Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 18, 2026, 6 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
225471 4.3 警告 Piwik - Piwik におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2013-1844 2013-03-25 16:34 2013-03-8 Show GitHub Exploit DB Packet Storm
225472 7.2 危険 Canonical - Ubuntu で使用される pam-xdg-support における権限を取得される脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2013-1052 2013-03-25 16:21 2013-03-18 Show GitHub Exploit DB Packet Storm
225473 4.3 警告 Debian
Canonical
- apt におけるパッケージを変更される脆弱性 CWE-20
不適切な入力確認
CVE-2013-1051 2013-03-25 16:20 2013-03-14 Show GitHub Exploit DB Packet Storm
225474 6.8 警告 Google - Google Chrome で使用される Google V8 におけるサービス運用妨害 (DoS) の脆弱性 CWE-DesignError
CVE-2013-2632 2013-03-25 16:04 2013-03-18 Show GitHub Exploit DB Packet Storm
225475 6.9 警告 XFree86 Project - XFree86 x11perf の x11perfcomp における権限を取得される脆弱性 CWE-Other
その他
CVE-2011-2504 2013-03-25 16:02 2011-07-27 Show GitHub Exploit DB Packet Storm
225476 5.8 警告 Apache Software Foundation - Apache CXF の URIMappingInterceptor における SOAP サービスへのアクセス権を取得される脆弱性 - CVE-2012-5633 2013-03-25 16:00 2012-11-14 Show GitHub Exploit DB Packet Storm
225477 7.5 危険 tg0 - Ruby 用 Curl Gem における任意のコマンドを実行される脆弱性 CWE-94
コード・インジェクション
CVE-2013-2617 2013-03-25 14:21 2013-03-12 Show GitHub Exploit DB Packet Storm
225478 7.5 危険 Hampton Catlin - Ruby 用 MiniMagick Gem における任意のコマンドを実行される脆弱性 CWE-94
コード・インジェクション
CVE-2013-2616 2013-03-25 14:20 2013-03-12 Show GitHub Exploit DB Packet Storm
225479 7.5 危険 Daniel Choi - Ruby 用 fastreader Gem における任意のコマンドを実行される脆弱性 CWE-94
コード・インジェクション
CVE-2013-2615 2013-03-25 14:20 2013-03-12 Show GitHub Exploit DB Packet Storm
225480 7.5 危険 Stefaan Colman - Ruby 用 command_wrap Gem における任意のコマンドを実行される脆弱性 CWE-94
コード・インジェクション
CVE-2013-1875 2013-03-25 14:19 2013-03-18 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 18, 2026, 4:12 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
197691 7.8 HIGH
Local
nodejs
opensuse
fedoraproject
node.js
leap
fedora
The implementation of realpath in libuv < 10.22.1, < 12.18.4, and < 14.9.0 used within Node.js incorrectly determined the buffer size which can result in a buffer overflow if the resolved path is lon… CWE-120
Classic Buffer Overflow
CVE-2020-8252 2024-11-21 14:38 2020-09-19 Show GitHub Exploit DB Packet Storm
197692 7.5 HIGH
Network
nodejs
fedoraproject
node.js
fedora
Node.js < 14.11.0 is vulnerable to HTTP denial of service (DoS) attacks based on delayed requests submission which can make the server unable to accept new connections. CWE-400
 Uncontrolled Resource Consumption
CVE-2020-8251 2024-11-21 14:38 2020-09-19 Show GitHub Exploit DB Packet Storm
197693 8.8 HIGH
Network
citrix application_delivery_controller_firmware
gateway
netscaler_gateway
sd-wan_wanop
Citrix ADC and Citrix Gateway 13.0 before 13.0-64.35, Citrix ADC and NetScaler Gateway 12.1 before 12.1-58.15, Citrix ADC 12.1-FIPS before 12.1-55.187, Citrix ADC and NetScaler Gateway 12.0, Citrix A… CWE-269
 Improper Privilege Management
CVE-2020-8247 2024-11-21 14:38 2020-09-19 Show GitHub Exploit DB Packet Storm
197694 7.5 HIGH
Network
citrix application_delivery_controller_firmware
gateway
netscaler_gateway
sd-wan_wanop
Citrix ADC and Citrix Gateway 13.0 before 13.0-64.35, Citrix ADC and NetScaler Gateway 12.1 before 12.1-58.15, Citrix ADC 12.1-FIPS before 12.1-55.187, Citrix ADC and NetScaler Gateway 12.0, Citrix A… CWE-400
 Uncontrolled Resource Consumption
CVE-2020-8246 2024-11-21 14:38 2020-09-19 Show GitHub Exploit DB Packet Storm
197695 7.5 HIGH
Network
json-bigint_project json-bigint Prototype pollution in json-bigint npm package < 1.0.0 may lead to a denial-of-service (DoS) attack. CWE-400
 Uncontrolled Resource Consumption
CVE-2020-8237 2024-11-21 14:38 2020-09-19 Show GitHub Exploit DB Packet Storm
197696 7.5 HIGH
Network
nextcloud desktop A cleartext storage of sensitive information in Nextcloud Desktop Client 2.6.4 gave away information about used proxies and their authentication credentials. CWE-312
 Cleartext Storage of Sensitive Information
CVE-2020-8225 2024-11-21 14:38 2020-09-19 Show GitHub Exploit DB Packet Storm
197697 7.4 HIGH
Network
nodejs
opensuse
fedoraproject
node.js
leap
fedora
Node.js < 12.18.4 and < 14.11 can be exploited to perform HTTP desync attacks and deliver malicious payloads to unsuspecting users. The payloads can be crafted by an attacker to hijack user sessions,… CWE-444
HTTP Request Smuggling
CVE-2020-8201 2024-11-21 14:38 2020-09-19 Show GitHub Exploit DB Packet Storm
197698 6.5 MEDIUM
Network
citrix storefront_server Improper authentication in Citrix StoreFront Server < 1912.0.1000 allows an attacker who is authenticated on the same Microsoft Active Directory domain as a Citrix StoreFront server to read arbitrary… CWE-287
Improper Authentication
CVE-2020-8200 2024-11-21 14:38 2020-09-19 Show GitHub Exploit DB Packet Storm
197699 6.1 MEDIUM
Network
citrix application_delivery_controller_firmware
gateway
netscaler_gateway
Improper Input Validation on Citrix ADC and Citrix Gateway 13.0 before 13.0-64.35, Citrix ADC and NetScaler Gateway 12.1 before 12.1-58.15, Citrix ADC 12.1-FIPS before 12.1-55.187, Citrix ADC and Net… CWE-79
Cross-site Scripting
CVE-2020-8245 2024-11-21 14:38 2020-09-19 Show GitHub Exploit DB Packet Storm
197700 9.8 CRITICAL
Network
typeorm typeorm Prototype pollution vulnerability in the TypeORM package < 0.2.25 may allow attackers to add or modify Object properties leading to further denial of service or SQL injection attacks. CWE-1321
 Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution')
CVE-2020-8158 2024-11-21 14:38 2020-09-19 Show GitHub Exploit DB Packet Storm