Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 31, 2026, 2 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
226071	5.8	警告	IBM	-	IBM Lotus Notes における Java コードの実行および X-Confirm-Reading-To 機能の制限を回避される脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2013-0127	2013-05-2 14:19	2013-04-30	Show	GitHub Exploit DB Packet Storm

226072	4.3	警告	Henry Schein	-	Dentrix G5 の認証情報に関する脆弱性	CWE-255 証明書・パスワード管理	CVE-2012-4952	2013-05-2 14:15	2013-04-30	Show	GitHub Exploit DB Packet Storm

226073	5	警告	ヒューレット・パッカード	-	複数の HP 製レーザープリンタのファームウェアにおける任意のファイルを読まれる脆弱性	CWE-noinfo 情報不足	CVE-2012-5221	2013-05-1 14:59	2013-04-25	Show	GitHub Exploit DB Packet Storm

226074	6.8	警告	シスコシステムズ	-	複数の Cisco 製品のコマンドラインインタフェースにおける root 権限を取得される脆弱性	CWE-20 不適切な入力確認	CVE-2013-1196	2013-05-1 12:34	2013-04-12	Show	GitHub Exploit DB Packet Storm

226075	9.3	危険	IBM	-	IBM SPSS SamplePower の vsflex7l ActiveX コントロールにおけるバッファオーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2012-5947	2013-05-1 11:42	2013-04-26	Show	GitHub Exploit DB Packet Storm

226076	9.3	危険	IBM	-	IBM SPSS SamplePower の C1sizer.ocx におけるバッファオーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2012-5946	2013-05-1 11:42	2013-04-26	Show	GitHub Exploit DB Packet Storm

226077	9.3	危険	IBM	-	IBM SPSS SamplePower の Vsflex8l ActiveX コントロールにおけるバッファオーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2012-5945	2013-05-1 11:41	2013-04-26	Show	GitHub Exploit DB Packet Storm

226078	4.3	警告	ヒューレット・パッカード	-	HP Managed Printing Administration におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2012-5219	2013-05-1 11:22	2013-04-25	Show	GitHub Exploit DB Packet Storm

226079	3.5	注意	IBM	-	複数の IBM 製品で使用される IBM Sametime のクライアントの実装におけるコマンドを送信される脆弱性	CWE-noinfo 情報不足	CVE-2013-0553	2013-05-1 11:21	2013-04-22	Show	GitHub Exploit DB Packet Storm

226080	3.5	注意	IBM	-	IBM Sametime の Sametime Links サーバにおけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2013-0533	2013-05-1 11:15	2013-04-22	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 31, 2026, 4:16 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
209681	9.8	CRITICAL Network	xorux	stor2rrd lpar2rrd	tz.pl on XoruX LPAR2RRD and STOR2RRD 2.70 virtual appliances allows cmd=set&tz=OS command injection via shell metacharacters in a timezone.	CWE-78 OS Command	CVE-2020-24032	2024-11-21 14:14	2020-08-19	Show	GitHub Exploit DB Packet Storm

209682	8.8	HIGH Network	ritecms	ritecms	An issue was discovered in RiteCMS 2.2.1. An authenticated user can directly execute system commands by uploading a php web shell in the "Filemanager" section.	CWE-78 OS Command	CVE-2020-23934	2024-11-21 14:14	2020-08-19	Show	GitHub Exploit DB Packet Storm

209683	7.5	HIGH Network	luajit	luajit	LuaJIT through 2.1.0-beta3 has an out-of-bounds read in lj_err_run in lj_err.c.	CWE-125 Out-of-bounds Read	CVE-2020-24372	2024-11-21 14:14	2020-08-18	Show	GitHub Exploit DB Packet Storm

209684	5.3	MEDIUM Network	lua	lua	lgc.c in Lua 5.4.0 mishandles the interaction between barriers and the sweep phase, leading to a memory access violation involving collectgarbage.	CWE-763 Release of Invalid Pointer or Reference	CVE-2020-24371	2024-11-21 14:14	2020-08-18	Show	GitHub Exploit DB Packet Storm

209685	5.3	MEDIUM Network	lua fedoraproject debian	lua fedora debian_linux	ldebug.c in Lua 5.4.0 allows a negation overflow and segmentation fault in getlocal and setlocal, as demonstrated by getlocal(3,2^31).	CWE-191 Integer Underflow (Wrap or Wraparound)	CVE-2020-24370	2024-11-21 14:14	2020-08-18	Show	GitHub Exploit DB Packet Storm

209686	7.5	HIGH Network	lua	lua	ldebug.c in Lua 5.4.0 attempts to access debug information via the line hook of a stripped function, leading to a NULL pointer dereference.	CWE-476 NULL Pointer Dereference	CVE-2020-24369	2024-11-21 14:14	2020-08-18	Show	GitHub Exploit DB Packet Storm

209687	8.8	HIGH Network	shopxo	shopxo	ShopXO v1.8.1 has a command execution vulnerability. Attackers can use this vulnerability to execute arbitrary commands and gain control of the server.	CWE-78 OS Command	CVE-2020-24220	2024-11-21 14:14	2020-08-18	Show	GitHub Exploit DB Packet Storm

209688	9.8	CRITICAL Network	online_shopping_alphaware_project	online_shopping_alphaware	A SQL injection vulnerability in SourceCodester Online Shopping Alphaware 1.0 allows remote unauthenticated attackers to bypass the authentication process via email and password parameters.	CWE-89 SQL Injection	CVE-2020-24208	2024-11-21 14:14	2020-08-18	Show	GitHub Exploit DB Packet Storm

209689	9.8	CRITICAL Network	snmptt debian	snmptt debian_linux	SNMPTT before 1.4.2 allows attackers to execute shell code via EXEC, PREXEC, or unknown_trap_exec.	CWE-273 Improper Check for Dropped Privileges	CVE-2020-24361	2024-11-21 14:14	2020-08-16	Show	GitHub Exploit DB Packet Storm

209690	5.5	MEDIUM Local	f5	njs	njs through 0.4.3, used in NGINX, allows control-flow hijack in njs_value_property in njs_value.c. NOTE: the vendor considers the issue to be "fluff" in the NGINX use case because there is no remote …	CWE-416 Use After Free	CVE-2020-24349	2024-11-21 14:14	2020-08-14	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed