Vulnerability Search Top

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

Vulnerability Information Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":June 2, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
226081	4.3	警告	ヒューレット・パッカード	-	HP Managed Printing Administration におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2012-5219	2013-05-1 11:22	2013-04-25	Show	GitHub Exploit DB Packet Storm

226082	3.5	注意	IBM	-	複数の IBM 製品で使用される IBM Sametime のクライアントの実装におけるコマンドを送信される脆弱性	CWE-noinfo 情報不足	CVE-2013-0553	2013-05-1 11:21	2013-04-22	Show	GitHub Exploit DB Packet Storm

226083	3.5	注意	IBM	-	IBM Sametime の Sametime Links サーバにおけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2013-0533	2013-05-1 11:15	2013-04-22	Show	GitHub Exploit DB Packet Storm

226084	9.3	危険	IBM	-	IBM SPSS SamplePower の olch2x32 ActiveX コントロールにおける任意のコードを実行される脆弱性	CWE-noinfo 情報不足	CVE-2013-0593	2013-05-1 11:14	2013-04-26	Show	GitHub Exploit DB Packet Storm

226085	2.3	注意	IBM	-	IBM Application Support Facility for z/OS の IBM Document Connect for Application Support Facility におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2013-0572	2013-05-1 11:13	2013-04-25	Show	GitHub Exploit DB Packet Storm

226086	2.9	注意	IBM	-	IBM Application Support Facility for z/OS の IBM Document Connect for Application Support Facility におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2013-0571	2013-05-1 11:11	2013-04-25	Show	GitHub Exploit DB Packet Storm

226087	4.3	警告	IBM	-	IBM Connections におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2013-0569	2013-05-1 11:04	2013-04-25	Show	GitHub Exploit DB Packet Storm

226088	4.3	警告	シスコシステムズ	-	Cisco Unified Communications Domain Manager の Web フレームワークにおけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2013-1227	2013-04-30 19:48	2013-04-29	Show	GitHub Exploit DB Packet Storm

226089	6.1	警告	シスコシステムズ	-	Cisco Nexus 7000 デバイス上で稼働する Cisco NX-OS におけるサービス運用妨害 (DoS) の脆弱性	CWE-119 バッファエラー	CVE-2013-1226	2013-04-30 19:47	2013-04-29	Show	GitHub Exploit DB Packet Storm

226090	4.4	警告	シスコシステムズ	-	Cisco Intrusion Prevention System の SensorApp におけるサービス運用妨害 (DoS) の脆弱性	CWE-noinfo 情報不足	CVE-2013-1219	2013-04-30 19:45	2013-04-29	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:June 2, 2026, 4:18 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
209481	7.1	HIGH Local	mitel	micontact_center_business	The Ignite portal in Mitel MiContact Center Business before 9.3.0.0 could allow an attacker to execute arbitrary scripts due to insufficient input validation, aka XSS. A successful exploit could allo…	CWE-79 CWE-20 Cross-site Scripting Improper Input Validation	CVE-2020-24692	2024-11-21 14:15	2020-09-25	Show	GitHub Exploit DB Packet Storm

209482	8.8	HIGH Network	openmrs	htmlformentry	A remote code execution (RCE) vulnerability was discovered in the htmlformentry (aka HTML Form Entry) module before 3.11.0 for OpenMRS. By leveraging path traversal, a malicious Velocity Template Lan…	CWE-22 Path Traversal	CVE-2020-24621	2024-11-21 14:15	2020-09-25	Show	GitHub Exploit DB Packet Storm

209483	5.3	MEDIUM Network	pexip	pexip_infinity	Pexip Infinity before 24.1 has Improper Input Validation, leading to temporary denial of service via SIP.	CWE-20 Improper Input Validation	CVE-2020-24615	2024-11-21 14:15	2020-09-25	Show	GitHub Exploit DB Packet Storm

209484	5.3	MEDIUM Network	mitel	micloud_management_portal	Mitel MiCloud Management Portal before 6.1 SP5 could allow an attacker, by sending a crafted request, to retrieve sensitive information due to insufficient access control.	NVD-CWE-noinfo	CVE-2020-24595	2024-11-21 14:15	2020-09-25	Show	GitHub Exploit DB Packet Storm

209485	9.6	CRITICAL Network	mitel	micloud_management_portal	Mitel MiCloud Management Portal before 6.1 SP5 could allow an unauthenticated attacker to execute arbitrary scripts due to insufficient input validation, aka XSS. A successful exploit could allow an …	CWE-79 Cross-site Scripting	CVE-2020-24594	2024-11-21 14:15	2020-09-25	Show	GitHub Exploit DB Packet Storm

209486	7.2	HIGH Network	mitel	micloud_management_portal	Mitel MiCloud Management Portal before 6.1 SP5 could allow a remote attacker to conduct a SQL Injection attack and access user credentials due to improper input validation.	CWE-20 CWE-89 Improper Input Validation SQL Injection	CVE-2020-24593	2024-11-21 14:15	2020-09-25	Show	GitHub Exploit DB Packet Storm

209487	5.3	MEDIUM Network	mitel	micloud_management_portal	Mitel MiCloud Management Portal before 6.1 SP5 could allow an attacker, by sending a crafted request, to view system information due to insufficient output sanitization.	CWE-116 Improper Encoding or Escaping of Output	CVE-2020-24592	2024-11-21 14:15	2020-09-25	Show	GitHub Exploit DB Packet Storm

209488	9.8	CRITICAL Network	hpe	utility_computing_service_meter	Unathenticated directory traversal in the ReceiverServlet class doPost() method can lead to arbitrary remote code execution in HPE Pay Per Use (PPU) Utility Computing Service (UCS) Meter version 1.9.	CWE-22 Path Traversal	CVE-2020-24626	2024-11-21 14:15	2020-09-23	Show	GitHub Exploit DB Packet Storm

209489	7.5	HIGH Network	hpe	utility_computing_service_meter	Unathenticated directory traversal in the ReceiverServlet class doGet() method can lead to arbitrary file reads in HPE Pay Per Use (PPU) Utility Computing Service (UCS) Meter version 1.9.	CWE-22 Path Traversal	CVE-2020-24625	2024-11-21 14:15	2020-09-23	Show	GitHub Exploit DB Packet Storm

209490	7.5	HIGH Network	hpe	utility_computing_service_meter	Unathenticated directory traversal in the DownloadServlet class execute() method can lead to arbitrary file reads in HPE Pay Per Use (PPU) Utility Computing Service (UCS) Meter version 1.9.	CWE-22 Path Traversal	CVE-2020-24624	2024-11-21 14:15	2020-09-23	Show	GitHub Exploit DB Packet Storm