Vulnerability Search Top

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

Vulnerability Information Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":June 1, 2026, 2:01 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
250561	4.3	警告	Joomla!	-	Joomla! の com_search モジュールにおけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2011-0005	2012-03-27 18:42	2011-01-10	Show	GitHub Exploit DB Packet Storm

250562	4.3	警告	Piwik	-	Piwik におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2011-0004	2012-03-27 18:42	2011-01-10	Show	GitHub Exploit DB Packet Storm

250563	6.9	警告	Exim Development	-	Exim の open_log 機能における任意のファイルにログデータをアペンドさせる脆弱性	CWE-20 CWE-59	CVE-2011-0017	2012-03-27 18:42	2010-06-12	Show	GitHub Exploit DB Packet Storm

250564	5.8	警告	MediaWiki	-	MediaWiki におけるクリックジャッキング攻撃を実行される脆弱性	CWE-20 不適切な入力確認	CVE-2011-0003	2012-03-27 18:42	2011-01-10	Show	GitHub Exploit DB Packet Storm

250565	7.5	危険	Digital Junkies	-	dompdf の dompdf.php における任意の PHP コードを実行される脆弱性	CWE-94 コード・インジェクション	CVE-2010-4879	2012-03-27 18:42	2011-10-7	Show	GitHub Exploit DB Packet Storm

250566	7.5	危険	WordPress.org edgetechweb	-	Event Registration プラグインにおける SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2010-4839	2012-03-27 18:42	2011-09-13	Show	GitHub Exploit DB Packet Storm

250567	6	警告	extensiondepot Joomla!	-	Joomla! の JSupport (com_jsupport) コンポーネントにおける SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2010-4838	2012-03-27 18:42	2011-09-13	Show	GitHub Exploit DB Packet Storm

250568	4.3	警告	extensiondepot	-	Joomla! の JSupport (com_jsupport) コンポーネントにおけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2010-4837	2012-03-27 18:42	2011-09-13	Show	GitHub Exploit DB Packet Storm

250569	4.3	警告	phpshop	-	PHPShop の register.html におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2010-4836	2012-03-27 18:42	2011-09-13	Show	GitHub Exploit DB Packet Storm

250570	4	警告	OneOrZero	-	OneOrZero AIMS の index.php におけるディレクトリトラバーサルの脆弱性	CWE-22 パス・トラバーサル	CVE-2010-4835	2012-03-27 18:42	2011-09-13	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:June 1, 2026, 4:12 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
214651	9.8	CRITICAL Network	gitlab	gitlab	A vulnerability was discovered in GitLab versions before 13.1.10, 13.2.8 and 13.3.4. GitLab OAuth endpoint was vulnerable to brute-force attacks through a specific parameter.	CWE-307 mproper Restriction of Excessive Authentication Attempts	CVE-2020-13312	2024-11-21 14:01	2020-09-15	Show	GitHub Exploit DB Packet Storm

214652	4.3	MEDIUM Network	gitlab	gitlab	A vulnerability was discovered in GitLab versions before 13.1.10, 13.2.8 and 13.3.4. Wiki was vulnerable to a parser attack that prohibits anyone from accessing the Wiki functionality through the use…	CWE-706 Use of Incorrectly-Resolved Name or Reference	CVE-2020-13311	2024-11-21 14:01	2020-09-15	Show	GitHub Exploit DB Packet Storm

214653	7.3	HIGH Network	gitlab	gitlab	A vulnerability was discovered in GitLab versions before 13.0.12, 13.1.10, 13.2.8 and 13.3.4. GitLabs EKS integration was vulnerable to a cross-account assume role attack.	NVD-CWE-noinfo	CVE-2020-13318	2024-11-21 14:01	2020-09-15	Show	GitHub Exploit DB Packet Storm

214654	4.3	MEDIUM Network	gitlab	gitlab	A vulnerability was discovered in GitLab versions before 13.1.10, 13.2.8 and 13.3.4. GitLab was not validating a Deploy-Token and allowed a disabled repository be accessible via a git command line.	NVD-CWE-noinfo	CVE-2020-13316	2024-11-21 14:01	2020-09-15	Show	GitHub Exploit DB Packet Storm

214655	9.8	CRITICAL Network	erlang	rebar3	Rebar3 versions 3.0.0-beta.3 to 3.13.2 are vulnerable to OS command injection via URL parameter of dependency specification.	CWE-78 OS Command	CVE-2020-13802	2024-11-21 14:01	2020-09-3	Show	GitHub Exploit DB Packet Storm

214656	5.4	MEDIUM Network	dolibarr	dolibarr_erp\/crm	Dolibarr 11.0.4 is affected by multiple stored Cross-Site Scripting (XSS) vulnerabilities that could allow remote authenticated attackers to inject arbitrary web script or HTML via ticket/card.php?ac…	CWE-79 Cross-site Scripting	CVE-2020-13828	2024-11-21 14:01	2020-09-1	Show	GitHub Exploit DB Packet Storm

214657	4.6	MEDIUM Physics	gigadevice	gd32f103_firmware	The flash memory readout protection in Gigadevice GD32F103 devices allows physical attackers to extract firmware via the debug interface by utilizing the DMA module.	CWE-668 Exposure of Resource to Wrong Sphere	CVE-2020-13472	2024-11-21 14:01	2020-09-1	Show	GitHub Exploit DB Packet Storm

214658	6.8	MEDIUM Physics	apexmic	apm32f103_firmware	Apex Microelectronics APM32F103 devices allow physical attackers to execute arbitrary code via a power glitch and a specific flash patch/breakpoint unit configuration.	NVD-CWE-noinfo	CVE-2020-13471	2024-11-21 14:01	2020-09-1	Show	GitHub Exploit DB Packet Storm

214659	4.6	MEDIUM Physics	gigadevice	gd32f103_firmware gd32f130_firmware	Gigadevice GD32F103 and GD32F130 devices allow physical attackers to extract data via the probing of easily accessible bonding wires and de-obfuscation of the observed data.	CWE-668 Exposure of Resource to Wrong Sphere	CVE-2020-13470	2024-11-21 14:01	2020-09-1	Show	GitHub Exploit DB Packet Storm

214660	4.6	MEDIUM Physics	gigadevice	gd32vf103_firmware	The flash memory readout protection in Gigadevice GD32VF103 devices allows physical attackers to extract firmware via the debug interface by utilizing the CPU.	CWE-668 Exposure of Resource to Wrong Sphere	CVE-2020-13469	2024-11-21 14:01	2020-09-1	Show	GitHub Exploit DB Packet Storm