Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 11, 2026, 6:13 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
224621 6.8 警告 X.Org Foundation - X.org libXtst における整数オーバーフローの脆弱性 CWE-189
数値処理の問題
CVE-2013-2063 2013-11-28 18:55 2013-05-23 Show GitHub Exploit DB Packet Storm
224622 10 危険 SAP - SAP Sybase Adaptive Server Enterprise における任意のコードを実行される脆弱性 CWE-noinfo
情報不足
CVE-2013-6245 2013-11-28 18:51 2013-10-24 Show GitHub Exploit DB Packet Storm
224623 6.8 警告 X.Org Foundation - X.org libdmx における整数オーバーフローの脆弱性 CWE-189
数値処理の問題
CVE-2013-1992 2013-11-28 18:31 2013-05-23 Show GitHub Exploit DB Packet Storm
224624 6.8 警告 X.Org Foundation - X.org libXxf86dga における整数オーバーフローの脆弱性 CWE-189
数値処理の問題
CVE-2013-1991 2013-11-28 18:31 2013-05-23 Show GitHub Exploit DB Packet Storm
224625 6.8 警告 X.Org Foundation - X.org libXvMC における整数オーバーフローの脆弱性 CWE-189
数値処理の問題
CVE-2013-1990 2013-11-28 18:31 2013-05-23 Show GitHub Exploit DB Packet Storm
224626 6.8 警告 X.Org Foundation - X.org libXv における整数オーバーフローの脆弱性 CWE-189
数値処理の問題
CVE-2013-1989 2013-11-28 18:30 2013-05-23 Show GitHub Exploit DB Packet Storm
224627 4 警告 Linux - Linux Kernel の XFS の実装におけるバッファアンダーフローの脆弱性 CWE-119
バッファエラー
CVE-2013-6382 2013-11-28 18:27 2013-10-31 Show GitHub Exploit DB Packet Storm
224628 4.7 警告 Linux - Linux Kernel の drivers/scsi/aacraid/commctrl.c の aac_send_raw_srb 関数におけるサービス運用妨害 (DoS) の脆弱性 CWE-20
不適切な入力確認
CVE-2013-6380 2013-11-28 18:25 2013-11-19 Show GitHub Exploit DB Packet Storm
224629 2.6 注意 Novell
OpenVPN Technologies
- OpenVPN の crypto.c の openvpn_decrypt 関数における重要な情報を取得される脆弱性 CWE-200
情報漏えい
CVE-2013-2061 2013-11-28 17:59 2013-03-22 Show GitHub Exploit DB Packet Storm
224630 6.8 警告 X.Org Foundation - X.org libXcursor における整数オーバーフローの脆弱性 CWE-189
数値処理の問題
CVE-2013-2003 2013-11-28 17:57 2013-05-23 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 11, 2026, 5:13 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
211271 7.5 HIGH
Network
wpo365 wordpress_\+_azure_ad_\/_microsoft_office_365 The wpo365-login plugin before v11.7 for WordPress allows use of a symmetric algorithm to decrypt a JWT token. This leads to authentication bypass. CWE-287
Improper Authentication
CVE-2020-26511 2024-11-21 14:19 2020-10-2 Show GitHub Exploit DB Packet Storm
211272 9.8 CRITICAL
Network
websitebaker websitebaker WebsiteBaker 2.12.2 allows SQL Injection via parameter 'display_name' in /websitebaker/admin/preferences/save.php. Exploiting this issue could allow an attacker to compromise the application, access … CWE-89
SQL Injection
CVE-2020-25990 2024-11-21 14:19 2020-10-1 Show GitHub Exploit DB Packet Storm
211273 8.8 HIGH
Network
bigbluebutton greenlight BigBlueButton Greenlight before 2.5.6 allows HTTP header (Host and Origin) attacks, which can result in Account Takeover if a victim follows a spoofed password-reset link. NVD-CWE-Other
CVE-2020-26163 2024-11-21 14:19 2020-10-1 Show GitHub Exploit DB Packet Storm
211274 7.5 HIGH
Network
jwt-go_project jwt-go jwt-go before 4.0.0-preview1 allows attackers to bypass intended access restrictions in situations with []string{} for m["aud"] (which is allowed by the specification). Because the type assertion fai… CWE-287
CWE-755
Improper Authentication
 Improper Handling of Exceptional Conditions
CVE-2020-26160 2024-11-21 14:19 2020-10-1 Show GitHub Exploit DB Packet Storm
211275 9.6 CRITICAL
Network
leanote leanote Leanote Desktop through 2.6.2 allows XSS because a note's title is mishandled when the batch feature is triggered. This leads to remote code execution because of Node integration. CWE-79
Cross-site Scripting
CVE-2020-26158 2024-11-21 14:19 2020-10-1 Show GitHub Exploit DB Packet Storm
211276 9.6 CRITICAL
Network
leanote leanote Leanote Desktop through 2.6.2 allows XSS because a note's title is mishandled during syncing. This leads to remote code execution because of Node integration. CWE-79
Cross-site Scripting
CVE-2020-26157 2024-11-21 14:19 2020-10-1 Show GitHub Exploit DB Packet Storm
211277 9.8 CRITICAL
Network
libproxy_project
fedoraproject
debian
opensuse
libproxy
fedora
debian_linux
leap
url.cpp in libproxy through 0.4.15 is prone to a buffer overflow when PAC is enabled, as demonstrated by a large PAC file that is delivered without a Content-length header. CWE-120
Classic Buffer Overflow
CVE-2020-26154 2024-11-21 14:19 2020-10-1 Show GitHub Exploit DB Packet Storm
211278 7.5 HIGH
Network
logaritmo aware_callmanager info.php in Logaritmo Aware CallManager 2012 allows remote attackers to obtain sensitive information via a direct request, which calls the phpinfo function. CWE-425
 Direct Request ('Forced Browsing')
CVE-2020-26150 2024-11-21 14:19 2020-10-1 Show GitHub Exploit DB Packet Storm
211279 7.5 HIGH
Network
linuxfoundation nats.deno
nats.js
nats.ws
NATS nats.js before 2.0.0-209, nats.ws before 1.0.0-111, and nats.deno before 1.0.0-9 allow credential disclosure from a client to a server. CWE-522
 Insufficiently Protected Credentials
CVE-2020-26149 2024-11-21 14:19 2020-10-1 Show GitHub Exploit DB Packet Storm
211280 7.5 HIGH
Network
md4c_project md4c md_push_block_bytes in md4c.c in md4c 0.4.5 allows attackers to trigger use of uninitialized memory, and cause a denial of service (e.g., assertion failure) via a malformed Markdown document. CWE-908
 Use of Uninitialized Resource
CVE-2020-26148 2024-11-21 14:19 2020-10-1 Show GitHub Exploit DB Packet Storm