Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":June 29, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
228761	4.3	警告	Ilia Alshanetsky	-	FUDforum の install/forum_data/src/custom_fields.inc.t におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2013-5309	2013-08-20 14:47	2013-02-17	Show	GitHub Exploit DB Packet Storm

228762	4.3	警告	Juraj Sulek	-	TYPO3 用 RealURL Management エクステンションにおけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2013-5308	2013-08-20 14:39	2013-08-5	Show	GitHub Exploit DB Packet Storm

228763	4.3	警告	Kennziffer.com	-	TYPO3 用 Faceted Search エクステンションにおけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2013-5307	2013-08-20 14:30	2013-08-5	Show	GitHub Exploit DB Packet Storm

228764	7.5	危険	Die Netzmacher	-	TYPO3 用 Browser - TYPO3 without PHP エクステンションにおける SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2013-5306	2013-08-20 14:20	2013-08-5	Show	GitHub Exploit DB Packet Storm

228765	4.3	警告	Joachim Ruhs	-	TYPO3 用 Store Locator エクステンションにおけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2013-5305	2013-08-20 14:12	2013-08-5	Show	GitHub Exploit DB Packet Storm

228766	7.5	危険	Joachim Ruhs	-	TYPO3 用 Store Locator エクステンションにおける SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2013-5304	2013-08-20 14:08	2013-08-5	Show	GitHub Exploit DB Packet Storm

228767	10	危険	Joachim Ruhs	-	TYPO3 用 Store Locator エクステンションにおける脆弱性	CWE-noinfo 情報不足	CVE-2013-5303	2013-08-20 13:54	2013-08-5	Show	GitHub Exploit DB Packet Storm

228768	7.5	危険	Kennziffer.com	-	TYPO3 用 Faceted Search エクステンションにおける SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2013-5302	2013-08-20 13:46	2013-08-5	Show	GitHub Exploit DB Packet Storm

228769	7.8	危険	TrustPort	-	Trustport Webfilter の help.php におけるディレクトリトラバーサルの脆弱性	CWE-22 パス・トラバーサル	CVE-2013-5301	2013-08-20 13:39	2013-07-30	Show	GitHub Exploit DB Packet Storm

228770	3.5	注意	サイボウズ	-	サイボウズメールワイズにおける情報漏えいの脆弱性	CWE-noinfo 情報不足	CVE-2013-4698	2013-08-20 11:36	2013-08-13	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:June 30, 2026, 4:22 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
320421	7.5	HIGH Network	ivanti	avalanche	Path Traversal in Ivanti Avalanche before version 6.4.5 allows a remote unauthenticated attacker to leak sensitive information	CWE-22 Path Traversal	CVE-2024-47011	2024-10-16 22:28	2024-10-9	Show	GitHub Exploit DB Packet Storm

320422	9.8	CRITICAL Network	ivanti	avalanche	Path Traversal in Ivanti Avalanche before version 6.4.5 allows a remote unauthenticated attacker to bypass authentication.	CWE-22 Path Traversal	CVE-2024-47010	2024-10-16 22:28	2024-10-9	Show	GitHub Exploit DB Packet Storm

320423	8.8	HIGH Network	adobe	commerce magento commerce_b2b	Adobe Commerce versions 2.4.7-p2, 2.4.6-p7, 2.4.5-p9, 2.4.4-p10 and earlier are affected by an Improper Authentication vulnerability that could result in a security feature bypass. A low-privileged a…	NVD-CWE-noinfo	CVE-2024-45148	2024-10-16 22:27	2024-10-10	Show	GitHub Exploit DB Packet Storm

320424	9.8	CRITICAL Network	ivanti	avalanche	Path Traversal in Ivanti Avalanche before version 6.4.5 allows a remote unauthenticated attacker to bypass authentication.	CWE-22 Path Traversal	CVE-2024-47009	2024-10-16 22:26	2024-10-9	Show	GitHub Exploit DB Packet Storm

320425	7.5	HIGH Network	ivanti	avalanche	Server-side request forgery in Ivanti Avalanche before version 6.4.5 allows a remote unauthenticated attacker to leak sensitive information.	CWE-918 Server-Side Request Forgery (SSRF)	CVE-2024-47008	2024-10-16 22:24	2024-10-9	Show	GitHub Exploit DB Packet Storm

320426	7.5	HIGH Network	ivanti	avalanche	A NULL pointer dereference in WLAvalancheService.exe of Ivanti Avalanche before version 6.4.5 allows a remote unauthenticated attacker to cause a denial of service.	CWE-476 NULL Pointer Dereference	CVE-2024-47007	2024-10-16 22:23	2024-10-9	Show	GitHub Exploit DB Packet Storm

320427	6.7	MEDIUM Local	microsoft	windows_server_2012 windows_10_1507 windows_server_2016 windows_server_2022_23h2 windows_10_1809 windows_server_2022 windows_11_21h2 windows_10_21h2 windows_10_22h2 windows…	Windows Resume Extensible Firmware Interface Security Feature Bypass Vulnerability	NVD-CWE-noinfo	CVE-2024-37983	2024-10-16 22:15	2024-10-9	Show	GitHub Exploit DB Packet Storm

320428	9.8	CRITICAL Network	alisonic	sibylla_firmware	Alisonic Sibylla devices are vulnerable to SQL injection attacks, which could allow complete access to the database.	CWE-89 SQL Injection	CVE-2024-8630	2024-10-16 22:15	2024-09-28	Show	GitHub Exploit DB Packet Storm

320429	7.5	HIGH Network	opentext	cx-e_voice	Path Traversal vulnerability discovered in OpenText™ CX-E Voice, affecting all version through 22.4. The vulnerability could allow arbitrarily access files on the system.	CWE-22 Path Traversal	CVE-2023-7260	2024-10-16 21:53	2024-08-23	Show	GitHub Exploit DB Packet Storm

320430	-		-	-	There exists an insecure default user permission in Google Cloud Migrate to containers from version 1.1.0 to 1.2.2 Windows installs. A local "m2cuser" was greated with administrator privileges. This …	-	CVE-2024-9858	2024-10-16 18:15	2024-10-16	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed