Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 18, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
225091	4.9	警告	シスコシステムズ	-	Cisco ASA 上で稼働するクライアントレス SSL VPN におけるサービス運用妨害 (DoS) の脆弱性	CWE-362 競合状態	CVE-2013-1199	2013-04-22 16:49	2013-04-17	Show	GitHub Exploit DB Packet Storm

225092	7.5	危険	Joomla!	-	Joomla! における重要な情報を取得される脆弱性	CWE-Other その他	CVE-2013-1453	2013-04-22 16:48	2013-02-4	Show	GitHub Exploit DB Packet Storm

225093	5	警告	シスコシステムズ	-	Cisco ASA デバイスの ISAKMP の実装におけるグループを列挙される脆弱性	CWE-200 情報漏えい	CVE-2013-1194	2013-04-22 16:46	2013-04-17	Show	GitHub Exploit DB Packet Storm

225094	7.5	危険	シスコシステムズ	-	Cisco Network Admission Control Manager における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2013-1177	2013-04-22 16:39	2013-04-17	Show	GitHub Exploit DB Packet Storm

225095	7.1	危険	シスコシステムズ	-	Cisco TelePresence MCU デバイスおよび TelePresence Server におけるサービス運用妨害 (DoS) の脆弱性	CWE-20 不適切な入力確認	CVE-2013-1176	2013-04-22 16:38	2013-04-17	Show	GitHub Exploit DB Packet Storm

225096	4.3	警告	chatelao	-	PHP Address Book の edit.php におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2013-1749	2013-04-22 16:32	2013-04-18	Show	GitHub Exploit DB Packet Storm

225097	7.5	危険	chatelao	-	PHP Address Book における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2013-1748	2013-04-22 16:17	2013-04-18	Show	GitHub Exploit DB Packet Storm

225098	10	危険	Rockwell Automation	-	Rockwell Automation RSLinx Enterprise の LogReceiver.exe におけるバッファオーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2012-4715	2013-04-22 16:02	2013-04-5	Show	GitHub Exploit DB Packet Storm

225099	7.8	危険	Rockwell Automation	-	Rockwell Automation FactoryTalk Services Platform の RNADiagnostics.dll における整数オーバーフローの脆弱性	CWE-189 数値処理の問題	CVE-2012-4714	2013-04-22 16:01	2013-04-5	Show	GitHub Exploit DB Packet Storm

225100	7.8	危険	Rockwell Automation	-	Rockwell Automation FactoryTalk Services Platform の RNADiagnostics.dll における整数符号エラーの脆弱性	CWE-189 数値処理の問題	CVE-2012-4713	2013-04-22 16:00	2013-04-5	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 19, 2026, 4:16 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
199021	6.1	MEDIUM Network	kibokolabs	chained_quiz	The chained-quiz plugin 1.1.8.1 for WordPress has reflected XSS via the wp-admin/admin-ajax.php total_questions parameter.	CWE-79 Cross-site Scripting	CVE-2020-7104	2024-11-21 14:36	2020-01-18	Show	GitHub Exploit DB Packet Storm

199022	5.3	MEDIUM Network	zte	f6x2w_firmware	V6.0.10P2T2 and V6.0.10P2T5 of F6x2W product are impacted by Information leak vulnerability. Unauthorized users could log in directly to obtain page information without entering a verification code.	CWE-669 Incorrect Resource Transfer Between Spheres	CVE-2020-6862	2024-11-21 14:36	2020-01-18	Show	GitHub Exploit DB Packet Storm

199023	5.6	MEDIUM Network	libslirp_project debian opensuse qemu	libslirp debian_linux leap qemu	tcp_emu in tcp_subr.c in libslirp 4.1.0, as used in QEMU 4.2.0, mismanages memory, as demonstrated by IRC DCC commands in EMU_IRC. This can cause a heap-based buffer overflow or other out-of-bounds a…	CWE-787 Out-of-bounds Write	CVE-2020-7039	2024-11-21 14:36	2020-01-17	Show	GitHub Exploit DB Packet Storm

199024	9.1	CRITICAL Network	webfactoryltd	wp_database_reset	The WordPress plugin, WP Database Reset through 3.1, contains a flaw that allowed any unauthenticated user to reset any table in the database to the initial WordPress set-up state (deleting all site …	CWE-306 Missing Authentication for Critical Function	CVE-2020-7048	2024-11-21 14:36	2020-01-17	Show	GitHub Exploit DB Packet Storm

199025	8.8	HIGH Network	webfactoryltd	wp_database_reset	The WordPress plugin, WP Database Reset through 3.1, contains a flaw that gave any authenticated user, with minimal permissions, the ability (with a simple wp-admin/admin.php?db-reset-tables[]=users …	CWE-269 Improper Privilege Management	CVE-2020-7047	2024-11-21 14:36	2020-01-17	Show	GitHub Exploit DB Packet Storm

199026	5.4	MEDIUM Network	learndash	learndash	The LearnDash LMS plugin before 3.1.2 for WordPress allows XSS via the ld-profile search field.	CWE-79 Cross-site Scripting	CVE-2020-7108	2024-11-21 14:36	2020-01-16	Show	GitHub Exploit DB Packet Storm

199027	6.1	MEDIUM Network	etoilewebdesign	ultimate_faq	The Ultimate FAQ plugin before 1.8.30 for WordPress allows XSS via Display_FAQ to Shortcodes/DisplayFAQs.php.	CWE-79 Cross-site Scripting	CVE-2020-7107	2024-11-21 14:36	2020-01-16	Show	GitHub Exploit DB Packet Storm

199028	6.1	MEDIUM Network	cacti debian opensuse suse fedoraproject	cacti debian_linux leap backports_sle package_hub fedora extra_packages_for_enterprise_linux	Cacti 1.2.8 has stored XSS in data_sources.php, color_templates_item.php, graphs.php, graph_items.php, lib/api_automation.php, user_admin.php, and user_group_admin.php, as demonstrated by the descrip…	CWE-79 Cross-site Scripting	CVE-2020-7106	2024-11-21 14:36	2020-01-16	Show	GitHub Exploit DB Packet Storm

199029	7.5	HIGH Network	redislabs debian fedoraproject	hiredis debian_linux fedora	async.c and dict.c in libhiredis.a in hiredis through 0.14.0 allow a NULL pointer dereference because malloc return values are unchecked.	CWE-476 NULL Pointer Dereference	CVE-2020-7105	2024-11-21 14:36	2020-01-16	Show	GitHub Exploit DB Packet Storm

199030	6.5	MEDIUM Adjacent	wireshark debian	wireshark debian_linux	In Wireshark 3.0.x before 3.0.8, the BT ATT dissector could crash. This was addressed in epan/dissectors/packet-btatt.c by validating opcodes.	CWE-476 NULL Pointer Dereference	CVE-2020-7045	2024-11-21 14:36	2020-01-16	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed