Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 3, 2026, 6:08 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
225771 7.5 危険 D-Link Systems, Inc. - D-Link DIR-685 Xtreme N Storage Router の暗号化通信に脆弱性 CWE-310
暗号の問題
CVE-2011-4507 2013-06-26 13:44 2011-10-11 Show GitHub Exploit DB Packet Storm
225772 2.6 注意 サイボウズ - サイボウズLive for Android における WebView クラスに関する脆弱性 CWE-Other
その他
CVE-2013-3647 2013-06-26 13:41 2013-06-18 Show GitHub Exploit DB Packet Storm
225773 3.3 注意 ASUSTeK Computer Inc. - RT-N56U における管理パスワード漏えいの脆弱性 CWE-200
情報漏えい
CVE-2011-4497 2013-06-26 13:41 2011-08-26 Show GitHub Exploit DB Packet Storm
225774 5.8 警告 サイボウズ - サイボウズLive for Android において任意の Java のメソッドが実行される脆弱性 CWE-DesignError
CVE-2013-3646 2013-06-26 13:39 2013-06-18 Show GitHub Exploit DB Packet Storm
225775 10 危険 NJStar Software Company - NJStar Communicator にバッファオーバーフローの脆弱性 CWE-119
バッファエラー
CVE-2011-4040 2013-06-26 13:38 2011-11-2 Show GitHub Exploit DB Packet Storm
225776 7.5 危険 Mercator - Mercator SENTINEL に SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2011-1913 2013-06-26 12:29 2011-09-15 Show GitHub Exploit DB Packet Storm
225777 7.5 危険 アップル - Apple iOS における脆弱性に対するアップデート CWE-20
不適切な入力確認
CVE-2011-0228 2013-06-26 12:20 2011-07-27 Show GitHub Exploit DB Packet Storm
225778 10 危険 日立 - EUR Form Client における任意のコードを実行される脆弱性 CWE-noinfo
情報不足
CVE-2010-4773 2013-06-26 12:15 2010-11-15 Show GitHub Exploit DB Packet Storm
225779 6 警告 A51 D.O.O. - ActiveCollab のアクセス制御機能における問題 CWE-264
認可・権限・アクセス制御
CVE-2010-0215 2013-06-26 12:08 2010-10-7 Show GitHub Exploit DB Packet Storm
225780 2.1 注意 アップル - Apple Mac OS X の sso_util におけるパスワード漏えいの脆弱性 CWE-200
情報漏えい
CVE-2008-1578 2013-06-25 18:42 2008-05-28 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 3, 2026, 4:18 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
201461 8.8 HIGH
Network
phpipam phpipam An issue was discovered in tools/pass-change/result.php in phpIPAM 1.4. CSRF can be used to change the password of any user/admin, to escalate privileges, and to gain access to more data and function… CWE-352
 Origin Validation Error
CVE-2020-7988 2024-11-21 14:38 2020-03-5 Show GitHub Exploit DB Packet Storm
201462 7.5 HIGH
Network
bittorrent utorrent The bencoding parser in BitTorrent uTorrent through 3.5.5 (build 45505) misparses nested bencoded dictionaries, which allows a remote attacker to cause a denial of service. CWE-476
 NULL Pointer Dereference
CVE-2020-8437 2024-11-21 14:38 2020-03-3 Show GitHub Exploit DB Packet Storm
201463 2.5 LOW
Local
suse
opensuse
linux_enterprise_server
leap
A UNIX Symbolic Link (Symlink) Following vulnerability in chkstat of SUSE Linux Enterprise Server 12, SUSE Linux Enterprise Server 15, SUSE Linux Enterprise Server 11 set permissions intended for spe… - CVE-2020-8013 2024-11-21 14:38 2020-03-3 Show GitHub Exploit DB Packet Storm
201464 7.2 HIGH
Network
artica pandora_fms In Artica Pandora FMS 7.42, Web Admin users can execute arbitrary code by uploading a .php file via the Updater or Extension component. NOTE: The vendor reports that this is intended functionality CWE-434
 Unrestricted Upload of File with Dangerous Type 
CVE-2020-8500 2024-11-21 14:38 2020-03-3 Show GitHub Exploit DB Packet Storm
201465 9.8 CRITICAL
Network
pdf-image_project pdf-image Lack of input validation in pdf-image npm package version <= 2.0.0 may allow an attacker to run arbitrary code if PDF file path is constructed based on untrusted user input. CWE-20
 Improper Input Validation 
CVE-2020-8132 2024-11-21 14:38 2020-02-29 Show GitHub Exploit DB Packet Storm
201466 6.1 MEDIUM
Network
revealjs reveal.js Insufficient validation in cross-origin communication (postMessage) in reveal.js version 3.9.1 and earlier allow attackers to perform cross-site scripting attacks. CWE-79
Cross-site Scripting
CVE-2020-8127 2024-11-21 14:38 2020-02-29 Show GitHub Exploit DB Packet Storm
201467 7.5 HIGH
Network
yarnpkg yarn Arbitrary filesystem write vulnerability in Yarn before 1.22.0 allows attackers to write to any path on the filesystem and potentially lead to arbitrary code execution by forcing the user to install … CWE-22
Path Traversal
CVE-2020-8131 2024-11-21 14:38 2020-02-25 Show GitHub Exploit DB Packet Storm
201468 6.4 MEDIUM
Local
ruby-lang
debian
canonical
fedoraproject
opensuse
rake
debian_linux
ubuntu_linux
fedora
leap
There is an OS command injection vulnerability in Ruby Rake < 12.3.3 in Rake::FileList when supplying a filename that begins with the pipe character `|`. CWE-78
OS Command 
CVE-2020-8130 2024-11-21 14:38 2020-02-25 Show GitHub Exploit DB Packet Storm
201469 6.5 MEDIUM
Network
puppet puppet_agent
puppet
Previously, Puppet operated on a model that a node with a valid certificate was entitled to all information in the system and that a compromised certificate allowed access to everything in the infras… CWE-295
Improper Certificate Validation 
CVE-2020-7942 2024-11-21 14:38 2020-02-20 Show GitHub Exploit DB Packet Storm
201470 9.8 CRITICAL
Network
jyaml_project jyaml JYaml through 1.3 allows remote code execution during deserialization of a malicious payload through the load() function. NOTE: this is a discontinued product. CWE-502
 Deserialization of Untrusted Data
CVE-2020-8441 2024-11-21 14:38 2020-02-20 Show GitHub Exploit DB Packet Storm