Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":June 22, 2026, 6:01 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
227921	10	危険	ヒューレット・パッカード	-	HP SiteScope における任意のコードを実行される脆弱性	CWE-noinfo 情報不足	CVE-2013-2367	2013-08-1 12:02	2013-07-29	Show	GitHub Exploit DB Packet Storm

227922	10	危険	アドビシステムズ	-	Adobe Digital Editions における任意のコードを実行される脆弱性	CWE-119 バッファエラー	CVE-2013-1377	2013-08-1 11:53	2013-07-30	Show	GitHub Exploit DB Packet Storm

227923	6.8	警告	サン・マイクロシステムズ Apache Software Foundation	-	Apache OpenOffice.org におけるサービス運用妨害 (DoS) の脆弱性	CWE-119 バッファエラー	CVE-2013-4156	2013-08-1 11:40	2013-07-26	Show	GitHub Exploit DB Packet Storm

227924	6.8	警告	サン・マイクロシステムズ Apache Software Foundation	-	Apache OpenOffice.org におけるサービス運用妨害 (DoS) の脆弱性	CWE-119 バッファエラー	CVE-2013-2189	2013-08-1 11:31	2013-07-26	Show	GitHub Exploit DB Packet Storm

227925	2.6	注意	Genetech Solutions	-	WordPress 用 Genetech Solutions Pie-Register プラグインにおけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2013-4954	2013-07-31 16:53	2013-07-13	Show	GitHub Exploit DB Packet Storm

227926	7.5	危険	Top Games	-	Top Games Script の play.php における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2013-4953	2013-07-31 16:18	2013-06-24	Show	GitHub Exploit DB Packet Storm

227927	7.5	危険	Elemata	-	Elemata CMS の functions/global.php における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2013-4952	2013-07-31 16:11	2013-06-24	Show	GitHub Exploit DB Packet Storm

227928	4.3	警告	Mintboard	-	Mintboard におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2013-4951	2013-07-31 16:06	2013-07-10	Show	GitHub Exploit DB Packet Storm

227929	4.3	警告	Appnitro Software	-	Machform の view.php におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2013-4950	2013-07-31 15:53	2013-07-2	Show	GitHub Exploit DB Packet Storm

227930	6.8	警告	Appnitro Software	-	Machform の view.php における任意の PHP コードを実行される脆弱性	CWE-Other その他	CVE-2013-4949	2013-07-31 15:41	2013-07-2	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:June 22, 2026, 4 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
207381	5.5	MEDIUM Local	easybuild_project	easybuild	In EasyBuild before version 4.1.2, the GitHub Personal Access Token (PAT) used by EasyBuild for the GitHub integration features (like `--new-pr`, `--fro,-pr`, etc.) is shown in plain text in EasyBuil…	CWE-922 Insecure Storage of Sensitive Information	CVE-2020-5262	2024-11-21 14:33	2020-03-20	Show	GitHub Exploit DB Packet Storm

207382	8.5	HIGH Network	labdigital	wagtail-2fa	In wagtail-2fa before 1.4.1, any user with access to the CMS can view and delete other users 2FA devices by going to the correct path. The user does not require special permissions in order to do so.…	CWE-863 Incorrect Authorization	CVE-2020-5240	2024-11-21 14:33	2020-03-14	Show	GitHub Exploit DB Packet Storm

207383	8.1	HIGH Network	thoughtbot	administrate	In Administrate (rubygem) before version 0.13.0, when sorting by attributes on a dashboard, the direction parameter was not validated before being interpolated into the SQL query. This could present …	CWE-89 SQL Injection	CVE-2020-5257	2024-11-21 14:33	2020-03-14	Show	GitHub Exploit DB Packet Storm

207384	9.8	CRITICAL Network	fatfreeframework	fat-free_framework	In Fat-Free Framework 3.7.1, attackers can achieve arbitrary code execution if developers choose to pass user controlled input (e.g., $_REQUEST, $_GET, or $_POST) to the framework's Clear method.	CWE-94 CWE-20 Code Injection Improper Input Validation	CVE-2020-5203	2024-11-21 14:33	2020-03-11	Show	GitHub Exploit DB Packet Storm

207385	8.6	HIGH Network	linuxfoundation	dojox	In affected versions of dojox (NPM package), the jqMix method is vulnerable to Prototype Pollution. Prototype Pollution refers to the ability to inject properties into existing JavaScript language co…	CWE-74 Injection	CVE-2020-5259	2024-11-21 14:33	2020-03-11	Show	GitHub Exploit DB Packet Storm

207386	7.7	HIGH Network	linuxfoundation debian oracle	dojo debian_linux webcenter_sites primavera_unifier communications_policy_management weblogic_server mysql communications_pricing_design_center documaker communications_app…	In affected versions of dojo (NPM package), the deepCopy method is vulnerable to Prototype Pollution. Prototype Pollution refers to the ability to inject properties into existing JavaScript language …	-	CVE-2020-5258	2024-11-21 14:33	2020-03-11	Show	GitHub Exploit DB Packet Storm

207387	8.1	HIGH Network	nethack	nethack	In NetHack before 3.6.6, some out-of-bound values for the hilite_status option can be exploited. NetHack 3.6.6 resolves this issue.	CWE-119 Incorrect Access of Indexable Resource ('Range Error')	CVE-2020-5254	2024-11-21 14:33	2020-03-11	Show	GitHub Exploit DB Packet Storm

207388	9.8	CRITICAL Network	nethack	nethack	NetHack before version 3.6.0 allowed malicious use of escaping of characters in the configuration file (usually .nethackrc) which could be exploited. This bug is patched in NetHack 3.6.0.	CWE-269 Improper Privilege Management	CVE-2020-5253	2024-11-21 14:33	2020-03-11	Show	GitHub Exploit DB Packet Storm

207389	7.8	HIGH Local	dell	digital_delivery	Dell Digital Delivery versions prior to 3.5.2015 contain an incorrect default permissions vulnerability. A locally authenticated low-privileged malicious user could exploit this vulnerability to run …	CWE-276 Incorrect Default Permissions	CVE-2020-5342	2024-11-21 14:33	2020-03-10	Show	GitHub Exploit DB Packet Storm

207390	8.8	HIGH Network	bookstackapp	bookstack	BookStack before version 0.25.5 has a vulnerability where a user could upload PHP files through image upload functions, which would allow them to execute code on the host system remotely. They would …	CWE-434 Unrestricted Upload of File with Dangerous Type	CVE-2020-5256	2024-11-21 14:33	2020-03-10	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed