Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 3, 2026, noon

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
226441 4.3 警告 Yandex.Metrics Pproject - Drupal 用 Yandex.Metrics モジュールにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2013-0319 2013-04-1 14:36 2013-02-19 Show GitHub Exploit DB Packet Storm
226442 10 危険 Banckle Chat Project - Drupal 用 Banckle Chat モジュールにおける制限を回避される脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2013-0318 2013-04-1 14:17 2013-02-13 Show GitHub Exploit DB Packet Storm
226443 4.3 警告 Joe Haskins - Drupal 用 Manager Change for Organic Groups モジュールにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2013-0317 2013-04-1 14:16 2013-02-12 Show GitHub Exploit DB Packet Storm
226444 5 警告 Drupal - Drupal の Image モジュールにおけるサービス運用妨害 (DoS) の脆弱性 CWE-399
リソース管理の問題
CVE-2013-0316 2013-04-1 14:15 2013-02-20 Show GitHub Exploit DB Packet Storm
226445 2.1 注意 Elliot Pahl - Drupal 用 Drush Debian Packaging モジュールにおけるデータベースの認証情報を取得される脆弱性 CWE-noinfo
情報不足
CVE-2013-0260 2013-04-1 14:13 2013-01-30 Show GitHub Exploit DB Packet Storm
226446 2.1 注意 Boxes project - Drupal 用 Boxes モジュールにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2013-0259 2013-04-1 14:11 2013-01-23 Show GitHub Exploit DB Packet Storm
226447 6.8 警告 Attiks - Drupal 用 Google Authenticator login モジュールにおける認証を回避される脆弱性 CWE-287
不適切な認証
CVE-2013-0258 2013-04-1 14:08 2013-01-29 Show GitHub Exploit DB Packet Storm
226448 5 警告 David Alkire - Drupal 用 email2image モジュールにおけるユーザの電子メール情報のイメージ画像を読まれる脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2013-0257 2013-04-1 14:06 2013-01-30 Show GitHub Exploit DB Packet Storm
226449 5 警告 Bart Feenstra - Drupal 用 Payment モジュールにおける任意の決済情報を読まれる脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2013-0182 2013-04-1 14:03 2013-01-9 Show GitHub Exploit DB Packet Storm
226450 2.6 注意 Thomas Seidl - Drupal 用 Search API モジュールにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2013-0181 2013-04-1 13:46 2013-01-9 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 3, 2026, 4:18 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
195671 6.5 MEDIUM
Network
gallagher command_centre Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Gallagher Command Centre Server allows OSDP key material to be exposed to Command Centre Operators. This issue affects: Gal… CWE-862
 Missing Authorization
CVE-2021-23204 2024-11-21 14:51 2021-06-12 Show GitHub Exploit DB Packet Storm
195672 4.4 MEDIUM
Local
gallagher command_centre Cleartext Storage of Sensitive Information in Memory vulnerability in Gallagher Command Centre Server allows OSDP reader master keys to be discoverable in server memory dumps. This issue affects: Gal… CWE-312
 Cleartext Storage of Sensitive Information
CVE-2021-23182 2024-11-21 14:51 2021-06-12 Show GitHub Exploit DB Packet Storm
195673 8.8 HIGH
Network
gallagher command_centre Improper Authorization vulnerability in Gallagher Command Centre Server allows command line macros to be modified by an unauthorised Command Centre Operator. This issue affects: Gallagher Command Cen… NVD-CWE-Other
CVE-2021-23140 2024-11-21 14:51 2021-06-12 Show GitHub Exploit DB Packet Storm
195674 6.5 MEDIUM
Network
gallagher command_centre Improper Authorization vulnerability in Gallagher Command Centre Server allows macro overrides to be performed by an unprivileged Command Centre Operator. This issue affects: Gallagher Command Centre… NVD-CWE-Other
CVE-2021-23136 2024-11-21 14:51 2021-06-12 Show GitHub Exploit DB Packet Storm
195675 5.4 MEDIUM
Network
flask_unchained_project flask_unchained This affects the package Flask-Unchained before 0.9.0. When using the the _validate_redirect_url function, it is possible to bypass URL validation and redirect a user to an arbitrary URL by providing… CWE-601
Open Redirect
CVE-2021-23393 2024-11-21 14:51 2021-06-11 Show GitHub Exploit DB Packet Storm
195676 7.8 HIGH
Local
f5 big-ip_access_policy_manager
big-ip_access_policy_manager_client
On version 7.2.1.x before 7.2.1.3 and 7.1.x before 7.1.9.9 Update 1, the BIG-IP Edge Client Windows Installer Service's temporary folder has weak file and folder permissions. Note: Software versions … CWE-732
 Incorrect Permission Assignment for Critical Resource
CVE-2021-23022 2024-11-21 14:51 2021-06-11 Show GitHub Exploit DB Packet Storm
195677 7.2 HIGH
Network
f5 big-iq_centralized_management On version 8.0.x before 8.0.0.1, and all 6.x and 7.x versions, the BIG-IQ Configuration utility has an authenticated remote command execution vulnerability in undisclosed pages. Note: Software versio… NVD-CWE-noinfo
CVE-2021-23024 2024-11-21 14:51 2021-06-11 Show GitHub Exploit DB Packet Storm
195678 7.8 HIGH
Local
f5 big-ip_access_policy_manager On version 7.2.1.x before 7.2.1.3 and 7.1.x before 7.1.9.9 Update 1, a DLL hijacking issue exists in cachecleaner.dll included in the BIG-IP Edge Client Windows Installer. Note: Software versions whi… CWE-427
 Uncontrolled Search Path Element
CVE-2021-23023 2024-11-21 14:51 2021-06-11 Show GitHub Exploit DB Packet Storm
195679 6.1 MEDIUM
Network
bosch cpp6_firmware
cpp7_firmware
cpp7.3_firmware
cpp13_firmware
An error in the handling of a page parameter in Bosch IP cameras may lead to a reflected cross site scripting (XSS) in the web-based interface. This issue only affects versions 7.7x and 7.6x. All oth… CWE-79
Cross-site Scripting
CVE-2021-23854 2024-11-21 14:51 2021-06-10 Show GitHub Exploit DB Packet Storm
195680 9.8 CRITICAL
Network
bosch cpp4_firmware
cpp6_firmware
cpp7_firmware
cpp7.3_firmware
cpp13_firmware
In Bosch IP cameras, improper validation of the HTTP header allows an attacker to inject arbitrary HTTP headers through crafted URLs. CWE-20
 Improper Input Validation 
CVE-2021-23853 2024-11-21 14:51 2021-06-10 Show GitHub Exploit DB Packet Storm