Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 20, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
225361 4.3 警告 マイクロソフト - 複数の Microsoft 製品におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2013-1289 2013-04-16 17:04 2013-04-9 Show GitHub Exploit DB Packet Storm
225362 7.2 危険 マイクロソフト - Microsoft Windows Defender における権限昇格の脆弱性 CWE-20
不適切な入力確認 		CVE-2013-0078 2013-04-16 17:02 2013-04-9 Show GitHub Exploit DB Packet Storm
225363 7.2 危険 マイクロソフト - 複数の Microsoft Windows 製品の CSRSS における権限昇格の脆弱性 CWE-119
バッファエラー 		CVE-2013-1295 2013-04-16 17:00 2013-04-9 Show GitHub Exploit DB Packet Storm
225364 5 警告 マイクロソフト - 複数の Microsoft Active Directory のコンポーネントにおけるサービス運用妨害 (DoS) の脆弱性 CWE-20
不適切な入力確認 		CVE-2013-1282 2013-04-16 16:57 2013-04-9 Show GitHub Exploit DB Packet Storm
225365 6.2 警告 Motorola Solutions, Inc
クアルコム		 - Qualcomm MSM8960 を使用する複数の Motorola 製 Android の TrustZone カーネルにおけるブートローダのロックを解除される脆弱性 CWE-16
環境設定 		CVE-2013-3051 2013-04-16 16:55 2013-04-13 Show GitHub Exploit DB Packet Storm
225366 4.9 警告 マイクロソフト - 複数の Microsoft Windows 製品のカーネルにおける権限昇格の脆弱性 CWE-362
競合状態 		CVE-2013-1284 2013-04-16 16:53 2013-04-9 Show GitHub Exploit DB Packet Storm
225367 3.5 注意 マイクロソフト - Microsoft SharePoint Server 2013 におけるリスト項目の読み取り制限を回避される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2013-1290 2013-04-16 16:52 2013-04-9 Show GitHub Exploit DB Packet Storm
225368 9.3 危険 マイクロソフト - Microsoft リモートデスクトップ接続クライアントにおける任意のコードを実行される脆弱性 CWE-94
コード・インジェクション 		CVE-2013-1296 2013-04-16 16:49 2013-04-9 Show GitHub Exploit DB Packet Storm
225369 5 警告 レッドハット - JBoss Enterprise Portal Platform における任意のファイルを読まれる脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2013-0315 2013-04-16 16:28 2013-03-7 Show GitHub Exploit DB Packet Storm
225370 7.5 危険 レッドハット - JBoss Enterprise Portal Platform におけるサイトコンテンツを変更される脆弱性 CWE-287
不適切な認証 		CVE-2013-0314 2013-04-16 16:27 2013-03-7 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 21, 2026, 4:10 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
197841 5.4 MEDIUM
Network 		periscopeholdings buyspeed Periscope BuySpeed version 14.5 is vulnerable to stored cross-site scripting, which could allow a local, authenticated attacker to store arbitrary JavaScript within the application. This JavaScript i… CWE-79
Cross-site Scripting 		CVE-2020-9056 2024-11-21 14:39 2020-04-11 Show GitHub Exploit DB Packet Storm
197842 9.8 CRITICAL
Network 		avira free_antivirus An issue was discovered in Avira Free-Antivirus before 15.0.2004.1825. The Self-Protection feature does not prohibit a write operation from an external process. Thus, code injection can be used to tu… NVD-CWE-noinfo
CVE-2020-8961 2024-11-21 14:39 2020-04-10 Show GitHub Exploit DB Packet Storm
197843 8.8 HIGH
Network 		argoproj argo_cd As of v1.5.0, the default admin password is set to the argocd-server pod name. For insiders with access to the cluster or logs, this issue could be abused for privilege escalation, as Argo has privil… CWE-287
CWE-1188
Improper Authentication
 Insecure Default Initialization of Resource 		CVE-2020-8828 2024-11-21 14:39 2020-04-9 Show GitHub Exploit DB Packet Storm
197844 7.5 HIGH
Network 		argoproj argo_cd As of v1.5.0, the Argo API does not implement anti-automation measures such as rate limiting, account lockouts, or other anti-bruteforce measures. Attackers can submit an unlimited number of authenti… CWE-307
mproper Restriction of Excessive Authentication Attempts 		CVE-2020-8827 2024-11-21 14:39 2020-04-9 Show GitHub Exploit DB Packet Storm
197845 7.5 HIGH
Network 		argoproj argo_cd As of v1.5.0, the Argo web interface authentication system issued immutable tokens. Authentication tokens, once issued, were usable forever without expiration—there was no refresh or forced re-authen… CWE-384
 Session Fixation 		CVE-2020-8826 2024-11-21 14:39 2020-04-9 Show GitHub Exploit DB Packet Storm
197846 5.5 MEDIUM
Local 		canonical
netapp 		ubuntu_linux
cloud_backup
steelstore_cloud_integrated_storage
solidfire_\&_hci_management_node
aff_8300_firmware
aff_8700_firmware
aff_a220_firmware
aff_a320_firmware
aff_… 		The fix for the Linux kernel in Ubuntu 18.04 LTS for CVE-2019-14615 ("The Linux kernel did not properly clear data structures on context switches for certain Intel graphics processors.") was discover… CWE-200
Information Exposure 		CVE-2020-8832 2024-11-21 14:39 2020-04-10 Show GitHub Exploit DB Packet Storm
197847 6.5 MEDIUM
Local 		linux
canonical
opensuse 		linux_kernel
ubuntu_linux
leap 		KVM in the Linux kernel on Power8 processors has a conflicting use of HSTATE_HOST_R1 to store r1 state in kvmppc_hv_entry plus in kvmppc_{save,restore}_tm, leading to a stack corruption. Because of t… CWE-362
Race Condition 		CVE-2020-8834 2024-11-21 14:39 2020-04-10 Show GitHub Exploit DB Packet Storm
197848 8.8 HIGH
Network 		testlink testlink An unrestricted file upload vulnerability in keywordsImport.php in TestLink 1.9.20 allows remote attackers to execute arbitrary code by uploading a file with an executable extension. This allows an a… CWE-434
 Unrestricted Upload of File with Dangerous Type  		CVE-2020-8639 2024-11-21 14:39 2020-04-4 Show GitHub Exploit DB Packet Storm
197849 9.8 CRITICAL
Network 		testlink testlink A SQL injection vulnerability in TestLink 1.9.20 allows attackers to execute arbitrary SQL commands in planUrgency.php via the urgency parameter. CWE-89
SQL Injection 		CVE-2020-8638 2024-11-21 14:39 2020-04-4 Show GitHub Exploit DB Packet Storm
197850 9.8 CRITICAL
Network 		testlink testlink A SQL injection vulnerability in TestLink 1.9.20 allows attackers to execute arbitrary SQL commands in dragdroptreenodes.php via the node_id parameter. CWE-89
SQL Injection 		CVE-2020-8637 2024-11-21 14:39 2020-04-4 Show GitHub Exploit DB Packet Storm