Vulnerability Search Top
Show Search Menu
Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

  • Urgent
  • Important
  • Warning
  • Low
JVN Vulnerability Information

Update Date":June 3, 2026, 6:08 p.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Impact
Show		 Exploit
PoC
Search
226211 7.2 危険 マイクロソフト - Microsoft Windows 7 のカーネルモードドライバの win32k.sys におけるバッファオーバーフローの脆弱性 CWE-119
バッファエラー 		CVE-2013-1333 2013-05-20 17:47 2013-05-14 Show GitHub Exploit DB Packet Storm
226212 6.8 警告 アップル - Apple Safari 6.0.3 未満などの製品で使用される WebKit における任意のコードを実行される脆弱性 CWE-noinfo
情報不足 		CVE-2013-0961 2013-05-20 16:59 2013-03-15 Show GitHub Exploit DB Packet Storm
226213 6.8 警告 アップル - Apple Safari 6.0.3 未満などの製品で使用される WebKit における任意のコードを実行される脆弱性 CWE-noinfo
情報不足 		CVE-2013-0960 2013-05-20 16:52 2013-03-15 Show GitHub Exploit DB Packet Storm
226214 6.8 警告 アップル - Apple iOS および Apple Safari で使用される WebKit における任意のコードを実行される脆弱性 CWE-119
バッファエラー 		CVE-2013-0959 2013-05-20 16:42 2013-01-29 Show GitHub Exploit DB Packet Storm
226215 6.8 警告 アップル - Apple iOS および Apple Safari で使用される WebKit における任意のコードを実行される脆弱性 CWE-119
バッファエラー 		CVE-2013-0958 2013-05-20 16:37 2013-01-29 Show GitHub Exploit DB Packet Storm
226216 6.8 警告 アップル - Apple iOS および Apple Safari で使用される WebKit における任意のコードを実行される脆弱性 CWE-119
バッファエラー 		CVE-2013-0956 2013-05-20 16:30 2013-01-29 Show GitHub Exploit DB Packet Storm
226217 6.8 警告 アップル - Apple iOS および Apple Safari で使用される WebKit における任意のコードを実行される脆弱性 CWE-119
バッファエラー 		CVE-2013-0955 2013-05-20 16:27 2013-01-29 Show GitHub Exploit DB Packet Storm
226218 6.8 警告 アップル - Apple iOS および Apple Safari で使用される WebKit における任意のコードを実行される脆弱性 CWE-119
バッファエラー 		CVE-2013-0954 2013-05-20 16:20 2013-01-29 Show GitHub Exploit DB Packet Storm
226219 6.8 警告 アップル - Apple iOS および Apple Safari で使用される WebKit における任意のコードを実行される脆弱性 CWE-119
バッファエラー 		CVE-2013-0953 2013-05-20 16:18 2013-01-29 Show GitHub Exploit DB Packet Storm
226220 6.8 警告 アップル - Apple iOS および Apple Safari で使用される WebKit における任意のコードを実行される脆弱性 CWE-119
バッファエラー 		CVE-2013-0952 2013-05-20 16:03 2013-01-29 Show GitHub Exploit DB Packet Storm
NVD Vulnerability Information

Update Date:June 3, 2026, 4:18 a.m.

No CVSS Level
Attach Vector		 Vendor Name Project Name Title CWE CVE Update Date Publication Date Show Affected Exploit
PoC
Search
209221 9.8 CRITICAL
Network 		microfocus identity_manager NetIQ Identity Manager 4.8 prior to version 4.8 SP2 HF1 are affected by an injection vulnerability. This vulnerability is fixed in NetIQ IdM 4.8 SP2 HF1. CWE-89
SQL Injection 		CVE-2020-25839 2024-11-21 14:18 2020-11-21 Show GitHub Exploit DB Packet Storm
209222 5.3 MEDIUM
Network 		moodle
fedoraproject 		moodle
fedora 		The participants table download in Moodle always included user emails, but should have only done so when users' emails are not hidden. Versions affected: 3.9 to 3.9.2, 3.8 to 3.8.5 and 3.7 to 3.7.8. … CWE-200
Information Exposure 		CVE-2020-25703 2024-11-21 14:18 2020-11-20 Show GitHub Exploit DB Packet Storm
209223 6.1 MEDIUM
Network 		moodle
fedoraproject 		moodle
fedora 		In Moodle, it was possible to include JavaScript when re-naming content bank items. Versions affected: 3.9 to 3.9.2. This is fixed in moodle 3.9.3 and 3.10. CWE-79
Cross-site Scripting 		CVE-2020-25702 2024-11-21 14:18 2020-11-20 Show GitHub Exploit DB Packet Storm
209224 5.3 MEDIUM
Network 		moodle
fedoraproject 		moodle
fedora 		If the upload course tool in Moodle was used to delete an enrollment method which did not exist or was not already enabled, the tool would erroneously enable that enrollment method. This could lead t… CWE-863
 Incorrect Authorization 		CVE-2020-25701 2024-11-21 14:18 2020-11-20 Show GitHub Exploit DB Packet Storm
209225 6.5 MEDIUM
Network 		moodle
fedoraproject 		moodle
fedora 		In moodle, some database module web services allowed students to add entries within groups they did not belong to. Versions affected: 3.9 to 3.9.2, 3.8 to 3.8.5, 3.7 to 3.7.8, 3.5 to 3.5.14 and earli… CWE-89
SQL Injection 		CVE-2020-25700 2024-11-21 14:18 2020-11-20 Show GitHub Exploit DB Packet Storm
209226 7.5 HIGH
Network 		moodle
fedoraproject 		moodle
fedora 		In moodle, insufficient capability checks could lead to users with the ability to course restore adding additional capabilities to roles within that course. Versions affected: 3.9 to 3.9.2, 3.8 to 3.… CWE-863
 Incorrect Authorization 		CVE-2020-25699 2024-11-21 14:18 2020-11-20 Show GitHub Exploit DB Packet Storm
209227 7.5 HIGH
Network 		moodle
fedoraproject 		moodle
fedora 		Users' enrollment capabilities were not being sufficiently checked in Moodle when they are restored into an existing course. This could lead to them unenrolling users without having permission to do … NVD-CWE-noinfo
CVE-2020-25698 2024-11-21 14:18 2020-11-20 Show GitHub Exploit DB Packet Storm
209228 6.1 MEDIUM
Network 		kyocera ecosys_m2640idw_firmware The web application of Kyocera printer (ECOSYS M2640IDW) is affected by Stored XSS vulnerability, discovered in the addition a new contact in "Machine Address Book". Successful exploitation of this v… CWE-79
Cross-site Scripting 		CVE-2020-25890 2024-11-21 14:18 2020-11-18 Show GitHub Exploit DB Packet Storm
209229 5.4 MEDIUM
Network 		limesurvey limesurvey A stored cross-site scripting (XSS) vulnerability in LimeSurvey before and including 3.21.1 allows authenticated users with correct permissions to inject arbitrary web script or HTML via parameter Pa… CWE-79
Cross-site Scripting 		CVE-2020-25798 2024-11-21 14:18 2020-11-18 Show GitHub Exploit DB Packet Storm
209230 4.6 MEDIUM
Physics 		resourcexpress qubi3_firmware QED ResourceXpress Qubi3 devices before 1.40.9 could allow a local attacker (with physical access to the device) to obtain sensitive information via the debug interface (keystrokes over a USB cable),… CWE-200
Information Exposure 		CVE-2020-25746 2024-11-21 14:18 2020-11-17 Show GitHub Exploit DB Packet Storm