Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 24, 2026, 4 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
225881 4.3 警告 IBM - IBM Security AppScan Enterprise および IBM Rational Policy Tester におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2013-0473 2013-04-2 15:03 2013-03-25 Show GitHub Exploit DB Packet Storm
225882 6.8 警告 IBM - IBM Tivoli Endpoint Manager の SUA アプリケーションにおけるクロスサイトリクエストフォージェリの脆弱性 CWE-352
同一生成元ポリシー違反
CVE-2013-0452 2013-04-2 14:59 2013-03-20 Show GitHub Exploit DB Packet Storm
225883 5 警告 Digium - 複数の Asterisk 製品におけるサービス運用妨害 (デーモンクラッシュ) 状態にされる脆弱性 CWE-119
バッファエラー
CVE-2013-2686 2013-04-2 14:35 2013-03-27 Show GitHub Exploit DB Packet Storm
225884 7.5 危険 Digium - Asterisk Open Source の res/res_format_attr_h264.c におけるスタックベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー
CVE-2013-2685 2013-04-2 14:35 2013-03-27 Show GitHub Exploit DB Packet Storm
225885 5 警告 Digium - 複数の Asterisk 製品の SIP チャンネルドライバにおけるアカウント名を列挙される脆弱性 CWE-200
情報漏えい
CVE-2013-2264 2013-04-2 14:34 2013-02-21 Show GitHub Exploit DB Packet Storm
225886 7.5 危険 Synchroweb Technology - Synchroweb Technology SynConnect の index.php における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2013-2690 2013-04-2 14:03 2013-03-28 Show GitHub Exploit DB Packet Storm
225887 - - ヒューレット・パッカード - ** 削除 ** HP ProCurve 1700-8 および 1700-24 スイッチにおけるクロスサイトリクエストフォージェリの脆弱性 - CVE-2012-5216 2013-04-2 13:53 2013-03-25 Show GitHub Exploit DB Packet Storm
225888 4.3 警告 アップル
Google
- Google Chrome におけるクロスサイトスクリプティング攻撃を実行される脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2011-3058 2013-04-2 11:33 2012-03-28 Show GitHub Exploit DB Packet Storm
225889 4.3 警告 アルバネットワークス株式会社 - Mobility Controller で使用される Aruba Networks ArubaOS におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2013-2290 2013-04-1 20:54 2013-03-18 Show GitHub Exploit DB Packet Storm
225890 7.8 危険 シスコシステムズ - Cisco IOS の IP Service Level Agreement 機能におけるサービス運用妨害 (デバイスリロード) の脆弱性 CWE-119
バッファエラー
CVE-2013-1148 2013-04-1 20:47 2013-02-8 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 24, 2026, 4:05 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
210571 7.5 HIGH
Network
grin grin Grin 3.0.0 before 4.0.0 has insufficient validation of data related to Mimblewimble. CWE-345
 Insufficient Verification of Data Authenticity
CVE-2020-15899 2024-11-21 14:06 2020-07-29 Show GitHub Exploit DB Packet Storm
210572 9.8 CRITICAL
Network
artifex
canonical
opensuse
ghostscript
ubuntu_linux
leap
A memory corruption issue was found in Artifex Ghostscript 9.50 and 9.52. Use of a non-standard PostScript operator can allow overriding of file access controls. The 'rsearch' calculation for the 'po… CWE-787
CWE-191
 Out-of-bounds Write
 Integer Underflow (Wrap or Wraparound)
CVE-2020-15900 2024-11-21 14:06 2020-07-29 Show GitHub Exploit DB Packet Storm
210573 5.3 MEDIUM
Local
qemu
debian
canonical
qemu
debian_linux
ubuntu_linux
hw/net/xgmac.c in the XGMAC Ethernet controller in QEMU before 07-20-2020 has a buffer overflow. This occurs during packet transmission and affects the highbank and midway emulated machines. A guest … CWE-787
 Out-of-bounds Write
CVE-2020-15863 2024-11-21 14:06 2020-07-29 Show GitHub Exploit DB Packet Storm
210574 9.9 CRITICAL
Network
rconfig rconfig rConfig 3.9.5 could allow a remote authenticated attacker to execute arbitrary code on the system, because of an error in the search.crud.php script. An attacker could exploit this vulnerability usin… NVD-CWE-noinfo
CVE-2020-15715 2024-11-21 14:06 2020-07-28 Show GitHub Exploit DB Packet Storm
210575 8.8 HIGH
Network
rconfig rconfig rConfig 3.9.5 is vulnerable to SQL injection. A remote authenticated attacker could send crafted SQL statements to the devices.crud.php script using the custom_Location parameter, which could allow t… CWE-89
SQL Injection
CVE-2020-15714 2024-11-21 14:06 2020-07-28 Show GitHub Exploit DB Packet Storm
210576 8.8 HIGH
Network
rconfig rconfig rConfig 3.9.5 is vulnerable to SQL injection. A remote authenticated attacker could send crafted SQL statements to the devices.php script using the sortBy parameter, which could allow the attacker to… CWE-89
SQL Injection
CVE-2020-15713 2024-11-21 14:06 2020-07-28 Show GitHub Exploit DB Packet Storm
210577 4.3 MEDIUM
Network
rconfig rconfig rConfig 3.9.5 could allow a remote authenticated attacker to traverse directories on the system. An attacker could send a crafted request to the ajaxGetFileByPath.php script containing hexadecimal en… CWE-22
Path Traversal
CVE-2020-15712 2024-11-21 14:06 2020-07-28 Show GitHub Exploit DB Packet Storm
210578 9.8 CRITICAL
Network
openbsd openbsd iked in OpenIKED, as used in OpenBSD through 6.7, allows authentication bypass because ca.c has the wrong logic for checking whether a public key matches. CWE-287
Improper Authentication
CVE-2020-16088 2024-11-21 14:06 2020-07-28 Show GitHub Exploit DB Packet Storm
210579 6.5 MEDIUM
Network
kde
debian
kmail
debian_linux
KDE KMail 19.12.3 (aka 5.13.3) engages in unencrypted POP3 communication during times when the UI indicates that encryption is in use. CWE-319
Cleartext Transmission of Sensitive Information
CVE-2020-15954 2024-11-21 14:06 2020-07-27 Show GitHub Exploit DB Packet Storm
210580 7.4 HIGH
Network
libetpan_project
libmailcore
fedoraproject
debian
libetpan
mailcore2
fedora
debian_linux
LibEtPan through 1.9.4, as used in MailCore 2 through 0.6.3 and other products, has a STARTTLS buffering issue that affects IMAP, SMTP, and POP3. When a server sends a "begin TLS" response, the clien… CWE-74
Injection
CVE-2020-15953 2024-11-21 14:06 2020-07-27 Show GitHub Exploit DB Packet Storm