Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 15, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
230631 5 警告 web-app.org - WebAPP における脆弱性 - CVE-2007-1186 2012-12-20 18:19 2007-03-2 Show GitHub Exploit DB Packet Storm
230632 5 警告 web-app.org - WebAPP の Search フォームなどにおける脆弱性 - CVE-2007-1185 2012-12-20 18:19 2007-03-2 Show GitHub Exploit DB Packet Storm
230633 5 警告 web-app.org - WebAPP の初期設定における不正なデータを送信される脆弱性 CWE-16
環境設定 		CVE-2007-1184 2012-12-20 18:19 2007-03-2 Show GitHub Exploit DB Packet Storm
230634 7.5 危険 web-app.org - WebAPP におけるユーザの本名を偽装される脆弱性 - CVE-2007-1183 2012-12-20 18:19 2007-03-2 Show GitHub Exploit DB Packet Storm
230635 6.4 警告 web-app.org - WebAPP における Guest プロフィールを編集される脆弱性 - CVE-2007-1182 2012-12-20 18:19 2007-03-2 Show GitHub Exploit DB Packet Storm
230636 5 警告 web-app.org - WebAPP における脆弱性 - CVE-2007-1181 2012-12-20 18:19 2007-03-2 Show GitHub Exploit DB Packet Storm
230637 4.3 警告 web-app.org - WebAPP におけるクロスサイトリクエストフォージェリ攻撃を仕掛けられる脆弱性 - CVE-2007-1180 2012-12-20 18:19 2007-03-2 Show GitHub Exploit DB Packet Storm
230638 5 警告 web-app.org - WebAPP における脆弱性 - CVE-2007-1179 2012-12-20 18:19 2007-03-2 Show GitHub Exploit DB Packet Storm
230639 7.5 危険 web-app.org - WebAPP における脆弱性 - CVE-2007-1178 2012-12-20 18:19 2007-03-2 Show GitHub Exploit DB Packet Storm
230640 5.8 警告 web-app.org - WebAPP における脆弱性 - CVE-2007-1177 2012-12-20 18:19 2007-03-2 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 16, 2026, 4 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
210961 6.1 MEDIUM
Network 		drupal entity_embed The Entity Embed module provides a filter to allow embedding entities in content fields. In certain circumstances, the filter could allow an unprivileged user to inject HTML into a page when it is ac… CWE-79
Cross-site Scripting 		CVE-2020-13673 2024-11-21 14:01 2022-02-12 Show GitHub Exploit DB Packet Storm
210962 6.1 MEDIUM
Network 		drupal drupal Cross-site Scripting (XSS) vulnerability in Drupal core's sanitization API fails to properly filter cross-site scripting under certain circumstances. This issue affects: Drupal Core 9.1.x versions pr… CWE-79
Cross-site Scripting 		CVE-2020-13672 2024-11-21 14:01 2022-02-12 Show GitHub Exploit DB Packet Storm
210963 7.5 HIGH
Network 		drupal drupal Information Disclosure vulnerability in file module of Drupal Core allows an attacker to gain access to the file metadata of a permanent private file that they do not have access to by guessing the I… CWE-668
 Exposure of Resource to Wrong Sphere 		CVE-2020-13670 2024-11-21 14:01 2022-02-12 Show GitHub Exploit DB Packet Storm
210964 6.1 MEDIUM
Network 		drupal drupal Cross-site Scripting (XSS) vulnerability in ckeditor of Drupal Core allows attacker to inject XSS. This issue affects: Drupal Core 8.8.x versions prior to 8.8.10.; 8.9.x versions prior to 8.9.6; 9.0.… CWE-79
Cross-site Scripting 		CVE-2020-13669 2024-11-21 14:01 2022-02-12 Show GitHub Exploit DB Packet Storm
210965 6.1 MEDIUM
Network 		drupal drupal Access Bypass vulnerability in Drupal Core allows for an attacker to leverage the way that HTML is rendered for affected forms in order to exploit the vulnerability. This issue affects: Drupal Core 8… CWE-79
Cross-site Scripting 		CVE-2020-13668 2024-11-21 14:01 2022-02-12 Show GitHub Exploit DB Packet Storm
210966 6.1 MEDIUM
Network 		outsystems lifetime_management_console
platform_server
outsystems 		A stored XSS vulnerability was discovered in the ECT Provider in OutSystems before 2020-09-04, affecting generated applications. It could allow an unauthenticated remote attacker to craft and store m… CWE-79
Cross-site Scripting 		CVE-2020-13639 2024-11-21 14:01 2021-08-31 Show GitHub Exploit DB Packet Storm
210967 8.8 HIGH
Network 		rukovoditel rukovoditel An exploitable SQL injection vulnerability exists in the ‘entities/fields’ page of the Rukovoditel Project Management App 2.7.2. The entities_id parameter in the 'entities/fields page (mulitple_edit … CWE-89
SQL Injection 		CVE-2020-13589 2024-11-21 14:01 2021-08-18 Show GitHub Exploit DB Packet Storm
210968 8.8 HIGH
Network 		rukovoditel rukovoditel An exploitable SQL injection vulnerability exists in the ‘entities/fields’ page of the Rukovoditel Project Management App 2.7.2. The heading_field_id parameter in ‘‘entities/fields’ page is vulnerabl… CWE-89
SQL Injection 		CVE-2020-13588 2024-11-21 14:01 2021-08-18 Show GitHub Exploit DB Packet Storm
210969 8.8 HIGH
Network 		drupal drupal Cross Site Request Forgery vulnerability in Drupal Core Form API does not properly handle certain form input from cross-site requests, which can lead to other vulnerabilities. CWE-352
 Origin Validation Error 		CVE-2020-13663 2024-11-21 14:01 2021-06-12 Show GitHub Exploit DB Packet Storm
210970 6.1 MEDIUM
Network 		drupal drupal Cross-site scripting vulnerability in l Drupal Core allows an attacker could leverage the way that HTML is rendered for affected forms in order to exploit the vulnerability. This issue affects: Drupa… CWE-79
Cross-site Scripting 		CVE-2020-13688 2024-11-21 14:01 2021-06-12 Show GitHub Exploit DB Packet Storm