Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 28, 2026, 4:09 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
224791	9.3	危険	Mozilla Foundation	-	Mozilla Firefox および Thunderbird の mozilla::dom::HTMLMediaElement::LookupMediaElementURITable 関数における任意のコードを実行される脆弱性	CWE-399 リソース管理の問題	CVE-2013-1684	2013-08-14 16:48	2013-06-25	Show	GitHub Exploit DB Packet Storm

224792	10	危険	Mozilla Foundation	-	Mozilla Firefox および Thunderbird のブラウザエンジンにおけるサービス運用妨害 (DoS) の脆弱性	CWE-noinfo 情報不足	CVE-2013-1682	2013-08-14 16:47	2013-06-25	Show	GitHub Exploit DB Packet Storm

224793	9.3	危険	Mozilla Foundation	-	Mozilla Firefox および Thunderbird におけるサービス運用妨害 (DoS) の脆弱性	CWE-119 バッファエラー	CVE-2013-1690	2013-08-14 16:37	2013-06-25	Show	GitHub Exploit DB Packet Storm

224794	3.3	注意	株式会社NTTドコモ	-	ドコモ海外利用アプリにおける接続処理に関する脆弱性	CWE-287 不適切な認証	CVE-2013-3659	2013-08-14 13:56	2013-08-7	Show	GitHub Exploit DB Packet Storm

224795	4.6	警告	シスコシステムズ	-	Cisco IOS XR におけるサービス運用妨害 (DoS) の脆弱性	CWE-119 バッファエラー	CVE-2013-3464	2013-08-14 13:48	2013-08-13	Show	GitHub Exploit DB Packet Storm

224796	7.8	危険	IOServer	-	IOServer の master-station DNP3 ドライバにおけるサービス運用妨害 (DoS) の脆弱性	CWE-20 不適切な入力確認	CVE-2013-2790	2013-08-14 11:20	2013-08-1	Show	GitHub Exploit DB Packet Storm

224797	4.7	警告	Schweitzer Engineering Laboratories	-	複数の Schweitzer Engineering Laboratories の製品におけるサービス運用妨害 (DoS) の脆弱性	CWE-20 不適切な入力確認	CVE-2013-2798	2013-08-13 19:39	2013-08-7	Show	GitHub Exploit DB Packet Storm

224798	6.9	警告	Schneider Electric	-	複数の Schneider Electric 製品における任意のファイルを読まれる脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2013-2796	2013-08-13 19:27	2013-08-5	Show	GitHub Exploit DB Packet Storm

224799	7.1	危険	Schweitzer Engineering Laboratories	-	複数の Schweitzer Engineering Laboratories 製品におけるサービス運用妨害 (DoS) の脆弱性	CWE-20 不適切な入力確認	CVE-2013-2792	2013-08-13 19:15	2013-08-7	Show	GitHub Exploit DB Packet Storm

224800	5	警告	IBM	-	IBM Sterling B2B Integrator におけるサービス運用妨害 (DoS) の脆弱性	CWE-399 リソース管理の問題	CVE-2013-0494	2013-08-13 18:57	2013-03-11	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 28, 2026, 4:16 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
199631	7.3	HIGH Network	istio redhat	istio openshift_service_mesh	Istio versions 1.2.10 (End of Life) and prior, 1.3 through 1.3.7, and 1.4 through 1.4.3 allows authentication bypass. The Authentication Policy exact-path matching logic can allow unauthorized access…	CWE-287 Improper Authentication	CVE-2020-8595	2024-11-21 14:39	2020-02-13	Show	GitHub Exploit DB Packet Storm

199632	6.5	MEDIUM Network	misp	misp	An issue was discovered in MISP before 2.4.121. ACLs for discussion threads were mishandled in app/Controller/ThreadsController.php and app/Model/Thread.php.	NVD-CWE-noinfo	CVE-2020-8894	2024-11-21 14:39	2020-02-12	Show	GitHub Exploit DB Packet Storm

199633	7.5	HIGH Network	misp	misp	An issue was discovered in MISP before 2.4.121. The Galaxy view contained an incorrectly sanitized search string in app/View/Galaxies/view.ctp.	NVD-CWE-noinfo	CVE-2020-8893	2024-11-21 14:39	2020-02-12	Show	GitHub Exploit DB Packet Storm

199634	8.1	HIGH Network	misp	misp	An issue was discovered in MISP before 2.4.121. It did not consider the HTTP PUT method when trying to block a brute-force series of invalid requests.	NVD-CWE-noinfo	CVE-2020-8892	2024-11-21 14:39	2020-02-12	Show	GitHub Exploit DB Packet Storm

199635	5.9	MEDIUM Network	misp	misp	An issue was discovered in MISP before 2.4.121. It did not canonicalize usernames when trying to block a brute-force series of invalid requests.	NVD-CWE-noinfo	CVE-2020-8891	2024-11-21 14:39	2020-02-12	Show	GitHub Exploit DB Packet Storm

199636	5.9	MEDIUM Network	misp	misp	An issue was discovered in MISP before 2.4.121. It mishandled time skew (between the machine hosting the web server and the machine hosting the database) when trying to block a brute-force series of …	CWE-367 Time-of-check Time-of-use (TOCTOU) Race Condition	CVE-2020-8890	2024-11-21 14:39	2020-02-12	Show	GitHub Exploit DB Packet Storm

199637	7.5	HIGH Network	xnau	participants_database	participants-database.php in the Participants Database plugin 1.9.5.5 and previous versions for WordPress has a time-based SQL injection vulnerability via the ascdesc, list_filter_count, or sortBy pa…	CWE-89 SQL Injection	CVE-2020-8596	2024-11-21 14:39	2020-02-11	Show	GitHub Exploit DB Packet Storm

199638	8.8	HIGH Network	testlink	testlink	An issue was discovered in TestLink 1.9.19. The relation_type parameter of the lib/requirements/reqSearch.php endpoint is vulnerable to authenticated SQL Injection.	CWE-89 SQL Injection	CVE-2020-8841	2024-11-21 14:39	2020-02-11	Show	GitHub Exploit DB Packet Storm

199639	9.8	CRITICAL Network	fasterxml debian netapp huawei oracle	jackson-databind debian_linux steelstore_cloud_integrated_storage oncommand_workflow_automation service_level_manager oncommand_api_services oceanstor_9000_firmware global_lifecy…	FasterXML jackson-databind 2.0.0 through 2.9.10.2 lacks certain xbean-reflect/JNDI blocking, as demonstrated by org.apache.xbean.propertyeditor.JndiConverter.	CWE-502 Deserialization of Untrusted Data	CVE-2020-8840	2024-11-21 14:39	2020-02-11	Show	GitHub Exploit DB Packet Storm

199640	5.4	MEDIUM Network	vanillaforums	vanilla	index.php?p=/dashboard/settings/branding in Vanilla 2.6.3 allows stored XSS.	CWE-79 Cross-site Scripting	CVE-2020-8825	2024-11-21 14:39	2020-02-10	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed