Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 17, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
224391 7.1 危険 シスコシステムズ - Cisco TelePresence ISDN Gateway ソフトウェアにおけるサービス運用妨害 (DoS) の脆弱性 CWE-20
不適切な入力確認 		CVE-2014-0660 2014-01-24 19:19 2014-01-22 Show GitHub Exploit DB Packet Storm
224392 2.1 注意 LightDM GTK+ Greeter Project
Novell		 - LightDM GTK+ Greeter の lightdm-gtk-greeter.c におけるサービス運用妨害 (DoS) の脆弱性 CWE-Other
その他 		CVE-2014-0979 2014-01-24 19:17 2014-01-21 Show GitHub Exploit DB Packet Storm
224393 5.5 警告 OpenStack
レッドハット		 - OpenStack Keystone で使用される python-keystoneclient における PKI トークンの使用を保持される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2013-2104 2014-01-24 16:28 2013-05-29 Show GitHub Exploit DB Packet Storm
224394 4.3 警告 マカフィー - McAfee SuperScan におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2013-4884 2014-01-24 14:05 2013-07-31 Show GitHub Exploit DB Packet Storm
224395 5 警告 Little CMS - OpenJDK などの製品で使用される Little CMS におけるサービス運用妨害 (DoS) の脆弱性 CWE-Other
その他 		CVE-2013-4160 2014-01-24 14:02 2013-06-25 Show GitHub Exploit DB Packet Storm
224396 5 警告 シスコシステムズ - Cisco ASR 5000 シリーズのデバイス上で稼働する Gateway GPRS Support Node コンポーネントにおけるトップアップ支払の制限を回避される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2014-0669 2014-01-24 13:56 2014-01-22 Show GitHub Exploit DB Packet Storm
224397 4 警告 シスコシステムズ - Cisco MediaSens の Search and Play インターフェースにおける任意の記録をダウンロードされる脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2014-0672 2014-01-24 12:28 2014-01-22 Show GitHub Exploit DB Packet Storm
224398 5.8 警告 シスコシステムズ - Cisco MediaSense におけるオープンリダイレクトの脆弱性 CWE-20
不適切な入力確認 		CVE-2014-0671 2014-01-24 12:24 2014-01-22 Show GitHub Exploit DB Packet Storm
224399 4.3 警告 シスコシステムズ - Cisco MediaSense の Search and Play インターフェースにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2014-0670 2014-01-24 12:17 2014-01-22 Show GitHub Exploit DB Packet Storm
224400 6.8 警告 Seagate Technology LLC - Seagate BlackArmor NAS 220 デバイスのファームウェアにおけるクロスサイトリクエストフォージェリの脆弱性 CWE-352
同一生成元ポリシー違反 		CVE-2013-6922 2014-01-23 18:35 2013-12-3 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 18, 2026, 4 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
211581 9.8 CRITICAL
Network 		grafana
saml_project
redhat
fedoraproject 		grafana
saml
openshift_container_platform
enterprise_linux
openshift_service_mesh
fedora 		A signature verification vulnerability exists in crewjam/saml. This flaw allows an attacker to bypass SAML Authentication. The highest threat from this vulnerability is to confidentiality, integrity,… - CVE-2020-27846 2024-11-21 14:21 2020-12-22 Show GitHub Exploit DB Packet Storm
211582 7.1 HIGH
Local 		redhat
fedoraproject 		ceph
ceph_storage
openshift_container_platform
openstack_platform
fedora 		User credentials can be manipulated and stolen by Native CephFS consumers of OpenStack Manila, resulting in potential privilege escalation. An Open Stack Manila user can request access to a share to … CWE-522
 Insufficiently Protected Credentials 		CVE-2020-27781 2024-11-21 14:21 2020-12-19 Show GitHub Exploit DB Packet Storm
211583 8.8 HIGH
Network 		thingsboard thingsboard ThingsBoard before v3.2 is vulnerable to Host header injection in password-reset emails. This allows an attacker to send malicious links in password-reset emails to victims, pointing to an attacker-c… CWE-20
CWE-74
 Improper Input Validation 
Injection 		CVE-2020-27687 2024-11-21 14:21 2020-12-19 Show GitHub Exploit DB Packet Storm
211584 8.1 HIGH
Adjacent 		mitel mivoice_6940_firmware
mivoice_6930_firmware 		The Bluetooth handset of Mitel MiVoice 6940 and 6930 MiNet phones with firmware before 1.5.3 could allow an unauthenticated attacker within Bluetooth range to pair a rogue Bluetooth device when a pho… NVD-CWE-noinfo
CVE-2020-27640 2024-11-21 14:21 2020-12-18 Show GitHub Exploit DB Packet Storm
211585 8.1 HIGH
Adjacent 		mitel 6873i_sip_firmware
6930_sip_firmware
6940_sip_firmware 		The Bluetooth handset of Mitel MiVoice 6873i, 6930, and 6940 SIP phones with firmware before 5.1.0.SP6 could allow an unauthenticated attacker within Bluetooth range to pair a rogue Bluetooth device … NVD-CWE-noinfo
CVE-2020-27639 2024-11-21 14:21 2020-12-18 Show GitHub Exploit DB Packet Storm
211586 6.1 MEDIUM
Network 		mitel micollab The online help portal of Mitel MiCollab before 9.2 could allow an attacker to redirect a user to an unauthorized website by executing malicious script due to insufficient access control. NVD-CWE-noinfo
CVE-2020-27340 2024-11-21 14:21 2020-12-18 Show GitHub Exploit DB Packet Storm
211587 9.8 CRITICAL
Network 		linux-pam linux-pam A flaw was found in Linux-Pam in versions prior to 1.5.1 in the way it handle empty passwords for non-existing users. When the user doesn't exist PAM try to authenticate with root and in the case of … - CVE-2020-27780 2024-11-21 14:21 2020-12-18 Show GitHub Exploit DB Packet Storm
211588 6.7 MEDIUM
Local 		linux
redhat 		linux_kernel
enterprise_linux
openshift_container_platform 		A flaw was found in the way RTAS handled memory accesses in userspace to kernel communication. On a locked down (usually due to Secure Boot) guest system running on top of PowerVM or KVM hypervisors … - CVE-2020-27777 2024-11-21 14:21 2020-12-16 Show GitHub Exploit DB Packet Storm
211589 9.8 CRITICAL
Network 		f5
netapp 		nginx_controller
cloud_backup 		In versions 3.0.0-3.9.0, 2.0.0-2.9.0, and 1.0.1, the NGINX Controller Agent does not use absolute paths when calling system utilities. CWE-22
Path Traversal 		CVE-2020-27730 2024-11-21 14:21 2020-12-12 Show GitHub Exploit DB Packet Storm
211590 7.5 HIGH
Network 		f5 big-ip_advanced_firewall_manager In certain configurations on version 13.1.3.4, when a BIG-IP AFM HTTP security profile is applied to a virtual server and the BIG-IP system receives a request with specific characteristics, the conne… CWE-401
 Missing Release of Memory after Effective Lifetime 		CVE-2020-27713 2024-11-21 14:21 2020-12-12 Show GitHub Exploit DB Packet Storm