Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 14, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
224811 4 警告 MIT Kerberos - MIT Kerberos の鍵配布センタ (KDC) におけるサービス運用妨害 (DoS) の脆弱性 CWE-119
バッファエラー 		CVE-2013-1416 2013-12-5 11:47 2013-04-5 Show GitHub Exploit DB Packet Storm
224812 6.5 警告 PostgreSQL.org
アップル
Canonical		 - PostgreSQL におけるサービス運用妨害 (DoS) の脆弱性 CWE-94
コード・インジェクション 		CVE-2013-1899 2013-12-5 11:07 2013-04-4 Show GitHub Exploit DB Packet Storm
224813 6.8 警告 AT&T - AT&T Connect Participant Application for Windows にバッファオーバーフローの脆弱性 CWE-119
CWE-Other
CVE-2013-6029 2013-12-5 11:04 2013-12-3 Show GitHub Exploit DB Packet Storm
224814 5.1 警告 Willy Tarreau - HAProxy におけるバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2013-1912 2013-12-4 18:18 2013-04-3 Show GitHub Exploit DB Packet Storm
224815 4 警告 PostgreSQL.org
アップル
Canonical		 - PostgreSQL におけるバックアップ制限を回避される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2013-1901 2013-12-4 18:13 2013-04-4 Show GitHub Exploit DB Packet Storm
224816 10 危険 Novell - SUSE Cloud で使用される Crowbar のサーバにおける脆弱性 CWE-310
暗号の問題 		CVE-2012-0434 2013-12-4 16:56 2013-01-8 Show GitHub Exploit DB Packet Storm
224817 7.2 危険 Novell - SUSE inst-source-utils の yast2-add-on-creator における権限を取得される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2012-0427 2013-12-4 16:49 2012-11-22 Show GitHub Exploit DB Packet Storm
224818 7.2 危険 Novell - SUSE Linux Enterprise Server for SAP applications の sap_suse_cluster_connector における脆弱性 CWE-362
競合状態 		CVE-2012-0426 2013-12-4 16:45 2012-11-12 Show GitHub Exploit DB Packet Storm
224819 7.8 危険 Novell - SUSE YaST の yast2-network における重要な情報を取得される脆弱性 CWE-200
情報漏えい 		CVE-2012-0425 2013-12-4 16:44 2012-09-5 Show GitHub Exploit DB Packet Storm
224820 4.4 警告 openSUSE project - SUSE Zypper の zypp-refresh-wrapper における任意のディレクトリ内にファイルを作成される脆弱性 CWE-noinfo
情報不足 		CVE-2012-0420 2013-12-4 16:43 2012-07-10 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 14, 2026, 4:12 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
210851 9.8 CRITICAL
Network 		zohocorp manageengine_applications_manager SQL Injection in Zoho ManageEngine Applications Manager 14 before 14560 allows an attacker to execute commands on the server via the MyPage.do template_resid parameter. CWE-89
SQL Injection 		CVE-2020-27995 2024-11-21 14:22 2020-10-30 Show GitHub Exploit DB Packet Storm
210852 5.3 MEDIUM
Network 		hrsale hrsale Hrsale 2.0.0 allows download?type=files&filename=../ directory traversal to read arbitrary files. CWE-22
Path Traversal 		CVE-2020-27993 2024-11-21 14:22 2020-10-30 Show GitHub Exploit DB Packet Storm
210853 7.5 HIGH
Network 		sonarsource sonarqube SonarQube 8.4.2.36762 allows remote attackers to discover cleartext SMTP, SVN, and GitLab credentials via the api/settings/values URI. NOTE: reportedly, the vendor's position for SMTP and SVN is "it … CWE-306
CWE-312
Missing Authentication for Critical Function
 Cleartext Storage of Sensitive Information 		CVE-2020-27986 2024-11-21 14:22 2020-10-29 Show GitHub Exploit DB Packet Storm
210854 5.4 MEDIUM
Network 		genexis platinum-4410_firmware Genexis Platinum-4410 P4410-V2-1.28 devices allow stored XSS in the WLAN SSID parameter. This could allow an attacker to perform malicious actions in which the XSS popup will affect all privileged us… CWE-79
Cross-site Scripting 		CVE-2020-27980 2024-11-21 14:22 2020-10-29 Show GitHub Exploit DB Packet Storm
210855 7.5 HIGH
Network 		shibboleth identity_provider Shibboleth Identify Provider 3.x before 3.4.6 has a denial of service flaw. A remote unauthenticated attacker can cause a login flow to trigger Java heap exhaustion due to the creation of objects in … CWE-770
 Allocation of Resources Without Limits or Throttling 		CVE-2020-27978 2024-11-21 14:22 2020-10-29 Show GitHub Exploit DB Packet Storm
210856 9.8 CRITICAL
Network 		oscommerce oscommerce osCommerce Phoenix CE before 1.0.5.4 allows OS command injection remotely. Within admin/mail.php, a from POST parameter can be passed to the application. This affects the PHP mail function, and the s… CWE-78
OS Command  		CVE-2020-27976 2024-11-21 14:22 2020-10-29 Show GitHub Exploit DB Packet Storm
210857 8.8 HIGH
Network 		oscommerce oscommerce osCommerce Phoenix CE before 1.0.5.4 allows admin/define_language.php CSRF. CWE-352
 Origin Validation Error 		CVE-2020-27975 2024-11-21 14:22 2020-10-29 Show GitHub Exploit DB Packet Storm
210858 6.1 MEDIUM
Network 		quadient mail_accounting NeoPost Mail Accounting Software Pro 5.0.6 allows php/Commun/FUS_SCM_BlockStart.php?code= XSS. CWE-79
Cross-site Scripting 		CVE-2020-27974 2024-11-21 14:22 2020-10-29 Show GitHub Exploit DB Packet Storm
210859 5.4 MEDIUM
Network 		mediawiki mediawiki The RandomGameUnit extension for MediaWiki through 1.35 was not properly escaping various title-related data. When certain varieties of games were created within MediaWiki, their names or titles coul… CWE-79
Cross-site Scripting 		CVE-2020-27957 2024-11-21 14:22 2020-10-28 Show GitHub Exploit DB Packet Storm
210860 9.8 CRITICAL
Network 		car_rental_management_system_project car_rental_management_system An Arbitrary File Upload in the Upload Image component in SourceCodester Car Rental Management System 1.0 allows the user to conduct remote code execution via admin/index.php?page=manage_car because … CWE-434
 Unrestricted Upload of File with Dangerous Type  		CVE-2020-27956 2024-11-21 14:22 2020-10-28 Show GitHub Exploit DB Packet Storm