Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 10, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
228121 7.1 危険 シスコシステムズ - Cisco Unified Communications Manager におけるキャッシュポイズニング攻撃を実行される脆弱性 CWE-287
不適切な認証 		CVE-2013-1134 2013-03-1 16:36 2012-02-27 Show GitHub Exploit DB Packet Storm
228122 7.8 危険 シスコシステムズ - Cisco Unified Communications Manager におけるサービス運用妨害 (DoS) の脆弱性 CWE-20
不適切な入力確認 		CVE-2013-1133 2013-03-1 16:34 2012-02-27 Show GitHub Exploit DB Packet Storm
228123 7.2 危険 IBM - IBM InfoSphere Guardium S-TAP における権限を取得される脆弱性 CWE-noinfo
情報不足 		CVE-2013-0490 2013-03-1 16:33 2013-02-8 Show GitHub Exploit DB Packet Storm
228124 4.3 警告 IBM - IBM Lotus Domino の Web サーバにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2012-4844 2013-03-1 16:28 2012-11-30 Show GitHub Exploit DB Packet Storm
228125 5.8 警告 IBM - IBM Lotus Domino の Web サーバにおけるオープンリダイレクトの脆弱性 CWE-399
リソース管理の問題 		CVE-2012-4842 2013-03-1 16:24 2012-11-30 Show GitHub Exploit DB Packet Storm
228126 6.8 警告 キングソフト株式会社 - Kingsoft Writer におけるバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2013-0710 2013-03-1 14:02 2013-03-1 Show GitHub Exploit DB Packet Storm
228127 9 危険 日本電気 - NEC Universal RAID Utility におけるアクセス制限不備の脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2013-0706 2013-03-1 11:30 2013-02-21 Show GitHub Exploit DB Packet Storm
228128 3.5 注意 MySQL AB
オラクル		 - Oracle MySQL の MySQL Server における脆弱性 CWE-noinfo
情報不足 		CVE-2012-5096 2013-02-28 18:05 2013-01-15 Show GitHub Exploit DB Packet Storm
228129 4 警告 MySQL AB
オラクル		 - Oracle MySQL の MySQL Server における Server Optimizer の処理に関する脆弱性 CWE-noinfo
情報不足 		CVE-2012-0578 2013-02-28 18:04 2013-01-15 Show GitHub Exploit DB Packet Storm
228130 4 警告 MySQL AB
オラクル		 - Oracle MySQL の MySQL Server における Server Optimizer の処理に関する脆弱性 CWE-noinfo
情報不足 		CVE-2012-1705 2013-02-28 18:03 2013-01-15 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 10, 2026, 5 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
207391 5.4 MEDIUM
Network 		macrob7_macs_framework_content_management_system_project macrob7_macs_framework_content_management_system Macrob7 Macs Framework Content Management System - 1.14f contains a cross-site scripting (XSS) vulnerability in the account reset function, which allows attackers to execute arbitrary web scripts or … CWE-79
Cross-site Scripting 		CVE-2020-36498 2024-11-21 14:29 2021-10-23 Show GitHub Exploit DB Packet Storm
207392 6.1 MEDIUM
Network 		dedecms dedecms DedeCMS v7.5 SP2 was discovered to contain multiple cross-site scripting (XSS) vulnerabilities in the component makehtml_homepage.php via the `filename`, `mid`, `userid`, and `templet' parameters. CWE-79
Cross-site Scripting 		CVE-2020-36497 2024-11-21 14:29 2021-10-23 Show GitHub Exploit DB Packet Storm
207393 6.1 MEDIUM
Network 		dedecms dedecms DedeCMS v7.5 SP2 was discovered to contain multiple cross-site scripting (XSS) vulnerabilities in the component sys_admin_user_edit.php via the `filename`, `mid`, `userid`, and `templet' parameters. CWE-79
Cross-site Scripting 		CVE-2020-36496 2024-11-21 14:29 2021-10-23 Show GitHub Exploit DB Packet Storm
207394 6.1 MEDIUM
Network 		dedecms dedecms DedeCMS v7.5 SP2 was discovered to contain multiple cross-site scripting (XSS) vulnerabilities in the component file_manage_view.php via the `filename`, `mid`, `userid`, and `templet' parameters. CWE-79
Cross-site Scripting 		CVE-2020-36495 2024-11-21 14:29 2021-10-23 Show GitHub Exploit DB Packet Storm
207395 6.1 MEDIUM
Network 		dedecms dedecms DedeCMS v7.5 SP2 was discovered to contain multiple cross-site scripting (XSS) vulnerabilities in the component mychannel_edit.php via the `filename`, `mid`, `userid`, and `templet' parameters. CWE-79
Cross-site Scripting 		CVE-2020-36494 2024-11-21 14:29 2021-10-23 Show GitHub Exploit DB Packet Storm
207396 5.4 MEDIUM
Network 		dedecms dedecms DedeCMS v7.5 SP2 was discovered to contain multiple cross-site scripting (XSS) vulnerabilities in the component media_main.php via the `activepath`, `keyword`, `tag`, `fmdo=x&filename`, `CKEditor` an… CWE-79
Cross-site Scripting 		CVE-2020-36493 2024-11-21 14:29 2021-10-23 Show GitHub Exploit DB Packet Storm
207397 5.4 MEDIUM
Network 		dedecms dedecms DedeCMS v7.5 SP2 was discovered to contain multiple cross-site scripting (XSS) vulnerabilities in the component select_media.php via the `activepath`, `keyword`, `tag`, `fmdo=x&filename`, `CKEditor` … CWE-79
Cross-site Scripting 		CVE-2020-36492 2024-11-21 14:29 2021-10-23 Show GitHub Exploit DB Packet Storm
207398 5.4 MEDIUM
Network 		dedecms dedecms DedeCMS v7.5 SP2 was discovered to contain multiple cross-site scripting (XSS) vulnerabilities in the component tags_main.php via the `activepath`, `keyword`, `tag`, `fmdo=x&filename`, `CKEditor` and… CWE-79
Cross-site Scripting 		CVE-2020-36491 2024-11-21 14:29 2021-10-23 Show GitHub Exploit DB Packet Storm
207399 5.4 MEDIUM
Network 		dedecms dedecms DedeCMS v7.5 SP2 was discovered to contain multiple cross-site scripting (XSS) vulnerabilities in the component file_manage_view.php via the `activepath`, `keyword`, `tag`, `fmdo=x&filename`, `CKEdit… CWE-79
Cross-site Scripting 		CVE-2020-36490 2024-11-21 14:29 2021-10-23 Show GitHub Exploit DB Packet Storm
207400 5.4 MEDIUM
Network 		dropouts air_share Dropouts Technologies LLP Air Share v1.2 was discovered to contain a cross-site scripting (XSS) vulnerability in the devicename parameter. This vulnerability allows attackers to execute arbitrary web… CWE-79
Cross-site Scripting 		CVE-2020-36489 2024-11-21 14:29 2021-10-23 Show GitHub Exploit DB Packet Storm