Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 19, 2026, 6 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
225911 2.6 注意 サイボウズ - サイボウズ ガルーンにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2013-0702 2013-02-8 12:01 2013-02-8 Show GitHub Exploit DB Packet Storm
225912 6.5 警告 サイボウズ - サイボウズ ガルーンにおける SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2013-0701 2013-02-8 12:01 2013-02-8 Show GitHub Exploit DB Packet Storm
225913 4.3 警告 Tobias Bathge - WordPress 用 WP-Table Reloaded モジュール におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2013-1463 2013-02-8 11:19 2013-01-27 Show GitHub Exploit DB Packet Storm
225914 6.8 警告 アップル - 複数の Apple 製品で使用される WebKit における任意のコードを実行される脆弱性 CWE-noinfo
情報不足
CVE-2012-3684 2013-02-7 17:53 2012-09-13 Show GitHub Exploit DB Packet Storm
225915 10 危険 シスコシステムズ - Cisco Unified IP Phone 7900 シリーズにおける任意のコードを実行される脆弱性 CWE-noinfo
情報不足
CVE-2012-5445 2013-02-7 17:40 2012-12-28 Show GitHub Exploit DB Packet Storm
225916 10 危険 Mozilla Foundation - 複数の Mozilla 製品のブラウザエンジンにおけるサービス運用妨害 (DoS) の脆弱性 CWE-noinfo
情報不足
CVE-2013-0770 2013-02-7 17:40 2013-01-8 Show GitHub Exploit DB Packet Storm
225917 6.8 警告 アップル - Apple iOS の ImageIO におけるメモリ二重解放の脆弱性 CWE-399
リソース管理の問題
CVE-2012-3726 2013-02-7 17:27 2012-09-20 Show GitHub Exploit DB Packet Storm
225918 3.3 注意 アップル - Apple iOS の DHCP コンポーネントにおける重要な情報を取得される脆弱性 CWE-200
情報漏えい
CVE-2012-3725 2013-02-7 17:20 2012-09-20 Show GitHub Exploit DB Packet Storm
225919 6.8 警告 アップル - 複数の Apple 製品で使用される CoreMedia におけるサービス運用妨害 (アプリケーションクラッシュ) の脆弱性 CWE-399
リソース管理の問題
CVE-2012-3722 2013-02-7 17:11 2012-09-20 Show GitHub Exploit DB Packet Storm
225920 9.3 危険 アップル - 複数の Apple 製品で使用される WebKit における任意のコードを実行される脆弱性 CWE-119
バッファエラー
CVE-2012-3679 2013-02-7 16:51 2012-07-25 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 19, 2026, 4:16 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
196931 2.3 LOW
Local
huawei mate_20_firmware
mate_20_x_firmware
mate_20_rs_firmware
magic2_firmware
HUAWEI Mate 20 versions earlier than 10.1.0.160(C00E160R3P8), HUAWEI Mate 20 X versions earlier than 10.1.0.135(C00E135R2P8), HUAWEI Mate 20 RS versions earlier than 10.1.0.160(C786E160R3P8), and Hon… CWE-22
Path Traversal
CVE-2020-9252 2024-11-21 14:40 2020-07-18 Show GitHub Exploit DB Packet Storm
196932 3.3 LOW
Local
huawei cloudengine_12800_firmware
cloudengine_5800_firmware
cloudengine_6800_firmware
cloudengine_7800_firmware
There is a information leak vulnerability in some Huawei products, and it could allow a local attacker to get information. The vulnerability is due to the improper management of the username. An atta… NVD-CWE-noinfo
CVE-2020-9102 2024-11-21 14:40 2020-07-18 Show GitHub Exploit DB Packet Storm
196933 6.1 MEDIUM
Network
apache airflow An issue was found in Apache Airflow versions 1.10.10 and below. A stored XSS vulnerability was discovered in the Chart pages of the the "classic" UI. CWE-79
Cross-site Scripting
CVE-2020-9485 2024-11-21 14:40 2020-07-17 Show GitHub Exploit DB Packet Storm
196934 5.4 MEDIUM
Network
silverstripe silverstripe In SilverStripe through 4.5, malicious users with a valid Silverstripe CMS login (usually CMS access) can craft profile information which can lead to XSS for other users through specially crafted log… CWE-79
Cross-site Scripting
CVE-2020-9311 2024-11-21 14:40 2020-07-16 Show GitHub Exploit DB Packet Storm
196935 8.8 HIGH
Network
silverstripe recipe
mimevalidator
Silverstripe CMS through 4.5 can be susceptible to script execution from malicious upload contents under allowed file extensions (for example HTML code in a TXT file). When these files are stored as … CWE-434
 Unrestricted Upload of File with Dangerous Type 
CVE-2020-9309 2024-11-21 14:40 2020-07-16 Show GitHub Exploit DB Packet Storm
196936 6.1 MEDIUM
Network
apache ofbiz XML-RPC request are vulnerable to unsafe deserialization and Cross-Site Scripting issues in Apache OFBiz 17.12.03 CWE-79
CWE-502
Cross-site Scripting
 Deserialization of Untrusted Data
CVE-2020-9496 2024-11-21 14:40 2020-07-16 Show GitHub Exploit DB Packet Storm
196937 9.8 CRITICAL
Network
netflix titus Netflix Titus, all versions prior to version v0.1.1-rc.274, uses Java Bean Validation (JSR 380) custom constraint validators. When building custom constraint violation error messages, different types… CWE-917
 Improper Neutralization of Special Elements used in an Expression Language Statement ('Expression Language Injection')
CVE-2020-9297 2024-11-21 14:40 2020-07-15 Show GitHub Exploit DB Packet Storm
196938 6.5 MEDIUM
Adjacent
huawei p30_firmware
p30_pro_firmware
HUAWEI P30 and HUAWEI P30 Pro smartphones with versions earlier than 10.1.0.123(C432E22R2P5) and versions earlier than 10.1.0.160(C00E160R2P8) have an information disclosure vulnerability. Certain WI… NVD-CWE-noinfo
CVE-2020-9260 2024-11-21 14:40 2020-07-10 Show GitHub Exploit DB Packet Storm
196939 5.5 MEDIUM
Local
huawei p30_firmware HUAWEI P30 smartphone with versions earlier than 10.1.0.135(C00E135R2P11) have an improper input verification vulnerability. An attribution in a module is not set correctly and some verification is l… CWE-20
 Improper Input Validation 
CVE-2020-9258 2024-11-21 14:40 2020-07-10 Show GitHub Exploit DB Packet Storm
196940 8.8 HIGH
Network
dlink dir-610_firmware D-Link DIR-610 devices allow Remote Command Execution via the cmd parameter to command.php. NOTE: This vulnerability only affects products that are no longer supported by the maintainer CWE-78
OS Command 
CVE-2020-9377 2024-11-21 14:40 2020-07-9 Show GitHub Exploit DB Packet Storm