Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 2, 2026, 6 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
226091 4.3 警告 シスコシステムズ - Cisco Unified Computing System Central の Flash コンポーネント におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2013-1198 2013-04-30 19:42 2013-04-29 Show GitHub Exploit DB Packet Storm
226092 6.8 警告 シスコシステムズ - Cisco Adaptive Security Appliance の Easy VPN コンポーネントにおける権限を取得される脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2013-1215 2013-04-30 19:41 2013-04-24 Show GitHub Exploit DB Packet Storm
226093 4.4 警告 Linux - Linux Kernel の fs/cifs/transport.c におけるサービス運用妨害 (DoS) の脆弱性 CWE-362
競合状態
CVE-2013-3302 2013-04-30 18:37 2013-01-11 Show GitHub Exploit DB Packet Storm
226094 4.7 警告 Linux
レッドハット
- Linux Kernel の fs/ext4/namei.c におけるサービス運用妨害 (DoS) の脆弱性 CWE-399
リソース管理の問題
CVE-2013-2015 2013-04-30 18:36 2013-01-17 Show GitHub Exploit DB Packet Storm
226095 6.9 警告 Blue Marble Geographics - Global Mapper における権限を取得される脆弱性 CWE-Other
その他
CVE-2013-0727 2013-04-30 18:25 2013-04-26 Show GitHub Exploit DB Packet Storm
226096 7.2 危険 ヒューレット・パッカード - HP Storage Data Protector における権限を取得される脆弱性 CWE-noinfo
情報不足
CVE-2012-5220 2013-04-30 18:24 2013-04-24 Show GitHub Exploit DB Packet Storm
226097 4 警告 The phpMyAdmin Project - phpMyAdmin の export.php における値を挿入される脆弱性 CWE-noinfo
情報不足
CVE-2013-3241 2013-04-30 18:23 2013-04-24 Show GitHub Exploit DB Packet Storm
226098 6.5 警告 The phpMyAdmin Project - phpMyAdmin のエクスポート機能におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル
CVE-2013-3240 2013-04-30 18:21 2013-04-24 Show GitHub Exploit DB Packet Storm
226099 6.8 警告 Crunchify - WordPress 用 FourSquare Checkins プラグインにおけるクロスサイトリクエストフォージェリの脆弱性 CWE-352
同一生成元ポリシー違反
CVE-2013-2709 2013-04-30 17:54 2013-04-22 Show GitHub Exploit DB Packet Storm
226100 6.8 警告 Crunchify - WordPress 用 All in One Webmaster プラグインにおけるクロスサイトリクエストフォージェリの脆弱性 CWE-352
同一生成元ポリシー違反
CVE-2013-2696 2013-04-30 17:52 2013-04-22 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 2, 2026, 4:18 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
209501 6.1 MEDIUM
Network
igniterealtime openfire Ignite Realtime Openfire 4.5.1 has a reflected Cross-site scripting vulnerability which allows an attacker to execute arbitrary malicious URL via the vulnerable GET parameter searchName", "searchValu… CWE-79
Cross-site Scripting
CVE-2020-24602 2024-11-21 14:15 2020-09-3 Show GitHub Exploit DB Packet Storm
209502 6.1 MEDIUM
Network
igniterealtime openfire In Ignite Realtime Openfire 4.5.1 a Stored Cross-site Vulnerability allows an attacker to execute an arbitrary malicious URL via the vulnerable POST parameter searchName", "alias" in the import certi… CWE-79
Cross-site Scripting
CVE-2020-24601 2024-11-21 14:15 2020-09-3 Show GitHub Exploit DB Packet Storm
209503 7.5 HIGH
Network
djangoproject
canonical
fedoraproject
oracle
django
ubuntu_linux
fedora
zfs_storage_appliance_kit
An issue was discovered in Django 2.2 before 2.2.16, 3.0 before 3.0.10, and 3.1 before 3.1.1 (when Python 3.7+ is used). The intermediate-level directories of the filesystem cache had the system's st… CWE-276
Incorrect Default Permissions 
CVE-2020-24584 2024-11-21 14:15 2020-09-1 Show GitHub Exploit DB Packet Storm
209504 7.5 HIGH
Network
djangoproject
canonical
fedoraproject
oracle
django
ubuntu_linux
fedora
zfs_storage_appliance_kit
An issue was discovered in Django 2.2 before 2.2.16, 3.0 before 3.0.10, and 3.1 before 3.1.1 (when Python 3.7+ is used). FILE_UPLOAD_DIRECTORY_PERMISSIONS mode was not applied to intermediate-level d… CWE-276
Incorrect Default Permissions 
CVE-2020-24583 2024-11-21 14:15 2020-09-1 Show GitHub Exploit DB Packet Storm
209505 6.1 MEDIUM
Network
chamber_dashboard_business_directory_project chamber_dashboard_business_directory The Chamber Dashboard Business Directory plugin 3.2.8 for WordPress allows XSS. CWE-79
Cross-site Scripting
CVE-2020-24699 2024-11-21 14:15 2020-09-1 Show GitHub Exploit DB Packet Storm
209506 9.8 CRITICAL
Network
scalyr scalyr_agent The Scalyr Agent before 2.1.10 has Missing SSL Certificate Validation because, in some circumstances, native Python code is used that lacks a comparison of the hostname to commonName and subjectAltNa… CWE-295
Improper Certificate Validation 
CVE-2020-24715 2024-11-21 14:15 2020-08-28 Show GitHub Exploit DB Packet Storm
209507 9.8 CRITICAL
Network
scalyr scalyr_agent The Scalyr Agent before 2.1.10 has Missing SSL Certificate Validation because, in some circumstances, the openssl binary is called without the -verify_hostname option. CWE-295
Improper Certificate Validation 
CVE-2020-24714 2024-11-21 14:15 2020-08-28 Show GitHub Exploit DB Packet Storm
209508 6.5 MEDIUM
Network
jetbrains youtrack In JetBrains YouTrack versions before 2020.3.4313, 2020.2.11008, 2020.1.11011, 2019.1.65514, 2019.2.65515, and 2019.3.65516, an attacker can retrieve an issue description without appropriate access. NVD-CWE-noinfo
CVE-2020-24618 2024-11-21 14:15 2020-08-28 Show GitHub Exploit DB Packet Storm
209509 7.8 HIGH
Local
openzfs openzfs OpenZFS before 2.0.0-rc1, when used on FreeBSD, misinterprets group permissions as user permissions, as demonstrated by mode 0770 being equivalent to mode 0777. CWE-276
Incorrect Default Permissions 
CVE-2020-24717 2024-11-21 14:15 2020-08-28 Show GitHub Exploit DB Packet Storm
209510 7.8 HIGH
Local
openzfs openzfs OpenZFS before 2.0.0-rc1, when used on FreeBSD, allows execute permissions for all directories. CWE-863
 Incorrect Authorization
CVE-2020-24716 2024-11-21 14:15 2020-08-28 Show GitHub Exploit DB Packet Storm