHub Exploit DB Packet Storm

200288	4.9	MEDIUM Network	tecnick	tcexam	Relative Path Traversal in TCExam 14.2.2 allows a remote, authenticated attacker to read the contents of arbitrary files on disk.	CWE-22 Path Traversal	CVE-2020-5744	2024-11-21 14:34	2020-05-8	Show	GitHub Exploit DB Packet Storm

200289	4.3	MEDIUM Network	tecnick	tcexam	Improper Control of Resource Identifiers in TCExam 14.2.2 allows a remote, authenticated attacker to access test metadata for which they don't have permission.	CWE-639 Authorization Bypass Through User-Controlled Key	CVE-2020-5743	2024-11-21 14:34	2020-05-8	Show	GitHub Exploit DB Packet Storm

200290	7.8	HIGH Local	f5	nginx_controller	On NGINX Controller versions 3.1.0-3.3.0, AVRD uses world-readable and world-writable permissions on its socket, which allows processes or users on the local system to write arbitrary data into the s…	CWE-732 Incorrect Permission Assignment for Critical Resource	CVE-2020-5895	2024-11-21 14:34	2020-05-7	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed