Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 4, 2026, 4 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
225581 4.3 警告 シスコシステムズ - Cisco Unified Communications Domain Manager におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2013-1132 2013-07-12 16:19 2013-07-11 Show GitHub Exploit DB Packet Storm
225582 4.3 警告 シスコシステムズ - Cisco TelePresence エンドポイント上で稼働する TC ソフトウェアにおける認証を回避される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2013-3405 2013-07-12 16:18 2013-07-11 Show GitHub Exploit DB Packet Storm
225583 6.8 警告 シスコシステムズ - Cisco Nexus 1000V デバイス上で稼働する Cisco NX-OS における任意のコマンドを実行される脆弱性 CWE-20
不適切な入力確認 		CVE-2013-3400 2013-07-12 16:17 2013-07-9 Show GitHub Exploit DB Packet Storm
225584 9.4 危険 ヒューレット・パッカード
デル
IBM		 - HP StoreVirtual Storage デバイス上で稼働する LeftHand OS における管理アクセス権を取得される脆弱性 CWE-255
証明書・パスワード管理 		CVE-2013-2352 2013-07-12 16:13 2013-07-9 Show GitHub Exploit DB Packet Storm
225585 6.8 警告 VideoLAN - VideoLAN VLC media player の ASF Demuxer におけるサービス運用妨害 (DoS) の脆弱性 CWE-119
バッファエラー 		CVE-2013-1954 2013-07-12 15:46 2013-04-11 Show GitHub Exploit DB Packet Storm
225586 9.3 危険 VideoLAN - VideoLAN VLC media player におけるバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2013-1868 2013-07-12 15:45 2013-01-3 Show GitHub Exploit DB Packet Storm
225587 4.3 警告 VideoLAN - VideoLAN VLC media player の SHAddToRecentDocs 関数におけるサービス運用妨害 (DoS) の脆弱性 CWE-189
数値処理の問題 		CVE-2012-5855 2013-07-12 15:44 2012-11-12 Show GitHub Exploit DB Packet Storm
225588 6.9 警告 レッドハット - JBoss Enterprise Web Server および Red Hat Enterprise Linux 用の Tomcat の init スクリプトにおける任意のファイルの所有権を変更される脆弱性 CWE-59
リンク解釈の問題 		CVE-2013-1976 2013-07-12 11:08 2013-05-28 Show GitHub Exploit DB Packet Storm
225589 4.3 警告 レッドハット - libtirpc の svc_dg_getargs 関数におけるサービス運用妨害 (DoS) の脆弱性 CWE-399
リソース管理の問題 		CVE-2013-1950 2013-07-12 11:03 2013-04-22 Show GitHub Exploit DB Packet Storm
225590 7.5 危険 SPIP - SPIP における権限を取得される脆弱性 CWE-noinfo
情報不足 		CVE-2013-2118 2013-07-12 10:33 2013-05-24 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 5, 2026, 4:11 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
201001 7.8 HIGH
Local 		wftpserver wing_ftp_server An issue was discovered in Wing FTP Server 6.2.5 before February 2020. Due to insecure permissions when handling session cookies, a local user may view the contents of the session and session_admin d… CWE-732
 Incorrect Permission Assignment for Critical Resource 		CVE-2020-9470 2024-11-21 14:40 2020-03-7 Show GitHub Exploit DB Packet Storm
201002 6.1 MEDIUM
Network 		ckeditor
fedoraproject
drupal
oracle 		ckeditor
fedora
drupal
peoplesoft_enterprise_peopletools
webcenter_portal
agile_plm
application_express
jd_edwards_enterpriseone_tools
siebel_apps_-_customer_order_management<… 		A cross-site scripting (XSS) vulnerability in the HTML Data Processor for CKEditor 4.0 before 4.14 allows remote attackers to inject arbitrary web script through a crafted "protected" comment (with t… CWE-79
Cross-site Scripting 		CVE-2020-9281 2024-11-21 14:40 2020-03-7 Show GitHub Exploit DB Packet Storm
201003 8.8 HIGH
Network 		metagauss registrationmagic In the RegistrationMagic plugin through 4.6.0.3 for WordPress, the export function allows remote authenticated users (with minimal privileges) to export submitted form data and settings via class_rm_… CWE-862
 Missing Authorization 		CVE-2020-9458 2024-11-21 14:40 2020-03-7 Show GitHub Exploit DB Packet Storm
201004 8.8 HIGH
Network 		metagauss registrationmagic The RegistrationMagic plugin through 4.6.0.3 for WordPress allows remote authenticated users (with minimal privileges) to import custom vulnerable forms and change form settings via class_rm_form_set… CWE-862
 Missing Authorization 		CVE-2020-9457 2024-11-21 14:40 2020-03-7 Show GitHub Exploit DB Packet Storm
201005 8.8 HIGH
Network 		metagauss registrationmagic In the RegistrationMagic plugin through 4.6.0.3 for WordPress, the user controller allows remote authenticated users (with minimal privileges) to elevate their privileges to administrator via class_r… CWE-862
 Missing Authorization 		CVE-2020-9456 2024-11-21 14:40 2020-03-7 Show GitHub Exploit DB Packet Storm
201006 4.3 MEDIUM
Network 		metagauss registrationmagic The RegistrationMagic plugin through 4.6.0.3 for WordPress allows remote authenticated users (with minimal privileges) to send arbitrary emails on behalf of the site via class_rm_user_services.php se… CWE-862
 Missing Authorization 		CVE-2020-9455 2024-11-21 14:40 2020-03-7 Show GitHub Exploit DB Packet Storm
201007 8.8 HIGH
Network 		metagauss registrationmagic A CSRF vulnerability in the RegistrationMagic plugin through 4.6.0.3 for WordPress allows remote attackers to forge requests on behalf of a site administrator to change all settings for the plugin, i… CWE-352
 Origin Validation Error 		CVE-2020-9454 2024-11-21 14:40 2020-03-7 Show GitHub Exploit DB Packet Storm
201008 6.5 MEDIUM
Network 		mi miui_firmware An issue was discovered on Xiaomi MIUI V11.0.5.0.QFAEUXM devices. The export component of GetApps(com.xiaomi.mipicks) mishandles the functionality of opening other components. Attackers need to induc… CWE-94
Code Injection 		CVE-2020-9530 2024-11-21 14:40 2020-03-7 Show GitHub Exploit DB Packet Storm
201009 7.3 HIGH
Adjacent 		mi miui_firmware An issue was discovered on Xiaomi MIUI V11.0.5.0.QFAEUXM devices. In the Web resources of GetApps(com.xiaomi.mipicks), the parameters passed in are read and executed. After reading the resource files… NVD-CWE-noinfo
CVE-2020-9531 2024-11-21 14:40 2020-03-7 Show GitHub Exploit DB Packet Storm
201010 7.8 HIGH
Local 		redsoftware pdfescape An untrusted search path vulnerability in the installer of PDFescape Desktop version 4.0.22 and earlier allows an attacker to gain privileges and execute code via DLL hijacking. CWE-426
 Untrusted Search Path 		CVE-2020-9418 2024-11-21 14:40 2020-03-6 Show GitHub Exploit DB Packet Storm