Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":June 18, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
224731	9.3	危険	リアルネットワークス	-	RealNetworks RealPlayer におけるヒープベースのバッファオーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2013-6877	2014-01-9 11:37	2013-12-20	Show	GitHub Exploit DB Packet Storm

224732	4.6	警告	Lennart Poettering レッドハット	-	RealtimeKit におけるアクセス制限を回避される脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2013-4326	2014-01-9 10:53	2013-09-24	Show	GitHub Exploit DB Packet Storm

224733	6.9	警告	ヒューレット・パッカード	-	HP Linux Imaging and Printing の base/pkit.py におけるアクセス制限を回避される脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2013-4325	2014-01-9 10:50	2013-09-11	Show	GitHub Exploit DB Packet Storm

224734	7.5	危険	Google	-	Google Chrome で使用される Blink の Web Audio の実装におけるサービス運用妨害 (DoS) の脆弱性	CWE-399 リソース管理の問題	CVE-2013-2910	2014-01-9 10:48	2013-10-1	Show	GitHub Exploit DB Packet Storm

224735	5	警告	Google	-	Google Chrome におけるアドレスバーを偽装される脆弱性	CWE-Other その他	CVE-2013-2908	2014-01-9 10:45	2013-10-1	Show	GitHub Exploit DB Packet Storm

224736	5	警告	Google	-	Google Chrome の Window.prototype オブジェクトの実装におけるサービス運用妨害 (DoS) の脆弱性	CWE-119 バッファエラー	CVE-2013-2907	2014-01-9 10:43	2013-10-1	Show	GitHub Exploit DB Packet Storm

224737	6.8	警告	Google	-	Google Chrome で使用される Blink の Web Audio の実装におけるサービス運用妨害 (DoS) の脆弱性	CWE-362 競合状態	CVE-2013-2906	2014-01-9 10:41	2013-10-1	Show	GitHub Exploit DB Packet Storm

224738	6.8	警告	LibTIFF	-	ppm2tiff におけるサービス運用妨害 (DoS) の脆弱性	CWE-DesignError	CVE-2012-4564	2014-01-9 10:06	2012-11-11	Show	GitHub Exploit DB Packet Storm

224739	5	警告	Django Software Foundation	-	Django におけるディレクトリトラバーサルの脆弱性	CWE-22 パス・トラバーサル	CVE-2013-4315	2014-01-9 09:49	2013-09-10	Show	GitHub Exploit DB Packet Storm

224740	7.5	危険	リアルネットワークス	-	Windows 上で稼働する RealNetworks RealPlayer および Mac RealPlayer におけるスタックベースのバッファオーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2013-7260	2014-01-8 17:30	2013-12-20	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:June 19, 2026, 4:01 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
211001	4.3	MEDIUM Network	bigbluebutton	bigbluebutton	In BigBlueButton before 2.2.29, a user can vote more than once in a single poll.	NVD-CWE-noinfo	CVE-2020-28953	2024-11-21 14:23	2020-11-20	Show	GitHub Exploit DB Packet Storm

211002	7.5	HIGH Network	rclone fedoraproject	rclone fedora	An issue was discovered in Rclone before 1.53.3. Due to the use of a weak random number generator, the password generator has been producing weak passwords with much less entropy than advertised. The…	CWE-331 CWE-338 Insufficient Entropy Use of Cryptographically Weak Pseudo-Random Number Generator (PRNG)	CVE-2020-28924	2024-11-21 14:23	2020-11-20	Show	GitHub Exploit DB Packet Storm

211003	9.8	CRITICAL Network	openwrt	openwrt	libuci in OpenWrt before 18.06.9 and 19.x before 19.07.5 may encounter a use after free when using malicious package names. This is related to uci_parse_package in file.c and uci_strdup in util.c.	CWE-416 Use After Free	CVE-2020-28951	2024-11-21 14:23	2020-11-20	Show	GitHub Exploit DB Packet Storm

211004	7.8	HIGH Local	php debian fedoraproject drupal	archive_tar debian_linux fedora drupal	Archive_Tar through 1.4.10 allows an unserialization attack because phar: is blocked but PHAR: is not blocked.	CWE-502 Deserialization of Untrusted Data	CVE-2020-28948	2024-11-21 14:23	2020-11-20	Show	GitHub Exploit DB Packet Storm

211005	5.5	MEDIUM Local	linux fedoraproject debian	linux_kernel fedora debian_linux	An issue was discovered in drivers/accessibility/speakup/spk_ttyio.c in the Linux kernel through 5.9.9. Local attackers on systems with the speakup driver could cause a local denial of service attack…	CWE-763 Release of Invalid Pointer or Reference	CVE-2020-28941	2024-11-21 14:23	2020-11-20	Show	GitHub Exploit DB Packet Storm

211006	6.1	MEDIUM Network	misp	misp	In MISP 2.4.134, XSS exists in the template element index view because the id parameter is mishandled.	CWE-79 Cross-site Scripting	CVE-2020-28947	2024-11-21 14:23	2020-11-20	Show	GitHub Exploit DB Packet Storm

211007	4.3	MEDIUM Network	primekey	ejbca	An issue exists in PrimeKey EJBCA before 7.4.3 when enrolling with EST while proxied through an RA over the Peers protocol. As a part of EJBCA's domain security model, the peer connector allows the r…	CWE-295 Improper Certificate Validation	CVE-2020-28942	2024-11-21 14:23	2020-11-20	Show	GitHub Exploit DB Packet Storm

211008	6.1	MEDIUM Network	palletsprojects	werkzeug	Open redirect vulnerability in werkzeug before 0.11.6 via a double slash in the URL.	CWE-601 Open Redirect	CVE-2020-28724	2024-11-21 14:23	2020-11-19	Show	GitHub Exploit DB Packet Storm

211009	6.5	MEDIUM Network	view_frontend_statistics_project	view_frontend_statistics	An issue was discovered in the view_statistics (aka View frontend statistics) extension before 2.0.1 for TYPO3. It saves all GET and POST data of TYPO3 frontend requests to the database. Depending on…	CWE-312 Cleartext Storage of Sensitive Information	CVE-2020-28917	2024-11-21 14:23	2020-11-18	Show	GitHub Exploit DB Packet Storm

211010	5.8	MEDIUM Physics	linux	linux_kernel	A buffer over-read (at the framebuffer layer) in the fbcon code in the Linux kernel before 5.8.15 could be used by local attackers to read kernel memory, aka CID-6735b4632def.	CWE-125 Out-of-bounds Read	CVE-2020-28915	2024-11-21 14:23	2020-11-18	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed