Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 24, 2026, 6 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
225921 5 警告 Drupal - Drupal の Image モジュールにおけるサービス運用妨害 (DoS) の脆弱性 CWE-399
リソース管理の問題
CVE-2013-0316 2013-04-1 14:15 2013-02-20 Show GitHub Exploit DB Packet Storm
225922 2.1 注意 Elliot Pahl - Drupal 用 Drush Debian Packaging モジュールにおけるデータベースの認証情報を取得される脆弱性 CWE-noinfo
情報不足
CVE-2013-0260 2013-04-1 14:13 2013-01-30 Show GitHub Exploit DB Packet Storm
225923 2.1 注意 Boxes project - Drupal 用 Boxes モジュールにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2013-0259 2013-04-1 14:11 2013-01-23 Show GitHub Exploit DB Packet Storm
225924 6.8 警告 Attiks - Drupal 用 Google Authenticator login モジュールにおける認証を回避される脆弱性 CWE-287
不適切な認証
CVE-2013-0258 2013-04-1 14:08 2013-01-29 Show GitHub Exploit DB Packet Storm
225925 5 警告 David Alkire - Drupal 用 email2image モジュールにおけるユーザの電子メール情報のイメージ画像を読まれる脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2013-0257 2013-04-1 14:06 2013-01-30 Show GitHub Exploit DB Packet Storm
225926 5 警告 Bart Feenstra - Drupal 用 Payment モジュールにおける任意の決済情報を読まれる脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2013-0182 2013-04-1 14:03 2013-01-9 Show GitHub Exploit DB Packet Storm
225927 2.6 注意 Thomas Seidl - Drupal 用 Search API モジュールにおけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2013-0181 2013-04-1 13:46 2013-01-9 Show GitHub Exploit DB Packet Storm
225928 9.3 危険 DELL EMC (旧 EMC Corporation) - EMC Smarts Network Configuration Manager における任意のコードを実行される脆弱性 CWE-287
不適切な認証
CVE-2013-0935 2013-03-29 16:11 2013-03-28 Show GitHub Exploit DB Packet Storm
225929 7.5 危険 Google - Google Chrome における脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2013-0925 2013-03-29 16:10 2013-03-26 Show GitHub Exploit DB Packet Storm
225930 7.5 危険 Google - Google Chrome の拡張機能における脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2013-0924 2013-03-29 16:08 2013-03-26 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 24, 2026, 4:05 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
210331 5.3 MEDIUM
Network
ortussolutions testbox In Ortus TestBox 2.4.0 through 4.1.0, unvalidated query string parameters to test-browser/index.cfm allow directory traversal. CWE-22
Path Traversal
CVE-2020-15928 2024-11-21 14:06 2020-11-24 Show GitHub Exploit DB Packet Storm
210332 6.1 MEDIUM
Local
pulseaudio_project pulseaudio Potential double free in Bluez 5 module of PulseAudio could allow a local attacker to leak memory or crash the program. The modargs variable may be freed twice in the fail condition in src/modules/bl… CWE-415
 Double Free
CVE-2020-15710 2024-11-21 14:06 2020-11-19 Show GitHub Exploit DB Packet Storm
210333 7.5 HIGH
Network
siemens sinumerik_840d_sl_firmware
simatic_s7-300_cpu_312_firmware
simatic_s7-300_cpu_314_firmware
simatic_s7-300_cpu_315-2_dp_firmware
simatic_s7-300_cpu_315-2_pn_firmware
simatic_s7-300_cpu_…
A vulnerability has been identified in SIMATIC S7-300 CPU family (incl. related ET200 CPUs and SIPLUS variants) (All versions), SIMATIC TDC CPU555 (All versions), SINUMERIK 840D sl (All versions). Se… - CVE-2020-15783 2024-11-21 14:06 2020-11-13 Show GitHub Exploit DB Packet Storm
210334 5.5 MEDIUM
Local
freedesktop accountsservice An Ubuntu-specific modification to AccountsService in versions before 0.6.55-0ubuntu13.2, among other earlier versions, would perform unbounded read operations on user-controlled ~/.pam_environment f… CWE-835
 Loop with Unreachable Exit Condition ('Infinite Loop')
CVE-2020-16127 2024-11-21 14:06 2020-11-11 Show GitHub Exploit DB Packet Storm
210335 3.3 LOW
Local
freedesktop accountsservice An Ubuntu-specific modification to AccountsService in versions before 0.6.55-0ubuntu13.2, among other earlier versions, improperly dropped the ruid, allowing untrusted users to send signals to Accoun… NVD-CWE-noinfo
CVE-2020-16126 2024-11-21 14:06 2020-11-11 Show GitHub Exploit DB Packet Storm
210336 6.8 MEDIUM
Physics
gnome gnome_display_manager gdm3 versions before 3.36.2 or 3.38.2 would start gnome-initial-setup if gdm3 can't contact the accountservice service via dbus in a timely manner; on Ubuntu (and potentially derivatives) this could … CWE-754
 Improper Check for Unusual or Exceptional Conditions
CVE-2020-16125 2024-11-21 14:06 2020-11-10 Show GitHub Exploit DB Packet Storm
210337 7.8 HIGH
Local
packagekit_project
canonical
packagekit
ubuntu_linux
PackageKit's apt backend mistakenly treated all local debs as trusted. The apt security model is based on repository trust and not on the contents of individual files. On sites with configured Policy… CWE-345
 Insufficient Verification of Data Authenticity
CVE-2020-16122 2024-11-21 14:06 2020-11-7 Show GitHub Exploit DB Packet Storm
210338 3.3 LOW
Local
packagekit_project
canonical
packagekit
ubuntu_linux
PackageKit provided detailed error messages to unprivileged callers that exposed information about file presence and mimetype of files that the user would be unable to determine on its own. CWE-209
Information Exposure Through an Error Message
CVE-2020-16121 2024-11-21 14:06 2020-11-7 Show GitHub Exploit DB Packet Storm
210339 7.8 HIGH
Local
canonical ubuntu_linux Ubuntu's packaging of libvirt in 20.04 LTS created a control socket with world read and write permissions. An attacker could use this to overwrite arbitrary files or execute arbitrary code. CWE-732
 Incorrect Permission Assignment for Critical Resource
CVE-2020-15708 2024-11-21 14:06 2020-11-6 Show GitHub Exploit DB Packet Storm
210340 9.0 CRITICAL
Network
immuta immuta Immuta v2.8.2 is affected by stored XSS that allows a low-privileged user to escalate privileges to administrative permissions. Additionally, unauthenticated attackers can phish unauthenticated Immut… CWE-79
Cross-site Scripting
CVE-2020-15952 2024-11-21 14:06 2020-11-6 Show GitHub Exploit DB Packet Storm