Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":May 31, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
226091	4.7	警告	Linux レッドハット	-	Linux Kernel の fs/ext4/namei.c におけるサービス運用妨害 (DoS) の脆弱性	CWE-399 リソース管理の問題	CVE-2013-2015	2013-04-30 18:36	2013-01-17	Show	GitHub Exploit DB Packet Storm

226092	6.9	警告	Blue Marble Geographics	-	Global Mapper における権限を取得される脆弱性	CWE-Other その他	CVE-2013-0727	2013-04-30 18:25	2013-04-26	Show	GitHub Exploit DB Packet Storm

226093	7.2	危険	ヒューレット・パッカード	-	HP Storage Data Protector における権限を取得される脆弱性	CWE-noinfo 情報不足	CVE-2012-5220	2013-04-30 18:24	2013-04-24	Show	GitHub Exploit DB Packet Storm

226094	4	警告	The phpMyAdmin Project	-	phpMyAdmin の export.php における値を挿入される脆弱性	CWE-noinfo 情報不足	CVE-2013-3241	2013-04-30 18:23	2013-04-24	Show	GitHub Exploit DB Packet Storm

226095	6.5	警告	The phpMyAdmin Project	-	phpMyAdmin のエクスポート機能におけるディレクトリトラバーサルの脆弱性	CWE-22 パス・トラバーサル	CVE-2013-3240	2013-04-30 18:21	2013-04-24	Show	GitHub Exploit DB Packet Storm

226096	6.8	警告	Crunchify	-	WordPress 用 FourSquare Checkins プラグインにおけるクロスサイトリクエストフォージェリの脆弱性	CWE-352 同一生成元ポリシー違反	CVE-2013-2709	2013-04-30 17:54	2013-04-22	Show	GitHub Exploit DB Packet Storm

226097	6.8	警告	Crunchify	-	WordPress 用 All in One Webmaster プラグインにおけるクロスサイトリクエストフォージェリの脆弱性	CWE-352 同一生成元ポリシー違反	CVE-2013-2696	2013-04-30 17:52	2013-04-22	Show	GitHub Exploit DB Packet Storm

226098	5	警告	Blink Web Effects	-	WordPress 用 Social Media Widget プラグインにおける任意のファイルのアップロードを強制される脆弱性	CWE-noinfo 情報不足	CVE-2013-1949	2013-04-30 17:51	2013-04-9	Show	GitHub Exploit DB Packet Storm

226099	10	危険	Rob Westgeest	-	Ruby 用 md2pdf gem の converter.rb における任意のコマンドを実行される脆弱性	CWE-noinfo 情報不足	CVE-2013-1948	2013-04-30 17:51	2013-04-10	Show	GitHub Exploit DB Packet Storm

226100	9.3	危険	Kelly D. Redding	-	Ruby 用 kelredd-pruview gem における任意のコマンドを実行される脆弱性	CWE-78 OSコマンド・インジェクション	CVE-2013-1947	2013-04-30 17:50	2013-04-4	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:May 31, 2026, 4:16 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
223931	8.1	HIGH Network	gnu	libredwg	An issue was discovered in GNU LibreDWG through 0.9.3. Crafted input will lead to a heap-based buffer over-read in bit_write_TF in bits.c.	CWE-125 Out-of-bounds Read	CVE-2019-20915	2024-11-21 13:39	2020-07-17	Show	GitHub Exploit DB Packet Storm

223932	9.8	CRITICAL Network	gnu	libredwg	An issue was discovered in GNU LibreDWG through 0.9.3. There is a NULL pointer dereference in the function dwg_encode_common_entity_handle_data in common_entity_handle_data.spec.	CWE-476 NULL Pointer Dereference	CVE-2019-20914	2024-11-21 13:39	2020-07-17	Show	GitHub Exploit DB Packet Storm

223933	8.1	HIGH Network	gnu	libredwg	An issue was discovered in GNU LibreDWG through 0.9.3. Crafted input will lead to a heap-based buffer over-read in dwg_encode_entity in common_entity_data.spec.	CWE-125 Out-of-bounds Read	CVE-2019-20913	2024-11-21 13:39	2020-07-17	Show	GitHub Exploit DB Packet Storm

223934	8.8	HIGH Network	gnu	libredwg	An issue was discovered in GNU LibreDWG through 0.9.3. Crafted input will lead to a stack overflow in bits.c, possibly related to bit_read_TF.	CWE-787 Out-of-bounds Write	CVE-2019-20912	2024-11-21 13:39	2020-07-17	Show	GitHub Exploit DB Packet Storm

223935	6.5	MEDIUM Network	gnu	libredwg	An issue was discovered in GNU LibreDWG through 0.9.3. Crafted input will lead to denial of service in bit_calc_CRC in bits.c, related to a for loop.	CWE-835 Loop with Unreachable Exit Condition ('Infinite Loop')	CVE-2019-20911	2024-11-21 13:39	2020-07-17	Show	GitHub Exploit DB Packet Storm

223936	8.1	HIGH Network	gnu	libredwg	An issue was discovered in GNU LibreDWG through 0.9.3. Crafted input will lead to a heap-based buffer over-read in decode_R13_R2000 in decode.c, a different vulnerability than CVE-2019-20011.	CWE-125 Out-of-bounds Read	CVE-2019-20910	2024-11-21 13:39	2020-07-17	Show	GitHub Exploit DB Packet Storm

223937	7.5	HIGH Network	gnu	libredwg	An issue was discovered in GNU LibreDWG through 0.9.3. There is a NULL pointer dereference in the function dwg_encode_LWPOLYLINE in dwg.spec.	CWE-476 NULL Pointer Dereference	CVE-2019-20909	2024-11-21 13:39	2020-07-17	Show	GitHub Exploit DB Packet Storm

223938	6.7	MEDIUM Local	linux opensuse canonical	linux_kernel leap ubuntu_linux	An issue was discovered in drivers/firmware/efi/efi.c in the Linux kernel before 5.4. Incorrect access permissions for the efivar_ssdt ACPI variable could be used by attackers to bypass lockdown or s…	NVD-CWE-noinfo	CVE-2019-20908	2024-11-21 13:39	2020-07-16	Show	GitHub Exploit DB Packet Storm

223939	7.5	HIGH Network	python opensuse debian fedoraproject canonical netapp oracle	python leap debian_linux fedora ubuntu_linux active_iq_unified_manager cloud_volumes_ontap_mediator zfs_storage_appliance_kit	In Lib/tarfile.py in Python through 3.8.3, an attacker is able to craft a TAR archive leading to an infinite loop when opened by tarfile.open, because _proc_pax lacks header validation.	CWE-835 Loop with Unreachable Exit Condition ('Infinite Loop')	CVE-2019-20907	2024-11-21 13:39	2020-07-13	Show	GitHub Exploit DB Packet Storm

223940	6.1	MEDIUM Network	atlassian	jira jira_server	The login.jsp resource in Jira before version 8.5.2, and from version 8.6.0 before version 8.6.1 allows remote attackers to redirect users to a different website which they may use as part of perform…	CWE-601 Open Redirect	CVE-2019-20901	2024-11-21 13:39	2020-07-13	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed