Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":June 14, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
224831	5.8	警告	DELL EMC (旧 EMC Corporation)	-	EMC Document Sciences xPression の複数の Edition の xAdmin におけるオープンリダイレクトの脆弱性	CWE-20 CWE-Other	CVE-2013-6174	2013-12-4 12:21	2013-11-19	Show	GitHub Exploit DB Packet Storm

224832	6.8	警告	DELL EMC (旧 EMC Corporation)	-	EMC Document Sciences xPression の複数の Edition におけるクロスサイトリクエストフォージェリの脆弱性	CWE-352 同一生成元ポリシー違反	CVE-2013-6173	2013-12-4 12:21	2013-11-19	Show	GitHub Exploit DB Packet Storm

224833	4.7	警告	Alstom	-	Alstom e-terracontrol の DNP Master Driver におけるサービス運用妨害 (DoS) の脆弱性	CWE-20 不適切な入力確認	CVE-2013-2818	2013-12-3 18:15	2013-10-21	Show	GitHub Exploit DB Packet Storm

224834	3.3	注意	チェック・ポイント・ソフトウェア・テクノロジーズ	-	Check Point Endpoint Security の Media Encryption EPM Explorer の Unlock.exe におけるデバイスロッキング保護メカニズムを回避される脆弱性	CWE-255 証明書・パスワード管理	CVE-2013-5636	2013-12-3 18:05	2013-11-14	Show	GitHub Exploit DB Packet Storm

224835	3.3	注意	チェック・ポイント・ソフトウェア・テクノロジーズ	-	Check Point Endpoint Security の Media Encryption EPM Explorer におけるデバイスロッキング保護メカニズムを回避される脆弱性	CWE-255 証明書・パスワード管理	CVE-2013-5635	2013-12-3 18:03	2013-11-14	Show	GitHub Exploit DB Packet Storm

224836	4.9	警告	Linux	-	MSM デバイス用 Qualcomm Innovation Center Android コントリビューションなどで使用される Linux Kernel 用 Genlock ドライバにおける重要な情報を取得される脆弱性	CWE-200 情報漏えい	CVE-2013-6392	2013-12-3 18:02	2013-10-25	Show	GitHub Exploit DB Packet Storm

224837	4.3	警告	マイクロソフト	-	Microsoft Enhanced Mitigation Experience Toolkit における ASLR 保護メカニズムを破られる脆弱性	CWE-200 情報漏えい	CVE-2013-6791	2013-12-3 18:02	2013-06-17	Show	GitHub Exploit DB Packet Storm

224838	4.3	警告	Novell	-	Novell Open Enterprise Server の novell-nrm パッケージにおけるサービス運用妨害 (DoS) の脆弱性	CWE-20 不適切な入力確認	CVE-2013-3707	2013-12-3 17:59	2013-11-7	Show	GitHub Exploit DB Packet Storm

224839	9	危険	SAP	-	SAP Sybase Adaptive Server Enterprise における任意のコードを実行される脆弱性	CWE-94 コード・インジェクション	CVE-2013-6866	2013-12-3 17:56	2013-11-4	Show	GitHub Exploit DB Packet Storm

224840	9	危険	SAP	-	SAP Sybase Adaptive Server Enterprise における権限を取得される脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2013-6863	2013-12-3 17:53	2013-11-4	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:June 14, 2026, 4:12 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
210791	7.5	HIGH Network	controlled-merge_project	controlled-merge	Prototype pollution vulnerability in 'controlled-merge' versions 1.0.0 through 1.2.0 allows attacker to cause a denial of service and may lead to remote code execution.	CWE-1321 Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution')	CVE-2020-28268	2024-11-21 14:22	2020-11-16	Show	GitHub Exploit DB Packet Storm

210792	6.1	MEDIUM Network	tranzware_payment_gateway_project	tranzware_payment_gateway	A reflected cross-site scripting (XSS) vulnerability exists in the TranzWare Payment Gateway 3.1.12.3.2. A remote unauthenticated attacker is able to execute arbitrary HTML code via crafted url (diff…	CWE-79 Cross-site Scripting	CVE-2020-28415	2024-11-21 14:22	2020-11-13	Show	GitHub Exploit DB Packet Storm

210793	6.1	MEDIUM Network	tranzware_payment_gateway_project	tranzware_payment_gateway	A reflected cross-site scripting (XSS) vulnerability exists in the TranzWare Payment Gateway 3.1.12.3.2. A remote unauthenticated attacker is able to execute arbitrary HTML code via crafted url (diff…	CWE-79 Cross-site Scripting	CVE-2020-28414	2024-11-21 14:22	2020-11-13	Show	GitHub Exploit DB Packet Storm

210794	9.8	CRITICAL Network	deephas_project	deephas	Prototype pollution vulnerability in 'deephas' versions 1.0.0 through 1.0.5 allows attacker to cause a denial of service and may lead to remote code execution.	CWE-1321 Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution')	CVE-2020-28271	2024-11-21 14:22	2020-11-13	Show	GitHub Exploit DB Packet Storm

210795	9.8	CRITICAL Network	mjpclab	object-hierarchy-access	Prototype pollution vulnerability in 'object-hierarchy-access' versions 0.2.0 through 0.32.0 allows attacker to cause a denial of service and may lead to remote code execution.	CWE-1321 Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution')	CVE-2020-28270	2024-11-21 14:22	2020-11-13	Show	GitHub Exploit DB Packet Storm

210796	9.8	CRITICAL Network	exodus	field	Prototype pollution vulnerability in 'field' versions 0.0.1 through 1.0.1 allows attacker to cause a denial of service and may lead to remote code execution.	CWE-1321 Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution')	CVE-2020-28269	2024-11-21 14:22	2020-11-13	Show	GitHub Exploit DB Packet Storm

210797	5.3	MEDIUM Network	lettre	lettre	The lettre library through 0.10.0-alpha for Rust allows arbitrary sendmail option injection via transport/sendmail/mod.rs.	NVD-CWE-noinfo	CVE-2020-28247	2024-11-21 14:22	2020-11-13	Show	GitHub Exploit DB Packet Storm

210798	5.4	MEDIUM Network	dundas	dundas_bi	The server in Dundas BI through 8.0.0.1001 allows XSS via addition of a Component (e.g., a button) when events such as click, hover, etc. occur.	CWE-79 Cross-site Scripting	CVE-2020-28409	2024-11-21 14:22	2020-11-11	Show	GitHub Exploit DB Packet Storm

210799	5.4	MEDIUM Network	dundas	dundas_bi	The server in Dundas BI through 8.0.0.1001 allows XSS via an HTML label when creating or editing a dashboard.	CWE-79 Cross-site Scripting	CVE-2020-28408	2024-11-21 14:22	2020-11-11	Show	GitHub Exploit DB Packet Storm

210800	4.4	MEDIUM Local	xen fedoraproject debian	xen fedora debian_linux	Xen through 4.14.x allows guest OS administrators to obtain sensitive information (such as AES keys from outside the guest) via a side-channel attack on a power/energy monitoring interface, aka a "Pl…	CWE-862 Missing Authorization	CVE-2020-28368	2024-11-21 14:22	2020-11-11	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed