Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 27, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
225091	10	危険	Mozilla Foundation	-	Mozilla Firefox および Thunderbird の SelectionIterator::GetNextSegment 関数における任意のコードを実行される脆弱性	CWE-119 バッファエラー	CVE-2013-1676	2013-06-28 15:01	2013-05-14	Show	GitHub Exploit DB Packet Storm

225092	4.3	警告	Mozilla Foundation	-	Mozilla Firefox および Thunderbird における重要な情報を取得される脆弱性	CWE-119 バッファエラー	CVE-2013-1675	2013-06-28 14:58	2013-05-14	Show	GitHub Exploit DB Packet Storm

225093	9.3	危険	Mozilla Foundation	-	Mozilla Firefox および Thunderbird における任意のコードを実行される脆弱性	CWE-399 リソース管理の問題	CVE-2013-1674	2013-06-28 14:54	2013-05-14	Show	GitHub Exploit DB Packet Storm

225094	4.3	警告	Mozilla Foundation	-	Mozilla Firefox におけるフルパス名を取得される脆弱性	CWE-20 不適切な入力確認	CVE-2013-1671	2013-06-28 14:51	2013-05-14	Show	GitHub Exploit DB Packet Storm

225095	4.3	警告	Mozilla Foundation	-	Mozilla Firefox および Thunderbird における特定の読み取り専用の制限を回避される脆弱性	CWE-264 CWE-79	CVE-2013-1670	2013-06-28 14:49	2013-05-14	Show	GitHub Exploit DB Packet Storm

225096	10	危険	Mozilla Foundation	-	Mozilla Firefox のブラウザエンジンにおけるサービス運用妨害 (DoS) の脆弱性	CWE-noinfo 情報不足	CVE-2013-1669	2013-06-28 14:46	2013-05-14	Show	GitHub Exploit DB Packet Storm

225097	6.2	警告	Linux	-	Linux Kernel の mm/shmem.c における権限を取得される脆弱性	CWE-399 リソース管理の問題	CVE-2013-1767	2013-06-28 14:01	2013-02-27	Show	GitHub Exploit DB Packet Storm

225098	6.9	警告	Linux	-	Linux Kernel の ptrace 機能における権限を取得される脆弱性	CWE-362 競合状態	CVE-2013-0871	2013-06-28 12:08	2013-01-27	Show	GitHub Exploit DB Packet Storm

225099	10	危険	Mozilla Foundation	-	Mozilla Firefox および Thunderbird のブラウザエンジンにおけるサービス運用妨害 (DoS) の脆弱性	CWE-noinfo 情報不足	CVE-2013-0801	2013-06-28 12:06	2013-05-14	Show	GitHub Exploit DB Packet Storm

225100	5	警告	シスコシステムズ	-	Cisco Prime for HCS Assurance の Web フレームワークにおけるデイレクトリおよびファイルを列挙される脆弱性	CWE-200 情報漏えい	CVE-2013-3398	2013-06-28 11:56	2013-06-26	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 28, 2026, 4:16 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
199901	7.0	HIGH Network	nextcloud fedoraproject	mail fedora	A missing verification of the TLS host in Nextcloud Mail 1.1.3 allowed a man in the middle attack.	CWE-295 Improper Certificate Validation	CVE-2020-8156	2024-11-21 14:38	2020-05-12	Show	GitHub Exploit DB Packet Storm

199902	5.4	MEDIUM Network	nextcloud	nextcloud_server	An outdated 3rd party library in the Files PDF viewer for Nextcloud Server 18.0.2 caused a Cross-site scripting vulnerability when opening a malicious PDF.	CWE-79 Cross-site Scripting	CVE-2020-8155	2024-11-21 14:38	2020-05-12	Show	GitHub Exploit DB Packet Storm

199903	7.7	HIGH Network	nextcloud	nextcloud_server	An Insecure direct object reference vulnerability in Nextcloud Server 18.0.2 allowed an attacker to remote wipe devices of other users when sending a malicious request directly to the endpoint.	CWE-639 Authorization Bypass Through User-Controlled Key	CVE-2020-8154	2024-11-21 14:38	2020-05-12	Show	GitHub Exploit DB Packet Storm

199904	8.1	HIGH Network	nextcloud fedoraproject	group_folders fedora	Improper access control in Groupfolders app 4.0.3 allowed to delete hidden directories when when renaming an accessible item to the same name.	CWE-732 Incorrect Permission Assignment for Critical Resource	CVE-2020-8153	2024-11-21 14:38	2020-05-12	Show	GitHub Exploit DB Packet Storm

199905	7.5	HIGH Network	rubyonrails fedoraproject	active_resource fedora	There is a possible information disclosure issue in Active Resource <v5.1.1 that could allow an attacker to create specially crafted requests to access data in an unexpected way and possibly leak inf…	CWE-863 Incorrect Authorization	CVE-2020-8151	2024-11-21 14:38	2020-05-12	Show	GitHub Exploit DB Packet Storm

199906	5.3	MEDIUM Network	mongodb	mongodb	Improper serialization of internal state in the authorization subsystem in MongoDB Server's authorization subsystem permits a user with valid credentials to bypass IP whitelisting protection mechani…	CWE-863 Incorrect Authorization	CVE-2020-7921	2024-11-21 14:38	2020-05-7	Show	GitHub Exploit DB Packet Storm

199907	6.1	MEDIUM Network	commscope	ruckus_zoneflex_r500_firmware	Ruckus R500 3.4.2.0.384 devices allow XSS via the index.asp Device Name field.	CWE-79 Cross-site Scripting	CVE-2020-8033	2024-11-21 14:38	2020-05-6	Show	GitHub Exploit DB Packet Storm

199908	8.1	HIGH Network	commscope	ruckus_zoneflex_r500_firmware	A CSRF issue in login.asp on Ruckus R500 3.4.2.0.384 devices allows remote attackers to access the panel or conduct SSRF attacks.	CWE-352 Origin Validation Error	CVE-2020-7983	2024-11-21 14:38	2020-05-6	Show	GitHub Exploit DB Packet Storm

199909	7.8	HIGH Local	suse	linux_enterprise_desktop	A Incorrect Default Permissions vulnerability in the SLES15-SP1-CHOST-BYOS and SLES15-SP1-CAP-Deployment-BYOS images of SUSE Linux Enterprise Server 15 SP1 allows local attackers with the UID 1000 to…	CWE-276 Incorrect Default Permissions	CVE-2020-8018	2024-11-21 14:38	2020-05-4	Show	GitHub Exploit DB Packet Storm

199910	6.8	MEDIUM Physics	ui	unifi_cloud_key_gen2_firmware unifi_cloud_key_gen2_plus_firmware	UniFi Cloud Key firmware <= v1.1.10 for Cloud Key gen2 and Cloud Key gen2 Plus contains a vulnerability that allows unrestricted root access through the serial interface (UART).	NVD-CWE-noinfo	CVE-2020-8157	2024-11-21 14:38	2020-05-3	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed