Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":June 5, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
225581	9.3	危険	マイクロソフト	-	Microsoft .NET Framework のシリアル化機能における任意のコードを実行される脆弱性	CWE-94 コード・インジェクション	CVE-2013-3171	2013-07-24 15:31	2013-07-9	Show	GitHub Exploit DB Packet Storm

225582	9.3	危険	マイクロソフト	-	Microsoft Silverlight における任意のコードを実行される脆弱性	CWE-94 コード・インジェクション	CVE-2013-3178	2013-07-24 15:30	2013-07-9	Show	GitHub Exploit DB Packet Storm

225583	7.2	危険	マイクロソフト	-	Microsoft Windows のカーネルモードドライバーの win32k.sys における権限昇格の脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2013-1300	2013-07-24 15:29	2013-07-9	Show	GitHub Exploit DB Packet Storm

225584	5.4	警告	シスコシステムズ	-	Cisco Aironet 3600 アクセスポイントにおけるサービス運用妨害 (DoS) の脆弱性	CWE-119 バッファエラー	CVE-2013-3441	2013-07-24 15:08	2013-07-22	Show	GitHub Exploit DB Packet Storm

225585	7.2	危険	マイクロソフト	-	Microsoft Windows のカーネルモードドライバーの win32k.sys における権限昇格の脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2013-1340	2013-07-24 15:04	2013-07-9	Show	GitHub Exploit DB Packet Storm

225586	7.2	危険	マイクロソフト	-	Microsoft Windows のカーネルモードドライバーの win32k.sys における権限昇格の脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2013-1345	2013-07-24 15:03	2013-07-9	Show	GitHub Exploit DB Packet Storm

225587	7.2	危険	マイクロソフト	-	複数の Microsoft Windows 製品のカーネルモードドライバーの win32k.sys における権限昇格の脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2013-3167	2013-07-24 15:01	2013-07-9	Show	GitHub Exploit DB Packet Storm

225588	4.9	警告	マイクロソフト	-	複数の Microsoft Windows 製品のカーネルモードドライバーの win32k.sys におけるバッファオーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2013-3172	2013-07-24 15:00	2013-07-9	Show	GitHub Exploit DB Packet Storm

225589	7.2	危険	マイクロソフト	-	Microsoft Windows のカーネルモードドライバーの win32k.sys におけるバッファオーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2013-3173	2013-07-24 14:59	2013-07-9	Show	GitHub Exploit DB Packet Storm

225590	9.3	危険	マイクロソフト	-	Microsoft Internet Explorer 7 から 10 における任意のコードを実行される脆弱性	CWE-119 バッファエラー	CVE-2013-3115	2013-07-24 14:58	2013-07-9	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:June 6, 2026, 4:18 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
210061	4.8	MEDIUM Network	silverstripe	silverstripe	SilverStripe through 4.6.0-rc1 has an XXE Vulnerability in CSSContentParser. A developer utility meant for parsing HTML within unit tests can be vulnerable to XML External Entity (XXE) attacks. When …	CWE-611 XXE	CVE-2020-25817	2024-11-21 14:18	2021-06-9	Show	GitHub Exploit DB Packet Storm

210062	8.1	HIGH Network	redhat	cloudforms	A flaw was found in Cloudforms. A role-based privileges escalation flaw where export or import of administrator files is possible. An attacker with a specific group can perform actions restricted onl…	NVD-CWE-Other	CVE-2020-25716	2024-11-21 14:18	2021-06-8	Show	GitHub Exploit DB Packet Storm

210063	6.1	MEDIUM Network	dogtagpki	dogtagpki	A flaw was found in pki-core 10.9.0. A specially crafted POST request can be used to reflect a DOM-based cross-site scripting (XSS) attack to inject code into the search query form which can get auto…	CWE-79 Cross-site Scripting	CVE-2020-25715	2024-11-21 14:18	2021-05-28	Show	GitHub Exploit DB Packet Storm

210064	7.5	HIGH Network	openldap redhat debian fedoraproject	openldap enterprise_linux jboss_enterprise_web_server jboss_enterprise_application_platform jboss_core_services debian_linux fedora	A flaw was found in OpenLDAP in versions before 2.4.56. This flaw allows an attacker who sends a malicious packet processed by OpenLDAP to force a failed assertion in csnNormalize23(). The highest th…	-	CVE-2020-25710	2024-11-21 14:18	2021-05-28	Show	GitHub Exploit DB Packet Storm

210065	4.3	MEDIUM Network	redhat quarkus	resteasy quarkus	A flaw was found in RESTEasy, where an incorrect response to an HTTP request is provided. This flaw allows an attacker to gain access to privileged information. The highest threat from this vulnerabi…	-	CVE-2020-25724	2024-11-21 14:18	2021-05-27	Show	GitHub Exploit DB Packet Storm

210066	5.4	MEDIUM Network	redhat	3scale_api_management 3scale	A flaw was found in Red Hat 3scale’s API docs URL, where it is accessible without credentials. This flaw allows an attacker to view sensitive information or modify service APIs. Versions before 3scal…	CWE-306 Missing Authentication for Critical Function	CVE-2020-25634	2024-11-21 14:18	2021-05-27	Show	GitHub Exploit DB Packet Storm

210067	7.0	HIGH Local	x.org	x_server	A privilege escalation flaw was found in the Xorg-x11-server due to a lack of authentication for X11 clients. This flaw allows an attacker to take control of an X application by impersonating the ser…	-	CVE-2020-25697	2024-11-21 14:18	2021-05-26	Show	GitHub Exploit DB Packet Storm

210068	7.0	HIGH Local	linux debian netapp	linux_kernel debian_linux cloud_backup solidfire_\&_hci_management_node solidfire_baseboard_management_controller_firmware h410c_firmware h300s_firmware h500s_firmware h70…	A flaw was found in Linux Kernel because access to the global variable fg_console is not properly synchronized leading to a use after free in con_font_op.	CWE-662 Improper Synchronization	CVE-2020-25668	2024-11-21 14:18	2021-05-26	Show	GitHub Exploit DB Packet Storm

210069	7.8	HIGH Local	linux debian netapp	linux_kernel debian_linux cloud_backup solidfire_\&_hci_management_node solidfire_baseboard_management_controller h300s_firmware h500s_firmware h700s_firmware h300e_firmwa…	A vulnerability was found in the Linux Kernel where the function sunkbd_reinit having been scheduled by sunkbd_interrupt before sunkbd being freed. Though the dangling pointer is set to NULL in sunkb…	-	CVE-2020-25669	2024-11-21 14:18	2021-05-26	Show	GitHub Exploit DB Packet Storm

210070	5.5	MEDIUM Local	linux fedoraproject netapp	linux_kernel fedora cloud_backup active_iq_unified_manager solidfire_baseboard_management_controller_firmware h410c_firmware h300s_firmware h500s_firmware h700s_firmware h3…	A vulnerability was found in Linux kernel where non-blocking socket in llcp_sock_connect() leads to leak and eventually hanging-up the system.	-	CVE-2020-25673	2024-11-21 14:18	2021-05-26	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed