Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 2, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
226101 5 警告 Blink Web Effects - WordPress 用 Social Media Widget プラグインにおける任意のファイルのアップロードを強制される脆弱性 CWE-noinfo
情報不足 		CVE-2013-1949 2013-04-30 17:51 2013-04-9 Show GitHub Exploit DB Packet Storm
226102 10 危険 Rob Westgeest - Ruby 用 md2pdf gem の converter.rb における任意のコマンドを実行される脆弱性 CWE-noinfo
情報不足 		CVE-2013-1948 2013-04-30 17:51 2013-04-10 Show GitHub Exploit DB Packet Storm
226103 9.3 危険 Kelly D. Redding - Ruby 用 kelredd-pruview gem における任意のコマンドを実行される脆弱性 CWE-78
OSコマンド・インジェクション 		CVE-2013-1947 2013-04-30 17:50 2013-04-4 Show GitHub Exploit DB Packet Storm
226104 9.3 危険 karteek-docsplit - Ruby 用 Karteek Docsplit gem における任意のコマンドを実行される脆弱性 CWE-78
OSコマンド・インジェクション 		CVE-2013-1933 2013-04-30 17:49 2013-04-1 Show GitHub Exploit DB Packet Storm
226105 6.8 警告 Novell
plataformatec		 - Ruby 用 Devise gem における不正な結果が返される脆弱性 CWE-399
リソース管理の問題 		CVE-2013-0233 2013-04-30 17:48 2013-01-28 Show GitHub Exploit DB Packet Storm
226106 7.5 危険 Grape
Erik Michaels-Ober		 - Grape などの製品で使用される Ruby 用 multi_xml gem におけるオブジェクトインジェクション攻撃を誘発される脆弱性 CWE-20
不適切な入力確認 		CVE-2013-0175 2013-04-30 17:43 2013-01-10 Show GitHub Exploit DB Packet Storm
226107 5 警告 Ruby-lang.org - Ruby における safe-level の制限を回避される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2012-4466 2013-04-30 17:29 2012-10-3 Show GitHub Exploit DB Packet Storm
226108 5 警告 Ruby-lang.org - Ruby における safe-level の制限を回避される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2012-4464 2013-04-30 17:25 2012-10-3 Show GitHub Exploit DB Packet Storm
226109 5.4 警告 シトリックス・システムズ - NetScaler Access Gateway Enterprise Edition に脆弱性 CWE-noinfo
情報不足 		CVE-2013-2767 2013-04-30 12:45 2013-04-26 Show GitHub Exploit DB Packet Storm
226110 9.3 危険 シスコシステムズ - Cisco MDS 9000 および Nexus 5000 デバイス用 Cisco Device Manager における任意のコマンドを実行される脆弱性 CWE-20
不適切な入力確認 		CVE-2013-1192 2013-04-26 16:56 2013-04-24 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 2, 2026, 4:18 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
209441 6.5 MEDIUM
Adjacent 		dlink dsl2888a_firmware An issue was discovered on D-Link DSL-2888A devices with firmware prior to AU_2.31_V1.1.47ae55. It has a misconfigured FTP service that allows a malicious network user to access system folders and do… CWE-427
CWE-732
 Uncontrolled Search Path Element
 Incorrect Permission Assignment for Critical Resource 		CVE-2020-24578 2024-11-21 14:15 2020-12-23 Show GitHub Exploit DB Packet Storm
209442 3.3 LOW
Local 		mitel micontact_center_business The Ignite portal in Mitel MiContact Center Business before 9.3.0.0 could allow a local attacker to view system information due to insufficient output sanitization. NVD-CWE-noinfo
CVE-2020-24693 2024-11-21 14:15 2020-12-18 Show GitHub Exploit DB Packet Storm
209443 7.2 HIGH
Network 		arubanetworks arubaos
sd-wan 		Two vulnerabilities in ArubaOS GRUB2 implementation allows for an attacker to bypass secureboot. Successful exploitation of this vulnerability this could lead to remote compromise of system integrity… NVD-CWE-noinfo
CVE-2020-24637 2024-11-21 14:15 2020-12-11 Show GitHub Exploit DB Packet Storm
209444 9.8 CRITICAL
Network 		arubanetworks arubaos
sd-wan 		An attacker is able to remotely inject arbitrary commands by sending especially crafted packets destined to the PAPI (Aruba Networks AP Management protocol) UDP port (8211) of access-pointsor control… CWE-77
Command Injection 		CVE-2020-24634 2024-11-21 14:15 2020-12-11 Show GitHub Exploit DB Packet Storm
209445 9.8 CRITICAL
Network 		arubanetworks arubaos
sd-wan 		There are multiple buffer overflow vulnerabilities that could lead to unauthenticated remote code execution by sending especially crafted packets destined to the PAPI (Aruba Networks AP management pr… CWE-120
Classic Buffer Overflow 		CVE-2020-24633 2024-11-21 14:15 2020-12-11 Show GitHub Exploit DB Packet Storm
209446 4.8 MEDIUM
Network 		user_registration_\&_login_and_user_management_system_project user_registration_\&_login_and_user_management_system Cross Site Scripting (XSS) vulnerability in the Registration page of the admin panel in PHPGurukul User Registration & Login and User Management System With admin panel 2.1. CWE-79
Cross-site Scripting 		CVE-2020-24723 2024-11-21 14:15 2020-11-18 Show GitHub Exploit DB Packet Storm
209447 9.8 CRITICAL
Network 		couchbase couchbase_server Exposed Erlang Cookie could lead to Remote Command Execution (RCE) attack. Communication between Erlang nodes is done by exchanging a shared secret (aka "magic cookie"). There are cases where the mag… CWE-78
OS Command  		CVE-2020-24719 2024-11-21 14:15 2020-11-13 Show GitHub Exploit DB Packet Storm
209448 7.5 HIGH
Network 		bab-technologie eibport_firmware BAB TECHNOLOGIE GmbH eibPort V3 prior to 3.8.3 devices allow denial of service (Uncontrolled Resource Consumption) via requests to the lighttpd component. CWE-400
 Uncontrolled Resource Consumption 		CVE-2020-24573 2024-11-21 14:15 2020-11-13 Show GitHub Exploit DB Packet Storm
209449 7.5 HIGH
Network 		getgophish gophish Gophish through 0.10.1 does not invalidate the gophish cookie upon logout. CWE-613
 Insufficient Session Expiration 		CVE-2020-24713 2024-11-21 14:15 2020-10-29 Show GitHub Exploit DB Packet Storm
209450 5.4 MEDIUM
Network 		getgophish gophish Cross Site Scripting (XSS) vulnerability in Gophish before 0.11.0 via the IMAP Host field on the account settings page. CWE-79
Cross-site Scripting 		CVE-2020-24712 2024-11-21 14:15 2020-10-29 Show GitHub Exploit DB Packet Storm