Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 18, 2026, 12:09 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
225591	4.9	警告	マイクロソフト	-	Microsoft Windows のカーネルモードドライバ内の win32k.sys における権限昇格の脆弱性	CWE-362 競合状態	CVE-2013-1250	2013-02-14 17:11	2013-02-12	Show	GitHub Exploit DB Packet Storm

225592	4.9	警告	マイクロソフト	-	Microsoft Windows のカーネルモードドライバ内の win32k.sys における権限昇格の脆弱性	CWE-362 競合状態	CVE-2013-1249	2013-02-14 17:11	2013-02-12	Show	GitHub Exploit DB Packet Storm

225593	4.9	警告	マイクロソフト	-	Microsoft Windows のカーネルモードドライバ内の win32k.sys における権限昇格の脆弱性	CWE-362 競合状態	CVE-2013-1248	2013-02-14 17:11	2013-02-12	Show	GitHub Exploit DB Packet Storm

225594	7.2	危険	マイクロソフト	-	Microsoft Windows Server 2008 R2 および Windows 7 における権限昇格の脆弱性	CWE-399 リソース管理の問題	CVE-2013-0076	2013-02-14 16:53	2013-02-12	Show	GitHub Exploit DB Packet Storm

225595	9.3	危険	マイクロソフト	-	Microsoft Internet Explorer 6 から 10 の VML の実装における任意のコードを実行される脆弱性	CWE-119 バッファエラー	CVE-2013-0030	2013-02-14 16:53	2013-02-12	Show	GitHub Exploit DB Packet Storm

225596	10	危険	マイクロソフト	-	Microsoft .NET Framework における任意のコードを実行される脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2013-0073	2013-02-14 16:53	2013-02-12	Show	GitHub Exploit DB Packet Storm

225597	9.3	危険	マイクロソフト	-	Microsoft Internet Explorer 6 から 9 における任意のコードを実行される脆弱性	CWE-399 リソース管理の問題	CVE-2013-0029	2013-02-14 16:53	2013-02-12	Show	GitHub Exploit DB Packet Storm

225598	9.3	危険	マイクロソフト	-	Microsoft Internet Explorer 6 から 9 における任意のコードを実行される脆弱性	CWE-399 リソース管理の問題	CVE-2013-0028	2013-02-14 16:53	2013-02-12	Show	GitHub Exploit DB Packet Storm

225599	9.3	危険	マイクロソフト	-	Microsoft Internet Explorer 8 における任意のコードを実行される脆弱性	CWE-399 リソース管理の問題	CVE-2013-0025	2013-02-14 16:53	2013-02-12	Show	GitHub Exploit DB Packet Storm

225600	9.3	危険	マイクロソフト	-	Microsoft Internet Explorer 8 から 9 における任意のコードを実行される脆弱性	CWE-399 リソース管理の問題	CVE-2013-0024	2013-02-14 16:53	2013-02-12	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 18, 2026, 4:12 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
197531	9.8	CRITICAL Network	timetoolsltd	sr9850_firmware sr9750_firmware sc9705_firmware sr9210_firmware sc9205_firmware sr7110_firmware sc7105_firmware t100_firmware t300_firmware t550_firmware	TimeTools SC7105 1.0.007, SC9205 1.0.007, SC9705 1.0.007, SR7110 1.0.007, SR9210 1.0.007, SR9750 1.0.007, SR9850 1.0.007, T100 1.0.003, T300 1.0.003, and T550 1.0.003 devices allow remote attackers t…	CWE-78 OS Command	CVE-2020-8963	2024-11-21 14:39	2020-02-13	Show	GitHub Exploit DB Packet Storm

197532	9.8	CRITICAL Network	weechat fedoraproject opensuse debian	weechat fedora leap backports_sle debian_linux	irc_mode_channel_update in plugins/irc/irc-mode.c in WeeChat through 2.7 allows remote attackers to cause a denial of service (buffer overflow and application crash) or possibly have unspecified othe…	CWE-120 Classic Buffer Overflow	CVE-2020-8955	2024-11-21 14:39	2020-02-13	Show	GitHub Exploit DB Packet Storm

