Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":June 15, 2026, 12:08 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
224811	10	危険	マイクロソフト	-	複数の Microsoft 製品のデフォルト設定における任意のコードを実行される脆弱性	CWE-20 不適切な入力確認	CVE-2013-1330	2013-12-12 18:54	2013-09-10	Show	GitHub Exploit DB Packet Storm

224812	9.3	危険	マイクロソフト	-	複数の Microsoft 製品の GDI+ における任意のコードを実行される脆弱性	CWE-94 コード・インジェクション	CVE-2013-3906	2013-12-12 18:08	2013-11-5	Show	GitHub Exploit DB Packet Storm

224813	5	警告	シスコシステムズ	-	Cisco Cloud Portal における不特定のタイプのファイルを読まれる脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2013-6708	2013-12-12 17:56	2013-12-9	Show	GitHub Exploit DB Packet Storm

224814	6.8	警告	IBM	-	IBM Forms Viewer におけるスタックベースのバッファオーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2013-5447	2013-12-12 17:41	2013-12-5	Show	GitHub Exploit DB Packet Storm

224815	4.3	警告	マイクロソフト	-	Microsoft Exchange Server の Outlook Web Access におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2013-5072	2013-12-12 17:16	2013-12-10	Show	GitHub Exploit DB Packet Storm

224816	4.3	警告	マイクロソフト	-	Microsoft Office 2013 および 2013 RT における認証トークンを取得される脆弱性	CWE-200 情報漏えい	CVE-2013-5054	2013-12-12 17:09	2013-12-10	Show	GitHub Exploit DB Packet Storm

224817	4.3	警告	マイクロソフト	-	Microsoft ASP.NET SignalR および Visual Studio Team Foundation Server におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2013-5042	2013-12-12 17:07	2013-12-10	Show	GitHub Exploit DB Packet Storm

224818	4.3	警告	マイクロソフト	-	Microsoft Office 2007 および 2010 の hxds.dll における任意のコードを実行される脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2013-5057	2013-12-12 17:03	2013-12-10	Show	GitHub Exploit DB Packet Storm

224819	6.9	警告	マイクロソフト	-	Microsoft Windows XP および Windows Server 2003 の LRPC クライアントにおけるスタックベースのバッファオーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2013-3878	2013-12-12 16:59	2013-12-10	Show	GitHub Exploit DB Packet Storm

224820	4.9	警告	マイクロソフト	-	複数の Microsoft Windows 製品のカーネルモードドライバにおける整数オーバーフローの脆弱性	CWE-189 数値処理の問題	CVE-2013-5058	2013-12-12 16:55	2013-12-10	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:June 15, 2026, 4:10 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
210901	7.1	HIGH Local	artifex debian	ghostscript debian_linux	A heap-based buffer overwrite vulnerability was found in GhostScript's lp8000_print_page() function in the gdevlp8k.c file. This flaw allows an attacker to trick a user into opening a crafted PDF fil…	CWE-119 Incorrect Access of Indexable Resource ('Range Error')	CVE-2020-27792	2024-11-21 14:21	2022-08-20	Show	GitHub Exploit DB Packet Storm

210902	5.5	MEDIUM Local	upx_project	upx	An out-of-bounds read access vulnerability was discovered in UPX in PackLinuxElf64::canPack() function of p_lx_elf.cpp file. An attacker with a crafted input file could trigger this issue that could …	CWE-125 Out-of-bounds Read	CVE-2020-27788	2024-11-21 14:21	2022-08-19	Show	GitHub Exploit DB Packet Storm

210903	5.5	MEDIUM Local	upx_project	upx	A floating point exception issue was discovered in UPX in PackLinuxElf64::invert_pt_dynamic() function of p_lx_elf.cpp file. An attacker with a crafted input file could trigger this issue that could …	CWE-369 Divide By Zero	CVE-2020-27790	2024-11-21 14:21	2022-08-19	Show	GitHub Exploit DB Packet Storm

210904	5.5	MEDIUM Local	upx_project	upx	A Segmentaation fault was found in UPX in invert_pt_dynamic() function in p_lx_elf.cpp. An attacker with a crafted input file allows invalid memory address access that could lead to a denial of servi…	NVD-CWE-noinfo	CVE-2020-27787	2024-11-21 14:21	2022-08-19	Show	GitHub Exploit DB Packet Storm

210905	5.4	MEDIUM Network	galaxkey	galaxkey	Persistent XSS in Galaxkey Secure Mail Client in Galaxkey up to 5.6.11.5 allows an attacker to perform an account takeover by intercepting the HTTP Post request when sending an email and injecting a …	CWE-79 Cross-site Scripting	CVE-2020-27509	2024-11-21 14:21	2022-06-26	Show	GitHub Exploit DB Packet Storm

210906	8.8	HIGH Adjacent	drtrustusa	icheck_connect_bp_monitor_bp_testing_118_firmware	Dr Trust USA iCheck Connect BP Monitor BP Testing 118 version 1.2.1 is vulnerable to Missing Authentication.	CWE-306 Missing Authentication for Critical Function	CVE-2020-27376	2024-11-21 14:21	2022-04-7	Show	GitHub Exploit DB Packet Storm

210907	6.5	MEDIUM Adjacent	drtrustusa	icheck_connect_bp_monitor_bp_testing_118_firmware	Dr Trust USA iCheck Connect BP Monitor BP Testing 118 version 1.2.1 is vulnerable to Transmitting Write Requests and Chars.	CWE-918 Server-Side Request Forgery (SSRF)	CVE-2020-27375	2024-11-21 14:21	2022-04-7	Show	GitHub Exploit DB Packet Storm

210908	7.5	HIGH Adjacent	drtrustusa	icheck_connect_bp_monitor_bp_testing_118_firmware	Dr Trust USA iCheck Connect BP Monitor BP Testing 118 1.2.1 is vulnerable to a Replay Attack to BP Monitoring.	CWE-294 Authentication Bypass by Capture-replay	CVE-2020-27374	2024-11-21 14:21	2022-04-7	Show	GitHub Exploit DB Packet Storm

210909	8.8	HIGH Adjacent	drtrustusa	icheck_connect_bp_monitor_bp_testing_118_firmware	Dr Trust USA iCheck Connect BP Monitor BP Testing 118 1.2.1 is vulnerable to Plain text command over BLE.	CWE-78 OS Command	CVE-2020-27373	2024-11-21 14:21	2022-04-7	Show	GitHub Exploit DB Packet Storm

210910	7.5	HIGH Network	processwire	processwire	A Directory Traversal vulnerability exits in Processwire CMS before 2.7.1 via the download parameter to index.php.	CWE-22 Path Traversal	CVE-2020-27467	2024-11-21 14:21	2022-02-25	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed