Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 18, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
225231 5 警告 シスコシステムズ - Cisco Hosted Collaboration Solution におけるサービス運用妨害 (DoS) の脆弱性 CWE-119
バッファエラー 		CVE-2013-1174 2013-04-8 14:28 2013-04-4 Show GitHub Exploit DB Packet Storm
225232 5 警告 IBM - IBM IMS Enterprise Suite の SOAP Gateway における重要な情報を取得される脆弱性 CWE-310
暗号の問題 		CVE-2013-0483 2013-04-8 14:28 2013-03-29 Show GitHub Exploit DB Packet Storm
225233 4 警告 IBM - IBM Netezza Performance Portal の HTTPD におけるディレクトリトラバーサルの脆弱性 CWE-16
環境設定 		CVE-2013-0470 2013-04-8 14:27 2013-03-22 Show GitHub Exploit DB Packet Storm
225234 2.1 注意 Katello Project - Katello の katello-configure における Candlepin CA 証明書を改ざんされる脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2012-6116 2013-04-5 18:51 2013-03-1 Show GitHub Exploit DB Packet Storm
225235 4 警告 Opera Software ASA - Opera における識別攻撃およびプレーンテキストリカバリ攻撃を誘発される脆弱性 CWE-310
暗号の問題 		CVE-2013-1618 2013-04-5 17:23 2013-01-30 Show GitHub Exploit DB Packet Storm
225236 9.3 危険 Invensys - Invensys Wonderware Win-XML Exporter における任意のファイルを読まれる脆弱性 CWE-20
不適切な入力確認 		CVE-2012-4710 2013-04-5 15:57 2013-03-21 Show GitHub Exploit DB Packet Storm
225237 4 警告 Schneider Electric - Schneider Electric Modicon M340 の PLC モジュールにおけるサービス運用妨害 (DoS) の脆弱性 CWE-119
バッファエラー 		CVE-2013-2761 2013-04-5 15:56 2013-01-23 Show GitHub Exploit DB Packet Storm
225238 8.5 危険 Schneider Electric - 複数の Schneider Electric Modicon 製品上の FactoryCast サービスにおける任意のコードを実行される脆弱性 CWE-noinfo
情報不足 		CVE-2013-0664 2013-04-5 15:55 2013-01-23 Show GitHub Exploit DB Packet Storm
225239 6.8 警告 Schneider Electric - 複数の Schneider Electric Modicon 製品におけるクロスサイトリクエストフォージェリの脆弱性 CWE-352
同一生成元ポリシー違反 		CVE-2013-0663 2013-04-5 15:55 2013-01-23 Show GitHub Exploit DB Packet Storm
225240 5.8 警告 マイクロソフト - Microsoft Windows モダン メールにおける他の Web サイトのリンクになりすまされる脆弱性 CWE-noinfo
情報不足 		CVE-2013-1299 2013-04-5 14:58 2013-03-27 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 18, 2026, 4:12 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
199311 8.8 HIGH
Network 		sap master_data_governance_\(s4fnd\)
master_data_governance_\(sap_bs_fnd\)
master_data_governance_\(s4core\) 		The use of an admin backend report within SAP Master Data Governance, versions - S4CORE 101, S4FND 102, 103, 104, SAP_BS_FND 748; allows an attacker to execute crafted database queries, exposing the … CWE-89
SQL Injection 		CVE-2020-6249 2024-11-21 14:35 2020-05-13 Show GitHub Exploit DB Packet Storm
199312 7.2 HIGH
Network 		sap adaptive_server_enterprise_backup_server SAP Adaptive Server Enterprise (Backup Server), version 16.0, does not perform the necessary validation checks for an authenticated user while executing DUMP or LOAD command allowing arbitrary code e… CWE-94
CWE-20
Code Injection
 Improper Input Validation  		CVE-2020-6248 2024-11-21 14:35 2020-05-13 Show GitHub Exploit DB Packet Storm
199313 7.5 HIGH
Network 		sap businessobjects_business_intelligence_platform SAP Business Objects Business Intelligence Platform, version 4.2, allows an unauthenticated attacker to prevent legitimate users from accessing a service. Using a specially crafted request, the attac… NVD-CWE-noinfo
CVE-2020-6247 2024-11-21 14:35 2020-05-13 Show GitHub Exploit DB Packet Storm
199314 6.7 MEDIUM
Local 		sap businessobjects_business_intelligence_platform SAP Business Objects Business Intelligence Platform, version 4.2, allows an attacker with access to local instance, to inject file or code that can be executed by the application due to Improper Cont… CWE-74
Injection 		CVE-2020-6245 2024-11-21 14:35 2020-05-13 Show GitHub Exploit DB Packet Storm
199315 7.8 HIGH
Local 		sap business_client SAP Business Client, version 7.0, allows an attacker after a successful social engineering attack to inject malicious code as a DLL file in untrusted directories that can be executed by the applicati… CWE-427
 Uncontrolled Search Path Element 		CVE-2020-6244 2024-11-21 14:35 2020-05-13 Show GitHub Exploit DB Packet Storm
199316 8.8 HIGH
Network 		sap adaptive_server_enterprise Under certain conditions, SAP Adaptive Server Enterprise (XP Server on Windows Platform), versions 15.7, 16.0, does not perform the necessary checks for an authenticated user while executing the exte… CWE-94
Code Injection 		CVE-2020-6243 2024-11-21 14:35 2020-05-13 Show GitHub Exploit DB Packet Storm
199317 9.8 CRITICAL
Network 		sap businessobjects_business_intelligence_platform SAP Business Objects Business Intelligence Platform (Live Data Connect), versions 1.0, 2.0, 2.1, 2.2, 2.3, allows an attacker to logon on the Central Management Console without password in case of th… CWE-306
Missing Authentication for Critical Function 		CVE-2020-6242 2024-11-21 14:35 2020-05-13 Show GitHub Exploit DB Packet Storm
199318 8.8 HIGH
Network 		sap adaptive_server_enterprise SAP Adaptive Server Enterprise, version 16.0, allows an authenticated user to execute crafted database queries to elevate privileges of users in the system, leading to SQL Injection. CWE-89
SQL Injection 		CVE-2020-6241 2024-11-21 14:35 2020-05-13 Show GitHub Exploit DB Packet Storm
199319 7.5 HIGH
Network 		sap netweaver_application_server_abap SAP NetWeaver AS ABAP (Web Dynpro ABAP), versions (SAP_UI 750, 752, 753, 754 and SAP_BASIS 700, 710, 730, 731, 804) allows an unauthenticated attacker to prevent legitimate users from accessing a ser… NVD-CWE-noinfo
CVE-2020-6240 2024-11-21 14:35 2020-05-13 Show GitHub Exploit DB Packet Storm
199320 8.8 HIGH
Network 		codesys runtime An exploitable code execution vulnerability exists in the PLC_Task functionality of 3S-Smart Software Solutions GmbH CODESYS Runtime 3.5.14.30. A specially crafted network request can cause remote co… CWE-345
 Insufficient Verification of Data Authenticity 		CVE-2020-6081 2024-11-21 14:35 2020-05-7 Show GitHub Exploit DB Packet Storm