Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 27, 2026, 4 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
226251 4.4 警告 Heshan Wanigasooriya - Drupal 用 Video モジュールにおける任意の PHP コードを実行される脆弱性 CWE-16
環境設定
CVE-2013-0224 2013-03-22 16:15 2013-01-23 Show GitHub Exploit DB Packet Storm
226252 6.8 警告 Leighton Whiting - Drupal 用 Mark Complete モジュールにおけるクロスサイトリクエストフォージェリの脆弱性 CWE-352
同一生成元ポリシー違反
CVE-2013-0207 2013-03-22 16:14 2013-01-16 Show GitHub Exploit DB Packet Storm
226253 6 警告 guybedford - Drupal 用 Live CSS モジュールにおける任意のコードを実行される脆弱性 CWE-Other
その他
CVE-2013-0206 2013-03-22 16:13 2013-01-9 Show GitHub Exploit DB Packet Storm
226254 6.8 警告 Klaus Purer - Drupal 用 RESTful Web Services モジュールにおけるクロスサイトリクエストフォージェリの脆弱性 CWE-352
同一生成元ポリシー違反
CVE-2013-0205 2013-03-22 16:13 2013-01-16 Show GitHub Exploit DB Packet Storm
226255 3.6 注意 レッドハット - libvirt におけるファイルを上書きされる脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2013-1766 2013-03-22 16:08 2013-03-20 Show GitHub Exploit DB Packet Storm
226256 5 警告 ZoneMinder - ZoneMinder におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル
CVE-2013-0332 2013-03-22 15:52 2011-05-30 Show GitHub Exploit DB Packet Storm
226257 7.5 危険 ZoneMinder - ZoneMinder の includes/functions.php における任意のコマンドを実行される脆弱性 CWE-noinfo
情報不足
CVE-2013-0232 2013-03-22 15:51 2013-01-25 Show GitHub Exploit DB Packet Storm
226258 5.1 警告 David King - Vino における UPnP ルータのポートがオープンになる問題 CWE-Other
その他
CVE-2011-1165 2013-03-22 14:43 2013-03-12 Show GitHub Exploit DB Packet Storm
226259 4.6 警告 David King - Vino における外部ネットワークに接続される脆弱性 CWE-16
環境設定
CVE-2011-1164 2013-03-22 14:24 2013-03-12 Show GitHub Exploit DB Packet Storm
226260 6 警告 Samba Project - Samba における任意のファイルを読まれる脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2013-1863 2013-03-22 13:50 2013-03-19 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 27, 2026, 4:52 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
209801 8.8 HIGH
Network
phpok phpok A Cross Site Request Forgery (CSRF) vulnerability exists in PHPOK 5.2.060 via admin.php?c=admin&f=save, which could let a remote malicious user execute arbitrary code. CWE-352
 Origin Validation Error
CVE-2020-19199 2024-11-21 14:09 2021-05-11 Show GitHub Exploit DB Packet Storm
209802 9.8 CRITICAL
Network
shopxo shopxo Incorrect Access Control in Shopxo v1.4.0 and v1.5.0 allows remote attackers to gain privileges in "/index.php" by manipulating the parameter "user_id" in the HTML request. NVD-CWE-Other
CVE-2020-19778 2024-11-21 14:09 2021-04-14 Show GitHub Exploit DB Packet Storm
209803 9.8 CRITICAL
Network
coreftp core_ftp Buffer overflow vulnerability in Core FTP Server v1.2 Build 583, via a crafted username. CWE-120
Classic Buffer Overflow
CVE-2020-19596 2024-11-21 14:09 2021-04-6 Show GitHub Exploit DB Packet Storm
209804 7.5 HIGH
Network
coreftp core_ftp Buffer overflow vulnerability in Core FTP Server v2 Build 697, via a crafted username. CWE-120
Classic Buffer Overflow
CVE-2020-19595 2024-11-21 14:09 2021-04-6 Show GitHub Exploit DB Packet Storm
209805 5.4 MEDIUM
Network
mblog_project mblog Cross Site Scripting (XSS) vulnerability in mblog 3.5 via the signature field to /settings/profile. CWE-79
Cross-site Scripting
CVE-2020-19619 2024-11-21 14:09 2021-04-2 Show GitHub Exploit DB Packet Storm
209806 5.4 MEDIUM
Network
mblog_project mblog Cross Site Scripting (XSS) vulnerability in mblog 3.5 via the post content field to /post/editing. CWE-79
Cross-site Scripting
CVE-2020-19618 2024-11-21 14:09 2021-04-2 Show GitHub Exploit DB Packet Storm
209807 5.4 MEDIUM
Network
mblog_project mblog Cross Site Scripting (XSS) vulnerability in mblog 3.5 via the nickname field to /settings/profile. CWE-79
Cross-site Scripting
CVE-2020-19617 2024-11-21 14:09 2021-04-2 Show GitHub Exploit DB Packet Storm
209808 5.4 MEDIUM
Network
mblog_project mblog Cross Site Scripting (XSS) vulnerability in mblog 3.5 via the post header field to /post/editing. CWE-79
Cross-site Scripting
CVE-2020-19616 2024-11-21 14:09 2021-04-2 Show GitHub Exploit DB Packet Storm
209809 7.5 HIGH
Network
flycms_project flycms Server Side Request Forgery (SSRF) vulnerability in saveUrlAs function in ImagesService.java in sunkaifei FlyCMS version 20190503. CWE-918
Server-Side Request Forgery (SSRF) 
CVE-2020-19613 2024-11-21 14:09 2021-04-2 Show GitHub Exploit DB Packet Storm
209810 6.1 MEDIUM
Network
insma wifi_mini_spy_1080p_hd_security_ip_camera_firmware Cross Site Scripting (XSS) vulnerability in INSMA Wifi Mini Spy 1080P HD Security IP Camera 1.9.7 B via all fields in the FTP settings page to the "goform/formSetFtpCfg" settings page. CWE-79
Cross-site Scripting
CVE-2020-19643 2024-11-21 14:09 2021-03-30 Show GitHub Exploit DB Packet Storm