Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 28, 2026, 4:09 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
225541 9.3 危険 マイクロソフト - Microsoft Internet Explorer 6 から 10 における任意のコードを実行される脆弱性 CWE-119
バッファエラー 		CVE-2013-3139 2013-06-13 16:29 2013-06-11 Show GitHub Exploit DB Packet Storm
225542 9.3 危険 マイクロソフト - Microsoft Internet Explorer 9 における任意のコードを実行される脆弱性 CWE-119
バッファエラー 		CVE-2013-3122 2013-06-13 16:25 2013-06-11 Show GitHub Exploit DB Packet Storm
225543 4.3 警告 Mozilla Foundation - Android 上の Mozilla Firefox における Firefox のアドオンを変更される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2013-0798 2013-06-13 15:33 2013-04-2 Show GitHub Exploit DB Packet Storm
225544 6.8 警告 アップル - Apple Mac OS X の IOAcceleratorFamily における任意のコードを実行される脆弱性 CWE-119
バッファエラー 		CVE-2013-0976 2013-06-13 15:06 2013-03-15 Show GitHub Exploit DB Packet Storm
225545 10 危険 Mozilla Foundation - Android 上で稼働する Mozilla Firefox のブラウザエンジンにおけるサービス運用妨害 (DoS) の脆弱性 CWE-noinfo
情報不足 		CVE-2013-0790 2013-06-13 14:57 2013-04-2 Show GitHub Exploit DB Packet Storm
225546 6.2 警告 Linux - Linux Kernel の arch/x86/kernel/msr.c におけるケイパビリティの制限を回避される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2013-0268 2013-06-12 17:43 2013-02-3 Show GitHub Exploit DB Packet Storm
225547 4.3 警告 Dave Thomas
Ruby-lang.org		 - Ruby で使用される RDoc の darkfish.js におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2013-0256 2013-06-12 17:40 2013-02-6 Show GitHub Exploit DB Packet Storm
225548 10 危険 オラクル - Oracle Java SE の JavaFX における脆弱性 CWE-noinfo
情報不足 		CVE-2013-0439 2013-06-12 17:28 2013-02-1 Show GitHub Exploit DB Packet Storm
225549 5 警告 Apache Software Foundation - Apache CXF における認証を回避される脆弱性 CWE-287
不適切な認証 		CVE-2013-0239 2013-06-12 16:56 2013-01-25 Show GitHub Exploit DB Packet Storm
225550 1.9 注意 Linux - Linux Kernel の net/bluetooth/hidp/core.c における重要な情報を取得される脆弱性 CWE-200
情報漏えい 		CVE-2013-0349 2013-06-12 16:42 2013-02-3 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 28, 2026, 4:16 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
210841 6.1 MEDIUM
Network 		synacor zimbra_collaboration_suite A reflected cross-site scripting (XSS) vulnerability in the zimbraAdmin/public/secureRequest.jsp component of Zimbra Collaboration 8.8.12 allows unauthenticated attackers to execute arbitrary web scr… CWE-79
Cross-site Scripting 		CVE-2020-18984 2024-11-21 14:08 2021-12-16 Show GitHub Exploit DB Packet Storm
210842 6.1 MEDIUM
Network 		zzcms zzcms Cross Site Scripting (XSS) vulnerability exists in zzcms 2019 XSS via a modify action in user/adv.php. CWE-79
Cross-site Scripting 		CVE-2020-19042 2024-11-21 14:08 2021-12-14 Show GitHub Exploit DB Packet Storm
210843 7.5 HIGH
Network 		php-cms_project php-cms PHP-CMS v1.0 was discovered to contain a SQL injection vulnerability in the component search.php via the search parameter. This vulnerability allows attackers to access sensitive database information. CWE-89
SQL Injection 		CVE-2020-18263 2024-11-21 14:08 2021-11-4 Show GitHub Exploit DB Packet Storm
210844 9.8 CRITICAL
Network 		ed01-cms_project ed01-cms ED01-CMS v1.0 was discovered to contain a SQL injection in the component cposts.php via the cid parameter. CWE-89
SQL Injection 		CVE-2020-18262 2024-11-21 14:08 2021-11-4 Show GitHub Exploit DB Packet Storm
210845 9.8 CRITICAL
Network 		ed01-cms_project ed01-cms An arbitrary file upload vulnerability in the image upload function of ED01-CMS v1.0 allows attackers to execute arbitrary commands. CWE-434
 Unrestricted Upload of File with Dangerous Type  		CVE-2020-18261 2024-11-21 14:08 2021-11-4 Show GitHub Exploit DB Packet Storm
210846 6.1 MEDIUM
Network 		ed01-cms_project ed01-cms ED01-CMS v1.0 was discovered to contain a reflective cross-site scripting (XSS) vulnerability in the component sposts.php. This vulnerability allows attackers to execute arbitrary web scripts or HTML… CWE-79
Cross-site Scripting 		CVE-2020-18259 2024-11-21 14:08 2021-11-4 Show GitHub Exploit DB Packet Storm
210847 9.8 CRITICAL
Network 		phpok phpok Buffer overflow vulnerability in framework/init.php in qinggan phpok 5.1, allows attackers to execute arbitrary code. CWE-120
Classic Buffer Overflow 		CVE-2020-18440 2024-11-21 14:08 2021-11-3 Show GitHub Exploit DB Packet Storm
210848 9.1 CRITICAL
Network 		phpok phpok An issue was discoverered in in function edit_save_f in framework/admin/tpl_control.php in qinggan phpok 5.1, allows attackers to write arbitrary files or get a shell. NVD-CWE-noinfo
CVE-2020-18439 2024-11-21 14:08 2021-11-3 Show GitHub Exploit DB Packet Storm
210849 7.5 HIGH
Network 		phpok phpok Directory traversal vulnerability in qinggan phpok 5.1, allows attackers to disclose sensitive information, via the title parameter to admin.php. CWE-22
Path Traversal 		CVE-2020-18438 2024-11-21 14:08 2021-11-3 Show GitHub Exploit DB Packet Storm
210850 5.3 MEDIUM
Network 		liftoffsoftware gate_one An issue in Gate One 1.2.0 allows attackers to bypass to the verification check done by the origins list and connect to Gate One instances used by hosts not on the origins list. CWE-290
 Authentication Bypass by Spoofing 		CVE-2020-19003 2024-11-21 14:08 2021-10-6 Show GitHub Exploit DB Packet Storm