Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":June 6, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
226211	9.3	危険	アップル	-	Apple QuickTime におけるバッファオーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2013-0989	2013-06-7 13:38	2013-05-22	Show	GitHub Exploit DB Packet Storm

226212	7.5	危険	アップル Ruby on Rails project	-	Ruby on Rails における任意のコードを実行される脆弱性	CWE-Other その他	CVE-2013-0333	2013-06-7 12:18	2013-01-28	Show	GitHub Exploit DB Packet Storm

226213	10	危険	アップル Ruby on Rails project	-	Ruby on Rails の ActiveRecord におけるサービス運用妨害 (DoS) の脆弱性	CWE-noinfo 情報不足	CVE-2013-0277	2013-06-7 12:09	2013-02-11	Show	GitHub Exploit DB Packet Storm

226214	4.3	警告	アップル Ruby on Rails project	-	Ruby on Rails の ActiveRecord における attr_protected 保護メカニズムを回避される脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2013-0276	2013-06-7 12:07	2013-02-11	Show	GitHub Exploit DB Packet Storm

226215	2.6	注意	日本ケンタッキー・フライド・チキン株式会社	-	Android 版ピザハット公式アプリ　宅配ピザのPizzaHut における SSL サーバ証明書の検証不備の脆弱性	CWE-Other その他	CVE-2013-3641	2013-06-7 12:01	2013-06-7	Show	GitHub Exploit DB Packet Storm

226216	2.6	注意	マイクロソフト	-	Internet Explorer における情報漏えいの脆弱性	CWE-Other その他	-	2013-06-7 12:00	2013-06-7	Show	GitHub Exploit DB Packet Storm

226217	6.4	警告	アップル Ruby on Rails project	-	Ruby on Rails におけるデータベースのクエリ制限を回避される脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2013-0155	2013-06-7 11:58	2013-01-8	Show	GitHub Exploit DB Packet Storm

226218	7.2	危険	アップル	-	CUPS における root として任意のファイルを読まれる脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2012-5519	2013-06-7 11:50	2012-11-20	Show	GitHub Exploit DB Packet Storm

226219	7.5	危険	アップル OpenSSL Project	-	OpenSSL の crypto/buffer/buffer.c における整数符号エラーの脆弱性	CWE-189 数値処理の問題	CVE-2012-2131	2013-06-7 11:36	2012-04-23	Show	GitHub Exploit DB Packet Storm

226220	7.5	危険	アップル VMware OpenSSL Project	-	OpenSSL の asn1_d2i_read_bio 関数におけるバッファオーバーフロー攻撃を誘発される脆弱性	CWE-119 バッファエラー	CVE-2012-2110	2013-06-7 11:33	2012-04-19	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:June 6, 2026, 4:18 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
201911	5.9	MEDIUM Network	google	earth	A Buffer Overflow vulnerability in the khcrypt implementation in Google Earth Pro versions up to and including 7.3.2 allows an attacker to perform a Man-in-the-Middle attack using a specially crafted…	CWE-120 Classic Buffer Overflow	CVE-2020-8896	2024-11-21 14:39	2020-05-5	Show	GitHub Exploit DB Packet Storm

201912	5.3	MEDIUM Network	oklok_project	oklok	The OKLOK (3.1.1) mobile companion app for Fingerprint Bluetooth Padlock FB50 (2.3) has an information-exposure issue. In the mobile app, an attempt to add an already-bound lock by its barcode reveal…	CWE-330 Use of Insufficiently Random Values	CVE-2020-8792	2024-11-21 14:39	2020-05-4	Show	GitHub Exploit DB Packet Storm

201913	6.5	MEDIUM Network	oklok_project	oklok	The OKLOK (3.1.1) mobile companion app for Fingerprint Bluetooth Padlock FB50 (2.3) allows remote attackers to submit API requests using authenticated but unauthorized tokens, resulting in IDOR issue…	CWE-639 Authorization Bypass Through User-Controlled Key	CVE-2020-8791	2024-11-21 14:39	2020-05-4	Show	GitHub Exploit DB Packet Storm

201914	9.8	CRITICAL Network	oklok_project	oklok	The OKLOK (3.1.1) mobile companion app for Fingerprint Bluetooth Padlock FB50 (2.3) has weak password requirements combined with improper restriction of excessive authentication attempts, which could…	CWE-307 CWE-521 mproper Restriction of Excessive Authentication Attempts Weak Password Requirements	CVE-2020-8790	2024-11-21 14:39	2020-05-4	Show	GitHub Exploit DB Packet Storm

201915	8.9	HIGH Network	pega	platform	Pega Platform before version 8.2.6 is affected by a Stored Cross-Site Scripting (XSS) vulnerability in the comment tags.	CWE-79 Cross-site Scripting	CVE-2020-8775	2024-11-21 14:39	2020-04-30	Show	GitHub Exploit DB Packet Storm

201916	8.8	HIGH Network	pega	pega_platform	Pega Platform before version 8.2.6 is affected by a Reflected Cross-Site Scripting vulnerability in the "ActionStringID" function.	CWE-79 Cross-site Scripting	CVE-2020-8774	2024-11-21 14:39	2020-04-30	Show	GitHub Exploit DB Packet Storm

201917	8.9	HIGH Network	pega	platform	The Richtext Editor in Pega Platform before 8.2.6 is affected by a Stored Cross-Site Scripting (XSS) vulnerability.	CWE-79 Cross-site Scripting	CVE-2020-8773	2024-11-21 14:39	2020-04-30	Show	GitHub Exploit DB Packet Storm

201918	9.8	CRITICAL Network	huawei	ar3200_firmware	Huawei AR3200 products with versions of V200R007C00SPC900, V200R007C00SPCa00, V200R007C00SPCb00, V200R007C00SPCc00, V200R009C00SPC500 have an improper authentication vulnerability. Attackers need to …	CWE-287 Improper Authentication	CVE-2020-9068	2024-11-21 14:39	2020-04-28	Show	GitHub Exploit DB Packet Storm

201919	6.7	MEDIUM Local	huawei	osd_firmware	Huawei OSD product with versions earlier than OSD_uwp_9.0.32.0 have a local privilege escalation vulnerability. An authenticated, local attacker can constructs a specific file path to exploit this vu…	NVD-CWE-noinfo	CVE-2020-9072	2024-11-21 14:39	2020-04-28	Show	GitHub Exploit DB Packet Storm

201920	5.5	MEDIUM Local	juplink	rx4-1500_firmware	httpd in Juplink RX4-1500 v1.0.3-v1.0.5 allows remote attackers to change or access router settings by connecting to the unauthenticated setup3.htm endpoint from the local network.	CWE-276 Incorrect Default Permissions	CVE-2020-8798	2024-11-21 14:39	2020-04-24	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed