Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 14, 2026, 6 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
224811 4 警告 MIT Kerberos - MIT Kerberos の鍵配布センタ (KDC) におけるサービス運用妨害 (DoS) の脆弱性 CWE-119
バッファエラー
CVE-2013-1416 2013-12-5 11:47 2013-04-5 Show GitHub Exploit DB Packet Storm
224812 6.5 警告 PostgreSQL.org
アップル
Canonical
- PostgreSQL におけるサービス運用妨害 (DoS) の脆弱性 CWE-94
コード・インジェクション
CVE-2013-1899 2013-12-5 11:07 2013-04-4 Show GitHub Exploit DB Packet Storm
224813 6.8 警告 AT&T - AT&T Connect Participant Application for Windows にバッファオーバーフローの脆弱性 CWE-119
CWE-Other
CVE-2013-6029 2013-12-5 11:04 2013-12-3 Show GitHub Exploit DB Packet Storm
224814 5.1 警告 Willy Tarreau - HAProxy におけるバッファオーバーフローの脆弱性 CWE-119
バッファエラー
CVE-2013-1912 2013-12-4 18:18 2013-04-3 Show GitHub Exploit DB Packet Storm
224815 4 警告 PostgreSQL.org
アップル
Canonical
- PostgreSQL におけるバックアップ制限を回避される脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2013-1901 2013-12-4 18:13 2013-04-4 Show GitHub Exploit DB Packet Storm
224816 10 危険 Novell - SUSE Cloud で使用される Crowbar のサーバにおける脆弱性 CWE-310
暗号の問題
CVE-2012-0434 2013-12-4 16:56 2013-01-8 Show GitHub Exploit DB Packet Storm
224817 7.2 危険 Novell - SUSE inst-source-utils の yast2-add-on-creator における権限を取得される脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2012-0427 2013-12-4 16:49 2012-11-22 Show GitHub Exploit DB Packet Storm
224818 7.2 危険 Novell - SUSE Linux Enterprise Server for SAP applications の sap_suse_cluster_connector における脆弱性 CWE-362
競合状態
CVE-2012-0426 2013-12-4 16:45 2012-11-12 Show GitHub Exploit DB Packet Storm
224819 7.8 危険 Novell - SUSE YaST の yast2-network における重要な情報を取得される脆弱性 CWE-200
情報漏えい
CVE-2012-0425 2013-12-4 16:44 2012-09-5 Show GitHub Exploit DB Packet Storm
224820 4.4 警告 openSUSE project - SUSE Zypper の zypp-refresh-wrapper における任意のディレクトリ内にファイルを作成される脆弱性 CWE-noinfo
情報不足
CVE-2012-0420 2013-12-4 16:43 2012-07-10 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 14, 2026, 4:12 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
210991 5.4 MEDIUM
Network
rocketgenius gravityforms Multiple stored HTML injection vulnerabilities in the "poll" and "quiz" features in an additional paid add-on of Rocketgenius Gravity Forms before 2.4.21 allows remote attackers to inject arbitrary H… CWE-79
Cross-site Scripting
CVE-2020-27851 2024-11-21 14:21 2021-01-20 Show GitHub Exploit DB Packet Storm
210992 4.8 MEDIUM
Network
rocketgenius gravityforms A stored Cross-Site Scripting (XSS) vulnerability in forms import feature in Rocketgenius Gravity Forms before 2.4.21 allows remote attackers to inject arbitrary web script or HTML via the import of … CWE-79
Cross-site Scripting
CVE-2020-27850 2024-11-21 14:21 2021-01-20 Show GitHub Exploit DB Packet Storm
210993 7.5 HIGH
Network
arcserve d2d This vulnerability allows remote attackers to disclose sensitive information on affected installations of CA Arcserve D2D 16.5. Authentication is not required to exploit this vulnerability. The speci… CWE-611
XXE
CVE-2020-27858 2024-11-21 14:21 2021-01-21 Show GitHub Exploit DB Packet Storm
210994 8.8 HIGH
Network
zohocorp manageengine_applications_manager Zoho ManageEngine Applications Manager before 14 build 14880 allows an authenticated SQL Injection via a crafted Alarmview request. CWE-89
SQL Injection
CVE-2020-27733 2024-11-21 14:21 2021-01-20 Show GitHub Exploit DB Packet Storm
210995 5.5 MEDIUM
Local
totolink a702r_firmware Directory Indexing in Login Portal of Login Portal of TOTOLINK-A702R-V1.0.0-B20161227.1023 allows attacker to access /icons/ directories via GET Parameter. CWE-552
 Files or Directories Accessible to External Parties
CVE-2020-27368 2024-11-21 14:21 2021-01-15 Show GitHub Exploit DB Packet Storm
210996 9.8 CRITICAL
Network
loxone miniserver_gen_1_firmware Loxone Miniserver devices with firmware before 11.1 (aka 11.1.9.3) are unable to use an authentication method that is based on the "signature of the update package." Therefore, these devices (or atta… CWE-287
Improper Authentication
CVE-2020-27488 2024-11-21 14:21 2021-01-14 Show GitHub Exploit DB Packet Storm
210997 9.8 CRITICAL
Network
r-project cran The R programming language’s default package manager CRAN is affected by a path traversal vulnerability that can lead to server compromise. This vulnerability affects packages installed via the R CMD… CWE-22
Path Traversal
CVE-2020-27637 2024-11-21 14:21 2021-01-12 Show GitHub Exploit DB Packet Storm
210998 7.8 HIGH
Local
deltaww cncsoft-b Delta Electronics CNCSoft-B Versions 1.0.0.2 and prior has a type confusion issue while processing project files, which may allow an attacker to execute arbitrary code. CWE-843
Type Confusion
CVE-2020-27293 2024-11-21 14:21 2021-01-12 Show GitHub Exploit DB Packet Storm
210999 7.8 HIGH
Local
deltaww cncsoft-b Delta Electronics CNCSoft-B Versions 1.0.0.2 and prior is vulnerable to an out-of-bounds read while processing project files, which may allow an attacker to execute arbitrary code. CWE-125
Out-of-bounds Read
CVE-2020-27291 2024-11-21 14:21 2021-01-12 Show GitHub Exploit DB Packet Storm
211000 7.8 HIGH
Local
deltaww cncsoft-b Delta Electronics CNCSoft-B Versions 1.0.0.2 and prior has a null pointer dereference issue while processing project files, which may allow an attacker to execute arbitrary code. CWE-476
 NULL Pointer Dereference
CVE-2020-27289 2024-11-21 14:21 2021-01-12 Show GitHub Exploit DB Packet Storm