Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 31, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
225041	6.8	警告	サン・マイクロシステムズ Apache Software Foundation	-	Apache OpenOffice.org におけるサービス運用妨害 (DoS) の脆弱性	CWE-119 バッファエラー	CVE-2013-2189	2013-08-1 11:31	2013-07-26	Show	GitHub Exploit DB Packet Storm

225042	2.6	注意	Genetech Solutions	-	WordPress 用 Genetech Solutions Pie-Register プラグインにおけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2013-4954	2013-07-31 16:53	2013-07-13	Show	GitHub Exploit DB Packet Storm

225043	7.5	危険	Top Games	-	Top Games Script の play.php における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2013-4953	2013-07-31 16:18	2013-06-24	Show	GitHub Exploit DB Packet Storm

225044	7.5	危険	Elemata	-	Elemata CMS の functions/global.php における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2013-4952	2013-07-31 16:11	2013-06-24	Show	GitHub Exploit DB Packet Storm

225045	4.3	警告	Mintboard	-	Mintboard におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2013-4951	2013-07-31 16:06	2013-07-10	Show	GitHub Exploit DB Packet Storm

225046	4.3	警告	Appnitro Software	-	Machform の view.php におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2013-4950	2013-07-31 15:53	2013-07-2	Show	GitHub Exploit DB Packet Storm

225047	6.8	警告	Appnitro Software	-	Machform の view.php における任意の PHP コードを実行される脆弱性	CWE-Other その他	CVE-2013-4949	2013-07-31 15:41	2013-07-2	Show	GitHub Exploit DB Packet Storm

225048	7.5	危険	Appnitro Software	-	Machform の view.php における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2013-4948	2013-07-31 15:27	2013-07-2	Show	GitHub Exploit DB Packet Storm

225049	7.5	危険	Sawmill	-	Sawmill のデータベースのページの更新および作成における脆弱性	CWE-noinfo 情報不足	CVE-2013-4947	2013-07-31 15:18	2013-07-9	Show	GitHub Exploit DB Packet Storm

225050	4.3	警告	BMC Software	-	BMC Service Desk Express におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2013-4946	2013-07-31 15:11	2013-06-12	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 31, 2026, 4:16 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
200171	6.5	MEDIUM Network	google hashicorp microsoft	secret_manager_provider_for_secret_store_csi_driver vault_provider_for_secrets_store_csi_driver azure_key_vault_provider_for_secrets_store_csi_driver	Kubernetes Secrets Store CSI Driver Vault Plugin prior to v0.0.6, Azure Plugin prior to v0.0.10, and GCP Plugin prior to v0.2.0 allow an attacker who can create specially-crafted SecretProviderClass …	CWE-22 Path Traversal	CVE-2020-8567	2024-11-21 14:39	2021-01-22	Show	GitHub Exploit DB Packet Storm

200172	5.0	MEDIUM Network	kubernetes oracle	kubernetes communications_cloud_native_core_network_slice_selection_function communications_cloud_native_core_service_communication_proxy communications_cloud_native_core_policy	Kubernetes API server in all versions allow an attacker who is able to create a ClusterIP service and set the spec.externalIPs field, to intercept traffic to that IP address. Additionally, an attacke…	NVD-CWE-noinfo	CVE-2020-8554	2024-11-21 14:39	2021-01-22	Show	GitHub Exploit DB Packet Storm

200173	6.5	MEDIUM Network	netapp	clustered_data_ontap	Clustered Data ONTAP versions prior to 9.3P20 and 9.5 are susceptible to a vulnerability which could allow an authenticated but unauthorized attacker to overwrite arbitrary data when VMware vStorage …	NVD-CWE-noinfo	CVE-2020-8581	2024-11-21 14:39	2021-01-20	Show	GitHub Exploit DB Packet Storm

200174	9.8	CRITICAL Network	netapp	solidfire hci_management_node hci_storage_node element_os	Element OS versions prior to 1.8P1 and 12.2 are susceptible to a vulnerability that could allow an unauthenticated remote attacker to perform arbitrary code execution.	NVD-CWE-noinfo	CVE-2020-8584	2024-11-21 14:39	2021-01-9	Show	GitHub Exploit DB Packet Storm

200175	8.8	HIGH Network	proofpoint	insider_threat_management	rcdsvc in the Proofpoint Insider Threat Management Windows Agent (formerly ObserveIT Windows Agent) before 7.9 allows remote authenticated users to execute arbitrary code as SYSTEM because of imprope…	CWE-502 Deserialization of Untrusted Data	CVE-2020-8884	2024-11-21 14:39	2021-01-6	Show	GitHub Exploit DB Packet Storm

200176	9.8	CRITICAL Network	bilanc	bilanc	Programi Bilanc Build 007 Release 014 31.01.2020 supplies a .exe file containing several hardcoded credentials to different servers that allow remote attackers to gain access to the complete infrastr…	CWE-798 Use of Hard-coded Credentials	CVE-2020-8995	2024-11-21 14:39	2020-12-22	Show	GitHub Exploit DB Packet Storm

200177	5.5	MEDIUM Local	google	asylo	An arbitrary memory write vulnerability in Asylo versions up to 0.6.0 allows an untrusted attacker to make a call to ecall_restore using the attribute output which fails to check the range of a point…	CWE-787 Out-of-bounds Write	CVE-2020-8944	2024-11-21 14:39	2020-12-16	Show	GitHub Exploit DB Packet Storm

200178	5.5	MEDIUM Local	google	asylo	An arbitrary memory read vulnerability in Asylo versions up to 0.6.0 allows an untrusted attacker to make a call to enc_untrusted_recvfrom whose return size was not validated against the requested si…	CWE-125 Out-of-bounds Read	CVE-2020-8943	2024-11-21 14:39	2020-12-16	Show	GitHub Exploit DB Packet Storm

200179	5.5	MEDIUM Local	google	asylo	An arbitrary memory read vulnerability in Asylo versions up to 0.6.0 allows an untrusted attacker to make a call to enc_untrusted_read whose return size was not validated against the requrested size.…	CWE-125 Out-of-bounds Read	CVE-2020-8942	2024-11-21 14:39	2020-12-16	Show	GitHub Exploit DB Packet Storm

200180	5.5	MEDIUM Local	google	asylo	An arbitrary memory read vulnerability in Asylo versions up to 0.6.0 allows an untrusted attacker to make a call to enc_untrusted_inet_pton using an attacker controlled klinux_addr_buffer parameter. …	CWE-125 Out-of-bounds Read	CVE-2020-8941	2024-11-21 14:39	2020-12-16	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed