Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 25, 2026, 6 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
226041 9.3 危険 アップル - Apple QuickTime におけるバッファオーバーフローの脆弱性 CWE-119
バッファエラー
CVE-2012-3756 2013-04-2 16:42 2012-11-7 Show GitHub Exploit DB Packet Storm
226042 9.3 危険 Novell - Novell GroupWise Messenger および Novell Messenger におけるスタックベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー
CVE-2013-1085 2013-04-2 16:41 2013-03-13 Show GitHub Exploit DB Packet Storm
226043 10 危険 Novell - Novell Identity Manager の Roles Based Provisioning Module における脆弱性 CWE-noinfo
情報不足
CVE-2013-1083 2013-04-2 16:40 2013-03-12 Show GitHub Exploit DB Packet Storm
226044 7.5 危険 Novell - Novell ZENworks Mobile Management の DUSAP.php におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル
CVE-2013-1082 2013-04-2 16:40 2013-03-29 Show GitHub Exploit DB Packet Storm
226045 5 警告 アップル - Apple iOS および Apple TV における ASLR 保護メカニズムを回避される脆弱性 CWE-200
情報漏えい
CVE-2012-3749 2013-04-2 16:39 2012-11-3 Show GitHub Exploit DB Packet Storm
226046 5.8 警告 アップル
jabberd 2.x project
- jabberd2 の s2s/out.c におけるドメインになりすまされる脆弱性 CWE-20
不適切な入力確認
CVE-2012-3525 2013-04-2 16:38 2012-08-25 Show GitHub Exploit DB Packet Storm
226047 5 警告 PostgreSQL.org
アップル
- PostgreSQL のコアサーバコンポーネントにおける任意のファイルの存在を特定される脆弱性 CWE-20
不適切な入力確認
CVE-2012-3489 2013-04-2 16:36 2012-08-17 Show GitHub Exploit DB Packet Storm
226048 6.8 警告 Novell - Novell ZENworks Configuration Management の AdminStudio におけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル
CVE-2013-1079 2013-04-2 16:35 2013-02-21 Show GitHub Exploit DB Packet Storm
226049 5.8 警告 PostgreSQL.org
アップル
- PostgreSQL の contrib/xml2 におけるデータを改ざんされる脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2012-3488 2013-04-2 16:34 2012-08-17 Show GitHub Exploit DB Packet Storm
226050 3.5 注意 Novell - Novell Sentinel Log Manager におけるデータ保持ポリシーを作成される脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2012-6534 2013-04-2 16:34 2012-09-21 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 25, 2026, 4:01 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
210051 7.1 HIGH
Local
winstonprivacy winston_firmware Winston 1.5.4 devices make use of a Monit service (not managed during the normal user process) which is configured with default credentials. CWE-798
 Use of Hard-coded Credentials
CVE-2020-16258 2024-11-21 14:07 2020-10-29 Show GitHub Exploit DB Packet Storm
210052 8.8 HIGH
Network
winstonprivacy winston_firmware The API on Winston 1.5.4 devices is vulnerable to CSRF. CWE-352
 Origin Validation Error
CVE-2020-16256 2024-11-21 14:07 2020-10-29 Show GitHub Exploit DB Packet Storm
210053 9.8 CRITICAL
Network
winstonprivacy winston_firmware Winston 1.5.4 devices are vulnerable to command injection via the API. CWE-78
OS Command 
CVE-2020-16257 2024-11-21 14:07 2020-10-29 Show GitHub Exploit DB Packet Storm
210054 7.5 HIGH
Network
arista eos Arista EOS before 4.21.12M, 4.22.x before 4.22.7M, 4.23.x before 4.23.5M, and 4.24.x before 4.24.2F allows remote attackers to cause a denial of service (restart of agents) by crafting a malformed DH… NVD-CWE-noinfo
CVE-2020-17355 2024-11-21 14:07 2020-10-22 Show GitHub Exploit DB Packet Storm
210055 7.3 HIGH
Local
ghisler total_commander An issue was discovered in Ghisler Total Commander 9.51. Due to insufficient access restrictions in the default installation directory, an attacker can elevate privileges by replacing the %SYSTEMDRIV… CWE-276
Incorrect Default Permissions 
CVE-2020-17381 2024-11-21 14:07 2020-10-22 Show GitHub Exploit DB Packet Storm
210056 6.1 MEDIUM
Network
ge s2020_firmware
s2024_firmware
The affected Reason S20 Ethernet Switch is vulnerable to cross-site scripting (XSS), which may allow attackers to trick users into following a link or navigating to a page that posts a malicious Java… - CVE-2020-16246 2024-11-21 14:07 2020-10-21 Show GitHub Exploit DB Packet Storm
210057 7.8 HIGH
Local
microsoft windows_10 <p>A remote code execution vulnerability exists in the way that Microsoft Windows Codecs Library handles objects in memory. An attacker who successfully exploited the vulnerability could execute arbi… NVD-CWE-noinfo
CVE-2020-17022 2024-11-21 14:07 2020-10-17 Show GitHub Exploit DB Packet Storm
210058 7.8 HIGH
Local
microsoft 3d_viewer <p>A remote code execution vulnerability exists when the Base3D rendering engine improperly handles memory.</p> <p>An attacker who successfully exploited the vulnerability would gain execution on a v… NVD-CWE-noinfo
CVE-2020-17003 2024-11-21 14:07 2020-10-17 Show GitHub Exploit DB Packet Storm
210059 4.7 MEDIUM
Local
microsoft .net_framework <p>An information disclosure vulnerability exists when the .NET Framework improperly handles objects in memory. An attacker who successfully exploited the vulnerability could disclose contents of an … NVD-CWE-noinfo
CVE-2020-16937 2024-11-21 14:07 2020-10-17 Show GitHub Exploit DB Packet Storm
210060 7.8 HIGH
Local
microsoft 365_apps
3d_viewer
<p>A remote code execution vulnerability exists when the Base3D rendering engine improperly handles memory.</p> <p>An attacker who successfully exploited the vulnerability would gain execution on a v… NVD-CWE-noinfo
CVE-2020-16918 2024-11-21 14:07 2020-10-17 Show GitHub Exploit DB Packet Storm