Vulnerability Search Top

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

Vulnerability Information Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":June 15, 2026, 10 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
226651	4.3	警告	Vastal I-Tech & Co.	-	Vastal I-Tech phpVID におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2013-5312	2013-08-21 14:06	2013-08-8	Show	GitHub Exploit DB Packet Storm

226652	7.5	危険	Vastal I-Tech & Co.	-	Vastal I-Tech phpVID における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2013-5311	2013-08-21 14:01	2013-08-8	Show	GitHub Exploit DB Packet Storm

226653	5	警告	Willy Tarreau Canonical レッドハット	-	HAProxy におけるサービス運用妨害 (DoS) の脆弱性	CWE-16 環境設定	CVE-2013-2175	2013-08-20 16:32	2013-06-17	Show	GitHub Exploit DB Packet Storm

226654	6.8	警告	BigTree CMS	-	BigTree CMS の core/admin/modules/users/create.php におけるクロスサイトリクエストフォージェリの脆弱性	CWE-352 同一生成元ポリシー違反	CVE-2013-4881	2013-08-20 15:33	2013-07-17	Show	GitHub Exploit DB Packet Storm

226655	6.9	警告	Canonical	-	Debian GNU/Linux などの製品で使用される MySQL Server 用 post-installation スクリプトにおける設定ファイルを読まれる脆弱性	CWE-362 競合状態	CVE-2013-2162	2013-08-20 15:29	2013-07-25	Show	GitHub Exploit DB Packet Storm

226656	10	危険	ヒューレット・パッカード	-	HP Service Manager および HP Service Center における特権的アクセス権を取得される脆弱性	CWE-noinfo 情報不足	CVE-2013-4808	2013-08-20 15:28	2013-08-14	Show	GitHub Exploit DB Packet Storm

226657	7.5	危険	Mauro Lorenzutti	-	TYPO3 用 DB Integration エクステンションにおける SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2013-5310	2013-08-20 14:57	2013-08-5	Show	GitHub Exploit DB Packet Storm

226658	4.3	警告	Ilia Alshanetsky	-	FUDforum の install/forum_data/src/custom_fields.inc.t におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2013-5309	2013-08-20 14:47	2013-02-17	Show	GitHub Exploit DB Packet Storm

226659	4.3	警告	Juraj Sulek	-	TYPO3 用 RealURL Management エクステンションにおけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2013-5308	2013-08-20 14:39	2013-08-5	Show	GitHub Exploit DB Packet Storm

226660	4.3	警告	Kennziffer.com	-	TYPO3 用 Faceted Search エクステンションにおけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2013-5307	2013-08-20 14:30	2013-08-5	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:June 15, 2026, 4:10 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
208721	8.8	HIGH Network	tribulant	newsletter	Insecure Deserialization in the Newsletter plugin before 6.8.2 for WordPress allows authenticated remote attackers with minimal privileges (such as subscribers) to use the tpnc_render AJAX action to …	CWE-502 Deserialization of Untrusted Data	CVE-2020-35932	2024-11-21 14:28	2021-01-1	Show	GitHub Exploit DB Packet Storm

208722	7.8	HIGH Local	foxitsoftware	foxit_reader phantompdf	An issue was discovered in Foxit Reader before 10.1.1 (and before 4.1.1 on macOS) and PhantomPDF before 9.7.5 and 10.x before 10.1.1 (and before 4.1.1 on macOS). An attacker can spoof a certified PDF…	CWE-754 Improper Check for Unusual or Exceptional Conditions	CVE-2020-35931	2024-11-21 14:28	2021-01-1	Show	GitHub Exploit DB Packet Storm

208723	5.4	MEDIUM Network	seopanel	seo_panel	Seo Panel 4.8.0 allows stored XSS by an Authenticated User via the url parameter, as demonstrated by the seo/seopanel/websites.php URI.	CWE-79 Cross-site Scripting	CVE-2020-35930	2024-11-21 14:28	2021-01-1	Show	GitHub Exploit DB Packet Storm

208724	4.7	MEDIUM Local	atom_project	atom	An issue was discovered in the atom crate before 0.3.6 for Rust. An unsafe Send implementation allows a cross-thread data race.	CWE-362 Race Condition	CVE-2020-35897	2024-11-21 14:28	2020-12-31	Show	GitHub Exploit DB Packet Storm

208725	7.5	HIGH Network	ws-rs_project	ws-rs	An issue was discovered in the ws crate through 2020-09-25 for Rust. The outgoing buffer is not properly limited, leading to a remote memory-consumption attack.	CWE-770 Allocation of Resources Without Limits or Throttling	CVE-2020-35896	2024-11-21 14:28	2020-12-31	Show	GitHub Exploit DB Packet Storm

208726	9.8	CRITICAL Network	stack_project	stack	An issue was discovered in the stack crate before 0.3.1 for Rust. ArrayVec has an out-of-bounds write via element insertion.	CWE-787 Out-of-bounds Write	CVE-2020-35895	2024-11-21 14:28	2020-12-31	Show	GitHub Exploit DB Packet Storm

208727	7.5	HIGH Network	obstack_project	obstack	An issue was discovered in the obstack crate before 0.1.4 for Rust. Unaligned references can occur.	CWE-706 Use of Incorrectly-Resolved Name or Reference	CVE-2020-35894	2024-11-21 14:28	2020-12-31	Show	GitHub Exploit DB Packet Storm

208728	7.5	HIGH Network	simple-slab_project	simple-slab	An issue was discovered in the simple-slab crate before 0.3.3 for Rust. remove() has an off-by-one error, causing memory leakage and a drop of uninitialized memory.	CWE-193 CWE-401 CWE-908 Off-by-one Error Missing Release of Memory after Effective Lifetime Use of Uninitialized Resource	CVE-2020-35893	2024-11-21 14:28	2020-12-31	Show	GitHub Exploit DB Packet Storm

208729	9.1	CRITICAL Network	simple-slab_project	simple-slab	An issue was discovered in the simple-slab crate before 0.3.3 for Rust. index() allows an out-of-bounds read.	CWE-125 Out-of-bounds Read	CVE-2020-35892	2024-11-21 14:28	2020-12-31	Show	GitHub Exploit DB Packet Storm

208730	7.5	HIGH Network	ordnung_project	ordnung	An issue was discovered in the ordnung crate through 2020-09-03 for Rust. compact::Vec violates memory safety via a remove() double free.	CWE-415 Double Free	CVE-2020-35891	2024-11-21 14:28	2020-12-31	Show	GitHub Exploit DB Packet Storm