Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 26, 2026, 2 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
225691 6.8 警告 GNU Project - glibc の stdio-common/vfprintf.c における整数オーバーフローの脆弱性 CWE-189
数値処理の問題
CVE-2012-0864 2013-05-8 12:11 2012-02-17 Show GitHub Exploit DB Packet Storm
225692 5 警告 GNU Project - glibc の RPC の実装におけるサービス運用妨害 (DoS) の脆弱性 CWE-399
リソース管理の問題
CVE-2011-4609 2013-05-8 12:09 2011-12-13 Show GitHub Exploit DB Packet Storm
225693 6.8 警告 GNU Project - glibc の __tzfile_read 関数における整数オーバーフローの脆弱性 CWE-189
数値処理の問題
CVE-2009-5029 2013-05-8 12:08 2009-06-1 Show GitHub Exploit DB Packet Storm
225694 5 警告 NextApp, Inc. - Echo の Java XML パーサにおける任意のファイルを読まれる脆弱性 CWE-20
不適切な入力確認
CVE-2009-5135 2013-05-8 10:51 2009-02-24 Show GitHub Exploit DB Packet Storm
225695 4.3 警告 IBM - IBM Tivoli Federated Identity Manager および Tivoli Federated Identity Manager Business Gateway におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2013-0582 2013-05-7 21:19 2013-04-23 Show GitHub Exploit DB Packet Storm
225696 3.5 注意 IBM - IBM Sametime の Classic Meeting Server におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2013-0535 2013-05-7 21:18 2013-04-29 Show GitHub Exploit DB Packet Storm
225697 4.6 警告 シスコシステムズ - Cisco Unified Communications Manager における任意のファイルを読まれる脆弱性 CWE-20
不適切な入力確認
CVE-2013-1240 2013-05-7 19:51 2013-05-6 Show GitHub Exploit DB Packet Storm
225698 5 警告 シスコシステムズ - Cisco Wireless LAN Controller デバイスにおけるサービス運用妨害 (DoS) の脆弱性 CWE-Other
その他
CVE-2013-1235 2013-05-7 19:51 2013-05-6 Show GitHub Exploit DB Packet Storm
225699 4 警告 シスコシステムズ - Cisco IOS XR の SNMP モジュールにおけるサービス運用妨害 (DoS) の脆弱性 CWE-119
バッファエラー
CVE-2013-1234 2013-05-7 19:50 2013-05-2 Show GitHub Exploit DB Packet Storm
225700 5 警告 シスコシステムズ - 複数の Cisco WebEx 製品の HTTP の実装におけるコンテンツを読まれる脆弱性 CWE-20
不適切な入力確認
CVE-2013-1232 2013-05-7 19:50 2013-05-6 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 26, 2026, 4:05 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
212701 8.8 HIGH
Network
gitlab runner For GitLab Runner before 13.0.12, 13.1.6, 13.2.3, by replacing dockerd with a malicious server, the Shared Runner is susceptible to SSRF. CWE-918
Server-Side Request Forgery (SSRF) 
CVE-2020-13295 2024-11-21 14:00 2020-08-10 Show GitHub Exploit DB Packet Storm
212702 5.4 MEDIUM
Network
gitlab gitlab In GitLab before 13.0.12, 13.1.6 and 13.2.3, access grants were not revoked when a user revoked access to an application. NVD-CWE-noinfo
CVE-2020-13294 2024-11-21 14:00 2020-08-10 Show GitHub Exploit DB Packet Storm
212703 7.1 HIGH
Network
gitlab gitlab In GitLab before 13.0.12, 13.1.6 and 13.2.3 using a branch with a hexadecimal name could override an existing hash. NVD-CWE-noinfo
CVE-2020-13293 2024-11-21 14:00 2020-08-10 Show GitHub Exploit DB Packet Storm
212704 9.6 CRITICAL
Network
gitlab gitlab In GitLab before 13.0.12, 13.1.6 and 13.2.3, it is possible to bypass E-mail verification which is required for OAuth Flow. CWE-287
Improper Authentication
CVE-2020-13292 2024-11-21 14:00 2020-08-10 Show GitHub Exploit DB Packet Storm
212705 8.8 HIGH
Network
combodo itop Combodo iTop contains a cross-site request forgery (CSRF) vulnerability, attackers can execute specific commands via malicious site request forgery. CWE-352
 Origin Validation Error
CVE-2020-12781 2024-11-21 14:00 2020-08-10 Show GitHub Exploit DB Packet Storm
212706 7.5 HIGH
Network
combodo itop A security misconfiguration exists in Combodo iTop, which can expose sensitive information. CWE-863
 Incorrect Authorization
CVE-2020-12780 2024-11-21 14:00 2020-08-10 Show GitHub Exploit DB Packet Storm
212707 5.4 MEDIUM
Network
combodo itop Combodo iTop contains a stored Cross-site Scripting vulnerability, which can be attacked by uploading file with malicious script. CWE-79
Cross-site Scripting
CVE-2020-12779 2024-11-21 14:00 2020-08-10 Show GitHub Exploit DB Packet Storm
212708 6.1 MEDIUM
Network
combodo itop Combodo iTop does not validate inputted parameters, attackers can inject malicious commands and launch XSS attack. CWE-79
Cross-site Scripting
CVE-2020-12778 2024-11-21 14:00 2020-08-10 Show GitHub Exploit DB Packet Storm
212709 7.5 HIGH
Network
combodo itop A function in Combodo iTop contains a vulnerability of Broken Access Control, which allows unauthorized attacker to inject command and disclose system information. CWE-200
Information Exposure
CVE-2020-12777 2024-11-21 14:00 2020-08-10 Show GitHub Exploit DB Packet Storm
212710 9.8 CRITICAL
Network
aerospike aerospike_server Aerospike Community Edition 4.9.0.5 allows for unauthenticated submission and execution of user-defined functions (UDFs), written in Lua, as part of a database query. It attempts to restrict code exe… CWE-78
OS Command 
CVE-2020-13151 2024-11-21 14:00 2020-08-5 Show GitHub Exploit DB Packet Storm