Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":June 3, 2026, 6:08 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
226241	5	警告	シスコシステムズ	-	Cisco Unified Communications Manager におけるサービス運用妨害 (DoS) の脆弱性	CWE-287 不適切な認証	CVE-2013-1188	2013-05-17 16:01	2013-05-15	Show	GitHub Exploit DB Packet Storm

226242	-	-	シスコシステムズ	-	削除 Cisco ACE の Application Control Engine モジュールにおけるサービス運用妨害 (DoS) の脆弱性	-	CVE-2013-1175	2013-05-17 16:00	2013-05-16	Show	GitHub Exploit DB Packet Storm

226243	9.3	危険	マイクロソフト	-	x64 プラットフォーム上で稼働する Microsoft Malware Protection Engine における任意のコードを実行される脆弱性	CWE-119 バッファエラー	CVE-2013-1346	2013-05-16 17:55	2013-05-14	Show	GitHub Exploit DB Packet Storm

226244	4.3	警告	Wesley Destailleur	-	Todoo Forum の todooforum.php におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2013-3538	2013-05-15 17:47	2013-05-13	Show	GitHub Exploit DB Packet Storm

226245	7.5	危険	Wesley Destailleur	-	Todoo Forum の todooforum.php における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2013-3537	2013-05-15 17:46	2013-05-13	Show	GitHub Exploit DB Packet Storm

226246	7.5	危険	WHMCS Limited	-	WHMCS 用 Group Pay モジュールにおける SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2013-3536	2013-05-15 17:38	2013-05-13	Show	GitHub Exploit DB Packet Storm

226247	4.3	警告	ThemeLogik	-	CMSLogik におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2013-3535	2013-05-15 17:35	2013-05-13	Show	GitHub Exploit DB Packet Storm

226248	4.3	警告	algisinfo	-	Joomla! 用の aiContactSafe コンポーネントにおけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2013-3534	2013-05-15 17:32	2013-04-16	Show	GitHub Exploit DB Packet Storm

226249	2.6	注意	Fedora Project	-	389 Directory Server の ldap/servers/slapd/search.c における重要な情報を取得される脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2013-1897	2013-05-15 16:07	2013-03-28	Show	GitHub Exploit DB Packet Storm

226250	7.5	危険	Virtual Access	-	Virtual Access Monitor における SQL インジェクションの脆弱性	CWE-89 SQLインジェクション	CVE-2013-3533	2013-05-14 15:49	2013-05-10	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:June 3, 2026, 4:18 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
209271	7.2	HIGH Network	craftercms	studio	Improper Control of Dynamically-Managed Code Resources vulnerability in Crafter Studio of Crafter CMS allows authenticated developers to execute OS commands via FreeMarker template exposed objects. T…	CWE-913 Improper Control of Dynamically-Managed Code Resources	CVE-2020-25803	2024-11-21 14:18	2020-10-7	Show	GitHub Exploit DB Packet Storm

209272	3.2	LOW Local	qemu redhat	qemu enterprise_linux openstack_platform	hw/ide/pci.c in QEMU before 5.1.1 can trigger a NULL pointer dereference because it lacks a pointer check before an ide_cancel_dma_sync call.	CWE-476 NULL Pointer Dereference	CVE-2020-25743	2024-11-21 14:18	2020-10-7	Show	GitHub Exploit DB Packet Storm

209273	3.2	LOW Local	qemu	qemu	pci_change_irq_level in hw/pci/pci.c in QEMU before 5.1.1 has a NULL pointer dereference because pci_get_bus() might not return a valid pointer.	CWE-476 NULL Pointer Dereference	CVE-2020-25742	2024-11-21 14:18	2020-10-7	Show	GitHub Exploit DB Packet Storm

209274	7.2	HIGH Network	craftercms	studio	Improper Control of Dynamically-Managed Code Resources vulnerability in Crafter Studio of Crafter CMS allows authenticated developers to execute OS commands via Groovy scripting. This issue affects: …	CWE-913 Improper Control of Dynamically-Managed Code Resources	CVE-2020-25802	2024-11-21 14:18	2020-10-6	Show	GitHub Exploit DB Packet Storm

209275	7.5	HIGH Network	redhat netapp	wildfly_openssl jboss_enterprise_application_platform single_sign-on jboss_fuse jboss_data_grid openshift_application_runtimes data_grid oncommand_workflow_automation oncomman…	A memory leak flaw was found in WildFly OpenSSL in versions prior to 1.1.3.Final, where it removes an HTTP session. It may allow the attacker to cause OOM leading to a denial of service. The highest …	CWE-401 Missing Release of Memory after Effective Lifetime	CVE-2020-25644	2024-11-21 14:18	2020-10-6	Show	GitHub Exploit DB Packet Storm

209276	7.2	HIGH Network	linux redhat opensuse debian netapp starwindsoftware	linux_kernel enterprise_linux leap debian_linux h410c_firmware starwind_virtual_san	A flaw was found in the HDLC_PPP module of the Linux kernel in versions before 5.9-rc7. Memory corruption and a read overflow is caused by improper input validation in the ppp_cp_parse_cr function wh…	-	CVE-2020-25643	2024-11-21 14:18	2020-10-6	Show	GitHub Exploit DB Packet Storm

209277	5.5	MEDIUM Local	linux redhat opensuse debian canonical	linux_kernel enterprise_linux leap debian_linux ubuntu_linux	A flaw was found in the Linux kernel's implementation of biovecs in versions before 5.9-rc7. A zero-length biovec request issued by the block subsystem could cause the kernel to enter an infinite loo…	CWE-835 Loop with Unreachable Exit Condition ('Infinite Loop')	CVE-2020-25641	2024-11-21 14:18	2020-10-6	Show	GitHub Exploit DB Packet Storm

209278	6.7	MEDIUM Local	redhat opensuse	libvirt leap	A double free memory issue was found to occur in the libvirt API, in versions before 6.8.0, responsible for requesting information about network interfaces of a running QEMU domain. This flaw affects…	-	CVE-2020-25637	2024-11-21 14:18	2020-10-6	Show	GitHub Exploit DB Packet Storm

209279	7.5	HIGH Network	ruby-lang fedoraproject	ruby webrick fedora	An issue was discovered in Ruby through 2.5.8, 2.6.x through 2.6.6, and 2.7.x through 2.7.1. WEBrick, a simple HTTP server bundled with Ruby, had not checked the transfer-encoding header value rigoro…	CWE-444 HTTP Request Smuggling	CVE-2020-25613	2024-11-21 14:18	2020-10-6	Show	GitHub Exploit DB Packet Storm

209280	5.5	MEDIUM Local	redhat	ansible	A flaw was found in Ansible Base when using the aws_ssm connection plugin as garbage collector is not happening after playbook run is completed. Files would remain in the bucket exposing the data. Th…	CWE-212 Improper Removal of Sensitive Information Before Storage or Transfer	CVE-2020-25635	2024-11-21 14:18	2020-10-5	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed