Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 18, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
225171	4	警告	フェンリル株式会社	-	Sleipnir Mobile for Android において任意のエクステンション API が呼び出される脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2013-2304	2013-04-12 12:01	2013-04-12	Show	GitHub Exploit DB Packet Storm

225172	4.3	警告	Splunk	-	Splunk Web におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2013-2766	2013-04-12 11:04	2013-03-25	Show	GitHub Exploit DB Packet Storm

225173	5	警告	Puppet	-	Puppet Labs の Puppet Enterprise におけるコンソールアクセスを取得される脆弱性	CWE-310 暗号の問題	CVE-2013-2716	2013-04-12 11:03	2013-03-28	Show	GitHub Exploit DB Packet Storm

225174	7.5	危険	Digineo	-	Ruby 用 Thumbshooter gem の lib/thumbshooter.rb における任意のコマンドを実行される脆弱性	CWE-94 コード・インジェクション	CVE-2013-1898	2013-04-11 19:42	2013-03-25	Show	GitHub Exploit DB Packet Storm

225175	7.5	危険	Dan Kubb	-	Ruby 用 extlib gem におけるオブジェクトインジェクション攻撃を実行される脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2013-1802	2013-04-11 19:41	2013-01-14	Show	GitHub Exploit DB Packet Storm

225176	7.5	危険	John Nunemaker	-	Ruby 用 httparty gem におけるオブジェクトインジェクション攻撃を実行される脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2013-1801	2013-04-11 19:41	2013-01-14	Show	GitHub Exploit DB Packet Storm

225177	7.5	危険	John Nunemaker	-	Ruby 用 crack gem におけるオブジェクトインジェクション攻撃を実行される脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2013-1800	2013-04-11 19:40	2013-01-14	Show	GitHub Exploit DB Packet Storm

225178	7.5	危険	Daniel Harrington	-	Ruby 用 nori gem におけるオブジェクトインジェクション攻撃を実行される脆弱性	CWE-20 不適切な入力確認	CVE-2013-0285	2013-04-11 19:39	2013-01-14	Show	GitHub Exploit DB Packet Storm

225179	5	警告	New Relic	-	Ruby Agent における重要な情報を取得される脆弱性	CWE-200 情報漏えい	CVE-2013-0284	2013-04-11 19:38	2013-02-13	Show	GitHub Exploit DB Packet Storm

225180	6.8	警告	Michael Bleigh and Intridea, Inc.	-	Ruby 用 omniauth-oauth2 gem におけるクロスサイトリクエストフォージェリの脆弱性	CWE-352 同一生成元ポリシー違反	CVE-2012-6134	2013-04-11 19:37	2013-02-25	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 18, 2026, 4:12 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
198851	9.1	CRITICAL Network	openfortivpn_project fedoraproject opensuse	openfortivpn fedora leap backports_sle	An issue was discovered in openfortivpn 1.11.0 when used with OpenSSL before 1.0.2. tunnel.c mishandles certificate validation because hostname comparisons do not consider '\0' characters, as demonst…	CWE-295 Improper Certificate Validation	CVE-2020-7043	2024-11-21 14:36	2020-02-28	Show	GitHub Exploit DB Packet Storm

198852	5.3	MEDIUM Network	openfortivpn_project fedoraproject opensuse	openfortivpn fedora leap backports_sle	An issue was discovered in openfortivpn 1.11.0 when used with OpenSSL 1.0.2 or later. tunnel.c mishandles certificate validation because the hostname check operates on uninitialized memory. The outco…	CWE-295 CWE-908 Improper Certificate Validation Use of Uninitialized Resource	CVE-2020-7042	2024-11-21 14:36	2020-02-28	Show	GitHub Exploit DB Packet Storm

198853	5.3	MEDIUM Network	openfortivpn_project fedoraproject opensuse	openfortivpn fedora leap backports_sle	An issue was discovered in openfortivpn 1.11.0 when used with OpenSSL 1.0.2 or later. tunnel.c mishandles certificate validation because an X509_check_host negative error code is interpreted as a suc…	CWE-295 Improper Certificate Validation	CVE-2020-7041	2024-11-21 14:36	2020-02-28	Show	GitHub Exploit DB Packet Storm

198854	6.5	MEDIUM Adjacent	zte	e8820v3_firmware	ZTE E8820V3 router product is impacted by an information leak vulnerability. Attackers could use this vulnerability to to gain wireless passwords. After obtaining the wireless password, the attacker …	NVD-CWE-noinfo	CVE-2020-6864	2024-11-21 14:36	2020-02-28	Show	GitHub Exploit DB Packet Storm

198855	6.5	MEDIUM Adjacent	zte	e8820v3_firmware	ZTE E8820V3 router product is impacted by a permission and access control vulnerability. Attackers could use this vulnerability to tamper with DDNS parameters and send DoS attacks on the specified UR…	NVD-CWE-noinfo	CVE-2020-6863	2024-11-21 14:36	2020-02-28	Show	GitHub Exploit DB Packet Storm

198856	7.2	HIGH Network	dlink	dch-m225_firmware	D-Link DCH-M225 1.05b01 and earlier devices allow remote authenticated admins to execute arbitrary OS commands via shell metacharacters in the media renderer name.	CWE-78 OS Command	CVE-2020-6842	2024-11-21 14:36	2020-02-22	Show	GitHub Exploit DB Packet Storm

198857	9.8	CRITICAL Network	dlink	dch-m225_firmware	D-Link DCH-M225 1.05b01 and earlier devices allow remote attackers to execute arbitrary OS commands via shell metacharacters in the spotifyConnect.php userName parameter.	CWE-78 OS Command	CVE-2020-6841	2024-11-21 14:36	2020-02-22	Show	GitHub Exploit DB Packet Storm

198858	7.8	HIGH Local	honeywell	inncom_inncontrol_firmware	Honeywell INNCOM INNControl 3 allows workstation users to escalate application user privileges through the modification of local configuration files.	CWE-269 Improper Privilege Management	CVE-2020-6968	2024-11-21 14:36	2020-02-21	Show	GitHub Exploit DB Packet Storm

198859	6.8	MEDIUM Physics	ge	vivid_e95_firmware vivid_e90_firmware vivid_s70n_firmware vivid_t8_firmware vivid_t9_firmware vivid_iq_firmware logiq_e10_firmware logiq_e9_firmware logiq_s8_firmware logiq…	A restricted desktop environment escape vulnerability exists in the Kiosk Mode functionality of affected devices. Specially crafted inputs can allow the user to escape the restricted environment, res…	CWE-20 NVD-CWE-Other Improper Input Validation	CVE-2020-6977	2024-11-21 14:36	2020-02-21	Show	GitHub Exploit DB Packet Storm

198860	9.8	CRITICAL Network	emerson	openenterprise_scada_server	A Heap-based Buffer Overflow was found in Emerson OpenEnterprise SCADA Server 2.83 (if Modbus or ROC Interfaces have been installed and are in use) and all versions of OpenEnterprise 3.1 through 3.3.…	CWE-787 Out-of-bounds Write	CVE-2020-6970	2024-11-21 14:36	2020-02-20	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed