Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 21, 2026, 6:01 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
225111 4.9 警告 マイクロソフト - Microsoft Windows の win32k.sys の EPATHOBJ::bFlatten 関数におけるサービス運用妨害 (DoS) の脆弱性 CWE-22
パス・トラバーサル 		CVE-2013-3661 2013-05-29 16:54 2013-05-17 Show GitHub Exploit DB Packet Storm
225112 5 警告 IBM - IBM InfoSphere Optim Data Growth for Oracle E-Business Suite における重要な情報を取得される脆弱性 CWE-255
証明書・パスワード管理 		CVE-2013-2959 2013-05-29 16:37 2013-05-13 Show GitHub Exploit DB Packet Storm
225113 3.5 注意 IBM - IBM InfoSphere Optim Data Growth for Oracle E-Business Suite におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2013-2957 2013-05-29 16:37 2013-05-13 Show GitHub Exploit DB Packet Storm
225114 7.5 危険 IBM - IBM InfoSphere Optim Data Growth for Oracle E-Business Suite における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2013-2956 2013-05-29 16:36 2013-05-13 Show GitHub Exploit DB Packet Storm
225115 3.5 注意 IBM - IBM InfoSphere Optim Data Growth for Oracle E-Business Suite におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2013-2955 2013-05-29 16:35 2013-05-13 Show GitHub Exploit DB Packet Storm
225116 5 警告 IBM - IBM InfoSphere Optim Data Growth for Oracle E-Business Suite におけるアクセス権を取得される脆弱性 CWE-287
不適切な認証 		CVE-2013-2954 2013-05-29 16:35 2013-05-13 Show GitHub Exploit DB Packet Storm
225117 4.3 警告 IBM - IBM InfoSphere Optim Data Growth for Oracle E-Business Suite における SSL サーバになりすまされる脆弱性 CWE-310
暗号の問題 		CVE-2013-2953 2013-05-29 16:30 2013-05-13 Show GitHub Exploit DB Packet Storm
225118 5.8 警告 シスコシステムズ - iOS 上で稼働する Cisco WebEx における SSL サーバになりすまされる脆弱性 CWE-20
不適切な入力確認 		CVE-2012-6399 2013-05-29 16:30 2013-05-27 Show GitHub Exploit DB Packet Storm
225119 5 警告 Moodle - Moodle の lib/formslib.php におけるフォームデータのフィルタリングを回避される脆弱性 CWE-20
不適切な入力確認 		CVE-2013-2083 2013-05-29 14:34 2013-05-21 Show GitHub Exploit DB Packet Storm
225120 5 警告 Moodle - Moodle における重要な情報を取得される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2013-2082 2013-05-29 14:33 2013-05-21 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 21, 2026, 4:10 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
199261 7.2 HIGH
Network 		honeywell win-pak In Honeywell WIN-PAK 4.7.2, Web and prior versions, the affected product is vulnerable due to the usage of old jQuery libraries. NVD-CWE-Other
CVE-2020-6978 2024-11-21 14:36 2020-03-25 Show GitHub Exploit DB Packet Storm
199262 8.8 HIGH
Network 		honeywell win-pak In Honeywell WIN-PAK 4.7.2, Web and prior versions, the affected product is vulnerable to a cross-site request forgery, which may allow an attacker to remotely execute arbitrary code. CWE-352
 Origin Validation Error 		CVE-2020-7005 2024-11-21 14:36 2020-03-25 Show GitHub Exploit DB Packet Storm
199263 9.8 CRITICAL
Network 		moxa pt-7528-24tx-hv_firmware
pt-7528-24tx-hv-hv_firmware
pt-7528-24tx-wv_firmware
pt-7528-24tx-wv-hv_firmware
pt-7528-24tx-wv-wv_firmware
pt-7528-12msc-12tx-4gsfp-hv_firmware
pt-7528-12… 		In Moxa PT-7528 series firmware, Version 4.0 or lower, and PT-7828 series firmware, Version 3.9 or lower, the application utilizes weak password requirements, which may allow an attacker to gain unau… CWE-521
Weak Password Requirements  		CVE-2020-6995 2024-11-21 14:36 2020-03-25 Show GitHub Exploit DB Packet Storm
199264 7.5 HIGH
Network 		moxa pt-7528-24tx-hv_firmware
pt-7528-24tx-hv-hv_firmware
pt-7528-24tx-wv_firmware
pt-7528-24tx-wv-hv_firmware
