Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":June 3, 2026, 6:08 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
226041	2.6	注意	日本ケンタッキー・フライド・チキン株式会社	-	Android 版ピザハット公式アプリ　宅配ピザのPizzaHut における SSL サーバ証明書の検証不備の脆弱性	CWE-Other その他	CVE-2013-3641	2013-06-7 12:01	2013-06-7	Show	GitHub Exploit DB Packet Storm

226042	2.6	注意	マイクロソフト	-	Internet Explorer における情報漏えいの脆弱性	CWE-Other その他	-	2013-06-7 12:00	2013-06-7	Show	GitHub Exploit DB Packet Storm

226043	6.4	警告	アップル Ruby on Rails project	-	Ruby on Rails におけるデータベースのクエリ制限を回避される脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2013-0155	2013-06-7 11:58	2013-01-8	Show	GitHub Exploit DB Packet Storm

226044	7.2	危険	アップル	-	CUPS における root として任意のファイルを読まれる脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2012-5519	2013-06-7 11:50	2012-11-20	Show	GitHub Exploit DB Packet Storm

226045	7.5	危険	アップル OpenSSL Project	-	OpenSSL の crypto/buffer/buffer.c における整数符号エラーの脆弱性	CWE-189 数値処理の問題	CVE-2012-2131	2013-06-7 11:36	2012-04-23	Show	GitHub Exploit DB Packet Storm

226046	7.5	危険	アップル VMware OpenSSL Project	-	OpenSSL の asn1_d2i_read_bio 関数におけるバッファオーバーフロー攻撃を誘発される脆弱性	CWE-119 バッファエラー	CVE-2012-2110	2013-06-7 11:33	2012-04-19	Show	GitHub Exploit DB Packet Storm

226047	5	警告	アップル VMware OpenSSL Project	-	OpenSSL の Server Gated Cryptography の実装におけるサービス運用妨害 (DoS) の脆弱性	CWE-399 リソース管理の問題	CVE-2011-4619	2013-06-7 11:26	2012-01-4	Show	GitHub Exploit DB Packet Storm

226048	4.3	警告	アップル VMware OpenSSL Project	-	OpenSSL におけるサービス運用妨害 (表明違反) の脆弱性	CWE-399 リソース管理の問題	CVE-2011-4577	2013-06-7 11:21	2012-01-4	Show	GitHub Exploit DB Packet Storm

226049	9.3	危険	アップル VMware OpenSSL Project	-	OpenSSL におけるメモリ二重開放の脆弱性	CWE-399 リソース管理の問題	CVE-2011-4109	2013-06-7 11:15	2012-01-4	Show	GitHub Exploit DB Packet Storm

226050	5	警告	アップル OpenSSL Project	-	OpenSSL の ephemeral ECDH ciphersuite におけるサービス運用妨害 (アプリケーションクラッシュ) の脆弱性	CWE-399 リソース管理の問題	CVE-2011-3210	2013-06-7 11:07	2011-09-6	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:June 3, 2026, 4:18 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
209631	5.5	MEDIUM Local	libelfin_project	libelfin	A vulnerability in the dwarf::cursor::uleb function of Libelfin v0.3 allows attackers to cause a denial of service (DOS) through a segmentation fault via a crafted ELF file.	CWE-74 Injection	CVE-2020-24822	2024-11-21 14:16	2021-08-5	Show	GitHub Exploit DB Packet Storm

209632	5.5	MEDIUM Local	libelfin_project	libelfin	A vulnerability in the dwarf::cursor::skip_form function of Libelfin v0.3 allows attackers to cause a denial of service (DOS) through a segmentation fault via a crafted ELF file.	CWE-74 Injection	CVE-2020-24821	2024-11-21 14:16	2021-08-5	Show	GitHub Exploit DB Packet Storm

209633	7.5	HIGH Network	stampit	supermixer	Prototype pollution in Stampit supermixer 1.0.3 allows an attacker to modify the prototype of a base object which can vary in severity depending on the implementation.	CWE-1321 Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution')	CVE-2020-24939	2024-11-21 14:16	2021-06-17	Show	GitHub Exploit DB Packet Storm

209634	7.5	HIGH Network	pharmacy_medical_store_and_sale_point_project	pharmacy_medical_store_and_sale_point	The catID parameter in Pharmacy Medical Store and Sale Point v1.0 has been found to be vulnerable to a Time-Based blind SQL injection via the /medical/inventories.php path which allows attackers to r…	CWE-89 SQL Injection	CVE-2020-24862	2024-11-21 14:16	2021-06-3	Show	GitHub Exploit DB Packet Storm

209635	8.8	HIGH Network	libraw	libraw	Libraw before 0.20.1 has a stack buffer overflow via LibRaw::identify_process_dng_fields in identify.cpp.	CWE-787 Out-of-bounds Write	CVE-2020-24870	2024-11-21 14:16	2021-06-3	Show	GitHub Exploit DB Packet Storm

209636	4.3	MEDIUM Network	pluck-cms	pluck	An issue was discovered in Pluck 4.7.10-dev2. There is a CSRF vulnerability that can editpage via a /admin.php?action=editpage	CWE-352 Origin Validation Error	CVE-2020-24740	2024-11-21 14:16	2021-05-19	Show	GitHub Exploit DB Packet Storm

209637	7.8	HIGH Local	ui	unifi_video	In Ubiquiti UniFi Video v3.10.13, when the executable starts, its first library validation is in the current directory. This allows the impersonation and modification of the library to execute code o…	CWE-427 Uncontrolled Search Path Element	CVE-2020-24755	2024-11-21 14:16	2021-05-18	Show	GitHub Exploit DB Packet Storm

209638	5.4	MEDIUM Network	cmswing	cmswing	There is a cross site scripting vulnerability on CmsWing 1.3.7. This vulnerability (stored XSS) is triggered when visitors access the article module.	CWE-79 Cross-site Scripting	CVE-2020-24993	2024-11-21 14:16	2021-05-18	Show	GitHub Exploit DB Packet Storm

209639	5.4	MEDIUM Network	cmswing	cmswing	There is a cross site scripting vulnerability on CmsWing 1.3.7. This vulnerability (stored XSS) is triggered when an administrator accesses the content management module.	CWE-79 Cross-site Scripting	CVE-2020-24992	2024-11-21 14:16	2021-05-18	Show	GitHub Exploit DB Packet Storm

209640	9.8	CRITICAL Network	ambarella	oryx_rtsp_server	A buffer overflow in the RTSP service of the Ambarella Oryx RTSP Server 2020-01-07 allows an unauthenticated attacker to send a crafted RTSP request, with a long digest authentication header, to exec…	CWE-120 Classic Buffer Overflow	CVE-2020-24918	2024-11-21 14:16	2021-04-30	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed