Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 15, 2026, 6 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
226991 4.3 警告 miniBB - MiniBB の bb_admin.php におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2013-5020 2013-08-2 15:50 2013-03-15 Show GitHub Exploit DB Packet Storm
226992 4 警告 Apache Software Foundation - Apache Subversion の mod_dav_svn Apache HTTPD サーバモジュールにおけるサービス運用妨害 (DoS) の脆弱性 CWE-119
バッファエラー
CVE-2013-4131 2013-08-2 15:41 2013-07-25 Show GitHub Exploit DB Packet Storm
226993 10 危険 Eva LibRary - Ultra Mini HTTPD におけるスタックベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー
CVE-2013-5019 2013-08-2 15:26 2013-07-11 Show GitHub Exploit DB Packet Storm
226994 4.3 警告 シマンテック - Symantec Encryption Management Server におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2013-4674 2013-08-2 15:20 2013-07-22 Show GitHub Exploit DB Packet Storm
226995 4 警告 Fedora Project
レッドハット
- Red Hat Directory Server および 389 Directory Server における重要な情報を取得される脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2013-2219 2013-08-2 15:14 2013-07-30 Show GitHub Exploit DB Packet Storm
226996 4.3 警告 Beanbag - Review Board の htdocs/media/rb/js/reviews.js におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2013-2209 2013-08-2 15:06 2013-06-22 Show GitHub Exploit DB Packet Storm
226997 6 警告 The Foreman
レッドハット
- Foreman の Bookmarks コントローラの create メソッドにおける任意のコードを実行される脆弱性 CWE-94
コード・インジェクション
CVE-2013-2121 2013-08-2 14:11 2013-06-7 Show GitHub Exploit DB Packet Storm
226998 6 警告 The Foreman
レッドハット
- Foreman の app/controllers/users_controller.rb の create メソッドにおける権限を取得される脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2013-2113 2013-08-2 14:06 2013-06-7 Show GitHub Exploit DB Packet Storm
226999 7.1 危険 Novell
CollabNet, Inc.
Apache Software Foundation
- Apache Subversion における任意のコマンドを実行される脆弱性 CWE-20
不適切な入力確認
CVE-2013-2088 2013-08-1 18:01 2013-07-4 Show GitHub Exploit DB Packet Storm
227000 4.3 警告 Western Digital Corporation - 複数の Western Digital My Net ルータ製品のファームウェアにおける平文の管理パスワードを破られる脆弱性 CWE-255
証明書・パスワード管理
CVE-2013-5006 2013-08-1 17:36 2013-07-18 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 15, 2026, 4:10 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
220781 5.4 MEDIUM
Network
munkireport_project munkireport An issue was discovered in MunkiReport before 5.3.0. An authenticated actor can send a custom XSS payload through the /module/comment/save endpoint. The payload will be executed by any authenticated … CWE-79
Cross-site Scripting
CVE-2020-10191 2024-11-21 13:54 2020-03-10 Show GitHub Exploit DB Packet Storm
220782 8.8 HIGH
Network
munkireport_project munkireport An issue was discovered in MunkiReport before 5.3.0. An authenticated user could achieve SQL Injection in app/models/tablequery.php by crafting a special payload on the /datatables/data endpoint. CWE-89
SQL Injection
CVE-2020-10190 2024-11-21 13:54 2020-03-10 Show GitHub Exploit DB Packet Storm
220783 8.1 HIGH
Network
gonitro nitro_pro npdf.dll in Nitro Pro before 13.13.2.242 is vulnerable to JBIG2Decode CNxJBIG2DecodeStream Heap Corruption at npdf!CAPPDAnnotHandlerUtils::create_popup_for_markup+0x12fbe via a crafted PDF document. CWE-787
 Out-of-bounds Write
CVE-2020-10223 2024-11-21 13:54 2020-03-9 Show GitHub Exploit DB Packet Storm
220784 8.1 HIGH
Network
gonitro nitro_pro npdf.dll in Nitro Pro before 13.13.2.242 is vulnerable to Heap Corruption at npdf!nitro::get_property+2381 via a crafted PDF document. NVD-CWE-noinfo
CVE-2020-10222 2024-11-21 13:54 2020-03-9 Show GitHub Exploit DB Packet Storm
220785 8.8 HIGH
Network
rconfig rconfig lib/ajaxHandlers/ajaxAddTemplate.php in rConfig through 3.94 allows remote attackers to execute arbitrary OS commands via shell metacharacters in the fileName POST parameter. CWE-78
OS Command 
CVE-2020-10221 2024-11-21 13:54 2020-03-9 Show GitHub Exploit DB Packet Storm
220786 9.8 CRITICAL
Network
rconfig rconfig An issue was discovered in rConfig through 3.9.4. The web interface is prone to a SQL injection via the commands.inc.php searchColumn parameter. CWE-89
SQL Injection
CVE-2020-10220 2024-11-21 13:54 2020-03-8 Show GitHub Exploit DB Packet Storm
220787 8.8 HIGH
Network
dlink
trendnet
dir-825_firmware
tew-632brp_firmware
An issue was discovered on D-Link DIR-825 Rev.B 2.10 devices. They allow remote attackers to execute arbitrary commands via the date parameter in a system_time.cgi POST request. TRENDnet TEW-632BRP 1… CWE-78
OS Command 
CVE-2020-10216 2024-11-21 13:54 2020-03-7 Show GitHub Exploit DB Packet Storm
220788 8.8 HIGH
Network
dlink
trendnet
dir-825_firmware
tew-632brp_firmware
An issue was discovered on D-Link DIR-825 Rev.B 2.10 devices. They allow remote attackers to execute arbitrary commands via the dns_query_name parameter in a dns_query.cgi POST request. TRENDnet TEW-… CWE-78
OS Command 
CVE-2020-10215 2024-11-21 13:54 2020-03-7 Show GitHub Exploit DB Packet Storm
220789 8.8 HIGH
Network
dlink dir-825_firmware An issue was discovered on D-Link DIR-825 Rev.B 2.10 devices. There is a stack-based buffer overflow in the httpd binary. It allows an authenticated user to execute arbitrary code via a POST to ntp_s… CWE-787
 Out-of-bounds Write
CVE-2020-10214 2024-11-21 13:54 2020-03-7 Show GitHub Exploit DB Packet Storm
220790 8.8 HIGH
Network
dlink
trendnet
dir-825_firmware
tew-632brp_firmware
An issue was discovered on D-Link DIR-825 Rev.B 2.10 devices. They allow remote attackers to execute arbitrary commands via the wps_sta_enrollee_pin parameter in a set_sta_enrollee_pin.cgi POST reque… CWE-78
OS Command 
CVE-2020-10213 2024-11-21 13:54 2020-03-7 Show GitHub Exploit DB Packet Storm