Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 4, 2026, 4 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
225631 7.8 危険 MIT Kerberos - MIT Kerberos の krb5_db2_lockout_audit 関数におけるサービス運用妨害 (DoS) の脆弱性 CWE-Other
その他
CVE-2011-4151 2013-07-8 18:07 2011-10-18 Show GitHub Exploit DB Packet Storm
225632 7.8 危険 MIT Kerberos
レッドハット
- MIT Kerberos の lookup_lockout_policy 関数におけるサービス運用妨害 (DoS) の脆弱性 CWE-Other
その他
CVE-2011-1529 2013-07-8 18:06 2011-10-18 Show GitHub Exploit DB Packet Storm
225633 7.8 危険 MIT Kerberos
レッドハット
- MIT Kerberos の krb5_ldap_lockout_audit 関数におけるサービス運用妨害 (DoS) の脆弱性 CWE-Other
その他
CVE-2011-1528 2013-07-8 18:05 2011-10-18 Show GitHub Exploit DB Packet Storm
225634 6.5 警告 MongoDB Inc. - MongoDB における内部システム権限を取得される脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2013-4650 2013-07-8 14:31 2013-06-21 Show GitHub Exploit DB Packet Storm
225635 5.5 警告 The phpMyAdmin Project - phpMyAdmin の import.php における GLOBALS のスーパーグローバル配列を変更される脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2013-4729 2013-07-8 14:30 2013-06-28 Show GitHub Exploit DB Packet Storm
225636 3.5 注意 The phpMyAdmin Project - phpMyAdmin の view_create.php におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2013-3742 2013-07-8 14:29 2013-05-29 Show GitHub Exploit DB Packet Storm
225637 7.5 危険 Lianja - Lianja SQL Server の db_netserver におけるスタックベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー
CVE-2013-3563 2013-07-8 14:27 2013-07-4 Show GitHub Exploit DB Packet Storm
225638 4.3 警告 シスコシステムズ - Cisco Identity Services Engine 上で稼働する administration/monitoring パネルにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2013-3413 2013-07-8 14:25 2013-07-3 Show GitHub Exploit DB Packet Storm
225639 7.5 危険 Mozilla Foundation - Mozilla Firefox および Thunderbird の PreserveWrapper の実装におけるサービス運用妨害 (DoS) の脆弱性 CWE-20
不適切な入力確認
CVE-2013-1694 2013-07-8 11:06 2013-06-25 Show GitHub Exploit DB Packet Storm
225640 10 危険 マイクロソフト
アドビシステムズ
Google
- Adobe Flash Player および Adobe AIR における任意のコードを実行される脆弱性 CWE-noinfo
情報不足
CVE-2013-3343 2013-07-8 10:42 2013-06-11 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 4, 2026, 4:17 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
200881 5.4 MEDIUM
Network
sas visual_analytics Graph Builder in SAS Visual Analytics 8.5 allows XSS via a graph template that is accessed directly. CWE-79
Cross-site Scripting
CVE-2020-9350 2024-11-21 14:40 2020-02-23 Show GitHub Exploit DB Packet Storm
200882 5.5 MEDIUM
Local
f-secure cloud_protection_for_salesforce
internet_gatekeeper
email_and_server_security
The F-Secure AV parsing engine before 2020-02-05 allows virus-detection bypass via crafted Compression Method data in a GZIP archive. This affects versions before 17.0.605.474 (on Linux) of Cloud Pro… CWE-436
 Interpretation Conflict
CVE-2020-9342 2024-11-21 14:40 2020-02-23 Show GitHub Exploit DB Packet Storm
200883 8.8 HIGH
Network
auieo candidats CandidATS 2.1.0 is vulnerable to CSRF that allows for an administrator account to be added via the index.php?m=settings&a=addUser URI. CWE-352
 Origin Validation Error
CVE-2020-9341 2024-11-21 14:40 2020-02-23 Show GitHub Exploit DB Packet Storm
200884 7.2 HIGH
Network
fauzantrif_election_project fauzantrif_election fauzantrif eLection 2.0 has SQL Injection via the admin/ajax/op_kandidat.php id parameter. CWE-89
SQL Injection
CVE-2020-9340 2024-11-21 14:40 2020-02-23 Show GitHub Exploit DB Packet Storm
200885 5.3 MEDIUM
Network
smartclient smartclient An issue was discovered in SmartClient 12.0. If an unauthenticated attacker makes a POST request to /tools/developerConsoleOperations.jsp or /isomorphic/IDACall with malformed XML data in the _transa… CWE-209
Information Exposure Through an Error Message
CVE-2020-9351 2024-11-21 14:40 2020-02-23 Show GitHub Exploit DB Packet Storm
200886 5.4 MEDIUM
Network
soplanning soplanning SOPlanning 1.45 allows XSS via the Name or Comment to status.php. CWE-79
Cross-site Scripting
CVE-2020-9339 2024-11-21 14:40 2020-02-23 Show GitHub Exploit DB Packet Storm
200887 5.4 MEDIUM
Network
soplanning soplanning SOPlanning 1.45 allows XSS via the "Your SoPlanning url" field. CWE-79
Cross-site Scripting
CVE-2020-9338 2024-11-21 14:40 2020-02-23 Show GitHub Exploit DB Packet Storm
200888 5.4 MEDIUM
Network
fauzantrif_election_project fauzantrif_election fauzantrif eLection 2.0 has XSS via the Admin Dashboard -> Settings -> Election -> "message if election is closed" field. CWE-79
Cross-site Scripting
CVE-2020-9336 2024-11-21 14:40 2020-02-23 Show GitHub Exploit DB Packet Storm
200889 5.9 MEDIUM
Network
gogs gogs Gogs through 0.11.91 allows attackers to violate the admin-specified repo-creation policy due to an internal/db/repo.go race condition. CWE-362
Race Condition
CVE-2020-9329 2024-11-21 14:40 2020-02-22 Show GitHub Exploit DB Packet Storm
200890 7.5 HIGH
Network
sqlite
netapp
canonical
siemens
oracle
sqlite
cloud_backup
ubuntu_linux
sinec_infrastructure_network_services
outside_in_technology
hyperion_infrastructure_technology
enterprise_manager_ops_center
communications_netwo…
In SQLite 3.31.1, isAuxiliaryVtabOperator allows attackers to trigger a NULL pointer dereference and segmentation fault because of generated column optimizations. CWE-476
 NULL Pointer Dereference
CVE-2020-9327 2024-11-21 14:40 2020-02-22 Show GitHub Exploit DB Packet Storm