Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":June 15, 2026, 2 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
224891	10	危険	シーメンス	-	Siemens SINAMICS S/G コントローラのファームウェアにおけるアクセス制限を回避される脆弱性	CWE-287 不適切な認証	CVE-2013-6920	2013-12-10 15:26	2013-12-4	Show	GitHub Exploit DB Packet Storm

224892	5.8	警告	Drupal	-	Drupal の Overlay モジュールにおけるオープンリダイレクトの脆弱性	CWE-20 不適切な入力確認	CVE-2013-6389	2013-12-10 15:13	2013-11-20	Show	GitHub Exploit DB Packet Storm

224893	6.8	警告	Drupal	-	Drupal におけるセキュリティ文字列を予測される脆弱性	CWE-310 暗号の問題	CVE-2013-6386	2013-12-10 15:13	2013-11-20	Show	GitHub Exploit DB Packet Storm

224894	5.1	警告	Drupal	-	Drupal の form API における任意のコードを実行するようなアプリケーション固有の影響を誘発される脆弱性	CWE-94 コード・インジェクション	CVE-2013-6385	2013-12-10 15:12	2013-11-20	Show	GitHub Exploit DB Packet Storm

224895	6.8	警告	Steven Jones	-	Drupal 用 Context モジュールの plugins/context_reaction_block.inc 内の _json_decode 関数における任意の PHP コードを実行される脆弱性	CWE-94 コード・インジェクション	CVE-2013-4446	2013-12-10 15:12	2013-10-16	Show	GitHub Exploit DB Packet Storm

224896	4.9	警告	Steven Jones	-	Drupal 用 Context モジュールの json レンダリング機能におけるブロックのアクセストークンを推測される脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2013-4445	2013-12-10 15:11	2013-10-16	Show	GitHub Exploit DB Packet Storm

224897	4.3	警告	Sven Fuchs	-	Ruby 用 i18n gem の exceptions.rb におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2013-4492	2013-12-10 12:38	2013-12-3	Show	GitHub Exploit DB Packet Storm

224898	4.3	警告	Ruby on Rails project	-	Ruby on Rails の actionpack/lib/action_view/helpers/text_helper.rb におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2013-6416	2013-12-10 12:29	2013-12-3	Show	GitHub Exploit DB Packet Storm

224899	7.2	危険	Novell	-	SUSE horde5 パッケージにおける権限を取得される脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2013-1090	2013-12-9 18:21	2013-12-4	Show	GitHub Exploit DB Packet Storm

224900	4.3	警告	The Jamroom Network	-	Jamroom 用 Search モジュールにおけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2013-6804	2013-12-9 18:08	2013-11-13	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:June 15, 2026, 4:10 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
210901	7.1	HIGH Local	artifex debian	ghostscript debian_linux	A heap-based buffer overwrite vulnerability was found in GhostScript's lp8000_print_page() function in the gdevlp8k.c file. This flaw allows an attacker to trick a user into opening a crafted PDF fil…	CWE-119 Incorrect Access of Indexable Resource ('Range Error')	CVE-2020-27792	2024-11-21 14:21	2022-08-20	Show	GitHub Exploit DB Packet Storm

210902	5.5	MEDIUM Local	upx_project	upx	An out-of-bounds read access vulnerability was discovered in UPX in PackLinuxElf64::canPack() function of p_lx_elf.cpp file. An attacker with a crafted input file could trigger this issue that could …	CWE-125 Out-of-bounds Read	CVE-2020-27788	2024-11-21 14:21	2022-08-19	Show	GitHub Exploit DB Packet Storm

210903	5.5	MEDIUM Local	upx_project	upx	A floating point exception issue was discovered in UPX in PackLinuxElf64::invert_pt_dynamic() function of p_lx_elf.cpp file. An attacker with a crafted input file could trigger this issue that could …	CWE-369 Divide By Zero	CVE-2020-27790	2024-11-21 14:21	2022-08-19	Show	GitHub Exploit DB Packet Storm

210904	5.5	MEDIUM Local	upx_project	upx	A Segmentaation fault was found in UPX in invert_pt_dynamic() function in p_lx_elf.cpp. An attacker with a crafted input file allows invalid memory address access that could lead to a denial of servi…	NVD-CWE-noinfo	CVE-2020-27787	2024-11-21 14:21	2022-08-19	Show	GitHub Exploit DB Packet Storm

210905	5.4	MEDIUM Network	galaxkey	galaxkey	Persistent XSS in Galaxkey Secure Mail Client in Galaxkey up to 5.6.11.5 allows an attacker to perform an account takeover by intercepting the HTTP Post request when sending an email and injecting a …	CWE-79 Cross-site Scripting	CVE-2020-27509	2024-11-21 14:21	2022-06-26	Show	GitHub Exploit DB Packet Storm

210906	8.8	HIGH Adjacent	drtrustusa	icheck_connect_bp_monitor_bp_testing_118_firmware	Dr Trust USA iCheck Connect BP Monitor BP Testing 118 version 1.2.1 is vulnerable to Missing Authentication.	CWE-306 Missing Authentication for Critical Function	CVE-2020-27376	2024-11-21 14:21	2022-04-7	Show	GitHub Exploit DB Packet Storm

210907	6.5	MEDIUM Adjacent	drtrustusa	icheck_connect_bp_monitor_bp_testing_118_firmware	Dr Trust USA iCheck Connect BP Monitor BP Testing 118 version 1.2.1 is vulnerable to Transmitting Write Requests and Chars.	CWE-918 Server-Side Request Forgery (SSRF)	CVE-2020-27375	2024-11-21 14:21	2022-04-7	Show	GitHub Exploit DB Packet Storm

210908	7.5	HIGH Adjacent	drtrustusa	icheck_connect_bp_monitor_bp_testing_118_firmware	Dr Trust USA iCheck Connect BP Monitor BP Testing 118 1.2.1 is vulnerable to a Replay Attack to BP Monitoring.	CWE-294 Authentication Bypass by Capture-replay	CVE-2020-27374	2024-11-21 14:21	2022-04-7	Show	GitHub Exploit DB Packet Storm

210909	8.8	HIGH Adjacent	drtrustusa	icheck_connect_bp_monitor_bp_testing_118_firmware	Dr Trust USA iCheck Connect BP Monitor BP Testing 118 1.2.1 is vulnerable to Plain text command over BLE.	CWE-78 OS Command	CVE-2020-27373	2024-11-21 14:21	2022-04-7	Show	GitHub Exploit DB Packet Storm

210910	7.5	HIGH Network	processwire	processwire	A Directory Traversal vulnerability exits in Processwire CMS before 2.7.1 via the download parameter to index.php.	CWE-22 Path Traversal	CVE-2020-27467	2024-11-21 14:21	2022-02-25	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed