Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 19, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
225461	6.1	警告	シーメンス	-	SIMATIC PCS7 および他の製品で使用される Siemens WinCC におけるバッファオーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2013-0675	2013-03-25 19:01	2013-03-15	Show	GitHub Exploit DB Packet Storm

225462	6.8	警告	シーメンス	-	SIMATIC PCS7 および他の製品で使用される Siemens WinCC におけるバッファオーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2013-0674	2013-03-25 19:00	2013-03-15	Show	GitHub Exploit DB Packet Storm

225463	3.5	注意	シーメンス	-	Siemens WinCC の HMI Web アプリケーションにおけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2013-0672	2013-03-25 18:58	2013-03-15	Show	GitHub Exploit DB Packet Storm

225464	4	警告	シーメンス	-	Siemens WinCC におけるディレクトリトラバーサルの脆弱性	CWE-22 パス・トラバーサル	CVE-2013-0671	2013-03-25 18:54	2013-03-15	Show	GitHub Exploit DB Packet Storm

225465	4.3	警告	シーメンス	-	Siemens WinCC の HMI Web アプリケーションにおける CRLF インジェクションの脆弱性	CWE-20 不適切な入力確認	CVE-2013-0670	2013-03-25 18:52	2013-03-15	Show	GitHub Exploit DB Packet Storm

225466	4	警告	シーメンス	-	Siemens WinCC の HMI Web アプリケーションにおけるサービス運用妨害 (デーモンクラッシュ) の脆弱性	CWE-20 不適切な入力確認	CVE-2013-0669	2013-03-25 18:52	2013-03-15	Show	GitHub Exploit DB Packet Storm

225467	4.3	警告	シーメンス	-	Siemens WinCC の HMI Web アプリケーションにおけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2013-0668	2013-03-25 18:49	2013-03-15	Show	GitHub Exploit DB Packet Storm

225468	5	警告	MailUp	-	WordPress 用 MailUp プラグインにおけるプラグインの設定を変更される脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2013-2640	2013-03-25 16:43	2013-03-15	Show	GitHub Exploit DB Packet Storm

225469	5	警告	MailUp	-	WordPress 用 MailUp プラグインにおけるプラグインの設定を変更される脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2013-0731	2013-03-25 16:41	2013-03-15	Show	GitHub Exploit DB Packet Storm

225470	5	警告	Piwik	-	Piwik における重要な情報を取得される脆弱性	CWE-20 不適切な入力確認	CVE-2013-2633	2013-03-25 16:35	2013-03-8	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 19, 2026, 4:16 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
212041	5.3	MEDIUM Network	fanuc	series_30i_firmware series_31i_firmware series_32i-b_plus_firmware series_35i-b_firmware power_motion_i-model_a_firmware series_0i-model_f_plus_firmware series_0i-model_f_firmware	A denial-of-service vulnerability in the Fanuc i Series CNC (0i-MD and 0i Mate-MD) could allow an unauthenticated, remote attacker to cause an affected CNC to become inaccessible to other devices.	CWE-400 Uncontrolled Resource Consumption	CVE-2020-12739	2024-11-21 14:00	2020-08-4	Show	GitHub Exploit DB Packet Storm

212042	7.5	HIGH Network	cherokee-project	cherokee	Cherokee 0.4.27 to 1.2.104 is affected by a denial of service due to a NULL pointer dereferences. A remote unauthenticated attacker can crash the server by sending an HTTP request to protected resour…	CWE-476 NULL Pointer Dereference	CVE-2020-12845	2024-11-21 14:00	2020-07-28	Show	GitHub Exploit DB Packet Storm

212043	5.5	MEDIUM Local	pulsesecure ivanti	pulse_connect_secure connect_secure pulse_policy_secure policy_secure	An issue was discovered in Pulse Policy Secure (PPS) and Pulse Connect Secure (PCS) Virtual Appliance before 9.1R8. By manipulating a certain kernel boot parameter, it can be tricked into dropping in…	NVD-CWE-noinfo	CVE-2020-12880	2024-11-21 14:00	2020-07-28	Show	GitHub Exploit DB Packet Storm

212044	9.8	CRITICAL Network	fortinet	fortios	An improper authentication vulnerability in SSL VPN in FortiOS 6.4.0, 6.2.0 to 6.2.3, 6.0.9 and below may result in a user being able to log in successfully without being prompted for the second fact…	CWE-287 CWE-178 Improper Authentication Improper Handling of Case Sensitivity	CVE-2020-12812	2024-11-21 14:00	2020-07-25	Show	GitHub Exploit DB Packet Storm

212045	6.7	MEDIUM Local	dlink	dsl-7740c_firmware	D-Link DSL-7740C does not properly validate user input, which allows an authenticated LAN user to inject arbitrary command.	CWE-78 OS Command	CVE-2020-12774	2024-11-21 14:00	2020-07-22	Show	GitHub Exploit DB Packet Storm

212046	8.8	HIGH Network	seczetta	neprofile	A remote code execution vulnerability was identified in SecZetta NEProfile 3.3.11. Authenticated remote adversaries can invoke code execution upon uploading a carefully crafted JPEG file as part of t…	CWE-434 Unrestricted Upload of File with Dangerous Type	CVE-2020-12854	2024-11-21 14:00	2020-07-16	Show	GitHub Exploit DB Packet Storm

212047	9.8	CRITICAL Network	inetsoftware	i-net_clear_reports	XXE injection can occur in i-net Clear Reports 2019 19.0.287 (Designer), as used in i-net HelpDesk and other products, when XML input containing a reference to an external entity is processed by a we…	CWE-611 XXE	CVE-2020-12684	2024-11-21 14:00	2020-07-16	Show	GitHub Exploit DB Packet Storm

212048	4.6	MEDIUM Physics	yubico	libykpiv piv_tool_manager yubikey_smart_card_minidriver	An issue was discovered in Yubico libykpiv before 2.1.0. An attacker can trigger an incorrect free() in the ykpiv_util_generate_key() function in lib/util.c through incorrect error handling code. Thi…	CWE-763 Release of Invalid Pointer or Reference	CVE-2020-13132	2024-11-21 14:00	2020-07-10	Show	GitHub Exploit DB Packet Storm

212049	4.3	MEDIUM Physics	yubico	libykpiv piv_tool_manager yubikey_smart_card_minidriver	An issue was discovered in Yubico libykpiv before 2.1.0. lib/util.c in this library (which is included in yubico-piv-tool) does not properly check embedded length fields during device communication. …	CWE-125 Out-of-bounds Read	CVE-2020-13131	2024-11-21 14:00	2020-07-10	Show	GitHub Exploit DB Packet Storm

212050	9.8	CRITICAL Network	protocol	gossipsub	Gossipsub 1.0 does not properly resist invalid message spam, such as an eclipse attack or a sybil attack.	NVD-CWE-noinfo	CVE-2020-12821	2024-11-21 14:00	2020-07-8	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed