Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 18, 2026, 10 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
224181 6.8 警告 TRENDnet - TRENDnet TEW-812DRU ルータのファームウェアにおけるクロスサイトリクエストフォージェリの脆弱性 CWE-352
同一生成元ポリシー違反
CVE-2013-3098 2014-02-6 12:18 2013-07-26 Show GitHub Exploit DB Packet Storm
224182 4.3 警告 Media5 - Media5 Mediatrix 4402 VoIP Gateway ファームウェアの Web Management Interface におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2014-1612 2014-02-5 18:06 2014-01-23 Show GitHub Exploit DB Packet Storm
224183 8.3 危険 Seowon Intech - Seowon Intech WiMAX SWC-9100 ルータの cgi-bin/diagnostic.cgi の ping 機能における任意のコマンドを実行される脆弱性 CWE-20
CWE-Other
CVE-2013-7179 2014-02-5 17:57 2013-12-19 Show GitHub Exploit DB Packet Storm
224184 10 危険 GateHouse
Harris
Thuraya Telecommunications
Hughes Network Systems
日本無線株式会社
Inmarsat plc.
- 複数の衛星通信端末のファームウェアにおける任意のコードを実行される脆弱性 CWE-287
CWE-Other
CVE-2013-6035 2014-02-5 17:50 2013-10-4 Show GitHub Exploit DB Packet Storm
224185 10 危険 GateHouse
Harris
Thuraya Telecommunications
Hughes Network Systems
日本無線株式会社
Inmarsat plc.
- 複数の衛星通信端末のファームウェアにおける不特定のログインアクセス権を取得される脆弱性 CWE-255
CWE-Other
CVE-2013-6034 2014-02-5 17:49 2013-10-4 Show GitHub Exploit DB Packet Storm
224186 3.5 注意 Lexmark - Lexmark の複数のプリンタ製品におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2013-6033 2014-02-5 17:05 2013-10-4 Show GitHub Exploit DB Packet Storm
224187 10 危険 Lexmark - Lexmark の複数のプリンタ製品の cgi-bin/postpf/cgi-bin/dynamic/config/config.html における Password Protect の管理パスワードを削除される脆弱性 CWE-20
CWE-Other
CVE-2013-6032 2014-02-5 17:00 2013-10-4 Show GitHub Exploit DB Packet Storm
224188 4 警告 IBM - IBM General Parallel File System におけるサービス運用妨害 (DoS) の脆弱性 CWE-20
不適切な入力確認
CVE-2014-0834 2014-02-5 16:12 2014-01-31 Show GitHub Exploit DB Packet Storm
224189 6.8 警告 IBM - IBM InfoSphere Master Data Management - Collaborative Edition および InfoSphere Master Data Management Server for Product Information Management におけるクロスサイトリクエストフォージェリの脆弱性 CWE-352
同一生成元ポリシー違反
CVE-2013-5427 2014-02-5 16:11 2013-08-22 Show GitHub Exploit DB Packet Storm
224190 9.3 危険 ZTE - ZTE ZXV10 W300 に認証情報がハードコードされている問題 CWE-255
CWE-Other
CVE-2014-0329 2014-02-5 15:50 2014-02-3 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 18, 2026, 4 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
211371 6.5 MEDIUM
Network
asterisk
sangoma
fedoraproject
debian
certified_asterisk
asterisk
fedora
debian_linux
An issue was discovered in Asterisk Open Source 13.x before 13.37.1, 16.x before 16.14.1, 17.x before 17.8.1, and 18.x before 18.0.1 and Certified Asterisk before 16.8-cert5. If Asterisk is challenge… CWE-674
 Uncontrolled Recursion
CVE-2020-28242 2024-11-21 14:22 2020-11-6 Show GitHub Exploit DB Packet Storm
211372 8.8 HIGH
Network
web-audimex audimexee SQL Injection vulnerability in "Documents component" found in AudimexEE version 14.1.0 allows an attacker to execute arbitrary SQL commands via the object_path parameter. CWE-89
SQL Injection
CVE-2020-28115 2024-11-21 14:22 2020-11-6 Show GitHub Exploit DB Packet Storm
211373 5.4 MEDIUM
Network
web-audimex audimexee AudimexEE before 14.1.1 is vulnerable to Reflected XSS (Cross-Site-Scripting). If the recommended security configuration parameter "unique_error_numbers" is not set, remote attackers can inject arbit… CWE-79
Cross-site Scripting
CVE-2020-28047 2024-11-21 14:22 2020-11-6 Show GitHub Exploit DB Packet Storm
211374 9.8 CRITICAL
Network
git_large_file_storage_project git_large_file_storage Git LFS 2.12.0 allows Remote Code Execution. CWE-427
 Uncontrolled Search Path Element
CVE-2020-27955 2024-11-21 14:22 2020-11-6 Show GitHub Exploit DB Packet Storm
211375 6.3 MEDIUM
Local
sddm_project
opensuse
debian
fedoraproject
sddm
leap
debian_linux
fedora
An issue was discovered in SDDM before 0.19.0. It incorrectly starts the X server in a way that - for a short time period - allows local unprivileged users to create a connection to the X server with… CWE-362
Race Condition
CVE-2020-28049 2024-11-21 14:22 2020-11-5 Show GitHub Exploit DB Packet Storm
211376 7.8 HIGH
Local
pax prolinos An issue was discovered in ProlinOS through 2.4.161.8859R. An attacker with local code execution privileges as a normal user (MAINAPP) can escalate to root privileges by exploiting the setuid install… CWE-269
 Improper Privilege Management
CVE-2020-28046 2024-11-21 14:22 2020-11-3 Show GitHub Exploit DB Packet Storm
211377 6.8 MEDIUM
Physics
pax prolinos An attacker with physical access to a PAX Point Of Sale device with ProlinOS through 2.4.161.8859R can boot it in management mode, enable the XCB service, and then list, read, create, and overwrite f… CWE-276
Incorrect Default Permissions 
CVE-2020-28044 2024-11-21 14:22 2020-11-3 Show GitHub Exploit DB Packet Storm
211378 7.5 HIGH
Network
misp misp MISP through 2.4.133 allows SSRF in the REST client via the use_full_path parameter with an arbitrary URL. CWE-918
Server-Side Request Forgery (SSRF) 
CVE-2020-28043 2024-11-21 14:22 2020-11-3 Show GitHub Exploit DB Packet Storm
211379 5.3 MEDIUM
Network
servicestack servicestack ServiceStack before 5.9.2 mishandles JWT signature verification unless an application has a custom ValidateToken function that establishes a valid minimum length for a signature. CWE-347
 Improper Verification of Cryptographic Signature
CVE-2020-28042 2024-11-21 14:22 2020-11-3 Show GitHub Exploit DB Packet Storm
211380 4.3 MEDIUM
Network
wordpress
debian
canonical
wordpress
debian_linux
ubuntu_linux
WordPress before 5.5.2 allows CSRF attacks that change a theme's background image. CWE-352
 Origin Validation Error
CVE-2020-28040 2024-11-21 14:22 2020-11-3 Show GitHub Exploit DB Packet Storm