Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 30, 2026, 6 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
225801 2.6 注意 アドビシステムズ - Adobe Reader X における Sandbox 機能が回避される脆弱性 CWE-Other
その他
- 2013-05-31 12:04 2013-05-31 Show GitHub Exploit DB Packet Storm
225802 2.6 注意 アップル - Safari における情報漏えいの脆弱性 CWE-Other
その他
- 2013-05-31 12:03 2013-05-31 Show GitHub Exploit DB Packet Storm
225803 7.2 危険 Google
LG Electronics
- LG Optimus G E973 上の Android 用 LG Hidden Menu における任意のコマンドを実行される脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2013-3666 2013-05-30 16:39 2013-05-23 Show GitHub Exploit DB Packet Storm
225804 6.8 警告 IBM - UNIX 用の IBM Sterling Connect:Direct におけるファイルシステムの読み取り権限および書き込み権限を回避される脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2013-2989 2013-05-30 16:37 2013-05-14 Show GitHub Exploit DB Packet Storm
225805 4.3 警告 IBM - IBM Tivoli Monitoring の Tivoli Enterprise Portal browser クライアントにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2013-0576 2013-05-30 16:36 2013-05-17 Show GitHub Exploit DB Packet Storm
225806 4.3 警告 IBM - IBM WebSphere DataPower SOA アプライアンスにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2013-0499 2013-05-30 16:34 2013-05-17 Show GitHub Exploit DB Packet Storm
225807 7.2 危険 レッドハット - Red Hat livecd-tools における権限を取得される脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2013-2069 2013-05-30 14:07 2013-05-23 Show GitHub Exploit DB Packet Storm
225808 4.9 警告 マイクロソフト - Microsoft Windows の win32k.sys の EPATHOBJ::bFlatten 関数におけるサービス運用妨害 (DoS) の脆弱性 CWE-22
パス・トラバーサル
CVE-2013-3661 2013-05-29 16:54 2013-05-17 Show GitHub Exploit DB Packet Storm
225809 5 警告 IBM - IBM InfoSphere Optim Data Growth for Oracle E-Business Suite における重要な情報を取得される脆弱性 CWE-255
証明書・パスワード管理
CVE-2013-2959 2013-05-29 16:37 2013-05-13 Show GitHub Exploit DB Packet Storm
225810 3.5 注意 IBM - IBM InfoSphere Optim Data Growth for Oracle E-Business Suite におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2013-2957 2013-05-29 16:37 2013-05-13 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 31, 2026, 4:16 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
210111 7.8 HIGH
Local
pnotes.net_project pnotes.net A File Upload Vulnerability in PNotes - Andrey Gruber PNotes.NET v3.8.1.2 allows a local attacker to execute arbitrary code via the Miscellaneous " External Programs by uploading the malicious .exe f… CWE-434
 Unrestricted Upload of File with Dangerous Type 
CVE-2020-22721 2024-11-21 14:13 2020-08-15 Show GitHub Exploit DB Packet Storm
210112 7.8 HIGH
Local
rapidscada rapid_scada Rapid Software LLC Rapid SCADA 5.8.0 is affected by a local privilege escalation vulnerability in the ScadaAgentSvc.exe executable file. An attacker can obtain admin privileges by placing a malicious… CWE-434
 Unrestricted Upload of File with Dangerous Type 
CVE-2020-22722 2024-11-21 14:13 2020-08-15 Show GitHub Exploit DB Packet Storm
210113 7.8 HIGH
Local
ogg_video_tools_project ogg_video_tools Buffer Overflow vulnerability in ExtractorInformation function in streamExtractor.cpp in oggvideotools 0.9.1 allows remaote attackers to run arbitrary code via opening of crafted ogg file. CWE-787
 Out-of-bounds Write
CVE-2020-21724 2024-11-21 14:12 2023-08-23 Show GitHub Exploit DB Packet Storm
210114 7.8 HIGH
Local
freeimage_project freeimage Buffer Overflow vulnerability in function LoadPixelDataRLE8 in PluginBMP.cpp in FreeImage 3.18.0 allows remote attackers to run arbitrary code and cause other impacts via crafted image file. CWE-120
Classic Buffer Overflow
CVE-2020-21427 2024-11-21 14:12 2023-08-23 Show GitHub Exploit DB Packet Storm
210115 7.5 HIGH
Network
openvpn openvpn Control Channel in OpenVPN 2.4.7 and earlier allows remote attackers to cause a denial of service via crafted reset packet. NVD-CWE-noinfo
CVE-2020-20813 2024-11-21 14:12 2023-08-23 Show GitHub Exploit DB Packet Storm
210116 7.5 HIGH
Network
phpok phpok SQL injection vulnerability in PHPOK v.5.4. allows a remote attacker to obtain sensitive information via the _userlist function in framerwork/phpok_call.php file. CWE-89
SQL Injection
CVE-2020-21486 2024-11-21 14:12 2023-06-21 Show GitHub Exploit DB Packet Storm
210117 6.1 MEDIUM
Network
taogogo taocms Cross Site Scripting vulnerability in taogogo taoCMS v.2.5 beta5.1 allows remote attacker to execute arbitrary code via the name field in admin.php. CWE-79
Cross-site Scripting
CVE-2020-20725 2024-11-21 14:12 2023-06-21 Show GitHub Exploit DB Packet Storm
210118 4.8 MEDIUM
Network
nodcms nodcms Cross Site Scripting vulnerability in khodakhah NodCMS v.3.0 allows a remote attacker to execute arbitrary code and gain access to senstivie information via a crafted script to the address parameter. CWE-79
Cross-site Scripting
CVE-2020-20697 2024-11-21 14:12 2023-06-21 Show GitHub Exploit DB Packet Storm
210119 7.5 HIGH
Network
portfoliocms_project portfoliocms Westbrookadmin portfolioCMS v1.05 allows attackers to bypass password validation and access sensitive information via session fixation. CWE-287
Improper Authentication
CVE-2020-20402 2024-11-21 14:12 2023-02-1 Show GitHub Exploit DB Packet Storm
210120 8.8 HIGH
Network
ibarn_project ibarn File upload vulnerability in function upload in action/Core.class.php in zhimengzhe iBarn 1.5 allows remote attackers to run arbitrary code via avatar upload to index.php. CWE-434
 Unrestricted Upload of File with Dangerous Type 
CVE-2020-20588 2024-11-21 14:12 2022-12-16 Show GitHub Exploit DB Packet Storm