Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 21, 2026, 6:01 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
225701 6.5 警告 IBM - IBM Security AppScan Enterprise における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2013-0511 2013-04-2 15:12 2013-03-25 Show GitHub Exploit DB Packet Storm
225702 4.3 警告 IBM - IBM Security AppScan Enterprise におけるテストアカウントをハイジャックされる脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2013-0510 2013-04-2 15:11 2013-03-25 Show GitHub Exploit DB Packet Storm
225703 4.3 警告 IBM - IBM Security AppScan Enterprise および Rational Policy Tester における認証資格情報を取得される脆弱性 CWE-200
情報漏えい
CVE-2013-0474 2013-04-2 15:09 2013-03-25 Show GitHub Exploit DB Packet Storm
225704 4.3 警告 IBM - IBM Security AppScan Enterprise および IBM Rational Policy Tester におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2013-0473 2013-04-2 15:03 2013-03-25 Show GitHub Exploit DB Packet Storm
225705 6.8 警告 IBM - IBM Tivoli Endpoint Manager の SUA アプリケーションにおけるクロスサイトリクエストフォージェリの脆弱性 CWE-352
同一生成元ポリシー違反
CVE-2013-0452 2013-04-2 14:59 2013-03-20 Show GitHub Exploit DB Packet Storm
225706 5 警告 Digium - 複数の Asterisk 製品におけるサービス運用妨害 (デーモンクラッシュ) 状態にされる脆弱性 CWE-119
バッファエラー
CVE-2013-2686 2013-04-2 14:35 2013-03-27 Show GitHub Exploit DB Packet Storm
225707 7.5 危険 Digium - Asterisk Open Source の res/res_format_attr_h264.c におけるスタックベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー
CVE-2013-2685 2013-04-2 14:35 2013-03-27 Show GitHub Exploit DB Packet Storm
225708 5 警告 Digium - 複数の Asterisk 製品の SIP チャンネルドライバにおけるアカウント名を列挙される脆弱性 CWE-200
情報漏えい
CVE-2013-2264 2013-04-2 14:34 2013-02-21 Show GitHub Exploit DB Packet Storm
225709 7.5 危険 Synchroweb Technology - Synchroweb Technology SynConnect の index.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2013-2690 2013-04-2 14:03 2013-03-28 Show GitHub Exploit DB Packet Storm
225710 - - ヒューレット・パッカード - ** 削除 ** HP ProCurve 1700-8 および 1700-24 スイッチにおけるクロスサイトリクエストフォージェリの脆弱性 - CVE-2012-5216 2013-04-2 13:53 2013-03-25 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 21, 2026, 4:10 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
211061 5.3 MEDIUM
Network
prestashop prestashop In PrestaShop from version 1.5.0.0 and before 1.7.6.6, there is information exposure in the upload directory. The problem is fixed in version 1.7.6.6. A possible workaround is to add an empty index.p… CWE-200
Information Exposure
CVE-2020-15081 2024-11-21 14:04 2020-07-3 Show GitHub Exploit DB Packet Storm
211062 5.3 MEDIUM
Network
prestashop prestashop In PrestaShop from version 1.7.4.0 and before version 1.7.6.6, some files should not be in the release archive, and others should not be accessible. The problem is fixed in version 1.7.6.6 A possible… CWE-862
 Missing Authorization
CVE-2020-15080 2024-11-21 14:04 2020-07-3 Show GitHub Exploit DB Packet Storm
211063 5.4 MEDIUM
Network
prestashop prestashop In PrestaShop from version 1.5.0.0 and before version 1.7.6.6, there is improper access control in Carrier page, Module Manager and Module Positions. The problem is fixed in version 1.7.6.6 NVD-CWE-noinfo
CVE-2020-15079 2024-11-21 14:04 2020-07-3 Show GitHub Exploit DB Packet Storm
211064 8.8 HIGH
Network
factorfx open_computer_software_inventory_next_generation OCS Inventory NG 2.7 allows Remote Command Execution via shell metacharacters to require/commandLine/CommandLine.php because mib_file in plugins/main_sections/ms_config/ms_snmp_config.php is mishandl… CWE-78
OS Command 
CVE-2020-14947 2024-11-21 14:04 2020-07-1 Show GitHub Exploit DB Packet Storm
211065 8.8 HIGH
Network
squid-cache
fedoraproject
squid
fedora
An issue was discovered in http/ContentLengthInterpreter.cc in Squid before 4.12 and 5.x before 5.0.3. A Request Smuggling and Poisoning attack can succeed against the HTTP cache. The client sends an… CWE-444
HTTP Request Smuggling
CVE-2020-15049 2024-11-21 14:04 2020-07-1 Show GitHub Exploit DB Packet Storm
211066 8.8 HIGH
Network
prestosql presto In Presto before version 337, authenticated users can bypass authorization checks by directly accessing internal APIs. This impacts Presto server installations with secure internal communication conf… NVD-CWE-Other
CVE-2020-15087 2024-11-21 14:04 2020-07-1 Show GitHub Exploit DB Packet Storm
211067 6.1 MEDIUM
Local
mirumee saleor In Saleor Storefront before version 2.10.3, request data used to authenticate customers was inadvertently cached in the browser's local storage mechanism, including credentials. A malicious user with… - CVE-2020-15085 2024-11-21 14:04 2020-07-1 Show GitHub Exploit DB Packet Storm
211068 9.1 CRITICAL
Network
auth0 express-jwt In express-jwt (NPM package) up and including version 5.3.3, the algorithms entry to be specified in the configuration is not being enforced. When algorithms is not specified in the configuration, wi… CWE-863
 Incorrect Authorization
CVE-2020-15084 2024-11-21 14:04 2020-07-1 Show GitHub Exploit DB Packet Storm
211069 7.8 HIGH
Local
arswp windows_cleanup_assistant In Windows cleaning assistant 3.2, the driver file (AtpKrnl.sys) allows local users to cause a denial of service (BSOD) or possibly have unspecified other impact because of not validating input value… CWE-20
 Improper Input Validation 
CVE-2020-14957 2024-11-21 14:04 2020-07-1 Show GitHub Exploit DB Packet Storm
211070 7.8 HIGH
Local
arswp windows_cleanup_assistant In Windows cleaning assistant 3.2, the driver file (AtpKrnl.sys) allows local users to cause a denial of service (BSOD) or possibly have unspecified other impact because of not validating input value… CWE-20
 Improper Input Validation 
CVE-2020-14956 2024-11-21 14:04 2020-07-1 Show GitHub Exploit DB Packet Storm