Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 28, 2026, noon

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
225691 4 警告 Joomla! - Joomla! における権限要件を回避される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2013-3057 2013-05-8 17:53 2013-04-24 Show GitHub Exploit DB Packet Storm
225692 4 警告 Joomla! - Joomla! における権限要件を回避される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2013-3056 2013-05-8 17:37 2013-04-24 Show GitHub Exploit DB Packet Storm
225693 7.2 危険 Novell - Novell ZENworks Desktop Management における権限を取得される脆弱性 CWE-Other
その他 		CVE-2013-1092 2013-05-8 16:56 2013-04-15 Show GitHub Exploit DB Packet Storm
225694 10 危険 Novell - Novell iPrint Client におけるスタックベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2013-1091 2013-05-8 16:53 2013-05-1 Show GitHub Exploit DB Packet Storm
225695 4.3 警告 ソフトバンク・テクノロジー株式会社 - Online Service Gate におけるパスワード管理不備の問題 CWE-noinfo
情報不足 		CVE-2013-2308 2013-05-8 14:01 2013-05-8 Show GitHub Exploit DB Packet Storm
225696 5 警告 Zend Technologies Ltd. - Zend Framework の Zend_Feed における任意のファイルを読まれる脆弱性 CWE-200
情報漏えい 		CVE-2012-5657 2013-05-8 12:12 2013-05-2 Show GitHub Exploit DB Packet Storm
225697 6.8 警告 GNU Project - glibc の stdio-common/vfprintf.c における整数オーバーフローの脆弱性 CWE-189
数値処理の問題 		CVE-2012-0864 2013-05-8 12:11 2012-02-17 Show GitHub Exploit DB Packet Storm
225698 5 警告 GNU Project - glibc の RPC の実装におけるサービス運用妨害 (DoS) の脆弱性 CWE-399
リソース管理の問題 		CVE-2011-4609 2013-05-8 12:09 2011-12-13 Show GitHub Exploit DB Packet Storm
225699 6.8 警告 GNU Project - glibc の __tzfile_read 関数における整数オーバーフローの脆弱性 CWE-189
数値処理の問題 		CVE-2009-5029 2013-05-8 12:08 2009-06-1 Show GitHub Exploit DB Packet Storm
225700 5 警告 NextApp, Inc. - Echo の Java XML パーサにおける任意のファイルを読まれる脆弱性 CWE-20
不適切な入力確認 		CVE-2009-5135 2013-05-8 10:51 2009-02-24 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 28, 2026, 4:16 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
213411 8.8 HIGH
Network 		ffmpeg ffmpeg FFmpeg through 4.3 has a heap-based buffer overflow in avio_get_str in libavformat/aviobuf.c because dnn_backend_native.c calls ff_dnn_load_model_native and a certain index check is omitted. CWE-787
 Out-of-bounds Write 		CVE-2020-14212 2024-11-21 14:02 2020-06-17 Show GitHub Exploit DB Packet Storm
213412 6.1 MEDIUM
Network 		monitorapp web_application_firewall
application_insight_web_application 		Reflected Cross-Site Scripting (XSS) vulnerability in MONITORAPP WAF in which script can be executed when responding to Request URL information. It provides a function to response to Request URL info… CWE-79
Cross-site Scripting 		CVE-2020-14210 2024-11-21 14:02 2020-06-17 Show GitHub Exploit DB Packet Storm
213413 6.5 MEDIUM
Network 		satoshilabs trezor_model_t_firmware
trezor_one_firmware 		BIP-143 in the Bitcoin protocol specification mishandles the signing of a Segwit transaction, which allows attackers to trick a user into making two signatures in certain cases, potentially leading t… CWE-347
 Improper Verification of Cryptographic Signature 		CVE-2020-14199 2024-11-21 14:02 2020-06-17 Show GitHub Exploit DB Packet Storm
213414 8.1 HIGH
Network 		fasterxml
netapp
debian
oracle 		jackson-databind
steelstore_cloud_integrated_storage
active_iq_unified_manager
debian_linux
agile_plm
banking_digital_experience
communications_instant_messaging_server
communica… 		FasterXML jackson-databind 2.x before 2.9.10.5 mishandles the interaction between serialization gadgets and typing, related to org.jsecurity.realm.jndi.JndiRealmFactory (aka org.jsecurity). CWE-502
 Deserialization of Untrusted Data 		CVE-2020-14195 2024-11-21 14:02 2020-06-17 Show GitHub Exploit DB Packet Storm
213415 7.5 HIGH
Network 		jerryscript jerryscript An issue was discovered in ecma/operations/ecma-container-object.c in JerryScript 2.2.0. Operations with key/value pairs did not consider the case where garbage collection is triggered after the key … CWE-125
Out-of-bounds Read 		CVE-2020-14163 2024-11-21 14:02 2020-06-16 Show GitHub Exploit DB Packet Storm
213416 8.8 HIGH
Network 		connectwise automate_api By using an Automate API in ConnectWise Automate before 2020.5.178, a remote authenticated user could execute commands and/or modifications within an individual Automate instance by triggering an SQL… CWE-89
SQL Injection 		CVE-2020-14159 2024-11-21 14:02 2020-06-16 Show GitHub Exploit DB Packet Storm
213417 8.8 HIGH
Network 		openbmc-project openbmc user_channel/passwd_mgr.cpp in OpenBMC phosphor-host-ipmid before 2020-04-03 does not ensure that /etc/ipmi-pass has strong file permissions. CWE-276
Incorrect Default Permissions  		CVE-2020-14156 2024-11-21 14:02 2020-06-16 Show GitHub Exploit DB Packet Storm
213418 7.5 HIGH
Network 		troglobit uftpd In uftpd before 2.12, handle_CWD in ftpcmd.c mishandled the path provided by the user, causing a NULL pointer dereference and denial of service, as demonstrated by a CWD /.. command. CWE-476
 NULL Pointer Dereference 		CVE-2020-14149 2024-11-21 14:02 2020-06-16 Show GitHub Exploit DB Packet Storm
213419 7.5 HIGH
Network 		barton
debian
fedoraproject 		ngircd
debian_linux
fedora 		The Server-Server protocol implementation in ngIRCd before 26~rc2 allows an out-of-bounds access, as demonstrated by the IRC_NJOIN() function. CWE-125
Out-of-bounds Read 		CVE-2020-14148 2024-11-21 14:02 2020-06-16 Show GitHub Exploit DB Packet Storm
213420 7.7 HIGH
Network 		redislabs
oracle
suse
debian 		redis
communications_operations_monitor
linux_enterprise
debian_linux 		An integer overflow in the getnum function in lua_struct.c in Redis before 6.0.3 allows context-dependent attackers with permission to run Lua code in a Redis session to cause a denial of service (me… CWE-787
CWE-190
 Out-of-bounds Write
 Integer Overflow or Wraparound 		CVE-2020-14147 2024-11-21 14:02 2020-06-16 Show GitHub Exploit DB Packet Storm