Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 1, 2026, 6 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
225661 10 危険 オラクル - Oracle Java SE の JavaFX における脆弱性 CWE-noinfo
情報不足
CVE-2013-0439 2013-06-12 17:28 2013-02-1 Show GitHub Exploit DB Packet Storm
225662 5 警告 Apache Software Foundation - Apache CXF における認証を回避される脆弱性 CWE-287
不適切な認証
CVE-2013-0239 2013-06-12 16:56 2013-01-25 Show GitHub Exploit DB Packet Storm
225663 1.9 注意 Linux - Linux Kernel の net/bluetooth/hidp/core.c における重要な情報を取得される脆弱性 CWE-200
情報漏えい
CVE-2013-0349 2013-06-12 16:42 2013-02-3 Show GitHub Exploit DB Packet Storm
225664 6.2 警告 Linux - 32-bit Xen paravirt_ops プラットフォーム上で稼働する Linux Kernel における権限を取得される脆弱性 CWE-189
数値処理の問題
CVE-2013-0228 2013-06-12 16:41 2013-02-17 Show GitHub Exploit DB Packet Storm
225665 6 警告 OpenStack
Canonical
- 複数の OpenStack 製品における VM へのアクセス権を取得される脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2013-0335 2013-06-12 16:39 2013-02-16 Show GitHub Exploit DB Packet Storm
225666 6.8 警告 QNAP Systems - QNAP VioStor NVR のファームウェア上で稼働する cgi-bin/create_user.cgi におけるクロスサイトリクエストフォージェリの脆弱性 CWE-352
同一生成元ポリシー違反
CVE-2013-0144 2013-06-12 15:11 2013-06-5 Show GitHub Exploit DB Packet Storm
225667 6.5 警告 QNAP Systems - QNAP VioStor NVR のファームウェア上で稼働する cgi-bin/pingping.cgi および QNAP 製 NAS 製品の Surveillance Station Pro における任意のコマンドを実行される脆弱性 CWE-94
コード・インジェクション
CVE-2013-0143 2013-06-12 15:10 2013-06-5 Show GitHub Exploit DB Packet Storm
225668 5 警告 QNAP Systems - QNAP VioStor NVR のファームウェアおよび QNAP 製 NAS 製品の Surveillance Station Pro における Web サーバにログインされる脆弱性 CWE-255
証明書・パスワード管理
CVE-2013-0142 2013-06-12 15:10 2013-06-5 Show GitHub Exploit DB Packet Storm
225669 9.3 危険 Mozilla Foundation - 複数の Mozilla 製品の Web コンソールにおけるクローム特権で任意の JavaScript コードを実行される脆弱性 CWE-94
コード・インジェクション
CVE-2012-3980 2013-06-11 18:07 2012-08-28 Show GitHub Exploit DB Packet Storm
225670 6.8 警告 Mozilla Foundation - 複数の Mozilla 製品の nsLocation::CheckURL 関数におけるコンテンツのロードの制限を回避される脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2012-3978 2013-06-11 18:04 2012-08-28 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 1, 2026, 4:12 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
210541 7.5 HIGH
Network
halo halo Halo V1.1.3 is affected by: Arbitrary File reading. In an interface that reads files in halo v1.1.3, a directory traversal check is performed on the input path parameter, but the startsWith function … CWE-22
Path Traversal
CVE-2020-21525 2024-11-21 14:12 2020-10-1 Show GitHub Exploit DB Packet Storm
210542 9.1 CRITICAL
Network
halo halo There is a XML external entity (XXE) vulnerability in halo v1.1.3, The function of importing other blogs in the background(/api/admin/migrations/wordpress) needs to parse the xml file, but it is not … CWE-611
XXE
CVE-2020-21524 2024-11-21 14:12 2020-10-1 Show GitHub Exploit DB Packet Storm
210543 9.8 CRITICAL
Network
halo halo A Server-Side Freemarker template injection vulnerability in halo CMS v1.1.3 In the Edit Theme File function. The ftl file can be edited. This is the Freemarker template file. This file can cause arb… CWE-74
Injection
CVE-2020-21523 2024-11-21 14:12 2020-10-1 Show GitHub Exploit DB Packet Storm
210544 9.8 CRITICAL
Network
halo halo An issue was discovered in halo V1.1.3. A Zip Slip Directory Traversal Vulnerability in the backend,the attacker can overwrite some files, such as ftl files, .bashrc files in the user directory, and … CWE-22
Path Traversal
CVE-2020-21522 2024-11-21 14:12 2020-10-1 Show GitHub Exploit DB Packet Storm
210545 4.9 MEDIUM
Network
frontaccounting frontaccounting An issue was discovered in FrontAccounting 2.4.7. There is a Directory Traversal vulnerability that can empty folder via admin/inst_lang.php. CWE-22
Path Traversal
CVE-2020-21244 2024-11-21 14:12 2020-10-1 Show GitHub Exploit DB Packet Storm
210546 9.8 CRITICAL
Network
metinfo metinfo An issue was discovered in MetInfo v7.0.0 beta. There is SQL Injection via the install/index.php?action=adminsetup&cndata=yes&endata=yes&showdata=yes URI. CWE-89
SQL Injection
CVE-2020-20800 2024-11-21 14:12 2020-10-1 Show GitHub Exploit DB Packet Storm
210547 5.4 MEDIUM
Network
elementor elementor_page_builder A stored XSS vulnerability exists in the Custom Link Attributes control Affect function in Elementor Page Builder 2.9.2 and earlier versions. It is caused by inadequate filtering on the link custom a… CWE-79
Cross-site Scripting
CVE-2020-20406 2024-11-21 14:12 2020-09-17 Show GitHub Exploit DB Packet Storm
210548 6.1 MEDIUM
Network
codoforum codoforum Codoforum 4.8.3 allows HTML Injection in the 'admin dashboard Manage users Section.' CWE-79
Cross-site Scripting
CVE-2020-21845 2024-11-21 14:12 2020-09-15 Show GitHub Exploit DB Packet Storm
210549 6.1 MEDIUM
Network
sagemcom f\@st_3686_firmware Sagemcom F@ST3686 v1.0 HUN 3.97.0 has XSS via RgDiagnostics.asp, RgDdns.asp, RgFirewallEL.asp, RgVpnL2tpPptp.asp. CWE-79
Cross-site Scripting
CVE-2020-21733 2024-11-21 14:12 2020-09-14 Show GitHub Exploit DB Packet Storm
210550 6.1 MEDIUM
Network
rukovoditel rukovoditel Rukovoditel Project Management app 2.6 is affected by: Cross Site Scripting (XSS). An attacker can add JavaScript code to the filename. CWE-79
Cross-site Scripting
CVE-2020-21732 2024-11-21 14:12 2020-09-14 Show GitHub Exploit DB Packet Storm