Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 3, 2026, 6:08 p.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show
Exploit
PoC
Search
226151 9.3 危険 IBM - Lotus Quickr for Domino の ActiveX コントロールにおけるスタックベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー
CVE-2012-2176 2013-05-24 16:35 2012-05-23 Show GitHub Exploit DB Packet Storm
226152 4.4 警告 シマンテック - Windows XP および Server 2003 上 の Symantec PGP Desktop および Encryption Desktop におけるバッファオーバーフローの脆弱性 CWE-119
バッファエラー
CVE-2012-6533 2013-05-24 15:02 2013-02-13 Show GitHub Exploit DB Packet Storm
226153 9.3 危険 Angus Johnson - Resource Hacker におけるヒープベースのバッファオーバーフローの脆弱性 CWE-119
バッファエラー
CVE-2012-6553 2013-05-24 14:02 2012-05-17 Show GitHub Exploit DB Packet Storm
226154 10 危険 3S-Smart Software Solutions - 3S CODESYS Gateway のサーバアプリケーションにおけるサービス運用妨害 (DoS) の脆弱性 CWE-399
リソース管理の問題
CVE-2013-2781 2013-05-24 13:49 2013-05-22 Show GitHub Exploit DB Packet Storm
226155 5 警告 シスコシステムズ - Cisco IOS XR の SNMP プロセスにおけるサービス運用妨害 (DoS) の脆弱性 CWE-399
リソース管理の問題
CVE-2013-1204 2013-05-24 13:45 2013-05-23 Show GitHub Exploit DB Packet Storm
226156 10 危険 日立 - JP1/Integrated Management - TELstaff Alarm View における任意のコマンドを実行される脆弱性 CWE-noinfo
情報不足
- 2013-05-24 11:33 2013-05-22 Show GitHub Exploit DB Packet Storm
226157 7.5 危険 The PHP Group
アップル
サイボウズ
- PHP-CGI の query string の処理に脆弱性 CWE-20
不適切な入力確認
CVE-2012-1823 2013-05-24 11:15 2012-05-7 Show GitHub Exploit DB Packet Storm
226158 4.3 警告 DELL EMC (旧 EMC Corporation) - 複数の EMC RSA Authentication Agent 製品におけるクロスサイトスクリプティングの脆弱性 CWE-79
クロスサイト・スクリプティング(XSS)
CVE-2013-0942 2013-05-23 21:12 2013-05-10 Show GitHub Exploit DB Packet Storm
226159 7.5 危険 Google - Google Chrome におけるサービス運用妨害 (DoS) の脆弱性 CWE-noinfo
情報不足
CVE-2013-2836 2013-05-23 17:43 2013-05-21 Show GitHub Exploit DB Packet Storm
226160 7.2 危険 Infotecs - 複数の Infotecs ViPNet 製品における権限を取得される脆弱性 CWE-264
認可・権限・アクセス制御
CVE-2013-3496 2013-05-23 15:00 2013-05-22 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 3, 2026, 4:18 a.m.

No CVSS Level
Attach Vector
Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
201821 7.5 HIGH
Network
u-root u-root This affects all versions of package github.com/u-root/u-root/pkg/cpio. It is vulnerable to leading, non-leading relative path traversal attacks and symlink based (relative and absolute) path travers… CWE-22
Path Traversal
CVE-2020-7666 2024-11-21 14:37 2020-09-1 Show GitHub Exploit DB Packet Storm
201822 7.5 HIGH
Network
u-root u-root This affects all versions of package github.com/u-root/u-root/pkg/uzip. It is vulnerable to both leading and non-leading relative path traversal attacks in zip file extraction. CWE-22
Path Traversal
CVE-2020-7665 2024-11-21 14:37 2020-09-1 Show GitHub Exploit DB Packet Storm
201823 9.8 CRITICAL
Network
gedi_project gedi All versions of package gedi are vulnerable to Prototype Pollution via the set function. CWE-1321
 Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution')
CVE-2020-7727 2024-11-21 14:37 2020-09-1 Show GitHub Exploit DB Packet Storm
201824 9.8 CRITICAL
Network
safe-object2_project safe-object2 All versions of package safe-object2 are vulnerable to Prototype Pollution via the setter function. CWE-1321
 Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution')
CVE-2020-7726 2024-11-21 14:37 2020-09-1 Show GitHub Exploit DB Packet Storm
201825 9.8 CRITICAL
Network
guidesmiths worksmith All versions of package worksmith are vulnerable to Prototype Pollution via the setValue function. CWE-1321
 Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution')
CVE-2020-7725 2024-11-21 14:37 2020-09-1 Show GitHub Exploit DB Packet Storm
201826 9.8 CRITICAL
Network
tiny-conf_project tiny-conf All versions of package tiny-conf are vulnerable to Prototype Pollution via the set function. CWE-1321
 Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution')
CVE-2020-7724 2024-11-21 14:37 2020-09-1 Show GitHub Exploit DB Packet Storm
201827 9.8 CRITICAL
Network
yola promisehelpers All versions of package promisehelpers are vulnerable to Prototype Pollution via the insert function. CWE-1321
 Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution')
CVE-2020-7723 2024-11-21 14:37 2020-09-1 Show GitHub Exploit DB Packet Storm
201828 9.8 CRITICAL
Network
nodee-utils_project nodee-utils All versions of package nodee-utils are vulnerable to Prototype Pollution via the deepSet function. CWE-1321
 Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution')
CVE-2020-7722 2024-11-21 14:37 2020-09-1 Show GitHub Exploit DB Packet Storm
201829 9.8 CRITICAL
Network
node-oojs_project node-oojs All versions of package node-oojs are vulnerable to Prototype Pollution via the setPath function. CWE-1321
 Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution')
CVE-2020-7721 2024-11-21 14:37 2020-09-1 Show GitHub Exploit DB Packet Storm
201830 7.3 HIGH
Network
digitalbazaar forge The package node-forge before 0.10.0 is vulnerable to Prototype Pollution via the util.setPath function. Note: Version 0.10.0 is a breaking change removing the vulnerable functions. CWE-1321
 Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution')
CVE-2020-7720 2024-11-21 14:37 2020-09-1 Show GitHub Exploit DB Packet Storm