Vulnerability Search Top

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

Vulnerability Information Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":June 2, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
225791	6.5	警告	TIBCO Software	-	TIBCO Silver Mobile のサーバにおける権限を取得される脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2013-3315	2013-06-4 13:59	2013-05-8	Show	GitHub Exploit DB Packet Storm

225792	4.3	警告	PhotoGalleryCreator	-	WordPress 用 GRAND FlAGallery プラグインにおけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2013-3261	2013-06-4 13:55	2013-05-20	Show	GitHub Exploit DB Packet Storm

225793	10	危険	マイクロソフトアドビシステムズ Google	-	Adobe Flash Player および Adobe AIR における任意のコードを実行される脆弱性	CWE-119 バッファエラー	CVE-2013-3328	2013-06-3 15:58	2013-05-14	Show	GitHub Exploit DB Packet Storm

225794	7.5	危険	FreeBSD	-	FreeBSD の NFS サーバにおける任意のコードを実行される脆弱性	CWE-20 不適切な入力確認	CVE-2013-3266	2013-06-3 15:18	2013-04-29	Show	GitHub Exploit DB Packet Storm

225795	2.6	注意	ヒューレット・パッカード	-	HP ProCurve 1700 シリーズのスイッチにおけるクロスサイトリクエストフォージェリの脆弱性	CWE-352 同一生成元ポリシー違反	CVE-2012-5216	2013-06-3 12:01	2013-06-3	Show	GitHub Exploit DB Packet Storm

225796	7.5	危険	psychostats	-	PsychoStats の awards.php における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2013-3721	2013-06-3 11:27	2013-05-31	Show	GitHub Exploit DB Packet Storm

225797	4.3	警告	Feedweb Research	-	WordPress 用 Feedweb プラグインにおけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2013-3720	2013-06-3 11:26	2013-03-31	Show	GitHub Exploit DB Packet Storm

225798	4.3	警告	algisinfo	-	Joomla! 用の aiContactSafe コンポーネントにおけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2013-3719	2013-06-3 11:25	2013-04-16	Show	GitHub Exploit DB Packet Storm

225799	5	警告	シスコシステムズ	-	Cisco Nexus 1000V 上で稼働する Cisco NX-OS におけるサービス運用妨害 (DoS) の脆弱性	CWE-399 リソース管理の問題	CVE-2013-1213	2013-05-31 14:32	2013-02-13	Show	GitHub Exploit DB Packet Storm

225800	5	警告	シスコシステムズ	-	Cisco Nexus 1000V 上で稼働する Cisco NX-OS における VEM にアクセスされる脆弱性	CWE-287 不適切な認証	CVE-2013-1211	2013-05-31 14:19	2013-05-28	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:June 3, 2026, 4:18 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
209811	5.7	MEDIUM Physics	apple google	exposure_notifications	An issue was discovered in the GAEN (aka Google/Apple Exposure Notifications) protocol through 2020-09-29, as used in COVID-19 applications on Android and iOS. It allows a user to be put in a positio…	NVD-CWE-noinfo	CVE-2020-24721	2024-11-21 14:15	2020-10-1	Show	GitHub Exploit DB Packet Storm

209812	6.5	MEDIUM Network	mbconnectline	mymbconnect24 mbconnect24	An issue was discovered in MB CONNECT LINE mymbCONNECT24 and mbCONNECT24 through 2.6.1. There is a CSRF issue (with resultant SSRF) in the com_mb24proxy module, allowing attackers to steal session in…	CWE-352 CWE-918 Origin Validation Error Server-Side Request Forgery (SSRF)	CVE-2020-24570	2024-11-21 14:15	2020-10-1	Show	GitHub Exploit DB Packet Storm

209813	4.3	MEDIUM Network	mbconnectline	mymbconnect24 mbconnect24	An issue was discovered in MB CONNECT LINE mymbCONNECT24 and mbCONNECT24 through 2.6.1. There is a blind SQL injection in the knximport component via an advanced attack vector, allowing logged in att…	CWE-89 SQL Injection	CVE-2020-24569	2024-11-21 14:15	2020-10-1	Show	GitHub Exploit DB Packet Storm

209814	5.5	MEDIUM Local	trendmicro	apex_one	An out-of-bounds read information disclosure vulnerabilities in Trend Micro Apex One may allow a local attacker to disclose sensitive information to an unprivileged account on vulnerable installation…	CWE-125 Out-of-bounds Read	CVE-2020-24565	2024-11-21 14:15	2020-09-29	Show	GitHub Exploit DB Packet Storm

209815	5.5	MEDIUM Local	trendmicro	apex_one	An out-of-bounds read information disclosure vulnerabilities in Trend Micro Apex One may allow a local attacker to disclose sensitive information to an unprivileged account on vulnerable installation…	CWE-125 Out-of-bounds Read	CVE-2020-24564	2024-11-21 14:15	2020-09-29	Show	GitHub Exploit DB Packet Storm

209816	8.2	HIGH Local	freebsd omniosce openindiana netapp	freebsd omnios openindiana clustered_data_ontap	bhyve, as used in FreeBSD through 12.1 and illumos (e.g., OmniOS CE through r151034 and OpenIndiana through Hipster 2020.04), does not properly restrict VMCS and VMCB read/write operations, as demons…	CWE-862 Missing Authorization	CVE-2020-24718	2024-11-21 14:15	2020-09-25	Show	GitHub Exploit DB Packet Storm

209817	7.1	HIGH Local	mitel	micontact_center_business	The Ignite portal in Mitel MiContact Center Business before 9.3.0.0 could allow an attacker to execute arbitrary scripts due to insufficient input validation, aka XSS. A successful exploit could allo…	CWE-79 CWE-20 Cross-site Scripting Improper Input Validation	CVE-2020-24692	2024-11-21 14:15	2020-09-25	Show	GitHub Exploit DB Packet Storm

209818	8.8	HIGH Network	openmrs	htmlformentry	A remote code execution (RCE) vulnerability was discovered in the htmlformentry (aka HTML Form Entry) module before 3.11.0 for OpenMRS. By leveraging path traversal, a malicious Velocity Template Lan…	CWE-22 Path Traversal	CVE-2020-24621	2024-11-21 14:15	2020-09-25	Show	GitHub Exploit DB Packet Storm

209819	5.3	MEDIUM Network	pexip	pexip_infinity	Pexip Infinity before 24.1 has Improper Input Validation, leading to temporary denial of service via SIP.	CWE-20 Improper Input Validation	CVE-2020-24615	2024-11-21 14:15	2020-09-25	Show	GitHub Exploit DB Packet Storm

209820	5.3	MEDIUM Network	mitel	micloud_management_portal	Mitel MiCloud Management Portal before 6.1 SP5 could allow an attacker, by sending a crafted request, to retrieve sensitive information due to insufficient access control.	NVD-CWE-noinfo	CVE-2020-24595	2024-11-21 14:15	2020-09-25	Show	GitHub Exploit DB Packet Storm