Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 16, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
225341 6.4 警告 Zend Technologies Ltd. - Zend Framework における任意のファイルを読まれる脆弱性 CWE-20
不適切な入力確認 		CVE-2012-6531 2013-02-18 11:34 2013-02-13 Show GitHub Exploit DB Packet Storm
225342 6.5 警告 OpenStack
Canonical		 - OpenStack Compute Folsom および Essex における他のユーザのボリュームからブートされる脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2013-0208 2013-02-18 11:32 2013-01-29 Show GitHub Exploit DB Packet Storm
225343 6.4 警告 シスコシステムズ - Cisco Small Business ワイヤレスアクセスポイントにおけるサービス運用妨害 (DoS) の脆弱性 CWE-noinfo
情報不足 		CVE-2013-1131 2013-02-15 19:48 2013-02-13 Show GitHub Exploit DB Packet Storm
225344 5 警告 シスコシステムズ - Cisco Nexus 7000 上で稼働する Cisco NX-OS におけるサービス運用妨害 (DoS) の脆弱性 CWE-20
不適切な入力確認 		CVE-2013-1122 2013-02-15 19:47 2013-02-6 Show GitHub Exploit DB Packet Storm
225345 4.3 警告 シスコシステムズ - Cisco Unity Express におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2013-1114 2013-02-15 19:46 2013-02-1 Show GitHub Exploit DB Packet Storm
225346 9 危険 シスコシステムズ - Cisco ATA 187 Analog Telephone Adaptor におけるオペレーティングシステムのコマンドを実行される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2013-1111 2013-02-15 19:46 2013-02-6 Show GitHub Exploit DB Packet Storm
225347 5.4 警告 シスコシステムズ - Cisco Catalyst スイッチ上で稼働する Cisco IOS におけるサービス運用妨害 (DoS) の脆弱性 CWE-399
リソース管理の問題 		CVE-2013-1100 2013-02-15 19:45 2013-01-30 Show GitHub Exploit DB Packet Storm
225348 4.3 警告 Featurific For WordPress Project - WordPress 用 Featurific For WordPress プラグインにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2011-5265 2013-02-15 19:11 2013-02-12 Show GitHub Exploit DB Packet Storm
225349 4.3 警告 Marcel Brinkkemper - WordPress 用 Lazyest Backup プラグインにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2011-5264 2013-02-15 19:10 2013-02-12 Show GitHub Exploit DB Packet Storm
225350 4.3 警告 SAP - SAP NetWeaver におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2011-5263 2013-02-15 19:09 2013-02-12 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 16, 2026, 4 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
199181 4.3 MEDIUM
Network 		ignitenet helios_glinq In IgniteNet HeliOS GLinq v2.2.1 r2961, the langSelection parameter is stored in the luci configuration file (/etc/config/luci) by the authenticator.htmlauth function. When modified with arbitrary ja… CWE-79
Cross-site Scripting 		CVE-2020-5781 2024-11-21 14:34 2020-09-24 Show GitHub Exploit DB Packet Storm
199182 6.5 MEDIUM
Network 		vmware
oracle
netapp 		spring_framework
flexcube_private_banking
weblogic_server
insurance_rules_palette
endeca_information_discovery_integrator
retail_predictive_application_server
retail_order_broker 		In Spring Framework versions 5.2.0 - 5.2.8, 5.1.0 - 5.1.17, 5.0.0 - 5.0.18, 4.3.0 - 4.3.28, and older unsupported versions, the protections against RFD attacks from CVE-2015-5211 may be bypassed depe… NVD-CWE-noinfo
CVE-2020-5421 2024-11-21 14:34 2020-09-19 Show GitHub Exploit DB Packet Storm
199183 7.5 HIGH
Network 		nvidia geforce_now
games 		NVIDIA GeForce NOW, versions prior to 2.0.23 (Windows, macOS) and versions prior to 5.31 (Android, Shield TV), contains a vulnerability in the application software where the network test component tr… NVD-CWE-noinfo
CVE-2020-5976 2024-11-21 14:34 2020-09-19 Show GitHub Exploit DB Packet Storm
199184 7.5 HIGH
Network 		nvidia geforce_now NVIDIA GeForce NOW, versions prior to 2.0.23 on Windows and macOS, contains a vulnerability in the desktop application software that includes sensitive information as part of a URL, which may lead to… CWE-200
Information Exposure 		CVE-2020-5975 2024-11-21 14:34 2020-09-19 Show GitHub Exploit DB Packet Storm
199185 6.5 MEDIUM
Network 		uniqlo uniqlo UNIQLO App for Android versions 7.3.3 and earlier allows remote attackers to lead a user to access an arbitrary website via a malicious App created by the third party. As a result, if the access dest… NVD-CWE-noinfo
CVE-2020-5629 2024-11-21 14:34 2020-09-18 Show GitHub Exploit DB Packet Storm
199186 6.5 MEDIUM
Network 		uniqlo uniqlo UNIQLO App for Android versions 7.3.3 and earlier allows remote attackers to lead a user to access an arbitrary website via the vulnerable App. As a result, if the access destination is a malicious w… NVD-CWE-noinfo
CVE-2020-5628 2024-11-21 14:34 2020-09-18 Show GitHub Exploit DB Packet Storm
199187 6.1 MEDIUM
Network 		buffalo airstation_whr-g54s_firmware Cross-site scripting vulnerability in WHR-G54S firmware 1.43 and earlier allows remote attackers to inject arbitrary script via a specially crafted page. CWE-79
Cross-site Scripting 		CVE-2020-5606 2024-11-21 14:34 2020-09-18 Show GitHub Exploit DB Packet Storm
199188 4.3 MEDIUM
Network 		buffalo airstation_whr-g54s_firmware Directory traversal vulnerability in WHR-G54S firmware 1.43 and earlier allows an attacker to access sensitive information such as setting values via unspecified vectors. CWE-22
Path Traversal 		CVE-2020-5605 2024-11-21 14:34 2020-09-18 Show GitHub Exploit DB Packet Storm
199189 5.3 MEDIUM
Network 		icegram email_subscribers_\&_newsletters Missing Authentication for Critical Function in Icegram Email Subscribers & Newsletters Plugin for WordPress prior to version 4.5.6 allows a remote, unauthenticated attacker to conduct unauthenticate… CWE-306
Missing Authentication for Critical Function 		CVE-2020-5780 2024-11-21 14:34 2020-09-11 Show GitHub Exploit DB Packet Storm
199190 6.1 MEDIUM
Network 		yodobashi yodobashi Yodobashi App for Android versions 1.8.7 and earlier allows remote attackers to lead a user to access an arbitrary website via the vulnerable App. As a result, the user may become a victim of a phish… CWE-601
Open Redirect 		CVE-2020-5627 2024-11-21 14:34 2020-09-9 Show GitHub Exploit DB Packet Storm