Vulnerability Search Top

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

Vulnerability Information Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":June 16, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
228241	6.8	警告	Crunchify	-	WordPress 用 FourSquare Checkins プラグインにおけるクロスサイトリクエストフォージェリの脆弱性	CWE-352 同一生成元ポリシー違反	CVE-2013-2709	2013-04-30 17:54	2013-04-22	Show	GitHub Exploit DB Packet Storm

228242	6.8	警告	Crunchify	-	WordPress 用 All in One Webmaster プラグインにおけるクロスサイトリクエストフォージェリの脆弱性	CWE-352 同一生成元ポリシー違反	CVE-2013-2696	2013-04-30 17:52	2013-04-22	Show	GitHub Exploit DB Packet Storm

228243	5	警告	Blink Web Effects	-	WordPress 用 Social Media Widget プラグインにおける任意のファイルのアップロードを強制される脆弱性	CWE-noinfo 情報不足	CVE-2013-1949	2013-04-30 17:51	2013-04-9	Show	GitHub Exploit DB Packet Storm

228244	10	危険	Rob Westgeest	-	Ruby 用 md2pdf gem の converter.rb における任意のコマンドを実行される脆弱性	CWE-noinfo 情報不足	CVE-2013-1948	2013-04-30 17:51	2013-04-10	Show	GitHub Exploit DB Packet Storm

228245	9.3	危険	Kelly D. Redding	-	Ruby 用 kelredd-pruview gem における任意のコマンドを実行される脆弱性	CWE-78 OSコマンド・インジェクション	CVE-2013-1947	2013-04-30 17:50	2013-04-4	Show	GitHub Exploit DB Packet Storm

228246	9.3	危険	karteek-docsplit	-	Ruby 用 Karteek Docsplit gem における任意のコマンドを実行される脆弱性	CWE-78 OSコマンド・インジェクション	CVE-2013-1933	2013-04-30 17:49	2013-04-1	Show	GitHub Exploit DB Packet Storm

228247	6.8	警告	Novell plataformatec	-	Ruby 用 Devise gem における不正な結果が返される脆弱性	CWE-399 リソース管理の問題	CVE-2013-0233	2013-04-30 17:48	2013-01-28	Show	GitHub Exploit DB Packet Storm

228248	7.5	危険	Grape Erik Michaels-Ober	-	Grape などの製品で使用される Ruby 用 multi_xml gem におけるオブジェクトインジェクション攻撃を誘発される脆弱性	CWE-20 不適切な入力確認	CVE-2013-0175	2013-04-30 17:43	2013-01-10	Show	GitHub Exploit DB Packet Storm

228249	5	警告	Ruby-lang.org	-	Ruby における safe-level の制限を回避される脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2012-4466	2013-04-30 17:29	2012-10-3	Show	GitHub Exploit DB Packet Storm

228250	5	警告	Ruby-lang.org	-	Ruby における safe-level の制限を回避される脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2012-4464	2013-04-30 17:25	2012-10-3	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:June 16, 2026, 4:13 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
216761	6.1	MEDIUM Network	solarwinds	serv-u	SolarWinds Serv-U File Server before 15.2.1 has a "Cross-script vulnerability," aka Case Numbers 00041778 and 00306421.	CWE-79 Cross-site Scripting	CVE-2020-15573	2024-11-21 14:05	2020-07-7	Show	GitHub Exploit DB Packet Storm

216762	5.3	MEDIUM Network	gitlab	gitlab	GitLab EE 11.3 through 13.1.2 has Incorrect Access Control because of the Maven package upload endpoint.	NVD-CWE-noinfo	CVE-2020-15525	2024-11-21 14:05	2020-07-7	Show	GitHub Exploit DB Packet Storm

216763	5.4	MEDIUM Network	faceted_search_project	faceted_search	The ke_search (aka Faceted Search) extension through 2.8.2, and 3.x through 3.1.3, for TYPO3 allows XSS.	CWE-79 Cross-site Scripting	CVE-2020-15517	2024-11-21 14:05	2020-07-7	Show	GitHub Exploit DB Packet Storm

216764	5.4	MEDIUM Network	mm_forum_project	mm_forum	The mm_forum extension through 1.9.5 for TYPO3 allows XSS that can be exploited via CSRF.	CWE-352 CWE-79 Origin Validation Error Cross-site Scripting	CVE-2020-15516	2024-11-21 14:05	2020-07-7	Show	GitHub Exploit DB Packet Storm

216765	5.4	MEDIUM Network	jh_captcha_project	jh_captcha	The jh_captcha extension through 2.1.3, and 3.x through 3.0.2, for TYPO3 allows XSS.	CWE-79 Cross-site Scripting	CVE-2020-15514	2024-11-21 14:05	2020-07-7	Show	GitHub Exploit DB Packet Storm

216766	5.3	MEDIUM Network	mittwald	typo3_forum	The typo3_forum extension before 1.2.1 for TYPO3 has Incorrect Access Control.	CWE-863 Incorrect Authorization	CVE-2020-15513	2024-11-21 14:05	2020-07-7	Show	GitHub Exploit DB Packet Storm

216767	6.5	MEDIUM Adjacent	nordicsemi	dfu_library android_ble_library	Nordic Semiconductor Android BLE Library through 2.2.1 and DFU Library through 1.10.4 for Android (as used by nRF Connect and other applications) can engage in unencrypted communication while showing…	CWE-319 Cleartext Transmission of Sensitive Information	CVE-2020-15509	2024-11-21 14:05	2020-07-7	Show	GitHub Exploit DB Packet Storm

216768	5.3	MEDIUM Network	venki	supravizio_bpm	A user enumeration vulnerability flaw was found in Venki Supravizio BPM 10.1.2. This issue occurs during password recovery, where a difference in error messages could allow an attacker to determine i…	CWE-203 Information Exposure Through Discrepancy	CVE-2020-15392	2024-11-21 14:05	2020-07-7	Show	GitHub Exploit DB Packet Storm

216769	9.8	CRITICAL Network	venki	supravizio_bpm	Venki Supravizio BPM 10.1.2 does not limit the number of authentication attempts. An unauthenticated user may exploit this vulnerability to launch a brute-force authentication attack against the Logi…	CWE-307 mproper Restriction of Excessive Authentication Attempts	CVE-2020-15367	2024-11-21 14:05	2020-07-7	Show	GitHub Exploit DB Packet Storm

216770	7.8	HIGH Local	xen debian opensuse fedoraproject	xen debian_linux leap fedora	An issue was discovered in Xen through 4.13.x, allowing Intel guest OS users to gain privileges or cause a denial of service because of non-atomic modification of a live EPT PTE. When mapping guest E…	CWE-362 Race Condition	CVE-2020-15567	2024-11-21 14:05	2020-07-7	Show	GitHub Exploit DB Packet Storm