Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 20, 2026, 6 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
226491 4.3 警告 シマンテック
日立
- Symantec Backup Exec におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2013-4676 2013-10-16 18:28 2013-08-1 Show GitHub Exploit DB Packet Storm
226492 4.3 警告 シマンテック
日立
- Symantec Backup Exec における重要な情報を取得される脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2013-4677 2013-10-16 18:26 2013-08-1 Show GitHub Exploit DB Packet Storm
226493 2.7 注意 シマンテック
日立
- Symantec Backup Exec の NDMP プロトコルの実装における重要なホストバージョン情報を取得される脆弱性 CWE-200
情報漏えい
CVE-2013-4678 2013-10-16 18:24 2013-08-1 Show GitHub Exploit DB Packet Storm
226494 7.2 危険 FreeBSD - FreeBSD のカーネルのマルチキャストの実装における整数オーバーフローの脆弱性 CWE-189
数値処理の問題
CVE-2013-3077 2013-10-16 18:11 2012-08-22 Show GitHub Exploit DB Packet Storm
226495 3.5 注意 IBM - IBM Sterling File Gateway および Sterling B2B Integrator におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2013-2983 2013-10-16 18:09 2013-03-22 Show GitHub Exploit DB Packet Storm
226496 10 危険 ヒューレット・パッカード - HP Business Process Monitor における任意のコードを実行される脆弱性 CWE-noinfo
情報不足
CVE-2013-4804 2013-10-16 18:07 2013-10-10 Show GitHub Exploit DB Packet Storm
226497 9.3 危険 マイクロソフト - Microsoft Internet Explorer 6 から 10 における任意のコードを実行される脆弱性 CWE-Other
その他
CVE-2013-2551 2013-10-16 18:03 2013-03-11 Show GitHub Exploit DB Packet Storm
226498 10 危険 ヒューレット・パッカード - HP Business Process Monitor における任意のコードを実行される脆弱性 CWE-noinfo
情報不足
CVE-2013-2366 2013-10-16 17:57 2013-10-10 Show GitHub Exploit DB Packet Storm
226499 6.8 警告 IBM - IBM InfoSphere Information Server におけるクロスサイトリクエストフォージェリの脆弱性 CWE-352
同一生成元ポリシー違反
CVE-2013-4056 2013-10-16 17:45 2013-10-10 Show GitHub Exploit DB Packet Storm
226500 7.8 危険 Alstom - Alstom e-terracontrol におけるサービス運用妨害 (DoS) の脆弱性 CWE-20
不適切な入力確認
CVE-2013-2787 2013-10-16 16:56 2013-10-9 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 20, 2026, 4:01 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
195341 4.8 MEDIUM
Network
bitweaver bitweaver A cross-site scripting (XSS) vulnerability in Bitweaver version 3.1.0 allows remote attackers to inject JavaScript via the /users/edit_personal_page.php URI. CWE-79
Cross-site Scripting
CVE-2021-29029 2024-11-21 15:00 2021-03-24 Show GitHub Exploit DB Packet Storm
195342 4.8 MEDIUM
Network
bitweaver bitweaver A cross-site scripting (XSS) vulnerability in Bitweaver version 3.1.0 allows remote attackers to inject JavaScript via the /users/admin/user_activity.php URI. CWE-79
Cross-site Scripting
CVE-2021-29028 2024-11-21 15:00 2021-03-24 Show GitHub Exploit DB Packet Storm
195343 4.8 MEDIUM
Network
bitweaver bitweaver A cross-site scripting (XSS) vulnerability in Bitweaver version 3.1.0 allows remote attackers to inject JavaScript via the /users/index.php URI. CWE-79
Cross-site Scripting
CVE-2021-29027 2024-11-21 15:00 2021-03-24 Show GitHub Exploit DB Packet Storm
195344 4.8 MEDIUM
Network
bitweaver bitweaver A cross-site scripting (XSS) vulnerability in Bitweaver version 3.1.0 allows remote attackers to inject JavaScript via the /users/admin/permissions.php URI. CWE-79
Cross-site Scripting
CVE-2021-29026 2024-11-21 15:00 2021-03-24 Show GitHub Exploit DB Packet Storm
195345 4.8 MEDIUM
Network
bitweaver bitweaver A cross-site scripting (XSS) vulnerability in Bitweaver version 3.1.0 allows remote attackers to inject JavaScript via the /users/my_images.php URI. CWE-79
Cross-site Scripting
CVE-2021-29025 2024-11-21 15:00 2021-03-24 Show GitHub Exploit DB Packet Storm
195346 5.5 MEDIUM
Local
haserl_project haserl Lack of verification in haserl, a component of Alpine Linux Configuration Framework, before 0.9.36 allows local users to read the contents of any file on the filesystem. NVD-CWE-noinfo
CVE-2021-29133 2024-11-21 15:00 2021-03-24 Show GitHub Exploit DB Packet Storm
195347 9.8 CRITICAL
Network
microsoft visual_studio_code The unofficial MATLAB extension before 2.0.1 for Visual Studio Code allows attackers to execute arbitrary code via a crafted workspace because of lint configuration settings. NVD-CWE-noinfo
CVE-2021-28967 2024-11-21 15:00 2021-03-24 Show GitHub Exploit DB Packet Storm
195348 8.8 HIGH
Local
tibco activespaces The Windows Installation component of TIBCO Software Inc.'s TIBCO ActiveSpaces - Community Edition, TIBCO ActiveSpaces - Developer Edition, and TIBCO ActiveSpaces - Enterprise Edition contains a vuln… CWE-863
 Incorrect Authorization
CVE-2021-28824 2024-11-21 15:00 2021-03-24 Show GitHub Exploit DB Packet Storm
195349 7.8 HIGH
Local
tibco eftl The Windows Installation component of TIBCO Software Inc.'s TIBCO eFTL - Community Edition, TIBCO eFTL - Developer Edition, and TIBCO eFTL - Enterprise Edition contains a vulnerability that theoretic… CWE-863
 Incorrect Authorization
CVE-2021-28823 2024-11-21 15:00 2021-03-24 Show GitHub Exploit DB Packet Storm
195350 7.8 HIGH
Local
tibco enterprise_message_service The Enterprise Message Service Server (tibemsd), Enterprise Message Service Central Administration (tibemsca), Enterprise Message Service JSON configuration generator (tibemsconf2json), and Enterpris… CWE-427
 Uncontrolled Search Path Element
CVE-2021-28822 2024-11-21 15:00 2021-03-24 Show GitHub Exploit DB Packet Storm