pt-7528-24tx-wv-wv_firmware
pt-7528-12msc-12tx-4gsfp-hv_firmware
pt-7528-12… 		In Moxa PT-7528 series firmware, Version 4.0 or lower, and PT-7828 series firmware, Version 3.9 or lower, an attacker can gain access to sensitive information from the web service without authorizati… CWE-200
Information Exposure 		CVE-2020-6993 2024-11-21 14:36 2020-03-25 Show GitHub Exploit DB Packet Storm
199265 9.8 CRITICAL
Network 		moxa pt-7528-24tx-hv_firmware
pt-7528-24tx-hv-hv_firmware
pt-7528-24tx-wv_firmware
pt-7528-24tx-wv-hv_firmware
pt-7528-24tx-wv-wv_firmware
pt-7528-12msc-12tx-4gsfp-hv_firmware
pt-7528-12… 		In Moxa PT-7528 series firmware, Version 4.0 or lower, and PT-7828 series firmware, Version 3.9 or lower, these devices use a hard-coded service code for access to the console. CWE-798
 Use of Hard-coded Credentials 		CVE-2020-6985 2024-11-21 14:36 2020-03-25 Show GitHub Exploit DB Packet Storm
199266 9.8 CRITICAL
Network 		moxa pt-7528-24tx-hv_firmware
pt-7528-24tx-hv-hv_firmware
pt-7528-24tx-wv_firmware
pt-7528-24tx-wv-hv_firmware
pt-7528-24tx-wv-wv_firmware
pt-7528-12msc-12tx-4gsfp-hv_firmware
pt-7528-12… 		In Moxa PT-7528 series firmware, Version 4.0 or lower, and PT-7828 series firmware, Version 3.9 or lower, a buffer overflow in the web server allows remote attackers to cause a denial-of-service cond… CWE-787
 Out-of-bounds Write 		CVE-2020-6989 2024-11-21 14:36 2020-03-25 Show GitHub Exploit DB Packet Storm
199267 7.5 HIGH
Network 		moxa pt-7528-24tx-hv_firmware
pt-7528-24tx-hv-hv_firmware
pt-7528-24tx-wv_firmware
pt-7528-24tx-wv-hv_firmware
pt-7528-24tx-wv-wv_firmware
pt-7528-12msc-12tx-4gsfp-hv_firmware
pt-7528-12… 		In Moxa PT-7528 series firmware, Version 4.0 or lower, and PT-7828 series firmware, Version 3.9 or lower, the affected products use a weak cryptographic algorithm, which may allow confidential inform… CWE-327
 Use of a Broken or Risky Cryptographic Algorithm 		CVE-2020-6987 2024-11-21 14:36 2020-03-25 Show GitHub Exploit DB Packet Storm
199268 7.5 HIGH
Network 		moxa pt-7528-24tx-hv_firmware
pt-7528-24tx-hv-hv_firmware
pt-7528-24tx-wv_firmware
pt-7528-24tx-wv-hv_firmware
pt-7528-24tx-wv-wv_firmware
pt-7528-12msc-12tx-4gsfp-hv_firmware
pt-7528-12… 		In Moxa PT-7528 series firmware, Version 4.0 or lower, and PT-7828 series firmware, Version 3.9 or lower, the affected products use a hard-coded cryptographic key, which increases the possibility tha… CWE-798
 Use of Hard-coded Credentials 		CVE-2020-6983 2024-11-21 14:36 2020-03-25 Show GitHub Exploit DB Packet Storm
199269 7.5 HIGH
Network 		moxa iologik_2512_firmware
iologik_2512-t_firmware
iologik_2512-hspa_firmware
iologik_2512-hspa-t_firmware
iologik_2512-wl1-eu_firmware
iologik_2512-wl1-eu-t_firmware
iologik_2512-wl1-us… 		In Moxa ioLogik 2500 series firmware, Version 3.0 or lower, and IOxpress configuration utility, Version 2.3.0 or lower, sensitive information is transmitted over some web applications in clear text. CWE-319
Cleartext Transmission of Sensitive Information 		CVE-2020-7003 2024-11-21 14:36 2020-03-25 Show GitHub Exploit DB Packet Storm
199270 9.1 CRITICAL
Network 		honeywell notifier_webserver In Notifier Web Server (NWS) Version 3.50 and earlier, the Honeywell Fire Web Server’s authentication may be bypassed by a capture-replay attack from a web browser. CWE-294
Authentication Bypass by Capture-replay  		CVE-2020-6972 2024-11-21 14:36 2020-03-25 Show GitHub Exploit DB Packet Storm