Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 4, 2026, 4 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
225831 6.9 警告 Huawei - Huawei UTPS におけるバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2012-6568 2013-06-24 16:42 2012-09-22 Show GitHub Exploit DB Packet Storm
225832 7.5 危険 Raphael Zschorsch - TYPO3 用 jQuery autocomplete for indexed_search における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション 		CVE-2013-4634 2013-06-24 15:26 2013-06-3 Show GitHub Exploit DB Packet Storm
225833 4.3 警告 Catalin Florian Radut - Drupal 用 Zero Point テーマにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2013-1905 2013-06-24 15:24 2013-03-27 Show GitHub Exploit DB Packet Storm
225834 2.1 注意 Jordan Starcher - Drupal 用 CurvyCorners モジュールにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2013-1393 2013-06-24 15:20 2013-01-23 Show GitHub Exploit DB Packet Storm
225835 6.9 警告 Fabrice Bellard - Xen で使用される Qemu の qemu guest エージェントにおける特定のファイルを読まれる脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2013-2007 2013-06-21 15:42 2013-04-24 Show GitHub Exploit DB Packet Storm
225836 7.9 危険 シマンテック - Symantec Endpoint Protection Manager および Symantec Endpoint Protection Center におけるバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2013-1612 2013-06-21 15:09 2013-06-18 Show GitHub Exploit DB Packet Storm
225837 4.3 警告 Google - Google Chrome の Flash プラグインにおける重要な情報を取得される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2013-2866 2013-06-21 15:08 2013-06-18 Show GitHub Exploit DB Packet Storm
225838 3.5 注意 IBM - IBM Sterling Control Center におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング（XSS） 		CVE-2013-2969 2013-06-21 14:59 2013-06-11 Show GitHub Exploit DB Packet Storm
225839 6.3 警告 IBM - IBM Sterling Control Center におけるサービス運用妨害 (DoS) の脆弱性 CWE-119
バッファエラー 		CVE-2013-2968 2013-06-21 14:58 2013-06-11 Show GitHub Exploit DB Packet Storm
225840 7.8 危険 日本電気 - NEC Mobile Handset におけるサービス運用妨害 (DoS) の脆弱性 CWE-20
不適切な入力確認 		CVE-2007-5557 2013-06-21 14:55 2007-10-18 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 5, 2026, 4:11 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
201571 5.4 MEDIUM
Network 		nextcloud contacts A missing file type check in Nextcloud Contacts 3.3.0 allows a malicious user to upload malicious SVG files to perform cross-site scripting (XSS) attacks. CWE-79
Cross-site Scripting 		CVE-2020-8281 2024-11-21 14:38 2021-01-7 Show GitHub Exploit DB Packet Storm
201572 5.4 MEDIUM
Network 		nextcloud contacts A missing file type check in Nextcloud Contacts 3.4.0 allows a malicious user to upload SVG files as PNG files to perform cross-site scripting (XSS) attacks. CWE-79
Cross-site Scripting 		CVE-2020-8280 2024-11-21 14:38 2021-01-7 Show GitHub Exploit DB Packet Storm
201573 4.3 MEDIUM
Network 		citrix secure_mail Citrix Secure Mail for Android before 20.11.0 suffers from improper access control allowing unauthenticated access to read limited calendar related data stored within Secure Mail. Note that a malicio… CWE-269
 Improper Privilege Management 		CVE-2020-8275 2024-11-21 14:38 2021-01-7 Show GitHub Exploit DB Packet Storm
201574 6.5 MEDIUM
Network 		citrix secure_mail Citrix Secure Mail for Android before 20.11.0 suffers from Improper Control of Generation of Code ('Code Injection') by allowing unauthenticated access to read data stored within Secure Mail. Note th… CWE-94
Code Injection 		CVE-2020-8274 2024-11-21 14:38 2021-01-7 Show GitHub Exploit DB Packet Storm
201575 6.1 MEDIUM
Network 		rubyonrails rails In actionpack gem >= 6.0.0, a possible XSS vulnerability exists when an application is running in development mode allowing an attacker to send or embed (in another page) a specially crafted URL whic… CWE-79
Cross-site Scripting 		CVE-2020-8264 2024-11-21 14:38 2021-01-7 Show GitHub Exploit DB Packet Storm
201576 8.1 HIGH
Network 		nodejs
debian
fedoraproject
oracle
siemens 		node.js
debian_linux
fedora
graalvm
sinec_infrastructure_network_services 		Node.js versions before 10.23.1, 12.20.1, 14.15.4, 15.5.1 are vulnerable to a use-after-free bug in its TLS implementation. When writing to a TLS enabled socket, node::StreamBase::Write calls node::T… CWE-416
 Use After Free 		CVE-2020-8265 2024-11-21 14:38 2021-01-7 Show GitHub Exploit DB Packet Storm
201577 6.1 MEDIUM
Network 		mendix mendixsso MendixSSO <= 2.1.1 contains endpoints that make use of the openid handler, which is suffering from a Cross-Site Scripting vulnerability via the URL path. This is caused by the reflection of user-supp… CWE-79
Cross-site Scripting 		CVE-2020-8160 2024-11-21 14:38 2021-01-7 Show GitHub Exploit DB Packet Storm
201578 7.8 HIGH
Local 		backblaze backblaze Backblaze for Windows and Backblaze for macOS before 7.0.0.439 suffer from improper privilege management in `bztransmit` helper due to lack of permission handling and validation before creation of cl… CWE-269
 Improper Privilege Management 		CVE-2020-8290 2024-11-21 14:38 2020-12-27 Show GitHub Exploit DB Packet Storm
201579 7.8 HIGH
Local 		backblaze backblaze Backblaze for Windows before 7.0.1.433 and Backblaze for macOS before 7.0.1.434 suffer from improper certificate validation in `bztransmit` helper due to hardcoded whitelist of strings in URLs where … CWE-295
Improper Certificate Validation  		CVE-2020-8289 2024-11-21 14:38 2020-12-27 Show GitHub Exploit DB Packet Storm
201580 9.8 CRITICAL
Network 		trendmicro interscan_web_security_virtual_appliance A command injection vulnerability in Trend Micro InterScan Web Security Virtual Appliance 6.5 SP2, with the improved password hashing method enabled, could allow an unauthenticated attacker to execut… CWE-78
OS Command  		CVE-2020-8466 2024-11-21 14:38 2020-12-18 Show GitHub Exploit DB Packet Storm