Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 18, 2026, 12:01 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
224471 6.8 警告 Vessio - Vessio NetBill の accounts/admin/index.php におけるクロスサイトリクエストフォージェリの脆弱性 CWE-352
同一生成元ポリシー違反 		CVE-2012-6631 2014-01-21 14:24 2012-05-11 Show GitHub Exploit DB Packet Storm
224472 7.5 危険 Google - Google Chrome の content/browser/web_contents/web_contents_view_aura.cc におけるサービス運用妨害 (DoS) の脆弱性 CWE-399
リソース管理の問題 		CVE-2013-6645 2014-01-20 18:05 2014-01-14 Show GitHub Exploit DB Packet Storm
224473 7.5 危険 Google - Google Chrome の Web Worker の実装におけるサービス運用妨害 (DoS) の脆弱性 CWE-399
リソース管理の問題 		CVE-2013-6646 2014-01-20 17:48 2014-01-14 Show GitHub Exploit DB Packet Storm
224474 7.5 危険 Google - Google Chrome におけるサービス運用妨害 (DoS) の脆弱性 CWE-noinfo
情報不足 		CVE-2013-6644 2014-01-20 17:47 2014-01-14 Show GitHub Exploit DB Packet Storm
224475 7.5 危険 Google - Google Chrome の browser/ui/views/sync/one_click_signin_bubble_view.cc における任意の Google アカウントとの同期を誘発される脆弱性 CWE-287
不適切な認証 		CVE-2013-6643 2014-01-20 17:47 2014-01-14 Show GitHub Exploit DB Packet Storm
224476 5 警告 Google - Android 上で稼働する Google Chrome におけるアドレスバーを偽装される脆弱性 CWE-noinfo
情報不足 		CVE-2013-6642 2014-01-20 17:46 2014-01-14 Show GitHub Exploit DB Packet Storm
224477 7.5 危険 Google - Google Chrome で使用される Blink の core/html/FormAssociatedElement.cpp におけるサービス運用妨害 (DoS) の脆弱性 CWE-399
リソース管理の問題 		CVE-2013-6641 2014-01-20 17:45 2014-01-14 Show GitHub Exploit DB Packet Storm
224478 5 警告 ASUSTeK Computer Inc. - ASUS 製無線 LAN ルータに静的な DNS レコードが登録されている問題 CWE-16
環境設定 		CVE-2013-7293 2014-01-20 17:41 2014-01-13 Show GitHub Exploit DB Packet Storm
224479 4.3 警告 The GetSimple Team - GetSimple CMS におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2012-6621 2014-01-20 17:10 2012-05-4 Show GitHub Exploit DB Packet Storm
224480 4.3 警告 Huawei
Sitecom
D-Link Systems, Inc.
ZyXEL
TP-LINK Technologies
Allegro Software Development Corporation		 - 複数の製品で使用される Allegro RomPager におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2013-6786 2014-01-20 16:57 2013-11-12 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 18, 2026, 4 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
211581 9.8 CRITICAL
Network 		grafana
saml_project
redhat
fedoraproject 		grafana
saml
openshift_container_platform
enterprise_linux
openshift_service_mesh
fedora 		A signature verification vulnerability exists in crewjam/saml. This flaw allows an attacker to bypass SAML Authentication. The highest threat from this vulnerability is to confidentiality, integrity,… - CVE-2020-27846 2024-11-21 14:21 2020-12-22 Show GitHub Exploit DB Packet Storm
211582 7.1 HIGH
Local 		redhat
fedoraproject 		ceph
ceph_storage
openshift_container_platform
openstack_platform
fedora 		User credentials can be manipulated and stolen by Native CephFS consumers of OpenStack Manila, resulting in potential privilege escalation. An Open Stack Manila user can request access to a share to … CWE-522
 Insufficiently Protected Credentials 		CVE-2020-27781 2024-11-21 14:21 2020-12-19 Show GitHub Exploit DB Packet Storm
211583 8.8 HIGH
Network 		thingsboard thingsboard ThingsBoard before v3.2 is vulnerable to Host header injection in password-reset emails. This allows an attacker to send malicious links in password-reset emails to victims, pointing to an attacker-c… CWE-20
CWE-74
 Improper Input Validation 
Injection 		CVE-2020-27687 2024-11-21 14:21 2020-12-19 Show GitHub Exploit DB Packet Storm
211584 8.1 HIGH
Adjacent 		mitel mivoice_6940_firmware
mivoice_6930_firmware 		The Bluetooth handset of Mitel MiVoice 6940 and 6930 MiNet phones with firmware before 1.5.3 could allow an unauthenticated attacker within Bluetooth range to pair a rogue Bluetooth device when a pho… NVD-CWE-noinfo
CVE-2020-27640 2024-11-21 14:21 2020-12-18 Show GitHub Exploit DB Packet Storm
211585 8.1 HIGH
Adjacent 		mitel 6873i_sip_firmware
6930_sip_firmware
6940_sip_firmware 		The Bluetooth handset of Mitel MiVoice 6873i, 6930, and 6940 SIP phones with firmware before 5.1.0.SP6 could allow an unauthenticated attacker within Bluetooth range to pair a rogue Bluetooth device … NVD-CWE-noinfo
CVE-2020-27639 2024-11-21 14:21 2020-12-18 Show GitHub Exploit DB Packet Storm
211586 6.1 MEDIUM
Network 		mitel micollab The online help portal of Mitel MiCollab before 9.2 could allow an attacker to redirect a user to an unauthorized website by executing malicious script due to insufficient access control. NVD-CWE-noinfo
CVE-2020-27340 2024-11-21 14:21 2020-12-18 Show GitHub Exploit DB Packet Storm
211587 9.8 CRITICAL
Network 		linux-pam linux-pam A flaw was found in Linux-Pam in versions prior to 1.5.1 in the way it handle empty passwords for non-existing users. When the user doesn't exist PAM try to authenticate with root and in the case of … - CVE-2020-27780 2024-11-21 14:21 2020-12-18 Show GitHub Exploit DB Packet Storm
211588 6.7 MEDIUM
Local 		linux
redhat 		linux_kernel
enterprise_linux
openshift_container_platform 		A flaw was found in the way RTAS handled memory accesses in userspace to kernel communication. On a locked down (usually due to Secure Boot) guest system running on top of PowerVM or KVM hypervisors … - CVE-2020-27777 2024-11-21 14:21 2020-12-16 Show GitHub Exploit DB Packet Storm
211589 9.8 CRITICAL
Network 		f5
netapp 		nginx_controller
cloud_backup 		In versions 3.0.0-3.9.0, 2.0.0-2.9.0, and 1.0.1, the NGINX Controller Agent does not use absolute paths when calling system utilities. CWE-22
Path Traversal 		CVE-2020-27730 2024-11-21 14:21 2020-12-12 Show GitHub Exploit DB Packet Storm
211590 7.5 HIGH
Network 		f5 big-ip_advanced_firewall_manager In certain configurations on version 13.1.3.4, when a BIG-IP AFM HTTP security profile is applied to a virtual server and the BIG-IP system receives a request with specific characteristics, the conne… CWE-401
 Missing Release of Memory after Effective Lifetime 		CVE-2020-27713 2024-11-21 14:21 2020-12-12 Show GitHub Exploit DB Packet Storm