Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 18, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
225501	2.1	注意	アップル	-	Apple iOS および Apple TV のカーネルにおける ASLR 保護メカニズムを回避される脆弱性	CWE-200 情報漏えい	CVE-2013-0978	2013-03-22 12:28	2013-03-19	Show	GitHub Exploit DB Packet Storm

225502	4.6	警告	アップル	-	Apple iOS および Apple TV の dyld におけるコード署名の要求を回避される脆弱性	CWE-noinfo 情報不足	CVE-2013-0977	2013-03-22 12:27	2013-03-19	Show	GitHub Exploit DB Packet Storm

225503	7.2	危険	IBM	-	UNIX および Linux 上で稼働する IBM InfoSphere Information Server におけるアクセス制限を回避される脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2012-5938	2013-03-22 11:19	2013-03-20	Show	GitHub Exploit DB Packet Storm

225504	4.3	警告	IBM	-	IBM Sterling Order Management におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2013-0506	2013-03-22 11:18	2013-03-18	Show	GitHub Exploit DB Packet Storm

225505	5.5	警告	IBM	-	IBM Sterling Order Management における XPath インジェクション攻撃を実行される脆弱性	CWE-20 CWE-200	CVE-2013-0505	2013-03-22 11:18	2013-03-18	Show	GitHub Exploit DB Packet Storm

225506	4	警告	CloudBees	-	CloudBees Jenkins におけるサービス運用妨害 (DoS) の脆弱性	CWE-20 不適切な入力確認	CVE-2013-0331	2013-03-22 10:18	2013-02-16	Show	GitHub Exploit DB Packet Storm

225507	4	警告	CloudBees	-	CloudBees Jenkins における任意のジョブを作成される脆弱性	CWE-noinfo 情報不足	CVE-2013-0330	2013-03-22 10:17	2013-02-16	Show	GitHub Exploit DB Packet Storm

225508	7.5	危険	CloudBees	-	CloudBees Jenkins における CSRF 保護メカニズムを回避される脆弱性	CWE-noinfo 情報不足	CVE-2013-0329	2013-03-22 10:17	2013-02-16	Show	GitHub Exploit DB Packet Storm

225509	6.8	警告	CloudBees	-	CloudBees Jenkins におけるクロスサイトリクエストフォージェリの脆弱性	CWE-352 同一生成元ポリシー違反	CVE-2013-0327	2013-03-22 10:16	2013-02-16	Show	GitHub Exploit DB Packet Storm

225510	10	危険	Debian	-	latd の llogincircuit.cc におけるスタックベースのバッファオーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2013-0251	2013-03-22 10:15	2013-03-19	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 18, 2026, 4:12 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
197741	6.5	MEDIUM Network	fastify	fastify	A denial of service vulnerability exists in Fastify v2.14.1 and v3.0.0-rc.4 that allows a malicious user to trigger resource exhaustion (when the allErrors option is used) with specially crafted sche…	CWE-400 Uncontrolled Resource Consumption	CVE-2020-8192	2024-11-21 14:38	2020-07-30	Show	GitHub Exploit DB Packet Storm

197742	8.8	HIGH Network	citrix	workspace	Improper access control in Citrix Workspace app for Windows 1912 CU1 and 2006.1 causes privilege escalation and code execution when the automatic updater service is running.	CWE-287 Improper Authentication	CVE-2020-8207	2024-11-21 14:38	2020-07-25	Show	GitHub Exploit DB Packet Storm

197743	5.5	MEDIUM Local	jpeg-js_project	jpeg-js	Uncontrolled resource consumption in `jpeg-js` before 0.4.0 may allow attacker to launch denial of service attacks using specially a crafted JPEG image.	CWE-400 Uncontrolled Resource Consumption	CVE-2020-8175	2024-11-21 14:38	2020-07-25	Show	GitHub Exploit DB Packet Storm

197744	8.1	HIGH Network	nodejs oracle netapp	node.js banking_extensibility_workbench retail_xstore_point_of_service mysql_cluster blockchain_platform snapcenter oncommand_workflow_automation oncommand_insight active_iq_u…	napi_get_value_string_*() allows various kinds of memory corruption in node < 10.21.0, 12.18.0, and < 14.4.0.	CWE-191 Integer Underflow (Wrap or Wraparound)	CVE-2020-8174	2024-11-21 14:38	2020-07-25	Show	GitHub Exploit DB Packet Storm

197745	7.8	HIGH Local	lenovo	drivers_management	An unquoted service path vulnerability was reported in Lenovo Drivers Management prior to version 2.7.1128.1046 that could allow an authenticated user to execute code with elevated privileges.	CWE-428 Unquoted Search Path or Element	CVE-2020-8326	2024-11-21 14:38	2020-07-25	Show	GitHub Exploit DB Packet Storm

197746	7.8	HIGH Local	lenovo	drivers_management	A DLL search path vulnerability was reported in Lenovo Drivers Management prior to version 2.7.1128.1046 that could allow an authenticated user to execute code with elevated privileges.	CWE-426 Untrusted Search Path	CVE-2020-8317	2024-11-21 14:38	2020-07-25	Show	GitHub Exploit DB Packet Storm

197747	7.5	HIGH Network	servey_project	servey	A path traversal vulnerability in servey version < 3 allows an attacker to read content of any arbitrary file.	CWE-22 Path Traversal	CVE-2020-8214	2024-11-21 14:38	2020-07-21	Show	GitHub Exploit DB Packet Storm

197748	8.8	HIGH Network	automattic	canvas	A buffer overflow is present in canvas version <= 1.6.9, which could lead to a Denial of Service or execution of arbitrary code when it processes a user-provided image.	CWE-120 Classic Buffer Overflow	CVE-2020-8215	2024-11-21 14:38	2020-07-21	Show	GitHub Exploit DB Packet Storm

197749	7.5	HIGH Network	transloadit	uppy	The uppy npm package < 1.13.2 and < 2.0.0-alpha.5 is vulnerable to a Server-Side Request Forgery (SSRF) vulnerability, which allows an attacker to scan local or external networks or otherwise interac…	CWE-918 Server-Side Request Forgery (SSRF)	CVE-2020-8205	2024-11-21 14:38	2020-07-21	Show	GitHub Exploit DB Packet Storm

197750	9.8	CRITICAL Network	jison_project	jison	Insufficient input validation in npm package `jison` <= 0.4.18 may lead to OS command injection attacks.	CWE-78 OS Command	CVE-2020-8178	2024-11-21 14:38	2020-07-16	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed