Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 28, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
226171 5 警告 New Relic - Ruby Agent における重要な情報を取得される脆弱性 CWE-200
情報漏えい 		CVE-2013-0284 2013-04-11 19:38 2013-02-13 Show GitHub Exploit DB Packet Storm
226172 6.8 警告 Michael Bleigh and Intridea, Inc. - Ruby 用 omniauth-oauth2 gem におけるクロスサイトリクエストフォージェリの脆弱性 CWE-352
同一生成元ポリシー違反 		CVE-2012-6134 2013-04-11 19:37 2013-02-25 Show GitHub Exploit DB Packet Storm
226173 5.8 警告 Apache Software Foundation - Apache Maven のデフォルト設定におけるサーバになりすまされる脆弱性 CWE-16
環境設定 		CVE-2013-0253 2013-04-11 17:36 2013-04-2 Show GitHub Exploit DB Packet Storm
226174 4.3 警告 fedorahosted.org - cronie におけるファイル記述子が漏えいする脆弱性 CWE-200
情報漏えい 		CVE-2012-6097 2013-04-11 17:35 2013-01-9 Show GitHub Exploit DB Packet Storm
226175 2.1 注意 Gluster, Inc.
レッドハット		 - Red Hat Storage の GlusterFS 機能における任意のファイルを上書きされる脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2012-5635 2013-04-11 17:35 2013-03-28 Show GitHub Exploit DB Packet Storm
226176 4 警告 OpenStack
Canonical		 - 複数の OpenStack 製品におけるサービス運用妨害 (DoS) の脆弱性 CWE-399
リソース管理の問題 		CVE-2013-1838 2013-04-11 14:57 2013-03-15 Show GitHub Exploit DB Packet Storm
226177 4.3 警告 フェンリル株式会社 - Sleipnir for Windows におけるアドレスバー偽装の脆弱性 CWE-noinfo
情報不足 		CVE-2013-2303 2013-04-11 12:01 2013-04-11 Show GitHub Exploit DB Packet Storm
226178 7.5 危険 アドビシステムズ - Adobe ColdFusion におけるユーザになりすまされる脆弱性 CWE-noinfo
情報不足 		CVE-2013-1387 2013-04-11 11:57 2013-04-9 Show GitHub Exploit DB Packet Storm
226179 7.5 危険 アドビシステムズ - Adobe ColdFusion における ColdFusion Administrator コンソールへアクセスされる脆弱性 CWE-noinfo
情報不足 		CVE-2013-1388 2013-04-11 11:53 2013-04-9 Show GitHub Exploit DB Packet Storm
226180 10 危険 アドビシステムズ - Adobe Shockwave Player における任意のコードを実行される脆弱性 CWE-noinfo
情報不足 		CVE-2013-1386 2013-04-11 11:21 2013-04-9 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 28, 2026, 4:16 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
209811 8.8 HIGH
Network 		paloaltonetworks pan-os An improper authorization vulnerability in PAN-OS that mistakenly uses the permissions of local linux users instead of the intended SAML permissions of the account when the username is shared for the… CWE-863
 Incorrect Authorization 		CVE-2020-1998 2024-11-21 14:11 2020-05-14 Show GitHub Exploit DB Packet Storm
209812 5.3 MEDIUM
Network 		paloaltonetworks pan-os A missing authorization vulnerability in the management server component of PAN-OS Panorama allows a remote unauthenticated user to inject messages into the management server ms.log file. This vulner… CWE-862
 Missing Authorization 		CVE-2020-1996 2024-11-21 14:11 2020-05-14 Show GitHub Exploit DB Packet Storm
209813 4.9 MEDIUM
Network 		paloaltonetworks pan-os A NULL pointer dereference vulnerability in Palo Alto Networks PAN-OS allows an authenticated administrator to send a request that causes the rasmgr daemon to crash. Repeated attempts to send this re… CWE-476
 NULL Pointer Dereference 		CVE-2020-1995 2024-11-21 14:11 2020-05-14 Show GitHub Exploit DB Packet Storm
209814 4.4 MEDIUM
Local 		paloaltonetworks pan-os A predictable temporary file vulnerability in PAN-OS allows a local authenticated user with shell access to corrupt arbitrary system files affecting the integrity of the system. This issue affects: A… NVD-CWE-Other
CVE-2020-1994 2024-11-21 14:11 2020-05-14 Show GitHub Exploit DB Packet Storm
209815 5.4 MEDIUM
Network 		paloaltonetworks pan-os The GlobalProtect Portal feature in PAN-OS does not set a new session identifier after a successful user login, which allows session fixation attacks, if an attacker is able to control a user's sessi… CWE-384
 Session Fixation 		CVE-2020-1993 2024-11-21 14:11 2020-05-14 Show GitHub Exploit DB Packet Storm
209816 8.8 HIGH
Network 		redhat
quarkus 		keycloak
decision_manager
single_sign-on
jboss_fuse
process_automation
openshift_application_runtimes
quarkus 		A flaw was found in Keycloak before version 11.0.0, where the code base contains usages of ObjectInputStream without type checks. This flaw allows an attacker to inject arbitrarily serialized Java Ob… CWE-20
 Improper Input Validation  		CVE-2020-1714 2024-11-21 14:11 2020-05-14 Show GitHub Exploit DB Packet Storm
209817 8.8 HIGH
Network 		redhat keycloak
jboss_fuse
openshift_application_runtimes 		A flaw was found in the reset credential flow in all Keycloak versions before 8.0.0. This flaw allows an attacker to gain unauthorized access to the application. CWE-287
Improper Authentication 		CVE-2020-1718 2024-11-21 14:11 2020-05-13 Show GitHub Exploit DB Packet Storm
209818 5.0 MEDIUM
Local 		redhat
debian 		ansible_tower
ansible_engine
debian_linux 		A flaw was found in the Ansible Engine affecting Ansible Engine versions 2.7.x before 2.7.17 and 2.8.x before 2.8.11 and 2.9.x before 2.9.7 as well as Ansible Tower before and including versions 3.4.… - CVE-2020-1746 2024-11-21 14:11 2020-05-13 Show GitHub Exploit DB Packet Storm
209819 9.8 CRITICAL
Network 		apache nuttx The Apache NuttX (Incubating) project provides an optional separate "apps" repository which contains various optional components and example programs. One of these, ftpd, had a NULL pointer dereferen… CWE-476
 NULL Pointer Dereference 		CVE-2020-1939 2024-11-21 14:11 2020-05-13 Show GitHub Exploit DB Packet Storm
209820 7.5 HIGH
Network 		libreswan libreswan An out-of-bounds buffer read flaw was found in the pluto daemon of libreswan from versions 3.27 till 3.31 where, an unauthenticated attacker could use this flaw to crash libreswan by sending speciall… - CVE-2020-1763 2024-11-21 14:11 2020-05-12 Show GitHub Exploit DB Packet Storm