197533	7.8	HIGH Local	amd	user_experience_program	The AUEPLauncher service in Radeon AMD User Experience Program Launcher through 1.0.0.1 on Windows allows elevation of privilege by placing a crafted file in %PROGRAMDATA%\AMD\PPC\upload and then cre…	CWE-59 Link Following	CVE-2020-8950	2024-11-21 14:39	2020-02-13	Show	GitHub Exploit DB Packet Storm

197534	8.8	HIGH Network	gocloud	s2a_wl_firmware s2a_firmware s3a_k2p_mtk_firmware s3a_firmware isp3000_firmware	Gocloud S2A_WL 4.2.7.16471, S2A 4.2.7.17278, S2A 4.3.0.15815, S2A 4.3.0.17193, S3A K2P MTK 4.2.7.16528, S3A 4.3.0.16572, and ISP3000 4.3.0.17190 devices allows remote attackers to execute arbitrary O…	CWE-78 OS Command	CVE-2020-8949	2024-11-21 14:39	2020-02-13	Show	GitHub Exploit DB Packet Storm

197535	7.2	HIGH Network	artica	pandora_fms	functions_netflow.php in Artica Pandora FMS 7.0 allows remote attackers to execute arbitrary OS commands via shell metacharacters in the index.php?operation/netflow/nf_live_view ip_dst, dst_port, or …	CWE-78 OS Command	CVE-2020-8947	2024-11-21 14:39	2020-02-13	Show	GitHub Exploit DB Packet Storm

197536	8.8	HIGH Network	netis-systems	wf2471_firmware	Netis WF2471 v1.2.30142 devices allow an authenticated attacker to execute arbitrary OS commands via shell metacharacters in the /cgi-bin-igd/sys_log_clean.cgi log_3g_type parameter.	CWE-78 OS Command	CVE-2020-8946	2024-11-21 14:39	2020-02-13	Show	GitHub Exploit DB Packet Storm

197537	7.5	HIGH Network	gpgme_project redhat fedoraproject	gpgme openshift_container_platform openshift_container_platform_for_ibm_z openshift_container_platform_for_linuxone fedora enterprise_linux_workstation enterprise_linux_server en…	The proglottis Go wrapper before 0.1.1 for the GPGME library has a use-after-free, as demonstrated by use for container image pulls by Docker or CRI-O. This leads to a crash or potential code executi…	CWE-416 Use After Free	CVE-2020-8945	2024-11-21 14:39	2020-02-13	Show	GitHub Exploit DB Packet Storm

197538	6.1	MEDIUM Network	chiyu-t	bf-430_firmware	Stored XSS was discovered on CHIYU BF-430 232/485 TCP/IP Converter devices before 1.16.00, as demonstrated by the /if.cgi TF_submask field.	CWE-79 Cross-site Scripting	CVE-2020-8839	2024-11-21 14:39	2020-02-13	Show	GitHub Exploit DB Packet Storm

197539	7.5	HIGH Network	iktm	bearftp	Improper connection handling in the base connection handler in IKTeam BearFTP before v0.3.1 allows a remote attacker to achieve denial of service via a Slowloris approach by sending a large volume of…	CWE-20 Improper Input Validation	CVE-2020-8815	2024-11-21 14:39	2020-02-13	Show	GitHub Exploit DB Packet Storm

197540	7.3	HIGH Network	istio redhat	istio openshift_service_mesh	Istio versions 1.2.10 (End of Life) and prior, 1.3 through 1.3.7, and 1.4 through 1.4.3 allows authentication bypass. The Authentication Policy exact-path matching logic can allow unauthorized access…	CWE-287 Improper Authentication	CVE-2020-8595	2024-11-21 14:39	2020-02-13	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed