Vulnerability Search Top

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

Vulnerability Information Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":June 1, 2026, 10 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
225381	4.3	警告	IBM	-	IBM Sterling B2B Integrator および Sterling File Gateway におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2013-0455	2013-07-3 15:56	2013-06-6	Show	GitHub Exploit DB Packet Storm

225382	4.3	警告	シスコシステムズ	-	Cisco TelePresence TC ソフトウェアの SIP の実装における意図しない NOTIFY メッセージの使用を誘発される脆弱性	CWE-noinfo 情報不足	CVE-2013-3401	2013-07-3 15:48	2013-07-1	Show	GitHub Exploit DB Packet Storm

225383	6.6	警告	シスコシステムズ	-	Cisco Desktop Collaboration Experience DX650 の不特定の Android API におけるバッファオーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2013-3399	2013-07-3 15:45	2013-07-1	Show	GitHub Exploit DB Packet Storm

225384	6.8	警告	シスコシステムズ	-	複数の Cisco セキュリティアプライアンスの Web フレームワークにおけるクロスサイトリクエストフォージェリの脆弱性	CWE-352 同一生成元ポリシー違反	CVE-2013-3395	2013-07-3 15:36	2013-07-1	Show	GitHub Exploit DB Packet Storm

225385	5.8	警告	Atlassian	-	Atlassian Crowd における任意のファイルを読まれる脆弱性	CWE-20 不適切な入力確認	CVE-2013-3925	2013-07-3 15:16	2013-06-19	Show	GitHub Exploit DB Packet Storm

225386	6.8	警告	Services project	-	Drupal 用 Services モジュールにおけるクロスサイトリクエストフォージェリの脆弱性	CWE-352 同一生成元ポリシー違反	CVE-2013-2158	2013-07-3 14:56	2013-06-5	Show	GitHub Exploit DB Packet Storm

225387	6.9	警告	FreeBSD	-	FreeBSD のカーネルにおけるファイルシステムの書き込み権限を回避される脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2013-2171	2013-07-3 13:55	2013-06-18	Show	GitHub Exploit DB Packet Storm

225388	10	危険	Digital Alert Systems Monroe Electronics	-	Digital Alert Systems DASDEC EAS および Monroe Electronics R189 One-Net EAS におけるアクセス権を取得される脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2013-4735	2013-07-2 16:52	2013-04-24	Show	GitHub Exploit DB Packet Storm

225389	7.5	危険	Digital Alert Systems Monroe Electronics	-	Digital Alert Systems DASDEC EAS および Monroe Electronics R189 One-Net EAS における非管理者アクセス権を取得される脆弱性	CWE-noinfo 情報不足	CVE-2013-4734	2013-07-2 16:50	2013-04-24	Show	GitHub Exploit DB Packet Storm

225390	7.8	危険	Digital Alert Systems Monroe Electronics	-	Digital Alert Systems DASDEC EAS および Monroe Electronics R189 One-Net EAS における重要な情報を取得される脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2013-4733	2013-07-2 16:49	2013-04-24	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:June 1, 2026, 4:12 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
212341	7.5	HIGH Network	arista	eos	Arista EOS before 4.21.12M, 4.22.x before 4.22.7M, 4.23.x before 4.23.5M, and 4.24.x before 4.24.2F allows remote attackers to cause a denial of service (restart of agents) by crafting a malformed DH…	NVD-CWE-noinfo	CVE-2020-17355	2024-11-21 14:07	2020-10-22	Show	GitHub Exploit DB Packet Storm

212342	7.3	HIGH Local	ghisler	total_commander	An issue was discovered in Ghisler Total Commander 9.51. Due to insufficient access restrictions in the default installation directory, an attacker can elevate privileges by replacing the %SYSTEMDRIV…	CWE-276 Incorrect Default Permissions	CVE-2020-17381	2024-11-21 14:07	2020-10-22	Show	GitHub Exploit DB Packet Storm

212343	6.1	MEDIUM Network	ge	s2020_firmware s2024_firmware	The affected Reason S20 Ethernet Switch is vulnerable to cross-site scripting (XSS), which may allow attackers to trick users into following a link or navigating to a page that posts a malicious Java…	-	CVE-2020-16246	2024-11-21 14:07	2020-10-21	Show	GitHub Exploit DB Packet Storm

212344	7.8	HIGH Local	microsoft	windows_10	<p>A remote code execution vulnerability exists in the way that Microsoft Windows Codecs Library handles objects in memory. An attacker who successfully exploited the vulnerability could execute arbi…	NVD-CWE-noinfo	CVE-2020-17022	2024-11-21 14:07	2020-10-17	Show	GitHub Exploit DB Packet Storm

212345	7.8	HIGH Local	microsoft	3d_viewer	<p>A remote code execution vulnerability exists when the Base3D rendering engine improperly handles memory.</p> <p>An attacker who successfully exploited the vulnerability would gain execution on a v…	NVD-CWE-noinfo	CVE-2020-17003	2024-11-21 14:07	2020-10-17	Show	GitHub Exploit DB Packet Storm

212346	4.7	MEDIUM Local	microsoft	.net_framework	<p>An information disclosure vulnerability exists when the .NET Framework improperly handles objects in memory. An attacker who successfully exploited the vulnerability could disclose contents of an …	NVD-CWE-noinfo	CVE-2020-16937	2024-11-21 14:07	2020-10-17	Show	GitHub Exploit DB Packet Storm

212347	7.8	HIGH Local	microsoft	365_apps 3d_viewer	<p>A remote code execution vulnerability exists when the Base3D rendering engine improperly handles memory.</p> <p>An attacker who successfully exploited the vulnerability would gain execution on a v…	NVD-CWE-noinfo	CVE-2020-16918	2024-11-21 14:07	2020-10-17	Show	GitHub Exploit DB Packet Storm

212348	5.3	MEDIUM Network	microsoft	azure_functions	<p>An elevation of privilege vulnerability exists in the way Azure Functions validate access keys.</p> <p>An unauthenticated attacker who successfully exploited this vulnerability could invoke an HTT…	CWE-863 Incorrect Authorization	CVE-2020-16904	2024-11-21 14:07	2020-10-17	Show	GitHub Exploit DB Packet Storm

212349	5.0	MEDIUM Local	microsoft	windows_server_2016 windows_10	<p>An information disclosure vulnerability exists when the Windows kernel improperly initializes objects in memory.</p> <p>To exploit this vulnerability, an authenticated attacker could run a special…	CWE-665 Improper Initialization	CVE-2020-16901	2024-11-21 14:07	2020-10-17	Show	GitHub Exploit DB Packet Storm

212350	7.8	HIGH Local	microsoft	visual_studio_code	<p>A remote code execution vulnerability exists in Visual Studio Code when a user is tricked into opening a malicious 'package.json' file. An attacker who successfully exploited the vulnerability cou…	NVD-CWE-noinfo	CVE-2020-17023	2024-11-21 14:07	2020-10-17	Show	GitHub Exploit DB Packet Storm