Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 6, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
226421 4.3 警告 ThemeLogik - CMSLogik におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2013-3535 2013-05-15 17:35 2013-05-13 Show GitHub Exploit DB Packet Storm
226422 4.3 警告 algisinfo - Joomla! 用の aiContactSafe コンポーネントにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2013-3534 2013-05-15 17:32 2013-04-16 Show GitHub Exploit DB Packet Storm
226423 2.6 注意 Fedora Project - 389 Directory Server の ldap/servers/slapd/search.c における重要な情報を取得される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2013-1897 2013-05-15 16:07 2013-03-28 Show GitHub Exploit DB Packet Storm
226424 7.5 危険 Virtual Access - Virtual Access Monitor における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2013-3533 2013-05-14 15:49 2013-05-10 Show GitHub Exploit DB Packet Storm
226425 7.5 危険 Web-Dorado - Drupal 用 Web Dorado Spider Video Player プラグインの settings.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2013-3532 2013-05-14 15:49 2013-05-10 Show GitHub Exploit DB Packet Storm
226426 7.5 危険 RadioCMS - RadioCMS の meneger.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2013-3531 2013-05-14 15:48 2013-05-10 Show GitHub Exploit DB Packet Storm
226427 7.5 危険 Fabricio Zuardi - WordPress 用 Spiffy XSPF Player プラグインの playlist.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2013-3530 2013-05-14 15:47 2013-05-10 Show GitHub Exploit DB Packet Storm
226428 4.3 警告 Smarty Pants Plugins - WordPress 用 WP FuneralPress プラグインの user/obits.php におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2013-3529 2013-05-14 15:46 2013-05-10 Show GitHub Exploit DB Packet Storm
226429 7.5 危険 Vanilla Forums - Vanilla Forums の更新チェックにおける脆弱性 CWE-noinfo
情報不足 		CVE-2013-3528 2013-05-14 15:44 2013-04-5 Show GitHub Exploit DB Packet Storm
226430 7.5 危険 Vanilla Forums - Vanilla Forums における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2013-3527 2013-05-14 15:37 2013-04-5 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 6, 2026, 4:18 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
208871 7.8 HIGH
Local 		securityonionsolutions security_onion Security Onion v2 prior to 2.3.10 has an incorrect sudo configuration, which allows the administrative user to obtain root access without using the sudo password by editing and executing /home/<user>… CWE-306
Missing Authentication for Critical Function 		CVE-2020-27985 2024-11-21 14:22 2020-11-23 Show GitHub Exploit DB Packet Storm
208872 8.8 HIGH
Network 		schneider-electric ecostruxure_control_expert A CWE-494: Download of Code Without Integrity Check vulnerability exists in PLC Simulator on EcoStruxureª Control Expert (now Unity Pro) (all versions) that could cause unauthorized command execution… - CVE-2020-28213 2024-11-21 14:22 2020-11-20 Show GitHub Exploit DB Packet Storm
208873 9.8 CRITICAL
Network 		schneider-electric ecostruxure_control_expert A CWE-307: Improper Restriction of Excessive Authentication Attempts vulnerability exists in PLC Simulator on EcoStruxureª Control Expert (now Unity Pro) (all versions) that could cause unauthorized … - CVE-2020-28212 2024-11-21 14:22 2020-11-20 Show GitHub Exploit DB Packet Storm
208874 7.8 HIGH
Local 		schneider-electric ecostruxure_control_expert A CWE-863: Incorrect Authorization vulnerability exists in PLC Simulator on EcoStruxureª Control Expert (now Unity Pro) (all versions) that could cause bypass of authentication when overwriting memor… - CVE-2020-28211 2024-11-21 14:22 2020-11-20 Show GitHub Exploit DB Packet Storm
208875 7.0 HIGH
Local 		schneider-electric enterprise_server_installer A CWE-428 Windows Unquoted Search Path vulnerability exists in EcoStruxure Building Operation Enterprise Server installer V1.9 - V3.1 and Enterprise Central installer V2.0 - V3.1 that could cause any… - CVE-2020-28209 2024-11-21 14:22 2020-11-20 Show GitHub Exploit DB Packet Storm
208876 6.1 MEDIUM
Network 		sokrates sowasql A Cross Site Scripting (XSS) vulnerability exists in OPAC in Sokrates SOWA SowaSQL through 5.6.1 via the sowacgi.php typ parameter. CWE-79
Cross-site Scripting 		CVE-2020-28350 2024-11-21 14:22 2020-11-20 Show GitHub Exploit DB Packet Storm
208877 6.1 MEDIUM
Network 		schneider-electric ecostruxure_building_operation A CWE-79 Improper Neutralization of Input During Web Page Generation (Cross-site Scripting) vulnerability exists in EcoStruxure Building Operation WebStation V2.0 - V3.1 that could cause an attacker … - CVE-2020-28210 2024-11-21 14:22 2020-11-20 Show GitHub Exploit DB Packet Storm
208878 7.5 HIGH
Network 		tsmmanager tsmmanager JamoDat TSMManager Collector version up to 6.5.0.21 is vulnerable to an Authorization Bypass because the Collector component is not properly validating an authenticated session with the Viewer. If th… NVD-CWE-noinfo
CVE-2020-28054 2024-11-21 14:22 2020-11-20 Show GitHub Exploit DB Packet Storm
208879 7.2 HIGH
Network 		trendmicro interscan_web_security_virtual_appliance A command injection vulnerability in ModifyVLANItem of Trend Micro InterScan Web Security Virtual Appliance 6.5 SP2 could allow an authenticated, remote attacker to send specially crafted HTTP messag… CWE-78
OS Command  		CVE-2020-28581 2024-11-21 14:22 2020-11-19 Show GitHub Exploit DB Packet Storm
208880 7.2 HIGH
Network 		trendmicro interscan_web_security_virtual_appliance A command injection vulnerability in AddVLANItem of Trend Micro InterScan Web Security Virtual Appliance 6.5 SP2 could allow an authenticated, remote attacker to send specially crafted HTTP messages … CWE-78
OS Command  		CVE-2020-28580 2024-11-21 14:22 2020-11-19 Show GitHub Exploit DB Packet Storm