Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 15, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
225521 6.8 警告 Moodle - Moodle の messaging システムにおけるクロスサイトリクエストフォージェリの脆弱性 CWE-352
同一生成元ポリシー違反 		CVE-2012-6103 2013-01-29 16:53 2013-01-21 Show GitHub Exploit DB Packet Storm
225522 6.4 警告 Moodle - Moodle における任意のユーザのサブミッションコメントを読まれるまたは改ざんされる脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2012-6102 2013-01-29 16:53 2013-01-21 Show GitHub Exploit DB Packet Storm
225523 4.3 警告 Moodle - Moodle におけるオープンリダイレクトの脆弱性 CWE-20
不適切な入力確認 		CVE-2012-6101 2013-01-29 16:52 2013-01-21 Show GitHub Exploit DB Packet Storm
225524 4 警告 Moodle - Moodle の report/outline/index.php における隠し最終アクセス値を見つけられる脆弱性 CWE-200
情報漏えい 		CVE-2012-6100 2013-01-29 16:52 2013-01-21 Show GitHub Exploit DB Packet Storm
225525 4 警告 Moodle - Moodle の backup/converter/moodle1/lib.php における任意のファイルを読まれる脆弱性 CWE-200
情報漏えい 		CVE-2012-6099 2013-01-29 16:51 2013-01-21 Show GitHub Exploit DB Packet Storm
225526 4 警告 Moodle - Moodle におけるカスタム結果を標準のサイト全体の成果に変換される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2012-6098 2013-01-29 16:51 2013-01-21 Show GitHub Exploit DB Packet Storm
225527 5 警告 General Electric Company - GE Intelligent Platforms Proficy Real-Time Information Portal におけるユーザ名のリストを取得される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2013-0652 2013-01-29 16:49 2013-01-22 Show GitHub Exploit DB Packet Storm
225528 5 警告 General Electric Company - GE Intelligent Platforms Proficy Real-Time Information Portal における設定ファイルを読まれる脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2013-0651 2013-01-29 16:48 2013-01-22 Show GitHub Exploit DB Packet Storm
225529 6.8 警告 レッドハット - FreeIPA のクライアントにおけるドメイン参加の処理を偽装される脆弱性 CWE-310
暗号の問題 		CVE-2012-5484 2013-01-29 16:48 2013-01-23 Show GitHub Exploit DB Packet Storm
225530 5 警告 トリップアドバイザー - TripAdvisor for iOS における重要な情報を取得される脆弱性 CWE-310
暗号の問題 		CVE-2012-4917 2013-01-29 16:47 2013-01-26 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 15, 2026, 4:28 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
199481 5.9 MEDIUM
Network 		pivotal reactor_netty The HttpClient from Reactor Netty, versions 0.9.x prior to 0.9.5, and versions 0.8.x prior to 0.8.16, may be used incorrectly, leading to a credentials leak during a redirect to a different domain. I… CWE-522
 Insufficiently Protected Credentials 		CVE-2020-5404 2024-11-21 14:34 2020-03-4 Show GitHub Exploit DB Packet Storm
199482 6.5 MEDIUM
Network 		grandit grandit GRANDIT Ver.1.6, Ver.2.0, Ver.2.1, Ver.2.2, Ver.2.3, and Ver.3.0 do not properly manage sessions, which allows remote attackers to impersonate an arbitrary user and then alter or disclose the informa… CWE-639
 Authorization Bypass Through User-Controlled Key 		CVE-2020-5539 2024-11-21 14:34 2020-03-2 Show GitHub Exploit DB Packet Storm
199483 8.8 HIGH
Network 		cloudfoundry cf-deployment
user_account_and_authentication 		In Cloud Foundry UAA, versions prior to 74.14.0, a CSRF vulnerability exists due to the OAuth2 state parameter not being checked in the callback function when authenticating with external identity pr… CWE-352
 Origin Validation Error 		CVE-2020-5402 2024-11-21 14:34 2020-02-28 Show GitHub Exploit DB Packet Storm
199484 5.3 MEDIUM
Network 		cloudfoundry routing_release Cloud Foundry Routing Release, versions prior to 0.197.0, contains GoRouter, which allows malicious clients to send invalid headers, causing caching layers to reject subsequent legitimate clients try… CWE-444
HTTP Request Smuggling 		CVE-2020-5401 2024-11-21 14:34 2020-02-28 Show GitHub Exploit DB Packet Storm
199485 6.5 MEDIUM
Network 		cloudfoundry cf-deployment
capi-release 		Cloud Foundry Cloud Controller (CAPI), versions prior to 1.91.0, logs properties of background jobs when they are run, which may include sensitive information such as credentials if provided to the j… CWE-532
 Inclusion of Sensitive Information in Log Files 		CVE-2020-5400 2024-11-21 14:34 2020-02-28 Show GitHub Exploit DB Packet Storm
199486 8.8 HIGH
Adjacent 		nec aterm_wg2600hs_firmware
aterm_wf1200c_firmware
aterm_wg1200cr_firmware 		Aterm series (Aterm WF1200C firmware Ver1.2.1 and earlier, Aterm WG1200CR firmware Ver1.2.1 and earlier, Aterm WG2600HS firmware Ver1.3.2 and earlier) allows an attacker on the same network segment t… CWE-78
OS Command  		CVE-2020-5524 2024-11-21 14:34 2020-02-21 Show GitHub Exploit DB Packet Storm
199487 8.0 HIGH
Adjacent 		nec aterm_wg2600hs_firmware Aterm WG2600HS firmware Ver1.3.2 and earlier allows an authenticated attacker on the same network segment to execute arbitrary OS commands with root privileges via unspecified vectors. CWE-78
OS Command  		CVE-2020-5534 2024-11-21 14:34 2020-02-21 Show GitHub Exploit DB Packet Storm
199488 6.1 MEDIUM
Network 		nec aterm_wg2600hs_firmware Cross-site scripting vulnerability in Aterm WG2600HS firmware Ver1.3.2 and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. CWE-79
Cross-site Scripting 		CVE-2020-5533 2024-11-21 14:34 2020-02-21 Show GitHub Exploit DB Packet Storm
199489 8.0 HIGH
Adjacent 		nec aterm_wg2600hs_firmware
aterm_wf1200c_firmware
aterm_wg1200cr_firmware 		Aterm series (Aterm WF1200C firmware Ver1.2.1 and earlier, Aterm WG1200CR firmware Ver1.2.1 and earlier, Aterm WG2600HS firmware Ver1.3.2 and earlier) allows an authenticated attacker on the same net… CWE-78
OS Command  		CVE-2020-5525 2024-11-21 14:34 2020-02-21 Show GitHub Exploit DB Packet Storm
199490 8.8 HIGH
Network 		realestateconnected easy_property_listings Cross-site request forgery (CSRF) vulnerability in Easy Property Listings versions prior to 3.4 allows remote attackers to hijack the authentication of administrators via unspecified vectors. CWE-352
 Origin Validation Error 		CVE-2020-5530 2024-11-21 14:34 2020-02-18 Show GitHub Exploit DB Packet Storm