Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 16, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
225631 9.3 危険 DELL EMC (旧 EMC Corporation) - EMC NetWorker の nsrindexd におけるバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2012-4607 2013-01-22 14:58 2013-01-17 Show GitHub Exploit DB Packet Storm
225632 3.5 注意 IBM - IBM Tivoli Federated Identity Manager におけるパスワードを破られる脆弱性 CWE-255
証明書・パスワード管理 		CVE-2012-3310 2013-01-22 14:57 2013-01-17 Show GitHub Exploit DB Packet Storm
225633 3.5 注意 Samba Project - Samba における LDAP ディレクトリオブジェクトの変更上の制限を回避される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2013-0172 2013-01-22 14:56 2013-01-17 Show GitHub Exploit DB Packet Storm
225634 4.6 警告 シスコシステムズ - Windows 上の Cisco VPN Client におけるサービス運用妨害 (カーネルフォルト および システムクラッシュ) の脆弱性 CWE-noinfo
情報不足 		CVE-2012-5429 2013-01-22 14:41 2013-01-12 Show GitHub Exploit DB Packet Storm
225635 5 警告 SpecView - SpecView の Web サーバにおけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル 		CVE-2012-5972 2013-01-22 14:28 2013-01-11 Show GitHub Exploit DB Packet Storm
225636 4.3 警告 General Electric Company - GE Intelligent Platforms Proficy HMI/SCADA - CIMPLICITY における整数オーバーフローの脆弱性 CWE-189
数値処理の問題 		CVE-2012-4689 2013-01-22 14:18 2013-01-8 Show GitHub Exploit DB Packet Storm
225637 6.8 警告 シスコシステムズ - Cisco WebEx Training Center におけるクロスサイトリクエストフォージェリの脆弱性 CWE-352
同一生成元ポリシー違反 		CVE-2013-1109 2013-01-22 14:08 2013-01-14 Show GitHub Exploit DB Packet Storm
225638 4.3 警告 シスコシステムズ - Cisco WebEx Social におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2012-6397 2013-01-22 14:02 2013-01-10 Show GitHub Exploit DB Packet Storm
225639 10 危険 シスコシステムズ - Linux 上の Cisco Prime LAN Management Solution における任意のコマンドを実行される脆弱性 CWE-20
不適切な入力確認 		CVE-2012-6392 2013-01-22 13:56 2013-01-9 Show GitHub Exploit DB Packet Storm
225640 5 警告 シスコシステムズ - Cisco TelePresence Video Communication Server における会議を作成される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2012-5444 2013-01-22 13:51 2013-01-12 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 16, 2026, 4 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
199921 7.5 HIGH
Network 		dell emc_isilon_onefs Dell EMC Isilon OneFS versions 8.2.2 and earlier contain a denial of service vulnerability. SmartConnect had an error condition that may be triggered to loop, using CPU and potentially preventing oth… CWE-400
 Uncontrolled Resource Consumption 		CVE-2020-5347 2024-11-21 14:33 2020-04-4 Show GitHub Exploit DB Packet Storm
199922 3.5 LOW
Network 		viewvc viewvc ViewVC before versions 1.1.28 and 1.2.1 has a XSS vulnerability in CVS show_subdir_lastmod support. The impact of this vulnerability is mitigated by the need for an attacker to have commit privileges… CWE-79
Cross-site Scripting 		CVE-2020-5283 2024-11-21 14:33 2020-04-3 Show GitHub Exploit DB Packet Storm
199923 6.5 MEDIUM
Network 		ctfd rctf In RedpwnCTF before version 2.3, there is a session fixation vulnerability in exploitable through the `#token=$ssid` hash when making a request to the `/verify` endpoint. An attacker team could poten… CWE-384
 Session Fixation 		CVE-2020-5290 2024-11-21 14:33 2020-04-2 Show GitHub Exploit DB Packet Storm
199924 9.8 CRITICAL
Network 		dell idrac7_firmware
idrac8_firmware
idrac9_firmware 		Dell EMC iDRAC7, iDRAC8 and iDRAC9 versions prior to 2.65.65.65, 2.70.70.70, 4.00.00.00 contain a stack-based buffer overflow vulnerability. An unauthenticated remote attacker may exploit this vulner… CWE-787
 Out-of-bounds Write 		CVE-2020-5344 2024-11-21 14:33 2020-04-1 Show GitHub Exploit DB Packet Storm
199925 8.8 HIGH
Network 		leantime leantime Leantime before versions 2.0.15 and 2.1-beta3 has a SQL Injection vulnerability. The impact is high. Malicious users/attackers can execute arbitrary SQL queries negatively affecting the confidentiali… CWE-89
SQL Injection 		CVE-2020-5292 2024-11-21 14:33 2020-04-1 Show GitHub Exploit DB Packet Storm
199926 7.8 HIGH
Local 		projectatomic
debian
archlinux
centos 		bubblewrap
debian_linux
arch_linux
centos 		Bubblewrap (bwrap) before version 0.4.1, if installed in setuid mode and the kernel supports unprivileged user namespaces, then the `bwrap --userns2` option can be used to make the setuid process kee… CWE-269
 Improper Privilege Management 		CVE-2020-5291 2024-11-21 14:33 2020-04-1 Show GitHub Exploit DB Packet Storm
199927 6.5 MEDIUM
Network 		elide elide In Elide before 4.5.14, it is possible for an adversary to "guess and check" the value of a model field they do not have access to assuming they can read at least one other field in the model. The ad… CWE-552
 Files or Directories Accessible to External Parties 		CVE-2020-5289 2024-11-21 14:33 2020-03-31 Show GitHub Exploit DB Packet Storm
199928 4.3 MEDIUM
Network 		zeit next.js Next.js versions before 9.3.2 have a directory traversal vulnerability. Attackers could craft special requests to access files in the dist directory (.next). This does not affect files outside of the… CWE-22
Path Traversal 		CVE-2020-5284 2024-11-21 14:33 2020-03-31 Show GitHub Exploit DB Packet Storm
199929 8.1 HIGH
Network 		sensiolabs symfony In symfony/security-http before versions 4.4.7 and 5.0.7, when a `Firewall` checks access control rule, it iterate overs each rule's attributes and stops as soon as the accessDecisionManager decides … CWE-863
 Incorrect Authorization 		CVE-2020-5275 2024-11-21 14:33 2020-03-31 Show GitHub Exploit DB Packet Storm
199930 5.4 MEDIUM
Network 		sensiolabs symfony In Symfony before versions 5.0.5 and 4.4.5, some properties of the Exception were not properly escaped when the `ErrorHandler` rendered it stacktrace. In addition, the stacktrace were displayed even … CWE-209
Information Exposure Through an Error Message 		CVE-2020-5274 2024-11-21 14:33 2020-03-31 Show GitHub Exploit DB Packet Storm