Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 3, 2026, 6:08 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
225651 5 警告 IBM - IBM Sterling B2B Integrator および Sterling File Gateway における重要な情報を取得される脆弱性 CWE-200
情報漏えい
CVE-2013-0558 2013-07-4 15:13 2013-02-28 Show GitHub Exploit DB Packet Storm
225652 5 警告 IBM - IBM Sterling B2B Integrator および Sterling File Gateway におけるセッションをハイジャックされる脆弱性 CWE-255
証明書・パスワード管理
CVE-2013-0539 2013-07-4 15:13 2013-04-30 Show GitHub Exploit DB Packet Storm
225653 5 警告 IBM - IBM Sterling B2B Integrator および Sterling File Gateway のコンソールにおけるスタックトレースを読まれる脆弱性 CWE-200
情報漏えい
CVE-2013-0481 2013-07-4 15:11 2013-03-11 Show GitHub Exploit DB Packet Storm
225654 6.4 警告 IBM - IBM Sterling B2B Integrator および Sterling File Gateway における任意の FTP コマンドを挿入される脆弱性 CWE-noinfo
情報不足
CVE-2013-0476 2013-07-4 15:10 2013-06-30 Show GitHub Exploit DB Packet Storm
225655 4 警告 IBM - IBM Sterling B2B Integrator および Sterling File Gateway における重要な情報を取得される脆弱性 CWE-200
情報漏えい
CVE-2013-0475 2013-07-4 15:09 2013-06-30 Show GitHub Exploit DB Packet Storm
225656 3.5 注意 IBM - IBM Sterling B2B Integrator および Sterling File Gateway におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2013-0468 2013-07-4 15:08 2013-06-30 Show GitHub Exploit DB Packet Storm
225657 4 警告 IBM - IBM Sterling B2B Integrator および Sterling File Gateway におけるセッションをハイジャックされる脆弱性 CWE-Other
その他
CVE-2013-0456 2013-07-4 14:51 2013-06-30 Show GitHub Exploit DB Packet Storm
225658 5 警告 IBM - IBM Sterling B2B Integrator および Sterling File Gateway における Cookie をキャプチャされる脆弱性 CWE-310
暗号の問題
CVE-2012-5936 2013-07-4 14:49 2013-03-11 Show GitHub Exploit DB Packet Storm
225659 6.5 警告 IBM - IBM Sterling B2B Integrator および Sterling File Gateway における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2012-5766 2013-07-4 14:47 2012-06-11 Show GitHub Exploit DB Packet Storm
225660 4.6 警告 IBM - Windows 以外のプラットフォームで稼働する IBM WebSphere MQ におけるバッファオーバーフローの脆弱性 CWE-119
バッファエラー
CVE-2013-3028 2013-07-4 14:43 2013-06-26 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 3, 2026, 4:18 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
210041 7.5 HIGH
Network
winmail_project winmail A SSRF vulnerability exists in Winmail 6.5 in app.php in the key parameter when HTTPS is on. An attacker can use this vulnerability to cause the server to send a request to a specific URL. An attacke… CWE-918
Server-Side Request Forgery (SSRF) 
CVE-2020-23776 2024-11-21 14:14 2021-01-27 Show GitHub Exploit DB Packet Storm
210042 6.1 MEDIUM
Network
winmail_project winmail A reflected XSS vulnerability exists in tohtml/convert.php of Winmail 6.5, which can cause JavaScript code to be executed. CWE-79
Cross-site Scripting
CVE-2020-23774 2024-11-21 14:14 2021-01-27 Show GitHub Exploit DB Packet Storm
210043 8.8 HIGH
Network
openmaint openmaint openMAINT before 1.1-2.4.2 allows remote authenticated users to run arbitrary JSP code on the underlying web server. CWE-434
 Unrestricted Upload of File with Dangerous Type 
CVE-2020-24549 2024-11-21 14:14 2021-01-27 Show GitHub Exploit DB Packet Storm
210044 6.1 MEDIUM
Network
misp misp A cross-site scripting (XSS) vulnerability exists in MISP v2.4.128 in app/Controller/UserSettingsController.php at SetHomePage() function. Due to a lack of controller validation in "path" parameter, … CWE-79
Cross-site Scripting
CVE-2020-24085 2024-11-21 14:14 2021-01-27 Show GitHub Exploit DB Packet Storm
210045 8.8 HIGH
Network
assaabloy yale_wipc-303w_firmware The Yale WIPC-303W 2.21 through 2.31 camera is vulnerable to remote command execution (RCE) through command injection via the HTTP API. NOTE: This may be a duplicate of CVE-2020-10176 CWE-78
OS Command 
CVE-2020-23826 2024-11-21 14:14 2021-01-27 Show GitHub Exploit DB Packet Storm
210046 9.8 CRITICAL
Network
live555 liblivemedia In Live Networks, Inc., liblivemedia version 20200625, there is a potential buffer overflow bug in the server handling of a RTSP "PLAY" command, when the command specifies seeking by absolute time. CWE-787
 Out-of-bounds Write
CVE-2020-24027 2024-11-21 14:14 2021-01-12 Show GitHub Exploit DB Packet Storm
210047 5.3 MEDIUM
Network
sass-lang node-sass Certificate validation in node-sass 2.0.0 to 4.14.1 is disabled when requesting binaries even if the user is not specifying an alternative download path. CWE-295
Improper Certificate Validation 
CVE-2020-24025 2024-11-21 14:14 2021-01-12 Show GitHub Exploit DB Packet Storm
210048 3.3 LOW
Local
microsoft skype Microsoft Skype through 8.59.0.77 on macOS has the disable-library-validation entitlement, which allows a local process (with the user's privileges) to obtain unprompted microphone and camera access … NVD-CWE-noinfo
CVE-2020-24003 2024-11-21 14:14 2021-01-12 Show GitHub Exploit DB Packet Storm
210049 8.8 HIGH
Network
fork-cms fork_cms Multiple cross-site request forgery (CSRF) vulnerabilities in the Admin Console in Fork before 5.8.3 allows remote attackers to perform unauthorized actions as administrator to (1) approve the mass o… CWE-352
 Origin Validation Error
CVE-2020-23960 2024-11-21 14:14 2021-01-12 Show GitHub Exploit DB Packet Storm
210050 6.1 MEDIUM
Network
jsoneditoronline jsoneditor Stored XSS was discovered in the tree mode of jsoneditor before 9.0.2 through injecting and executing JavaScript. CWE-79
Cross-site Scripting
CVE-2020-23849 2024-11-21 14:14 2021-01-11 Show GitHub Exploit DB Packet Storm