Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 18, 2026, 6 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
225281 2.1 注意 アップル - Apple iOS 6.1 の Identity Services における認証を回避される脆弱性 CWE-20
不適切な入力確認
CVE-2013-0963 2013-04-2 17:01 2013-01-29 Show GitHub Exploit DB Packet Storm
225282 10 危険 シーメンス - Siemens CP 1604 および CP 1616 インターフェースカードにおける任意のコードを実行される脆弱性 CWE-noinfo
情報不足
CVE-2013-0659 2013-04-2 16:43 2013-02-13 Show GitHub Exploit DB Packet Storm
225283 9.3 危険 アップル - Apple QuickTime におけるバッファオーバーフローの脆弱性 CWE-119
バッファエラー
CVE-2012-3756 2013-04-2 16:42 2012-11-7 Show GitHub Exploit DB Packet Storm
225284 9.3 危険 Novell - Novell GroupWise Messenger および Novell Messenger におけるスタックベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー
CVE-2013-1085 2013-04-2 16:41 2013-03-13 Show GitHub Exploit DB Packet Storm
225285 10 危険 Novell - Novell Identity Manager の Roles Based Provisioning Module における脆弱性 CWE-noinfo
情報不足
CVE-2013-1083 2013-04-2 16:40 2013-03-12 Show GitHub Exploit DB Packet Storm
225286 7.5 危険 Novell - Novell ZENworks Mobile Management の DUSAP.php におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル
CVE-2013-1082 2013-04-2 16:40 2013-03-29 Show GitHub Exploit DB Packet Storm
225287 5 警告 アップル - Apple iOS および Apple TV における ASLR 保護メカニズムを回避される脆弱性 CWE-200
情報漏えい
CVE-2012-3749 2013-04-2 16:39 2012-11-3 Show GitHub Exploit DB Packet Storm
225288 5.8 警告 アップル
jabberd 2.x project
- jabberd2 の s2s/out.c におけるドメインになりすまされる脆弱性 CWE-20
不適切な入力確認
CVE-2012-3525 2013-04-2 16:38 2012-08-25 Show GitHub Exploit DB Packet Storm
225289 5 警告 PostgreSQL.org
アップル
- PostgreSQL のコアサーバコンポーネントにおける任意のファイルの存在を特定される脆弱性 CWE-20
不適切な入力確認
CVE-2012-3489 2013-04-2 16:36 2012-08-17 Show GitHub Exploit DB Packet Storm
225290 6.8 警告 Novell - Novell ZENworks Configuration Management の AdminStudio におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル
CVE-2013-1079 2013-04-2 16:35 2013-02-21 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 18, 2026, 4:12 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
198661 9.8 CRITICAL
Network
blackberry qnx_software_development_platform An information disclosure and remote code execution vulnerability in the slinger web server of the BlackBerry QNX Software Development Platform versions 6.4.0 to 6.6.0 could allow an attacker to pote… NVD-CWE-noinfo
CVE-2020-6932 2024-11-21 14:36 2020-08-12 Show GitHub Exploit DB Packet Storm
198662 8.8 HIGH
Network
avaya aura_messaging
aura_communication_manager
A Cross-Site Request Forgery (CSRF) vulnerability was discovered in the System Management Interface Web component of Avaya Aura Communication Manager and Avaya Aura Messaging. This vulnerability coul… CWE-352
 Origin Validation Error
CVE-2020-7029 2024-11-21 14:36 2020-08-12 Show GitHub Exploit DB Packet Storm
198663 6.7 MEDIUM
Local
hpe intelligent_provisioning
service_pack_for_proliant
smartstart_scripting_toolkit
A potential security vulnerability has been identified in HPE Intelligent Provisioning, Service Pack for ProLiant, and HPE Scripting ToolKit. The vulnerability could be locally exploited to allow arb… NVD-CWE-noinfo
CVE-2020-7205 2024-11-21 14:36 2020-07-31 Show GitHub Exploit DB Packet Storm
198664 4.8 MEDIUM
Network
elasticsearch
oracle
kibana
peoplesoft_enterprise_peopletools
communications_billing_and_revenue_management
communications_cloud_native_core_network_function_cloud_native_environment
Kibana versions before 6.8.11 and 7.8.1 contain a denial of service (DoS) flaw in Timelion. An attacker can construct a URL that when viewed by a Kibana user can lead to the Kibana process consuming … CWE-400
 Uncontrolled Resource Consumption
CVE-2020-7016 2024-11-21 14:36 2020-07-28 Show GitHub Exploit DB Packet Storm
198665 6.7 MEDIUM
Network
elasticsearch
oracle
kibana
peoplesoft_enterprise_peopletools
communications_billing_and_revenue_management
communications_cloud_native_core_network_function_cloud_native_environment
In Kibana versions before 6.8.11 and 7.8.1 the region map visualization in contains a stored XSS flaw. An attacker who is able to edit or create a region map visualization could obtain sensitive info… CWE-79
Cross-site Scripting
CVE-2020-7017 2024-11-21 14:36 2020-07-28 Show GitHub Exploit DB Packet Storm
198666 6.1 MEDIUM
Network
zte r8500g4_firmware
r5500g4_firmware
r5300g4_firmware
The server management software module of ZTE has a storage XSS vulnerability. The attacker inserts some attack codes through the foreground login page, which will cause the user to execute the predef… CWE-79
Cross-site Scripting
CVE-2020-6872 2024-11-21 14:36 2020-07-21 Show GitHub Exploit DB Packet Storm
198667 9.8 CRITICAL
Network
zte r8500g4_firmware
r5500g4_firmware
r5300g4_firmware
The server management software module of ZTE has an authentication issue vulnerability, which allows users to skip the authentication of the server and execute some commands for high-level users. Thi… CWE-287
Improper Authentication
CVE-2020-6871 2024-11-21 14:36 2020-07-21 Show GitHub Exploit DB Packet Storm
198668 9.8 CRITICAL
Network
hp nagios-plugins-hpilo HP nagios plugin for iLO (nagios-plugins-hpilo v1.50 and earlier) has a php code injection vulnerability. CWE-78
OS Command 
CVE-2020-7206 2024-11-21 14:36 2020-07-18 Show GitHub Exploit DB Packet Storm
198669 7.5 HIGH
Network
tableau tableau_server A sensitive information disclosure vulnerability in Tableau Server 10.5, 2018.x, 2019.x, 2020.x released before June 26, 2020, could allow access to sensitive information in log files. CWE-532
 Inclusion of Sensitive Information in Log Files
CVE-2020-6938 2024-11-21 14:36 2020-07-9 Show GitHub Exploit DB Packet Storm
198670 6.1 MEDIUM
Network
hp icewall_sso_dfw
icewall_sso_dgfw
A security vulnerability in HPE IceWall SSO Dfw and Dgfw (Domain Gateway Option) could be exploited remotely to cause a remote cross-site scripting (XSS). HPE has provided the following information t… CWE-79
Cross-site Scripting
CVE-2020-7140 2024-11-21 14:36 2020-07-8 Show GitHub Exploit DB Packet Storm