Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 8, 2026, 4:01 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
226281 4.6 警告 ヒューレット・パッカード - 複数の HP Client 製品上で稼働する HP Smart Zero Core における重要な情報を取得される脆弱性 CWE-noinfo
情報不足 		CVE-2013-2339 2013-07-2 16:36 2013-06-24 Show GitHub Exploit DB Packet Storm
226282 5 警告 Data Security Systems Solutions Pte - DS3 Authentication Server における任意のエラーページテキストを挿入される脆弱性 CWE-20
不適切な入力確認 		CVE-2013-4098 2013-07-2 16:35 2013-06-2 Show GitHub Exploit DB Packet Storm
226283 5 警告 Data Security Systems Solutions Pte - DS3 Authentication Server における重要な情報を取得される脆弱性 CWE-22
パス・トラバーサル 		CVE-2013-4097 2013-07-2 16:33 2013-06-2 Show GitHub Exploit DB Packet Storm
226284 9 危険 Data Security Systems Solutions Pte - DS3 Authentication Server における任意のコマンドを実行される脆弱性 CWE-20
不適切な入力確認 		CVE-2013-4096 2013-07-2 16:31 2013-06-2 Show GitHub Exploit DB Packet Storm
226285 6.5 警告 Imperva Inc. - Imperva SecureSphere の SecureSphere Operations Manager Management Server における任意のコマンドを実行される脆弱性 CWE-20
不適切な入力確認 		CVE-2013-4095 2013-07-2 16:31 2013-06-2 Show GitHub Exploit DB Packet Storm
226286 6.5 警告 Imperva Inc. - Imperva SecureSphere の SecureSphere Operations Manager Management Server における実行可能なファイルをアップロードされる脆弱性 CWE-20
不適切な入力確認 		CVE-2013-4094 2013-07-2 16:30 2013-06-2 Show GitHub Exploit DB Packet Storm
226287 5 警告 Imperva Inc. - Imperva SecureSphere の SecureSphere Operations Manager Management Server における重要な情報を取得される脆弱性 CWE-22
パス・トラバーサル 		CVE-2013-4093 2013-07-2 16:28 2013-06-2 Show GitHub Exploit DB Packet Storm
226288 5 警告 Imperva Inc. - Imperva SecureSphere の SecureSphere Operations Manager Management Server における重要な情報を取得される脆弱性 CWE-255
証明書・パスワード管理 		CVE-2013-4092 2013-07-2 16:26 2013-06-2 Show GitHub Exploit DB Packet Storm
226289 7.5 危険 Imperva Inc. - Imperva SecureSphere の SecureSphere Operations Manager Management Server におけるアクセス権を取得される脆弱性 CWE-255
証明書・パスワード管理 		CVE-2013-4091 2013-07-2 16:15 2013-06-2 Show GitHub Exploit DB Packet Storm
226290 7.5 危険 Indra - EDItran Communications Platform の editcp におけるバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2010-5288 2013-07-2 16:08 2010-06-25 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 8, 2026, 4:09 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
208981 6.5 MEDIUM
Network 		hashicorp nomad HashiCorp Nomad and Nomad Enterprise 0.9.0 up to 0.12.7 client Docker file sandbox feature may be subverted when not explicitly disabled or when using a volume mount type. Fixed in 0.12.8, 0.11.7, an… CWE-22
Path Traversal 		CVE-2020-28348 2024-11-21 14:22 2020-11-24 Show GitHub Exploit DB Packet Storm
208982 9.8 CRITICAL
Network 		private-ip_project private-ip Insufficient RegEx in private-ip npm package v1.0.5 and below insufficiently filters reserved IP ranges resulting in indeterminate SSRF. An attacker can perform a large range of requests to ARIN rese… CWE-918
Server-Side Request Forgery (SSRF)  		CVE-2020-28360 2024-11-21 14:22 2020-11-24 Show GitHub Exploit DB Packet Storm
208983 7.8 HIGH
Local 		broadcom unified_infrastructure_management CA Unified Infrastructure Management 20.1 and earlier contains a vulnerability in the robot (controller) component that allows local attackers to elevate privileges. NVD-CWE-noinfo
CVE-2020-28421 2024-11-21 14:22 2020-11-24 Show GitHub Exploit DB Packet Storm
208984 6.5 MEDIUM
Network 		hashicorp consul HashiCorp Consul and Consul Enterprise 1.2.0 up to 1.8.5 allowed operators with operator:read ACL permissions to read the Connect CA private key configuration. Fixed in 1.6.10, 1.7.10, and 1.8.6. CWE-863
 Incorrect Authorization 		CVE-2020-28053 2024-11-21 14:22 2020-11-23 Show GitHub Exploit DB Packet Storm
208985 7.8 HIGH
Local 		securityonionsolutions security_onion Security Onion v2 prior to 2.3.10 has an incorrect sudo configuration, which allows the administrative user to obtain root access without using the sudo password by editing and executing /home/<user>… CWE-306
Missing Authentication for Critical Function 		CVE-2020-27985 2024-11-21 14:22 2020-11-23 Show GitHub Exploit DB Packet Storm
208986 8.8 HIGH
Network 		schneider-electric ecostruxure_control_expert A CWE-494: Download of Code Without Integrity Check vulnerability exists in PLC Simulator on EcoStruxureª Control Expert (now Unity Pro) (all versions) that could cause unauthorized command execution… - CVE-2020-28213 2024-11-21 14:22 2020-11-20 Show GitHub Exploit DB Packet Storm
208987 9.8 CRITICAL
Network 		schneider-electric ecostruxure_control_expert A CWE-307: Improper Restriction of Excessive Authentication Attempts vulnerability exists in PLC Simulator on EcoStruxureª Control Expert (now Unity Pro) (all versions) that could cause unauthorized … - CVE-2020-28212 2024-11-21 14:22 2020-11-20 Show GitHub Exploit DB Packet Storm
208988 7.8 HIGH
Local 		schneider-electric ecostruxure_control_expert A CWE-863: Incorrect Authorization vulnerability exists in PLC Simulator on EcoStruxureª Control Expert (now Unity Pro) (all versions) that could cause bypass of authentication when overwriting memor… - CVE-2020-28211 2024-11-21 14:22 2020-11-20 Show GitHub Exploit DB Packet Storm
208989 7.0 HIGH
Local 		schneider-electric enterprise_server_installer A CWE-428 Windows Unquoted Search Path vulnerability exists in EcoStruxure Building Operation Enterprise Server installer V1.9 - V3.1 and Enterprise Central installer V2.0 - V3.1 that could cause any… - CVE-2020-28209 2024-11-21 14:22 2020-11-20 Show GitHub Exploit DB Packet Storm
208990 6.1 MEDIUM
Network 		sokrates sowasql A Cross Site Scripting (XSS) vulnerability exists in OPAC in Sokrates SOWA SowaSQL through 5.6.1 via the sowacgi.php typ parameter. CWE-79
Cross-site Scripting 		CVE-2020-28350 2024-11-21 14:22 2020-11-20 Show GitHub Exploit DB Packet Storm