Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 31, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
226191	3.5	注意	pd-admin	-	pd-admin にクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2013-0129	2013-04-23 11:09	2013-04-16	Show	GitHub Exploit DB Packet Storm

226192	7.8	危険	Arecont Vision	-	AV1355DN にサービス運用妨害 (DoS) の脆弱性	CWE-noinfo 情報不足	CVE-2013-0139	2013-04-22 16:55	2013-04-15	Show	GitHub Exploit DB Packet Storm

226193	4.9	警告	シスコシステムズ	-	Cisco ASA 上で稼働するクライアントレス SSL VPN におけるサービス運用妨害 (DoS) の脆弱性	CWE-362 競合状態	CVE-2013-1199	2013-04-22 16:49	2013-04-17	Show	GitHub Exploit DB Packet Storm

226194	7.5	危険	Joomla!	-	Joomla! における重要な情報を取得される脆弱性	CWE-Other その他	CVE-2013-1453	2013-04-22 16:48	2013-02-4	Show	GitHub Exploit DB Packet Storm

226195	5	警告	シスコシステムズ	-	Cisco ASA デバイスの ISAKMP の実装におけるグループを列挙される脆弱性	CWE-200 情報漏えい	CVE-2013-1194	2013-04-22 16:46	2013-04-17	Show	GitHub Exploit DB Packet Storm

226196	7.5	危険	シスコシステムズ	-	Cisco Network Admission Control Manager における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2013-1177	2013-04-22 16:39	2013-04-17	Show	GitHub Exploit DB Packet Storm

226197	7.1	危険	シスコシステムズ	-	Cisco TelePresence MCU デバイスおよび TelePresence Server におけるサービス運用妨害 (DoS) の脆弱性	CWE-20 不適切な入力確認	CVE-2013-1176	2013-04-22 16:38	2013-04-17	Show	GitHub Exploit DB Packet Storm

226198	4.3	警告	chatelao	-	PHP Address Book の edit.php におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2013-1749	2013-04-22 16:32	2013-04-18	Show	GitHub Exploit DB Packet Storm

226199	7.5	危険	chatelao	-	PHP Address Book における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2013-1748	2013-04-22 16:17	2013-04-18	Show	GitHub Exploit DB Packet Storm

226200	10	危険	Rockwell Automation	-	Rockwell Automation RSLinx Enterprise の LogReceiver.exe におけるバッファオーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2012-4715	2013-04-22 16:02	2013-04-5	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 31, 2026, 4:16 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
209671	9.8	CRITICAL Network	moog	exvf5c-2_firmware exvp7c2-3_firmware	The administration console of the Moog EXO Series EXVF5C-2 and EXVP7C2-3 units features a 'statusbroadcast' command that can spawn a given process repeatedly at a certain time interval as 'root'. One…	CWE-78 OS Command	CVE-2020-24054	2024-11-21 14:14	2020-08-22	Show	GitHub Exploit DB Packet Storm

209672	7.5	HIGH Network	moog	exvf5c-2_firmware exvp7c2-3_firmware	Moog EXO Series EXVF5C-2 and EXVP7C2-3 units have a hardcoded credentials vulnerability. This could cause a confidentiality issue when using the FTP, Telnet, or SSH protocols.	CWE-798 Use of Hard-coded Credentials	CVE-2020-24053	2024-11-21 14:14	2020-08-22	Show	GitHub Exploit DB Packet Storm

209673	9.1	CRITICAL Network	moog	exvf5c-2_firmware exvp7c2-3_firmware	Several XML External Entity (XXE) vulnerabilities in the Moog EXO Series EXVF5C-2 and EXVP7C2-3 units allow remote unauthenticated users to read arbitrary files via a crafted Document Type Definition…	CWE-611 XXE	CVE-2020-24052	2024-11-21 14:14	2020-08-22	Show	GitHub Exploit DB Packet Storm

209674	9.8	CRITICAL Network	moog	exvf5c-2_firmware exvp7c2-3_firmware	The Moog EXO Series EXVF5C-2 and EXVP7C2-3 units support the ONVIF interoperability IP-based physical security protocol, which requires authentication for some of its operations. It was found that th…	CWE-306 Missing Authentication for Critical Function	CVE-2020-24051	2024-11-21 14:14	2020-08-22	Show	GitHub Exploit DB Packet Storm

209675	7.5	HIGH Network	hashicorp	vault-ssh-helper	HashiCorp vault-ssh-helper up to and including version 0.1.6 incorrectly accepted Vault-issued SSH OTPs for the subnet in which a host's network interface was located, rather than the specific IP add…	CWE-20 Improper Input Validation	CVE-2020-24359	2024-11-21 14:14	2020-08-21	Show	GitHub Exploit DB Packet Storm

209676	9.8	CRITICAL Network	student_management_system_project	student_management_system	Kabir Alhasan Student Management System 1.0 is vulnerable to Authentication Bypass via "Username: admin'# && Password: (Write Something)".	CWE-89 SQL Injection	CVE-2020-23935	2024-11-21 14:14	2020-08-21	Show	GitHub Exploit DB Packet Storm

209677	9.8	CRITICAL Network	phpgurukul	vehicle_parking_management_system	PHPGurukul Vehicle Parking Management System 1.0 is vulnerable to Authentication Bypass via "Username: admin'# && Password: (Write Something)".	CWE-89 SQL Injection	CVE-2020-23936	2024-11-21 14:14	2020-08-20	Show	GitHub Exploit DB Packet Storm

209678	7.5	HIGH Network	icinga debian suse	icinga_web_2 debian_linux package_hub	Icinga Icinga Web2 2.0.0 through 2.6.4, 2.7.4 and 2.8.2 has a Directory Traversal vulnerability which allows an attacker to access arbitrary files that are readable by the process running Icinga Web …	CWE-22 Path Traversal	CVE-2020-24368	2024-11-21 14:14	2020-08-20	Show	GitHub Exploit DB Packet Storm

209679	7.1	HIGH Local	linux canonical opensuse oracle starwindsoftware	linux_kernel ubuntu_linux leap sd-wan_edge starwind_virtual_san	In the Linux kernel before 5.7.8, fs/nfsd/vfs.c (in the NFS server) can set incorrect permissions on new filesystem objects when the filesystem lacks ACL support, aka CID-22cf8419f131. This occurs be…	CWE-732 Incorrect Permission Assignment for Critical Resource	CVE-2020-24394	2024-11-21 14:14	2020-08-19	Show	GitHub Exploit DB Packet Storm

209680	7.5	HIGH Network	gunet	open_eclass_platform	GUnet Open eClass Platform (aka openeclass) before 3.11 might allow remote attackers to read students' submitted assessments because it does not ensure that the web server blocks directory listings, …	CWE-200 Information Exposure	CVE-2020-24381	2024-11-21 14:14	2020-08-19	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed