Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 28, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
225851 4.3 警告 Smarty Pants Plugins - WordPress 用 WP FuneralPress プラグインの user/obits.php におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2013-3529 2013-05-14 15:46 2013-05-10 Show GitHub Exploit DB Packet Storm
225852 7.5 危険 Vanilla Forums - Vanilla Forums の更新チェックにおける脆弱性 CWE-noinfo
情報不足 		CVE-2013-3528 2013-05-14 15:44 2013-04-5 Show GitHub Exploit DB Packet Storm
225853 7.5 危険 Vanilla Forums - Vanilla Forums における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2013-3527 2013-05-14 15:37 2013-04-5 Show GitHub Exploit DB Packet Storm
225854 4.3 警告 georgemathewk - WordPress 用 Traffic Analyzer プラグインの js/ta_loaded.js.php におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2013-3526 2013-05-14 15:37 2013-05-10 Show GitHub Exploit DB Packet Storm
225855 7.5 危険 David Clark - phpVMS 用 Pop Up News モジュールにおける SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2013-3524 2013-05-14 15:36 2013-05-10 Show GitHub Exploit DB Packet Storm
225856 7.5 危険 greg jennings - This HTML Is Simple における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2013-3523 2013-05-14 15:35 2013-04-1 Show GitHub Exploit DB Packet Storm
225857 6.5 警告 vBulletin Solutions, Inc. - vBulletin の index.php/ajax/api/reputation/vote における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2013-3522 2013-05-14 15:34 2013-05-10 Show GitHub Exploit DB Packet Storm
225858 4.6 警告 シスコシステムズ - Cisco Aggregation Services Router Route Processor 上で稼働する Cisco IOS におけるサービス運用妨害 (DoS) 状態にされる脆弱性 CWE-399
リソース管理の問題 		CVE-2013-1136 2013-05-14 14:52 2013-05-13 Show GitHub Exploit DB Packet Storm
225859 10 危険 phpvms.net - phpVMS の admin/action.php における脆弱性 CWE-noinfo
情報不足 		CVE-2012-6552 2013-05-14 12:00 2012-08-24 Show GitHub Exploit DB Packet Storm
225860 9.3 危険 サムスン - MarkAny ContentSAFER MASetupCaller の ActiveX コントロールに脆弱性 CWE-94
コード・インジェクション 		CVE-2012-2990 2013-05-13 17:59 2012-08-24 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 28, 2026, 4:16 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
200761 6.1 MEDIUM
Network 		hp icewall_sso_dfw
icewall_sso_dgfw 		A security vulnerability in HPE IceWall SSO Dfw and Dgfw (Domain Gateway Option) could be exploited remotely to cause a remote cross-site scripting (XSS). HPE has provided the following information t… CWE-79
Cross-site Scripting 		CVE-2020-7140 2024-11-21 14:36 2020-07-8 Show GitHub Exploit DB Packet Storm
200762 7.8 HIGH
Local 		mcafee network_security_management Exposure of Sensitive Information in McAfee Network Security Management (NSM) prior to 10.1.7.7 allows local users to gain unauthorised access to the root account via execution of carefully crafted c… CWE-200
Information Exposure 		CVE-2020-7284 2024-11-21 14:36 2020-07-4 Show GitHub Exploit DB Packet Storm
200763 8.8 HIGH
Local 		mcafee total_protection Privilege Escalation vulnerability in McAfee Total Protection (MTP) before 16.0.R26 allows local users to create and edit files via symbolic link manipulation in a location they would otherwise not h… CWE-269
 Improper Privilege Management 		CVE-2020-7283 2024-11-21 14:36 2020-07-3 Show GitHub Exploit DB Packet Storm
200764 6.3 MEDIUM
Local 		mcafee total_protection Privilege Escalation vulnerability in McAfee Total Protection (MTP) before 16.0.R26 allows local users to delete files the user would otherwise not have access to via manipulating symbolic links to r… CWE-59
Link Following 		CVE-2020-7282 2024-11-21 14:36 2020-07-3 Show GitHub Exploit DB Packet Storm
200765 6.3 MEDIUM
Local 		mcafee total_protection Privilege Escalation vulnerability in McAfee Total Protection (MTP) prior to 16.0.R26 allows local users to delete files the user would otherwise not have access to via manipulating symbolic links to… CWE-269
 Improper Privilege Management 		CVE-2020-7281 2024-11-21 14:36 2020-07-3 Show GitHub Exploit DB Packet Storm
200766 7.3 HIGH
Local 		nozominetworks guardian Nozomi Networks OS before 19.0.4 allows /#/network?tab=network_node_list.html CSV Injection. CWE-1236
 Improper Neutralization of Formula Elements in a CSV File 		CVE-2020-7049 2024-11-21 14:36 2020-07-1 Show GitHub Exploit DB Packet Storm
200767 8.0 HIGH
Adjacent 		zte netnumen_u31_r10_firmware The version V12.17.20T115 of ZTE U31R20 product is impacted by a design error vulnerability. An attacker could exploit the vulnerability to log in to the FTP server to tamper with the password, and i… NVD-CWE-Other
CVE-2020-6870 2024-11-21 14:36 2020-06-25 Show GitHub Exploit DB Packet Storm
200768 8.1 HIGH
Network 		fortinet fortideceptor An insufficient session expiration vulnerability in FortiDeceptor 3.0.0 and below allows an attacker to reuse the unexpired admin user session IDs to gain admin privileges, should the attacker be abl… CWE-613
 Insufficient Session Expiration 		CVE-2020-6644 2024-11-21 14:36 2020-06-23 Show GitHub Exploit DB Packet Storm
200769 5.5 MEDIUM
Local 		mcafee advanced_threat_defense Improper Access Control vulnerability in McAfee Advanced Threat Defense (ATD) prior to 4.10.0 allows local users to view sensitive files via a carefully crafted HTTP request parameter. CWE-200
Information Exposure 		CVE-2020-7262 2024-11-21 14:36 2020-06-22 Show GitHub Exploit DB Packet Storm
200770 8.1 HIGH
Network 		zte ztemarket_apk All versions up to 10.06 of ZTEMarket APK are impacted by an information leak vulnerability. Due to Activity Component exposure users can exploit this vulnerability to get the private cookie and exec… NVD-CWE-noinfo
CVE-2020-6869 2024-11-21 14:36 2020-06-18 Show GitHub Exploit DB Packet Storm