Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":May 31, 2026, 6 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
226201 7.8 危険 Rockwell Automation - Rockwell Automation FactoryTalk Services Platform の RNADiagnostics.dll における整数オーバーフローの脆弱性 CWE-189
数値処理の問題 		CVE-2012-4714 2013-04-22 16:01 2013-04-5 Show GitHub Exploit DB Packet Storm
226202 7.8 危険 Rockwell Automation - Rockwell Automation FactoryTalk Services Platform の RNADiagnostics.dll における整数符号エラーの脆弱性 CWE-189
数値処理の問題 		CVE-2012-4713 2013-04-22 16:00 2013-04-5 Show GitHub Exploit DB Packet Storm
226203 7.1 危険 Rockwell Automation - Rockwell Automation RSLinx Enterprise の LogReceiver.exe におけるサービス運用妨害 (DoS) の脆弱性 CWE-20
不適切な入力確認 		CVE-2012-4695 2013-04-22 15:58 2013-04-5 Show GitHub Exploit DB Packet Storm
226204 6.6 警告 Schneider Electric - Schneider Electric の MiCOM S1 Studio におけるサービスまたは設定ファイルを変更される脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2013-0687 2013-04-22 15:34 2013-03-28 Show GitHub Exploit DB Packet Storm
226205 7.2 危険 Parallels - Parallels Plesk Panel の /usr/local/psa/admin/sbin/wrapper における権限を取得される脆弱性 CWE-Other
その他 		CVE-2013-0133 2013-04-22 13:58 2013-04-10 Show GitHub Exploit DB Packet Storm
226206 6.8 警告 Parallels - Parallels Plesk Panel の suEXEC の実装における任意の PHP コードを実行される脆弱性 CWE-94
コード・インジェクション 		CVE-2013-0132 2013-04-22 13:51 2013-04-10 Show GitHub Exploit DB Packet Storm
226207 7.5 危険 Google - Google Chrome の developer-tools プロセスにおける脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2013-0887 2013-04-22 12:42 2013-02-21 Show GitHub Exploit DB Packet Storm
226208 7.5 危険 Google - Mac OS X 上で稼働する Google Chrome における脆弱性 CWE-DesignError
CVE-2013-0886 2013-04-22 12:38 2013-02-21 Show GitHub Exploit DB Packet Storm
226209 7.5 危険 Google - Google Chrome における脆弱性 CWE-264
認可・権限・アクセス制御 		CVE-2013-0885 2013-04-22 12:34 2013-02-21 Show GitHub Exploit DB Packet Storm
226210 7.5 危険 Google - Google Chrome における脆弱性 CWE-noinfo
情報不足 		CVE-2013-0884 2013-04-22 12:30 2013-02-21 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:May 31, 2026, 4:16 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
214271 9.8 CRITICAL
Network 		ithemes paypal_pro The CodePeople Payment Form for PayPal Pro plugin before 1.1.65 for WordPress allows SQL Injection. CWE-89
SQL Injection 		CVE-2020-14092 2024-11-21 14:02 2020-07-3 Show GitHub Exploit DB Packet Storm
214272 5.3 MEDIUM
Network 		powerdns recursor In PowerDNS Recursor versions up to and including 4.3.1, 4.2.2 and 4.1.16, the ACL restricting access to the internal web server is not properly enforced. CWE-863
 Incorrect Authorization 		CVE-2020-14196 2024-11-21 14:02 2020-07-2 Show GitHub Exploit DB Packet Storm
214273 9.8 CRITICAL
Network 		monstaftp monsta_ftp Monsta FTP 2.10.1 or below allows external control of paths used in filesystem operations. This allows attackers to read and write arbitrary local files, allowing an attacker to gain remote code exec… CWE-610
Externally Controlled Reference to a Resource in Another Sphere 		CVE-2020-14057 2024-11-21 14:02 2020-07-2 Show GitHub Exploit DB Packet Storm
214274 9.8 CRITICAL
Network 		monstaftp monsta_ftp Monsta FTP 2.10.1 or below is prone to a server-side request forgery vulnerability due to insufficient restriction of the web fetch functionality. This allows attackers to read arbitrary local files … CWE-918
Server-Side Request Forgery (SSRF)  		CVE-2020-14056 2024-11-21 14:02 2020-07-2 Show GitHub Exploit DB Packet Storm
214275 6.1 MEDIUM
Network 		monstaftp monsta_ftp Monsta FTP 2.10.1 or below is prone to a stored cross-site scripting vulnerability in the language setting due to insufficient output encoding. CWE-79
Cross-site Scripting 		CVE-2020-14055 2024-11-21 14:02 2020-07-2 Show GitHub Exploit DB Packet Storm
214276 6.1 MEDIUM
Network 		atlassian jira
jira_software_data_center 		The quick search component in Atlassian Jira Server and Data Center before 8.9.1 allows remote attackers to inject arbitrary HTML or JavaScript via a Cross-Site Scripting (XSS) vulnerability CWE-79
Cross-site Scripting 		CVE-2020-14169 2024-11-21 14:02 2020-07-1 Show GitHub Exploit DB Packet Storm
214277 5.9 MEDIUM
Network 		atlassian jira
jira_software_data_center
jira_server
jira_data_center 		The email client in Jira Server and Data Center before version 7.13.16, from 8.5.0 before 8.5.7, from 8.8.0 before 8.8.2, and from 8.9.0 before 8.9.1 allows remote attackers to access outgoing emails… NVD-CWE-noinfo
CVE-2020-14168 2024-11-21 14:02 2020-07-1 Show GitHub Exploit DB Packet Storm
214278 7.5 HIGH
Network 		atlassian jira
jira_software_data_center
jira_server
jira_data_center 		The MessageBundleResource resource in Jira Server and Data Center before version 7.13.4, from 8.5.0 before 8.5.5, from 8.8.0 before 8.8.2, and from 8.9.0 before 8.9.1 allows remote attackers to impac… NVD-CWE-noinfo
CVE-2020-14167 2024-11-21 14:02 2020-07-1 Show GitHub Exploit DB Packet Storm
214279 4.8 MEDIUM
Network 		atlassian jira_service_desk The /servicedesk/customer/portals resource in Jira Service Desk Server and Data Center before version 4.10.0 allows remote attackers with project administrator privileges to inject arbitrary HTML or … CWE-79
Cross-site Scripting 		CVE-2020-14166 2024-11-21 14:02 2020-07-1 Show GitHub Exploit DB Packet Storm
214280 5.3 MEDIUM
Network 		atlassian jira
jira_software_data_center 		The UniversalAvatarResource.getAvatars resource in Jira Server and Data Center before version 8.9.0 allows remote attackers to obtain information about custom project avatars names via an Improper au… NVD-CWE-noinfo
CVE-2020-14165 2024-11-21 14:02 2020-07-1 Show GitHub Exploit DB Packet Storm