Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 15, 2026, 2 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
226111 6.8 警告 MediaWiki - MediaWiki 用 CheckUser 拡張機能の api/ApiQueryCheckUser.php におけるクロスサイトリクエストフォージェリの脆弱性 CWE-352
同一生成元ポリシー違反
CVE-2013-4306 2013-10-16 15:17 2013-09-3 Show GitHub Exploit DB Packet Storm
226112 4.3 警告 MediaWiki - MediaWiki 用 SyntaxHighlight GeSHi 拡張機能の contrib/example.php におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2013-4305 2013-10-16 15:16 2013-09-3 Show GitHub Exploit DB Packet Storm
226113 6.5 警告 Kwoksys - Kwoksys Kwok Information Server の IT/hardware-list.dll における SQL インジェクションの脆弱性 CWE-89
SQLインジェクション
CVE-2013-5028 2013-10-16 14:58 2013-08-7 Show GitHub Exploit DB Packet Storm
226114 9 危険 Adaptive Computing - Terascale Open-Source Resource and Queue Manager の pbs_mom における任意のジョブを実行される脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2013-4319 2013-10-16 14:42 2013-09-6 Show GitHub Exploit DB Packet Storm
226115 3.5 注意 Condor Project
レッドハット
- Condor のポリシー定義エバリュエータにおけるサービス運用妨害 (DoS) の脆弱性 CWE-20
不適切な入力確認
CVE-2013-4255 2013-10-16 14:41 2013-08-21 Show GitHub Exploit DB Packet Storm
226116 7.5 危険 Richard Cook - Ruby 用 rgpg gem の lib/rgpg/gpg_helper.rb における任意のコマンドを実行される脆弱性 CWE-94
コード・インジェクション
CVE-2013-4203 2013-10-16 14:40 2013-08-1 Show GitHub Exploit DB Packet Storm
226117 5 警告 Xymon - Xymon の trend-data デーモンにおけるディレクトリトラバーサルの脆弱性 CWE-22
パス・トラバーサル
CVE-2013-4173 2013-10-16 14:40 2013-07-24 Show GitHub Exploit DB Packet Storm
226118 7.8 危険 OvisLink - 複数の AirLive 製品における重要な情報を取得される脆弱性 CWE-310
暗号の問題
CVE-2013-3687 2013-10-16 14:23 2013-06-12 Show GitHub Exploit DB Packet Storm
226119 10 危険 OvisLink - AirLive WL-2600CAM の cgi-bin/operator/param における管理者パスワードを取得される脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2013-3686 2013-10-16 14:22 2013-06-12 Show GitHub Exploit DB Packet Storm
226120 6.8 警告 シスコシステムズ - Cisco Unified Computing System のファブリックインターコネクトコンポーネントにおける権限を取得される脆弱性 CWE-78
OSコマンド・インジェクション
CVE-2012-4108 2013-10-16 14:17 2013-10-14 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 15, 2026, 4:10 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
209061 8.8 HIGH
Network
woocommerce gift_cards Ultimate WooCommerce Gift Cards 3.0.2 is affected by a file upload vulnerability in the Custom GiftCard Template that can remotely execute arbitrary code. Once it contains the function "Custom Gift C… CWE-434
 Unrestricted Upload of File with Dangerous Type 
CVE-2020-35627 2024-11-21 14:27 2020-12-29 Show GitHub Exploit DB Packet Storm
209062 6.1 MEDIUM
Local
wavpack
debian
fedoraproject
wavpack
debian_linux
fedora
WavPack 5.3.0 has an out-of-bounds write in WavpackPackSamples in pack_utils.c because of an integer overflow in a malloc argument. NOTE: some third-parties claim that there are later "unofficial" re… CWE-787
CWE-190
 Out-of-bounds Write
 Integer Overflow or Wraparound
CVE-2020-35738 2024-11-21 14:27 2020-12-28 Show GitHub Exploit DB Packet Storm
209063 7.5 HIGH
Network
liftoffsoftware gateone GateOne 1.1 allows arbitrary file download without authentication via /downloads/.. directory traversal because os.path.join is misused. CWE-22
Path Traversal
CVE-2020-35736 2024-11-21 14:27 2020-12-28 Show GitHub Exploit DB Packet Storm
209064 9.8 CRITICAL
Network
klogserver klog_server KLog Server 2.4.1 allows OS command injection via shell metacharacters in the actions/authenticate.php user parameter. CWE-78
OS Command 
CVE-2020-35729 2024-11-21 14:27 2020-12-27 Show GitHub Exploit DB Packet Storm
209065 3.3 LOW
Local
gnu
netapp
binutils
ontap_select_deploy_administration_utility
An issue was discovered in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.35.1. A heap-based buffer over-read can occur in bfd_getl_signed_32 in libbfd.c beca… CWE-125
Out-of-bounds Read
CVE-2020-35448 2024-11-21 14:27 2020-12-27 Show GitHub Exploit DB Packet Storm
209066 8.1 HIGH
Network
fasterxml
debian
netapp
oracle
jackson-databind
debian_linux
service_level_manager
webcenter_portal
application_testing_suite
primavera_unifier
agile_plm
communications_policy_management
communications_bill…
FasterXML jackson-databind 2.x before 2.9.10.8 mishandles the interaction between serialization gadgets and typing, related to com.oracle.wls.shaded.org.apache.xalan.lib.sql.JNDIConnectionPool (aka e… CWE-502
 Deserialization of Untrusted Data
CVE-2020-35728 2024-11-21 14:27 2020-12-27 Show GitHub Exploit DB Packet Storm
209067 6.1 MEDIUM
Network
crossbar autobahn Autobahn|Python before 20.12.3 allows redirect header injection. CWE-601
Open Redirect
CVE-2020-35678 2024-11-21 14:27 2020-12-27 Show GitHub Exploit DB Packet Storm
209068 9.8 CRITICAL
Network
flamingo_project flamingo Flamingo (aka FlamingoIM) through 2020-09-29 has a SQL injection vulnerability in UserManager::addUser. CWE-89
SQL Injection
CVE-2020-35245 2024-11-21 14:27 2020-12-27 Show GitHub Exploit DB Packet Storm
209069 9.8 CRITICAL
Network
flamingo_project flamingo Flamingo (aka FlamingoIM) through 2020-09-29 has a SQL injection vulnerability in UserManager::addGroup. CWE-89
SQL Injection
CVE-2020-35244 2024-11-21 14:27 2020-12-27 Show GitHub Exploit DB Packet Storm
209070 9.8 CRITICAL
Network
flamingo_project flamingo Flamingo (aka FlamingoIM) through 2020-09-29 has a SQL injection vulnerability in UserManager::updateUserInfoInDb. CWE-89
SQL Injection
CVE-2020-35243 2024-11-21 14:27 2020-12-27 Show GitHub Exploit DB Packet Storm