Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 18, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
226201 10 危険 マイクロソフト - Microsoft XML コアサービスにおける任意のコードを実行される脆弱性 CWE-94
コード・インジェクション 		CVE-2013-0007 2013-01-11 13:48 2013-01-8 Show GitHub Exploit DB Packet Storm
226202 6.8 警告 Maxtom - Atomymaxsite の index.php における任意のコードを実行される脆弱性 CWE-Other
その他 		CVE-2012-6498 2013-01-9 11:59 2012-10-17 Show GitHub Exploit DB Packet Storm
226203 6.4 警告 レッドハット - JBoss Enterprise Application Platform における EJB へアクセスされる脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2012-4550 2013-01-8 16:39 2012-12-18 Show GitHub Exploit DB Packet Storm
226204 5.8 警告 レッドハット - JBoss Enterprise Application Platform におけるアクセス制限を回避される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2012-4549 2013-01-8 16:38 2012-12-18 Show GitHub Exploit DB Packet Storm
226205 5 警告 Apache Software Foundation - Apache CXF における子ポリシーを回避される脆弱性 CWE-200
情報漏えい 		CVE-2012-2378 2013-01-8 16:37 2012-12-18 Show GitHub Exploit DB Packet Storm
226206 10 危険 FFmpeg
Libav		 - FFmpeg および Libav の H.263 コーデックにおける脆弱性 CWE-noinfo
情報不足 		CVE-2011-3937 2013-01-8 16:37 2012-03-15 Show GitHub Exploit DB Packet Storm
226207 2.1 注意 レッドハット - Red Hat CloudForms における Grinder のキャッシュファイルを変更される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2012-5605 2013-01-8 16:33 2012-12-4 Show GitHub Exploit DB Packet Storm
226208 2.1 注意 レッドハット - Red Hat Enterprise Virtualization Manager における重要な情報を取得される脆弱性 CWE-200
情報漏えい 		CVE-2012-5516 2013-01-8 16:21 2012-12-4 Show GitHub Exploit DB Packet Storm
226209 2.1 注意 レッドハット - Red Hat CloudForms の Pulp における管理者パスワードを読まれる脆弱性 CWE-255
証明書・パスワード管理 		CVE-2012-4574 2013-01-8 16:19 2012-12-4 Show GitHub Exploit DB Packet Storm
226210 4 警告 レッドハット - Red Hat Certificate System の Token Processing System におけるサービス運用妨害 (DoS) の脆弱性 CWE-20
不適切な入力確認 		CVE-2012-4556 2013-01-8 16:14 2012-12-6 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 18, 2026, 4:12 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
210481 6.6 MEDIUM
Network 		xwiki xwiki In XWiki before versions 11.10.5 or 12.2.1, any user with SCRIPT right (EDIT right before XWiki 7.4) can gain access to the application server Servlet context which contains tools allowing to instant… CWE-74
Injection 		CVE-2020-15171 2024-11-21 14:04 2020-09-11 Show GitHub Exploit DB Packet Storm
210482 5.5 MEDIUM
Local 		avast antivirus An issue was discovered in the Login Password feature of the Password Manager component in Avast Antivirus 20.1.5069.562. An entered password continues to be stored in Windows main memory after a log… CWE-212
CWE-459
 Improper Removal of Sensitive Information Before Storage or Transfer
 Incomplete Cleanup 		CVE-2020-15024 2024-11-21 14:04 2020-09-11 Show GitHub Exploit DB Packet Storm
210483 6.1 MEDIUM
Network 		action_view_project
debian
fedoraproject 		action_view
debian_linux
fedora 		In Action View before versions 5.2.4.4 and 6.0.3.3 there is a potential Cross-Site Scripting (XSS) vulnerability in Action View's translation helpers. Views that allow the user to control the default… - CVE-2020-15169 2024-11-21 14:04 2020-09-12 Show GitHub Exploit DB Packet Storm
210484 7.5 HIGH
Network 		zeromq
fedoraproject
debian 		libzmq
fedora
debian_linux 		In ZeroMQ before version 4.3.3, there is a denial-of-service vulnerability. Users with TCP transport public endpoints, even with CURVE/ZAP enabled, are impacted. If a raw TCP socket is opened and con… - CVE-2020-15166 2024-11-21 14:04 2020-09-12 Show GitHub Exploit DB Packet Storm
210485 7.0 HIGH
Network 		ctrip apollo apollo-adminservice before version 1.7.1 does not implement access controls. If users expose apollo-adminservice to internet(which is not recommended), there are potential security issues since apoll… NVD-CWE-Other
CVE-2020-15170 2024-11-21 14:04 2020-09-11 Show GitHub Exploit DB Packet Storm
210486 5.3 MEDIUM
Network 		node-fetch_project node-fetch node-fetch before versions 2.6.1 and 3.0.0-beta.9 did not honor the size option after following a redirect, which means that when a content size was over the limit, a FetchError would never get throw… CWE-770
 Allocation of Resources Without Limits or Throttling 		CVE-2020-15168 2024-11-21 14:04 2020-09-11 Show GitHub Exploit DB Packet Storm
210487 8.2 HIGH
Network 		linuxfoundation the_update_framework Python TUF (The Update Framework) reference implementation before version 0.12 it will incorrectly trust a previously downloaded root metadata file which failed verification at download time. This al… CWE-345
 Insufficient Verification of Data Authenticity 		CVE-2020-15163 2024-11-21 14:04 2020-09-10 Show GitHub Exploit DB Packet Storm
210488 8.6 HIGH
Local 		johnkerl miller In Miller (command line utility) using the configuration file support introduced in version 5.9.0, it is possible for an attacker to cause Miller to run arbitrary code by placing a malicious `.mlrrc`… CWE-427
 Uncontrolled Search Path Element 		CVE-2020-15167 2024-11-21 14:04 2020-09-3 Show GitHub Exploit DB Packet Storm
210489 8.8 HIGH
Network 		sensiolabs
fedoraproject 		httpclient
symfony
fedora 		In Symfony before versions 4.4.13 and 5.1.5, the CachingHttpClient class from the HttpClient Symfony component relies on the HttpCache class to handle requests. HttpCache uses internal headers like X… - CVE-2020-15094 2024-11-21 14:04 2020-09-3 Show GitHub Exploit DB Packet Storm
210490 9.8 CRITICAL
Network 		duffel paginator There is a vulnerability in Paginator (Elixir/Hex package) which makes it susceptible to Remote Code Execution (RCE) attacks via input parameters to the paginate() function. This will potentially aff… - CVE-2020-15150 2024-11-21 14:04 2020-09-2 Show GitHub Exploit DB Packet Storm