Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 27, 2026, 10 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
224921 4.3 警告 シスコシステムズ - Cisco Secure Access Control System の管理ペ−ジにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2013-3422 2013-07-16 14:54 2013-07-15 Show GitHub Exploit DB Packet Storm
224922 4.3 警告 シスコシステムズ - Cisco Secure Access Control System のヘルプのインデックスページにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2013-3421 2013-07-16 14:54 2013-07-15 Show GitHub Exploit DB Packet Storm
224923 4.3 警告 シスコシステムズ - Cisco Unified MeetingPlace Web Conferencing におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2013-3419 2013-07-16 14:53 2013-07-15 Show GitHub Exploit DB Packet Storm
224924 6.8 警告 シスコシステムズ - Cisco Unified Communications Domain Manager におけるサービス運用妨害 (DoS) の脆弱性 CWE-399
リソース管理の問題
CVE-2013-3418 2013-07-16 14:51 2013-07-15 Show GitHub Exploit DB Packet Storm
224925 5.4 警告 BlackBerry - QNX Software Development Platform の BlackBerry QNX Neutrino RTOS におけるバッファオーバーフローの脆弱性 CWE-119
バッファエラー
CVE-2013-2688 2013-07-16 14:50 2013-06-4 Show GitHub Exploit DB Packet Storm
224926 7.8 危険 BlackBerry - QNX Software Development Platform におけるスタックベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー
CVE-2013-2687 2013-07-16 14:49 2013-06-4 Show GitHub Exploit DB Packet Storm
224927 10 危険 IBM
Apache Software Foundation
- IBM WebSphere Application Server などの製品で使用される Apache Geronimo における任意のコードを実行される脆弱性 CWE-94
コード・インジェクション
CVE-2013-1777 2013-07-16 14:37 2013-07-1 Show GitHub Exploit DB Packet Storm
224928 5 警告 シャープ株式会社 - AQUOSフォトプレーヤー HN-PP150 におけるサービス運用妨害 (DoS) の脆弱性 CWE-noinfo
情報不足
CVE-2013-3655 2013-07-16 14:18 2013-07-11 Show GitHub Exploit DB Packet Storm
224929 5 警告 ジュニパーネットワークス - Juniper Networks SRX1400、SRX3400、および SRX3600 上で稼働する Junos における重要な情報を取得される脆弱性 CWE-399
リソース管理の問題
CVE-2013-4690 2013-07-16 10:57 2013-07-10 Show GitHub Exploit DB Packet Storm
224930 7.8 危険 ジュニパーネットワークス - Juniper Networks SRX デバイス上で稼働する Junos の flowd におけるサービス運用妨害 (DoS) の脆弱性 CWE-noinfo
情報不足
CVE-2013-4688 2013-07-16 10:57 2013-07-10 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 27, 2026, 4:52 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
199441 9.8 CRITICAL
Network
jiransecurity spamsniper Spamsniper 5.0 ~ 5.2.7 contain a stack-based buffer overflow vulnerability caused by improper boundary checks when parsing MAIL FROM command. It leads remote attacker to execute arbitrary code via cr… CWE-787
 Out-of-bounds Write
CVE-2020-7845 2024-11-21 14:37 2020-12-27 Show GitHub Exploit DB Packet Storm
199442 8.8 HIGH
Network
onstove stove A arbitrary code execution vulnerability exists in the way that the Stove client improperly validates input value. An attacker could execute arbitrary code when the user access to crafted web page. T… CWE-20
 Improper Input Validation 
CVE-2020-7838 2024-11-21 14:37 2020-12-18 Show GitHub Exploit DB Packet Storm
199443 9.8 CRITICAL
Network
connection-tester_project connection-tester This affects the package connection-tester before 0.2.1. The injection point is located in line 15 in index.js. The following PoC demonstrates the vulnerability: CWE-78
OS Command 
CVE-2020-7781 2024-11-21 14:37 2020-12-17 Show GitHub Exploit DB Packet Storm
199444 8.8 HIGH
Network
polarisoffice polaris_ml_report An issue was discovered in ML Report Program. There is a stack-based buffer overflow in function sub_41EAF0 at MLReportDeamon.exe. The function will call vsprintf without checking the length of strin… CWE-787
 Out-of-bounds Write
CVE-2020-7837 2024-11-21 14:37 2020-12-17 Show GitHub Exploit DB Packet Storm
199445 7.5 HIGH
Network
i18n_project i18n This affects the package i18n before 2.1.15. Vulnerability arises out of insufficient handling of erroneous language tags in src/i18n/Concrete/TextLocalizer.cs and src/i18n/LocalizedApplication.cs. NVD-CWE-noinfo
CVE-2020-7791 2024-11-21 14:37 2020-12-12 Show GitHub Exploit DB Packet Storm
199446 7.5 HIGH
Network
ua-parser-js_project
siemens
ua-parser-js
sinec_ins
The package ua-parser-js before 0.7.23 are vulnerable to Regular Expression Denial of Service (ReDoS) in multiple regexes (see linked commit for more info). NVD-CWE-Other
CVE-2020-7793 2024-11-21 14:37 2020-12-11 Show GitHub Exploit DB Packet Storm
199447 7.5 HIGH
Network
moutjs mout This affects all versions of package mout. The deepFillIn function can be used to 'fill missing properties recursively', while the deepMixIn 'mixes objects into the target object, recursively mixing … CWE-1321
 Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution')
CVE-2020-7792 2024-11-21 14:37 2020-12-11 Show GitHub Exploit DB Packet Storm
199448 5.3 MEDIUM
Network
spatie browsershot This affects the package spatie/browsershot from 0.0.0. By specifying a URL in the file:// protocol an attacker is able to include arbitrary files in the resultant PDF. CWE-22
Path Traversal
CVE-2020-7790 2024-11-21 14:37 2020-12-11 Show GitHub Exploit DB Packet Storm
199449 9.8 CRITICAL
Network
ini_project
debian
ini
debian_linux
This affects the package ini before 1.3.6. If an attacker submits a malicious INI file to an application that parses it with ini.parse, they will pollute the prototype on the application. This can be… CWE-1321
 Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution')
CVE-2020-7788 2024-11-21 14:37 2020-12-11 Show GitHub Exploit DB Packet Storm
199450 5.6 MEDIUM
Network
node-notifier_project node-notifier This affects the package node-notifier before 9.0.0. It allows an attacker to run arbitrary commands on Linux machines due to the options params not being sanitised when being passed an array. CWE-78
OS Command 
CVE-2020-7789 2024-11-21 14:37 2020-12-11 Show GitHub Exploit DB Packet Storm