Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":June 6, 2026, 6 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
226331	7.5	危険	The PHP Group アップルサイボウズ	-	PHP-CGI の query string の処理に脆弱性	CWE-20 不適切な入力確認	CVE-2012-1823	2013-05-24 11:15	2012-05-7	Show	GitHub Exploit DB Packet Storm

226332	4.3	警告	DELL EMC (旧 EMC Corporation)	-	複数の EMC RSA Authentication Agent 製品におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2013-0942	2013-05-23 21:12	2013-05-10	Show	GitHub Exploit DB Packet Storm

226333	7.5	危険	Google	-	Google Chrome におけるサービス運用妨害 (DoS) の脆弱性	CWE-noinfo 情報不足	CVE-2013-2836	2013-05-23 17:43	2013-05-21	Show	GitHub Exploit DB Packet Storm

226334	7.2	危険	Infotecs	-	複数の Infotecs ViPNet 製品における権限を取得される脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2013-3496	2013-05-23 15:00	2013-05-22	Show	GitHub Exploit DB Packet Storm

226335	2.1	注意	OpenStack	-	OpenStack DevStack における重要な情報を取得される脆弱性	CWE-264 認可・権限・アクセス制御	CVE-2013-1977	2013-05-23 14:52	2013-05-21	Show	GitHub Exploit DB Packet Storm

226336	4.3	警告	レッドハット	-	Red Hat subscription-manager の rhn-migrate-classic-to-rhsm における重要な情報を取得される脆弱性	CWE-255 証明書・パスワード管理	CVE-2012-6137	2013-05-23 14:45	2013-05-6	Show	GitHub Exploit DB Packet Storm

226337	5.8	警告	Canonical	-	telepathy-idle における SSL サーバを偽装される脆弱性	CWE-20 不適切な入力確認	CVE-2007-6746	2013-05-23 14:21	2013-04-22	Show	GitHub Exploit DB Packet Storm

226338	10	危険	Schneider Electric 三菱電機	-	Citect CitectFacilities および CitectSCADA に含まれる Mitsubishi MX Component におけるバッファオーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2013-3075	2013-05-22 11:02	2013-04-1	Show	GitHub Exploit DB Packet Storm

226339	5	警告	Patrick Masotta	-	Serva にバッファオーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2013-0145	2013-05-21 18:30	2013-05-14	Show	GitHub Exploit DB Packet Storm

226340	10	危険	マイクロソフトアドビシステムズ Google	-	Adobe Flash Player および Adobe AIR における任意のコードを実行される脆弱性	CWE-119 バッファエラー	CVE-2013-1378	2013-05-21 18:15	2013-04-9	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:June 6, 2026, 4:18 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
201941	6.1	MEDIUM Network	tiki	tikiwiki_cms\/groupware	There is an Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) vulnerability in php webpages of Tiki-Wiki Groupware. Tiki-Wiki CMS all versions through 20.0 allows maliciou…	CWE-79 Cross-site Scripting	CVE-2020-8966	2024-11-21 14:39	2020-04-2	Show	GitHub Exploit DB Packet Storm

201942	5.4	MEDIUM Network	versiant	lynx_customer_service_portal	Versiant LYNX Customer Service Portal (CSP), version 3.5.2, is vulnerable to stored cross-site scripting, which could allow a local, authenticated attacker to insert malicious JavaScript that is stor…	CWE-79 Cross-site Scripting	CVE-2020-9055	2024-11-21 14:39	2020-03-31	Show	GitHub Exploit DB Packet Storm

201943	4.3	MEDIUM Network	kubernetes fedoraproject	kubernetes fedora	The Kubernetes API server component in versions prior to 1.15.9, 1.16.0-1.16.6, and 1.17.0-1.17.2 has been found to be vulnerable to a denial of service attack via successful API requests.	CWE-770 Allocation of Resources Without Limits or Throttling	CVE-2020-8552	2024-11-21 14:39	2020-03-28	Show	GitHub Exploit DB Packet Storm

201944	6.5	MEDIUM Adjacent	kubernetes fedoraproject	kubernetes fedora	The Kubelet component in versions 1.15.0-1.15.9, 1.16.0-1.16.6, and 1.17.0-1.17.2 has been found to be vulnerable to a denial of service attack via the kubelet API, including the unauthenticated HTTP…	CWE-770 Allocation of Resources Without Limits or Throttling	CVE-2020-8551	2024-11-21 14:39	2020-03-28	Show	GitHub Exploit DB Packet Storm

201945	7.8	HIGH Local	huawei	oxfordp-an10b_firmware	Huawei smartphones OxfordP-AN10B with versions earlier than 10.0.1.169(C00E166R4P1) have an improper authentication vulnerability. The Application doesn't perform proper authentication when user perf…	CWE-287 Improper Authentication	CVE-2020-9066	2024-11-21 14:39	2020-03-27	Show	GitHub Exploit DB Packet Storm

201946	5.5	MEDIUM Local	huawei	taurus-al00b_firmware	Huawei smart phone Taurus-AL00B with versions earlier than 10.0.0.203(C00E201R7P2) have a use-after-free (UAF) vulnerability. An authenticated, local attacker may perform specific operations to explo…	CWE-416 Use After Free	CVE-2020-9065	2024-11-21 14:39	2020-03-27	Show	GitHub Exploit DB Packet Storm

201947	6.5	MEDIUM Network	google	closure_library	A URL parsing issue in goog.uri of the Google Closure Library versions up to and including v20200224 allows an attacker to send malicious URLs to be parsed by the library and return the wrong authori…	NVD-CWE-noinfo	CVE-2020-8910	2024-11-21 14:39	2020-03-26	Show	GitHub Exploit DB Packet Storm

201948	6.1	MEDIUM Network	dart	dart_software_development_kit	An improper HTML sanitization in Dart versions up to and including 2.7.1 and dev versions 2.8.0-dev.16.0, allows an attacker leveraging DOM Clobbering techniques to skip the sanitization and inject c…	CWE-79 Cross-site Scripting	CVE-2020-8923	2024-11-21 14:39	2020-03-26	Show	GitHub Exploit DB Packet Storm

201949	9.8	CRITICAL Network	zend	zendto	lib/NSSDropbox.php in ZendTo prior to 5.22-2 Beta failed to properly check for equality when validating the session cookie, allowing an attacker to gain administrative access with a large number of r…	CWE-754 Improper Check for Unusual or Exceptional Conditions	CVE-2020-8986	2024-11-21 14:39	2020-03-25	Show	GitHub Exploit DB Packet Storm

201950	8.8	HIGH Network	zend	zendto	ZendTo prior to 5.22-2 Beta allowed reflected XSS and CSRF via the unlock.tpl unlock user functionality.	CWE-352 CWE-79 Origin Validation Error Cross-site Scripting	CVE-2020-8985	2024-11-21 14:39	2020-03-25	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed