Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 17, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
228331 4.3 警告 ThemeLogik - CMSLogik におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2013-3535 2013-05-15 17:35 2013-05-13 Show GitHub Exploit DB Packet Storm
228332 4.3 警告 algisinfo - Joomla! 用の aiContactSafe コンポーネントにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2013-3534 2013-05-15 17:32 2013-04-16 Show GitHub Exploit DB Packet Storm
228333 2.6 注意 Fedora Project - 389 Directory Server の ldap/servers/slapd/search.c における重要な情報を取得される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2013-1897 2013-05-15 16:07 2013-03-28 Show GitHub Exploit DB Packet Storm
228334 7.5 危険 Virtual Access - Virtual Access Monitor における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2013-3533 2013-05-14 15:49 2013-05-10 Show GitHub Exploit DB Packet Storm
228335 7.5 危険 Web-Dorado - Drupal 用 Web Dorado Spider Video Player プラグインの settings.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2013-3532 2013-05-14 15:49 2013-05-10 Show GitHub Exploit DB Packet Storm
228336 7.5 危険 RadioCMS - RadioCMS の meneger.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2013-3531 2013-05-14 15:48 2013-05-10 Show GitHub Exploit DB Packet Storm
228337 7.5 危険 Fabricio Zuardi - WordPress 用 Spiffy XSPF Player プラグインの playlist.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2013-3530 2013-05-14 15:47 2013-05-10 Show GitHub Exploit DB Packet Storm
228338 4.3 警告 Smarty Pants Plugins - WordPress 用 WP FuneralPress プラグインの user/obits.php におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2013-3529 2013-05-14 15:46 2013-05-10 Show GitHub Exploit DB Packet Storm
228339 7.5 危険 Vanilla Forums - Vanilla Forums の更新チェックにおける脆弱性 CWE-noinfo
情報不足 		CVE-2013-3528 2013-05-14 15:44 2013-04-5 Show GitHub Exploit DB Packet Storm
228340 7.5 危険 Vanilla Forums - Vanilla Forums における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2013-3527 2013-05-14 15:37 2013-04-5 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 17, 2026, 4:19 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
216811 7.5 HIGH
Network 		midasolutions eframework There is a SQL Injection in Mida eFramework through 2.9.0 that leads to Information Disclosure. No authentication is required. The injection point resides in one of the authentication parameters. CWE-89
SQL Injection 		CVE-2020-15924 2024-11-21 14:06 2020-07-24 Show GitHub Exploit DB Packet Storm
216812 7.5 HIGH
Network 		midasolutions eframework Mida eFramework through 2.9.0 allows unauthenticated ../ directory traversal. CWE-22
Path Traversal 		CVE-2020-15923 2024-11-21 14:06 2020-07-24 Show GitHub Exploit DB Packet Storm
216813 9.8 CRITICAL
Network 		midasolutions eframework There is an OS Command Injection in Mida eFramework 2.9.0 that allows an attacker to achieve Remote Code Execution (RCE) with administrative (root) privileges. Authentication is required. CWE-78
OS Command  		CVE-2020-15922 2024-11-21 14:06 2020-07-24 Show GitHub Exploit DB Packet Storm
216814 9.8 CRITICAL
Network 		midasolutions eframework Mida eFramework through 2.9.0 has a back door that permits a change of the administrative password and access to restricted functionalities, such as Code Execution. CWE-287
Improper Authentication 		CVE-2020-15921 2024-11-21 14:06 2020-07-24 Show GitHub Exploit DB Packet Storm
216815 9.8 CRITICAL
Network 		midasolutions eframework There is an OS Command Injection in Mida eFramework through 2.9.0 that allows an attacker to achieve Remote Code Execution (RCE) with administrative (root) privileges. No authentication is required. CWE-78
OS Command  		CVE-2020-15920 2024-11-21 14:06 2020-07-24 Show GitHub Exploit DB Packet Storm
216816 6.1 MEDIUM
Network 		midasolutions eframework A Reflected Cross Site Scripting (XSS) vulnerability was discovered in Mida eFramework through 2.9.0. CWE-79
Cross-site Scripting 		CVE-2020-15919 2024-11-21 14:06 2020-07-24 Show GitHub Exploit DB Packet Storm
216817 5.4 MEDIUM
Network 		midasolutions eframework Multiple Stored Cross Site Scripting (XSS) vulnerabilities were discovered in Mida eFramework through 2.9.0. CWE-79
Cross-site Scripting 		CVE-2020-15918 2024-11-21 14:06 2020-07-24 Show GitHub Exploit DB Packet Storm
216818 9.8 CRITICAL
Network 		claws-mail
fedoraproject
opensuse 		claws-mail
fedora
leap
backports_sle 		common/session.c in Claws Mail before 3.17.6 has a protocol violation because suffix data after STARTTLS is mishandled. NVD-CWE-noinfo
CVE-2020-15917 2024-11-21 14:06 2020-07-24 Show GitHub Exploit DB Packet Storm
216819 9.8 CRITICAL
Network 		tenda ac15_firmware goform/AdvSetLanip endpoint on Tenda AC15 AC1900 15.03.05.19 devices allows remote attackers to execute arbitrary system commands via shell metacharacters in the lanIp POST parameter. CWE-78
OS Command  		CVE-2020-15916 2024-11-21 14:06 2020-07-24 Show GitHub Exploit DB Packet Storm
216820 6.5 MEDIUM
Adjacent 		tesla model_3_firmware Tesla Model 3 vehicles allow attackers to open a door by leveraging access to a legitimate key card, and then using NFC Relay. NOTE: the vendor has developed Pin2Drive to mitigate this issue NVD-CWE-noinfo
CVE-2020-15912 2024-11-21 14:06 2020-07-24 Show GitHub Exploit DB Packet Storm