Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 5, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
225571 10 危険 日本電気
Portable SDK for UPnP project
ソニー株式会社
古河電気工業		 - Portable SDK for UPnP Devices におけるスタックベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2012-5963 2013-07-24 17:02 2012-12-6 Show GitHub Exploit DB Packet Storm
225572 10 危険 日本電気
Portable SDK for UPnP project
ソニー株式会社
古河電気工業		 - Portable SDK for UPnP Devices におけるスタックベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2012-5964 2013-07-24 17:01 2012-12-6 Show GitHub Exploit DB Packet Storm
225573 10 危険 日本電気
Portable SDK for UPnP project
ソニー株式会社
古河電気工業		 - Portable SDK for UPnP Devices におけるスタックベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2012-5965 2013-07-24 17:01 2012-12-6 Show GitHub Exploit DB Packet Storm
225574 6.8 警告 レッドハット - JBoss RichFaces において任意のコードが実行される脆弱性 CWE-Other
その他 		CVE-2013-2165 2013-07-24 16:16 2013-07-19 Show GitHub Exploit DB Packet Storm
225575 6.9 警告 マイクロソフト - Microsoft Windows のカーネルモードドライバの win32k.sys の EPATHOBJ::pprFlattenRec 関数における権限昇格の脆弱性 CWE-119
バッファエラー 		CVE-2013-3660 2013-07-24 15:38 2013-05-23 Show GitHub Exploit DB Packet Storm
225576 9.3 危険 マイクロソフト - 複数の Microsoft 製品における任意のコードを実行される脆弱性 CWE-94
コード・インジェクション 		CVE-2013-3129 2013-07-24 15:37 2013-07-9 Show GitHub Exploit DB Packet Storm
225577 9.3 危険 マイクロソフト - Microsoft .NET Framework および Silverlight における任意のコードを実行される脆弱性 CWE-94
コード・インジェクション 		CVE-2013-3131 2013-07-24 15:36 2013-07-9 Show GitHub Exploit DB Packet Storm
225578 9.3 危険 マイクロソフト - Microsoft .NET Framework における任意のコードを実行される脆弱性 CWE-94
コード・インジェクション 		CVE-2013-3132 2013-07-24 15:35 2013-07-9 Show GitHub Exploit DB Packet Storm
225579 9.3 危険 マイクロソフト - Microsoft .NET Framework における任意のコードを実行される脆弱性 CWE-94
コード・インジェクション 		CVE-2013-3133 2013-07-24 15:34 2013-07-9 Show GitHub Exploit DB Packet Storm
225580 9.3 危険 マイクロソフト - Microsoft .NET Framework の共通言語ランタイムにおける任意のコードを実行される脆弱性 CWE-94
コード・インジェクション 		CVE-2013-3134 2013-07-24 15:32 2013-07-9 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 5, 2026, 4:11 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
200951 6.1 MEDIUM
Network 		zulip zulip_server Zulip Server before 2.1.3 allows reverse tabnabbing via the Markdown functionality. CWE-1021
 Improper Restriction of Rendered UI Layers or Frames 		CVE-2020-9444 2024-11-21 14:40 2020-04-21 Show GitHub Exploit DB Packet Storm
200952 8.8 HIGH
Network 		microfocus enterprise_developer
enterprise_server 		Insufficiently protected credentials vulnerability on Micro Focus enterprise developer and enterprise server, affecting all version prior to 4.0 Patch Update 16, and version 5.0 Patch Update 6. The v… CWE-522
 Insufficiently Protected Credentials 		CVE-2020-9523 2024-11-21 14:40 2020-04-18 Show GitHub Exploit DB Packet Storm
200953 7.5 HIGH
Network 		silverstripe silverstripe In SilverStripe through 4.5, files uploaded via Forms to folders migrated from Silverstripe CMS 3.x may be put to the default "/Uploads" folder instead. This affects installations which allowed uploa… CWE-434
 Unrestricted Upload of File with Dangerous Type  		CVE-2020-9280 2024-11-21 14:40 2020-04-16 Show GitHub Exploit DB Packet Storm
200954 8.8 HIGH
Network 		subex roc_partner_settlement An Insecure Direct Object Reference (IDOR) vulnerability in the Change Password feature of Subex ROC Partner Settlement 10.5 allows remote authenticated users to achieve account takeover via manipula… CWE-639
 Authorization Bypass Through User-Controlled Key 		CVE-2020-9384 2024-11-21 14:40 2020-04-15 Show GitHub Exploit DB Packet Storm
200955 5.4 MEDIUM
Network 		octech oempro Octech Oempro 4.7 through 4.11 allow stored XSS by an authenticated user. The FolderName parameter of the Media.CreateFolder command is vulnerable. CWE-79
Cross-site Scripting 		CVE-2020-9461 2024-11-21 14:40 2020-04-15 Show GitHub Exploit DB Packet Storm
200956 5.4 MEDIUM
Network 		octech oempro Octech Oempro 4.7 through 4.11 allow XSS by an authenticated user. The parameter CampaignName in Campaign.Create is vulnerable. CWE-79
Cross-site Scripting 		CVE-2020-9460 2024-11-21 14:40 2020-04-15 Show GitHub Exploit DB Packet Storm
200957 8.8 HIGH
Network 		rubrik cdm An issue was discovered in Rubrik 5.0.3-2296. An OS command injection vulnerability allows an authenticated attacker to remotely execute arbitrary code on Rubrik-managed systems. CWE-78
OS Command  		CVE-2020-9478 2024-11-21 14:40 2020-04-14 Show GitHub Exploit DB Packet Storm
200958 4.9 MEDIUM
Network 		dahuasecurity sd6al_firmware
sd5a_firmware
sd1a_firmware
ptz1a_firmware
sd50_firmware
sd52c_firmware
ipc-hx5842h_firmware
ipc-hx7842h_firmware
ipc-hx2xxx_firmware
ipc-hxxx5x4x_firmware 		Some products of Dahua have Denial of Service vulnerabilities. After the successful login of the legal account, the attacker sends a specific log query command, which may cause the device to go down. NVD-CWE-noinfo
CVE-2020-9500 2024-11-21 14:40 2020-04-9 Show GitHub Exploit DB Packet Storm
200959 7.2 HIGH
Network 		dahuasecurity sd6al_firmware
sd5a_firmware
sd1a_firmware
ptz1a_firmware
sd50_firmware
sd52c_firmware
ipc-hx5842h_firmware
ipc-hx7842h_firmware
ipc-hx2xxx_firmware
ipc-hxxx5x4x_firmware 		Some Dahua products have buffer overflow vulnerabilities. After the successful login of the legal account, the attacker sends a specific DDNS test command, which may cause the device to go down. CWE-120
Classic Buffer Overflow 		CVE-2020-9499 2024-11-21 14:40 2020-04-9 Show GitHub Exploit DB Packet Storm
200960 6.5 MEDIUM
Network 		fortinet fortiadc_firmware An improper authorization vulnerability in FortiADC may allow a remote authenticated user with low privileges to perform certain actions such as rebooting the system. NVD-CWE-noinfo
CVE-2020-9286 2024-11-21 14:40 2020-04-8 Show GitHub Exploit DB Packet Storm