Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 31, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
225811 7.5 危険 IBM - IBM InfoSphere Optim Data Growth for Oracle E-Business Suite における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2013-2956 2013-05-29 16:36 2013-05-13 Show GitHub Exploit DB Packet Storm
225812 3.5 注意 IBM - IBM InfoSphere Optim Data Growth for Oracle E-Business Suite におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2013-2955 2013-05-29 16:35 2013-05-13 Show GitHub Exploit DB Packet Storm
225813 5 警告 IBM - IBM InfoSphere Optim Data Growth for Oracle E-Business Suite におけるアクセス権を取得される脆弱性 CWE-287
不適切な認証 		CVE-2013-2954 2013-05-29 16:35 2013-05-13 Show GitHub Exploit DB Packet Storm
225814 4.3 警告 IBM - IBM InfoSphere Optim Data Growth for Oracle E-Business Suite における SSL サーバになりすまされる脆弱性 CWE-310
暗号の問題 		CVE-2013-2953 2013-05-29 16:30 2013-05-13 Show GitHub Exploit DB Packet Storm
225815 5.8 警告 シスコシステムズ - iOS 上で稼働する Cisco WebEx における SSL サーバになりすまされる脆弱性 CWE-20
不適切な入力確認 		CVE-2012-6399 2013-05-29 16:30 2013-05-27 Show GitHub Exploit DB Packet Storm
225816 5 警告 Moodle - Moodle の lib/formslib.php におけるフォームデータのフィルタリングを回避される脆弱性 CWE-20
不適切な入力確認 		CVE-2013-2083 2013-05-29 14:34 2013-05-21 Show GitHub Exploit DB Packet Storm
225817 5 警告 Moodle - Moodle における重要な情報を取得される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2013-2082 2013-05-29 14:33 2013-05-21 Show GitHub Exploit DB Packet Storm
225818 4.3 警告 Moodle - Moodle における重要なサイト情報を取得される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2013-2081 2013-05-29 14:33 2013-05-21 Show GitHub Exploit DB Packet Storm
225819 4 警告 Moodle - Moodle の core_grade コンポーネントにおける重要な情報を取得される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2013-2080 2013-05-29 14:30 2013-05-21 Show GitHub Exploit DB Packet Storm
225820 2.6 注意 jig.jp co., ltd. - モバツイtouch の Content Provider にアクセス制限不備の脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2013-2318 2013-05-29 14:01 2013-05-29 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 31, 2026, 4:16 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
213631 7.8 HIGH
Local 		pi-hole pi-hole Pi-hole through 5.0 allows code injection in piholedhcp (the Static DHCP Leases section) by modifying Teleporter backup files and then restoring them. This occurs in settings.php. To exploit this, an… CWE-862
 Missing Authorization 		CVE-2020-14971 2024-11-21 14:04 2020-06-23 Show GitHub Exploit DB Packet Storm
213632 4.8 MEDIUM
Network 		tp-link tl-wr740n_firmware
tl-wr740nd_firmware 		On TP-Link TL-WR740N v4 and TL-WR740ND v4 devices, an attacker with access to the admin panel can inject HTML code and change the HTML context of the target pages and stations in the access-control s… CWE-79
Cross-site Scripting 		CVE-2020-14965 2024-11-21 14:04 2020-06-23 Show GitHub Exploit DB Packet Storm
213633 9.8 CRITICAL
Network 		draytek vigor300b_firmware
vigor2960_firmware
vigor3900_firmware 		A stack-based buffer overflow on DrayTek Vigor2960, Vigor3900, and Vigor300B devices before 1.5.1.1 allows remote attackers to execute arbitrary code via the formuserphonenumber parameter in an authu… CWE-787
 Out-of-bounds Write 		CVE-2020-14993 2024-11-21 14:04 2020-06-23 Show GitHub Exploit DB Packet Storm
213634 7.5 HIGH
Network 		herac tuxguitar An issue was discovered in io/gpx/GPXDocumentReader.java in TuxGuitar 1.5.4. It uses misconfigured XML parsers, leading to XXE while loading GP6 (.gpx) and GP7 (.gp) tablature files. CWE-611
XXE 		CVE-2020-14940 2024-11-21 14:04 2020-06-23 Show GitHub Exploit DB Packet Storm
213635 7.8 HIGH
Local 		freedroid freedroidrpg An issue was discovered in savestruct_internal.c in FreedroidRPG 1.0rc2. Saved game files are composed of Lua scripts that recover a game's state. A file can be modified to put any Lua code inside, l… CWE-20
 Improper Input Validation  		CVE-2020-14939 2024-11-21 14:04 2020-06-23 Show GitHub Exploit DB Packet Storm
213636 9.8 CRITICAL
Network 		freedroid freedroidrpg An issue was discovered in map.c in FreedroidRPG 1.0rc2. It assumes lengths of data sets read from saved game files. It copies data from a file into a fixed-size heap-allocated buffer without size ve… CWE-787
 Out-of-bounds Write 		CVE-2020-14938 2024-11-21 14:04 2020-06-23 Show GitHub Exploit DB Packet Storm
213637 4.3 MEDIUM
Network 		globalradar bsa_radar downloadFile.ashx in the Administrator section of the Surveillance module in Global RADAR BSA Radar 1.6.7234.24750 and earlier allows users to download transaction files. When downloading the files, … CWE-22
Path Traversal 		CVE-2020-14946 2024-11-21 14:04 2020-06-23 Show GitHub Exploit DB Packet Storm
213638 8.8 HIGH
Network 		globalradar bsa_radar A privilege escalation vulnerability exists within Global RADAR BSA Radar 1.6.7234.24750 and earlier that allows an authenticated, low-privileged user to escalate their privileges to administrator ri… NVD-CWE-noinfo
CVE-2020-14945 2024-11-21 14:04 2020-06-23 Show GitHub Exploit DB Packet Storm
213639 9.8 CRITICAL
Network 		globalradar bsa_radar Global RADAR BSA Radar 1.6.7234.24750 and earlier lacks valid authorization controls in multiple functions. This can allow for manipulation and takeover of user accounts if successfully exploited. Th… CWE-862
 Missing Authorization 		CVE-2020-14944 2024-11-21 14:04 2020-06-23 Show GitHub Exploit DB Packet Storm
213640 5.4 MEDIUM
Network 		globalradar bsa_radar The Firstname and Lastname parameters in Global RADAR BSA Radar 1.6.7234.24750 and earlier are vulnerable to stored cross-site scripting (XSS) via Update User Profile. CWE-79
Cross-site Scripting 		CVE-2020-14943 2024-11-21 14:04 2020-06-23 Show GitHub Exploit DB Packet Storm