Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 31, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
226091 4.7 警告 Linux
レッドハット		 - Linux Kernel の fs/ext4/namei.c におけるサービス運用妨害 (DoS) の脆弱性 CWE-399
リソース管理の問題 		CVE-2013-2015 2013-04-30 18:36 2013-01-17 Show GitHub Exploit DB Packet Storm
226092 6.9 警告 Blue Marble Geographics - Global Mapper における権限を取得される脆弱性 CWE-Other
その他 		CVE-2013-0727 2013-04-30 18:25 2013-04-26 Show GitHub Exploit DB Packet Storm
226093 7.2 危険 ヒューレット・パッカード - HP Storage Data Protector における権限を取得される脆弱性 CWE-noinfo
情報不足 		CVE-2012-5220 2013-04-30 18:24 2013-04-24 Show GitHub Exploit DB Packet Storm
226094 4 警告 The phpMyAdmin Project - phpMyAdmin の export.php における値を挿入される脆弱性 CWE-noinfo
情報不足 		CVE-2013-3241 2013-04-30 18:23 2013-04-24 Show GitHub Exploit DB Packet Storm
226095 6.5 警告 The phpMyAdmin Project - phpMyAdmin のエクスポート機能におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2013-3240 2013-04-30 18:21 2013-04-24 Show GitHub Exploit DB Packet Storm
226096 6.8 警告 Crunchify - WordPress 用 FourSquare Checkins プラグインにおけるクロスサイトリクエストフォージェリの脆弱性 CWE-352
同一生成元ポリシー違反 		CVE-2013-2709 2013-04-30 17:54 2013-04-22 Show GitHub Exploit DB Packet Storm
226097 6.8 警告 Crunchify - WordPress 用 All in One Webmaster プラグインにおけるクロスサイトリクエストフォージェリの脆弱性 CWE-352
同一生成元ポリシー違反 		CVE-2013-2696 2013-04-30 17:52 2013-04-22 Show GitHub Exploit DB Packet Storm
226098 5 警告 Blink Web Effects - WordPress 用 Social Media Widget プラグインにおける任意のファイルのアップロードを強制される脆弱性 CWE-noinfo
情報不足 		CVE-2013-1949 2013-04-30 17:51 2013-04-9 Show GitHub Exploit DB Packet Storm
226099 10 危険 Rob Westgeest - Ruby 用 md2pdf gem の converter.rb における任意のコマンドを実行される脆弱性 CWE-noinfo
情報不足 		CVE-2013-1948 2013-04-30 17:51 2013-04-10 Show GitHub Exploit DB Packet Storm
226100 9.3 危険 Kelly D. Redding - Ruby 用 kelredd-pruview gem における任意のコマンドを実行される脆弱性 CWE-78
OSコマンド・インジェクション 		CVE-2013-1947 2013-04-30 17:50 2013-04-4 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 31, 2026, 4:16 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
209831 6.1 MEDIUM
Network 		macs_cms_project macs_cms Macrob7 Macs Framework Content Management System - 1.14f was discovered to contain a cross-site scripting (XSS) vulnerability in the search input field of the search module. CWE-79
Cross-site Scripting 		CVE-2020-23047 2024-11-21 14:13 2021-10-23 Show GitHub Exploit DB Packet Storm
209832 6.1 MEDIUM
Network 		dedecms dedecms DedeCMS v7.5 SP2 was discovered to contain multiple cross-site scripting (XSS) vulnerabilities in the component tpl.php via the `filename`, `mid`, `userid`, and `templet' parameters. CWE-79
Cross-site Scripting 		CVE-2020-23046 2024-11-21 14:13 2021-10-23 Show GitHub Exploit DB Packet Storm
209833 7.2 HIGH
Network 		macs_cms_project macs_cms Macrob7 Macs Framework Content Management System - 1.14f was discovered to contain a SQL injection vulnerability via the 'roleId' parameter of the `editRole` and `deletUser` modules. CWE-89
SQL Injection 		CVE-2020-23045 2024-11-21 14:13 2021-10-23 Show GitHub Exploit DB Packet Storm
209834 5.4 MEDIUM
Network 		dedecms dedecms DedeCMS v7.5 SP2 was discovered to contain multiple cross-site scripting (XSS) vulnerabilities in the component file_pic_view.php via the `activepath`, `keyword`, `tag`, `fmdo=x&filename`, `CKEditor`… CWE-79
Cross-site Scripting 		CVE-2020-23044 2024-11-21 14:13 2021-10-23 Show GitHub Exploit DB Packet Storm
209835 8.8 HIGH
Network 		air_sender_project air_sender Tran Tu Air Sender v1.0.2 was discovered to contain an arbitrary file upload vulnerability in the upload module. This vulnerability allows attackers to execute arbitrary code via a crafted file. CWE-434
 Unrestricted Upload of File with Dangerous Type  		CVE-2020-23043 2024-11-21 14:13 2021-10-23 Show GitHub Exploit DB Packet Storm
209836 6.1 MEDIUM
Network 		dropouts super_backup Dropouts Technologies LLP Super Backup v2.0.5 was discovered to contain a cross-site scripting (XSS) vulnerability in the path parameter of the `list` and `download` module. This vulnerability allows… CWE-79
Cross-site Scripting 		CVE-2020-23042 2024-11-21 14:13 2021-10-23 Show GitHub Exploit DB Packet Storm
209837 6.1 MEDIUM
Network 		dropouts air_share Dropouts Technologies LLP Air Share v1.2 was discovered to contain a cross-site scripting (XSS) vulnerability in the path parameter of the `list` and `download` exception-handling. This vulnerability… CWE-79
Cross-site Scripting 		CVE-2020-23041 2024-11-21 14:13 2021-10-23 Show GitHub Exploit DB Packet Storm
209838 7.5 HIGH
Network 		sky_file_project sky_file Sky File v2.1.0 contains a directory traversal vulnerability in the FTP server which allows attackers to access sensitive data and files via 'null' path commands. CWE-22
Path Traversal 		CVE-2020-23040 2024-11-21 14:13 2021-10-23 Show GitHub Exploit DB Packet Storm
209839 5.4 MEDIUM
Network 		newsoftwares folder_lock Folder Lock v3.4.5 was discovered to contain a stored cross-site scripting (XSS) vulnerability in the Create Folder function under the 'create' module. This vulnerability allows attackers to execute … CWE-79
Cross-site Scripting 		CVE-2020-23039 2024-11-21 14:13 2021-10-23 Show GitHub Exploit DB Packet Storm
209840 7.5 HIGH
Network 		kumilabs swift_file_transfer Swift File Transfer Mobile v1.1.2 and below was discovered to contain an information disclosure vulnerability in the path parameter. This vulnerability is exploited via an error caused by including n… CWE-22
Path Traversal 		CVE-2020-23038 2024-11-21 14:13 2021-10-23 Show GitHub Exploit DB Packet Storm