Vulnerability Search Top

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

Vulnerability Information Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 26, 2026, 4:01 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
225461	6.8	警告	IBM	-	UNIX 用の IBM Sterling Connect:Direct におけるファイルシステムの読み取り権限および書き込み権限を回避される脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2013-2989	2013-05-30 16:37	2013-05-14	Show	GitHub Exploit DB Packet Storm

225462	4.3	警告	IBM	-	IBM Tivoli Monitoring の Tivoli Enterprise Portal browser クライアントにおけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2013-0576	2013-05-30 16:36	2013-05-17	Show	GitHub Exploit DB Packet Storm

225463	4.3	警告	IBM	-	IBM WebSphere DataPower SOA アプライアンスにおけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2013-0499	2013-05-30 16:34	2013-05-17	Show	GitHub Exploit DB Packet Storm

225464	7.2	危険	レッドハット	-	Red Hat livecd-tools における権限を取得される脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2013-2069	2013-05-30 14:07	2013-05-23	Show	GitHub Exploit DB Packet Storm

225465	4.9	警告	マイクロソフト	-	Microsoft Windows の win32k.sys の EPATHOBJ::bFlatten 関数におけるサービス運用妨害 (DoS) の脆弱性	CWE-22 パス・トラバーサル	CVE-2013-3661	2013-05-29 16:54	2013-05-17	Show	GitHub Exploit DB Packet Storm

225466	5	警告	IBM	-	IBM InfoSphere Optim Data Growth for Oracle E-Business Suite における重要な情報を取得される脆弱性	CWE-255 証明書・パスワード管理	CVE-2013-2959	2013-05-29 16:37	2013-05-13	Show	GitHub Exploit DB Packet Storm

225467	3.5	注意	IBM	-	IBM InfoSphere Optim Data Growth for Oracle E-Business Suite におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2013-2957	2013-05-29 16:37	2013-05-13	Show	GitHub Exploit DB Packet Storm

225468	7.5	危険	IBM	-	IBM InfoSphere Optim Data Growth for Oracle E-Business Suite における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2013-2956	2013-05-29 16:36	2013-05-13	Show	GitHub Exploit DB Packet Storm

225469	3.5	注意	IBM	-	IBM InfoSphere Optim Data Growth for Oracle E-Business Suite におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2013-2955	2013-05-29 16:35	2013-05-13	Show	GitHub Exploit DB Packet Storm

225470	5	警告	IBM	-	IBM InfoSphere Optim Data Growth for Oracle E-Business Suite におけるアクセス権を取得される脆弱性	CWE-287 不適切な認証	CVE-2013-2954	2013-05-29 16:35	2013-05-13	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 26, 2026, 4:05 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
212031	5.3	MEDIUM Network	powerdns	recursor	In PowerDNS Recursor versions up to and including 4.3.1, 4.2.2 and 4.1.16, the ACL restricting access to the internal web server is not properly enforced.	CWE-863 Incorrect Authorization	CVE-2020-14196	2024-11-21 14:02	2020-07-2	Show	GitHub Exploit DB Packet Storm

212032	9.8	CRITICAL Network	monstaftp	monsta_ftp	Monsta FTP 2.10.1 or below allows external control of paths used in filesystem operations. This allows attackers to read and write arbitrary local files, allowing an attacker to gain remote code exec…	CWE-610 Externally Controlled Reference to a Resource in Another Sphere	CVE-2020-14057	2024-11-21 14:02	2020-07-2	Show	GitHub Exploit DB Packet Storm

212033	9.8	CRITICAL Network	monstaftp	monsta_ftp	Monsta FTP 2.10.1 or below is prone to a server-side request forgery vulnerability due to insufficient restriction of the web fetch functionality. This allows attackers to read arbitrary local files …	CWE-918 Server-Side Request Forgery (SSRF)	CVE-2020-14056	2024-11-21 14:02	2020-07-2	Show	GitHub Exploit DB Packet Storm

212034	6.1	MEDIUM Network	monstaftp	monsta_ftp	Monsta FTP 2.10.1 or below is prone to a stored cross-site scripting vulnerability in the language setting due to insufficient output encoding.	CWE-79 Cross-site Scripting	CVE-2020-14055	2024-11-21 14:02	2020-07-2	Show	GitHub Exploit DB Packet Storm

212035	6.1	MEDIUM Network	atlassian	jira jira_software_data_center	The quick search component in Atlassian Jira Server and Data Center before 8.9.1 allows remote attackers to inject arbitrary HTML or JavaScript via a Cross-Site Scripting (XSS) vulnerability	CWE-79 Cross-site Scripting	CVE-2020-14169	2024-11-21 14:02	2020-07-1	Show	GitHub Exploit DB Packet Storm

212036	5.9	MEDIUM Network	atlassian	jira jira_software_data_center jira_server jira_data_center	The email client in Jira Server and Data Center before version 7.13.16, from 8.5.0 before 8.5.7, from 8.8.0 before 8.8.2, and from 8.9.0 before 8.9.1 allows remote attackers to access outgoing emails…	NVD-CWE-noinfo	CVE-2020-14168	2024-11-21 14:02	2020-07-1	Show	GitHub Exploit DB Packet Storm

212037	7.5	HIGH Network	atlassian	jira jira_software_data_center jira_server jira_data_center	The MessageBundleResource resource in Jira Server and Data Center before version 7.13.4, from 8.5.0 before 8.5.5, from 8.8.0 before 8.8.2, and from 8.9.0 before 8.9.1 allows remote attackers to impac…	NVD-CWE-noinfo	CVE-2020-14167	2024-11-21 14:02	2020-07-1	Show	GitHub Exploit DB Packet Storm

212038	4.8	MEDIUM Network	atlassian	jira_service_desk	The /servicedesk/customer/portals resource in Jira Service Desk Server and Data Center before version 4.10.0 allows remote attackers with project administrator privileges to inject arbitrary HTML or …	CWE-79 Cross-site Scripting	CVE-2020-14166	2024-11-21 14:02	2020-07-1	Show	GitHub Exploit DB Packet Storm

212039	5.3	MEDIUM Network	atlassian	jira jira_software_data_center	The UniversalAvatarResource.getAvatars resource in Jira Server and Data Center before version 8.9.0 allows remote attackers to obtain information about custom project avatars names via an Improper au…	NVD-CWE-noinfo	CVE-2020-14165	2024-11-21 14:02	2020-07-1	Show	GitHub Exploit DB Packet Storm

212040	6.1	MEDIUM Network	atlassian	jira jira_software_data_center	The WYSIWYG editor resource in Jira Server and Data Center before version 8.8.2 allows remote attackers to inject arbitrary HTML or JavaScript names via an Cross Site Scripting (XSS) vulnerability by…	CWE-79 Cross-site Scripting	CVE-2020-14164	2024-11-21 14:02	2020-07-1	Show	GitHub Exploit DB Packet Storm